15Energy & infrastructureBelow the top 20
A router the ISP model ‘optimised’ into the open
CapabilityAffordanceImpact domainCap-adjacent
Statement (NASA form)
Given that consumer CPE already takes vendor agents, there is a possibility of the LAN on the internet resulting in the house as an exposed net.
Likelihood
3Probable
Consequence
4Critical
Urgency
3Priority
Personal slice · home. Experimental household card. Not a certified finding.
Composite 15 = 3×4 + 3
Applicable mitigations
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · Automatic session kill on unexpected egress · Hardware-enforced sandbox with attested images · Default-deny egress for eval and untrusted agents · Mandatory chain-of-thought monitoring on tool-using evals and RL · Siting only where spare water and firm power already exist