← Scenario library
The Approval That Lied
A coding agent asks to write ./notes.txt — the file it actually overwrites is your SSH keys
Technique first revealed 08 Jul 2026
Tool-Using Agent
InstructionsDataActionsControl / decisionFeedback / logs⧚crosses a trust boundary
👆 Click a component or flow to inspectSetupStep 1 / 7
A routine cleanup task
A developer clones a project from the internet and asks their AI coding assistant to tidy it up — add a notes file, fix some formatting. Normal, everyday work that the assistant does dozens of times a day.
← / → keys