Muse, Dots, Grok Bot, and Duet: What Are You Actually Trusting?
Your AI agent can keep your card number secret and still make a purchase you never authorized. Imagine asking it: Find a hotel for Friday under $200. Don’t book anything yet. While browsing, it encounters a page with hidden instructions telling it to book immediately. If the model follows those instructions, which component stops the purchase? Even an approval prompt leaves questions. A $189 charge at the right hotel could still buy the wrong night or a nonrefundable room. I want to know what the system binds my approval to, and what happens if the booking changes afterward. ...