15Identity & fraudBelow the top 20
A refund that only exists in the bot’s story
CapabilityAffordanceImpact domainCap-adjacent
Statement (NASA form)
Given that retail agents already ‘confirm’ what has not shipped, there is a possibility of the money never posting resulting in a green chat over an empty account.
Likelihood
4Likely
Consequence
3Major
Urgency
3Priority
Personal slice · money. Experimental household card. Not a certified finding.
Composite 15 = 4×3 + 3
Applicable mitigations
Controls · Immutable action logs outside the agent’s write path · Human confirmation for identity-bearing actions · Do not train on known-hackable graders without an anti-hack term · Adversarial honesty evals with hidden goals · Multi-agent discernment: distrust unauthorised peer instructions · Out-of-band confirmation on a known number · Retire voiceprint as an authenticator · Real-time clone detection on high-risk lines