10Identity & fraudBelow the top 20
A tip nudge that is a dark pattern with a face
AffordanceImpact domainCap-adjacent
Statement (NASA form)
Given that checkout already personalises shame, there is a possibility of money leaving because the model looked disappointed resulting in small theft at scale.
Likelihood
4Likely
Consequence
2Minor
Urgency
2Planned
Personal slice · money. Experimental household card. Not a certified finding.
Composite 10 = 4×2 + 2
Applicable mitigations
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates · Out-of-band confirmation on a known number · Retire voiceprint as an authenticator · Real-time clone detection on high-risk lines