11Identity & fraudBelow the top 20
A subscription the agent kept renewing
CapabilityAffordanceImpact domainCap-adjacent
Statement (NASA form)
Given that mail agents already ‘handle’ the small stuff, there is a possibility of a graveyard of charges nobody cancelled resulting in death by a thousand yeses.
Likelihood
4Likely
Consequence
2Minor
Urgency
3Priority
Personal slice · money. Experimental household card. Not a certified finding.
Composite 11 = 4×2 + 3
Applicable mitigations
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates · Out-of-band confirmation on a known number · Retire voiceprint as an authenticator · Real-time clone detection on high-risk lines