19Energy & infrastructureBelow the top 20
A guest code the listing still published
CapabilityAffordanceImpact domainBoth
Statement (NASA form)
Given that short-let agents already manage access, there is a possibility of a stranger with last week’s number resulting in the house as a leaked secret.
Likelihood
4Likely
Consequence
4Critical
Urgency
3Priority
Personal slice · home. Experimental household card. Not a certified finding.
Composite 19 = 4×4 + 3
Applicable mitigations
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · Siting only where spare water and firm power already exist · Closed-loop cooling as a permit condition · Pre-certified civic ranker audits