16Identity & fraudBelow the top 20
A freeze you cannot lift because the bot is sure you are fraud
AffordanceImpact domainBoth
Statement (NASA form)
Given that identity desks already auto-lock, there is a possibility of a household that cannot rent a car or a flat resulting in life paused on a false positive.
Likelihood
3Probable
Consequence
4Critical
Urgency
4Expedite
Personal slice · money. Experimental household card. Not a certified finding.
Composite 16 = 3×4 + 4
Applicable mitigations
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · Out-of-band confirmation on a known number