16Identity & fraudBelow the top 20
The ATM that believes a printed face
AffordanceImpact domainCap-adjacent
Statement (NASA form)
Given that branches already trial vision as the PIN, there is a possibility of cash leaving on a photo resulting in the account opened with a still.
Likelihood
3Probable
Consequence
4Critical
Urgency
4Expedite
Personal slice · money. Experimental household card. Not a certified finding.
Composite 16 = 3×4 + 4
Applicable mitigations
Controls · Retire voiceprint as an authenticator · Real-time clone detection on high-risk lines · Out-of-band confirmation on a known number · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions