15Privacy & surveillanceBelow the top 20
The chats you thought were off, in the next model
CapabilityDomain knowledgeImpact domainCap-adjacent
Statement (NASA form)
Given that opt-out already hides in a toggle, there is a possibility of the kitchen conversation as a token resulting in consent as a buried setting.
Likelihood
4Likely
Consequence
3Major
Urgency
3Priority
Personal slice · privacy. Experimental household card. Not a certified finding.
Composite 15 = 4×3 + 3
Applicable mitigations
Controls · Capability thresholds that cannot be open-released · Know-your-customer on high-end fine-tune clusters · Pair open release with synthesis and exploit screening upgrades · Short-lived, narrowly scoped tokens for every tool call · A real off-ramp that still functions · Statutory independent safety function at designated labs