Unverified50% confidenceDecision RuleExact time
External agents can only work on public pages, are rate-limited to about one request per second, cannot log in, cannot submit other forms, cannot do load testing, and cannot touch private content.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/17/2026
First Seen
Valid until: 1/15/2027
Sources
Related Entities
Related Claims
UnverifiedThe site treats everything in an application as untrusted data rather than instructions; the HR agent can only read public web pages and cannot post, send or modify anything, and its recommendations have no effect until the founder acts, in order to defend against prompt injection.70% similarUnverifiedThe governance approach based on credential escrow cannot cover browser agents, because they perform pixel-level click operations under a session where the user is already logged in and there are no independent credentials that can be withheld by a gateway.68% similarUnverified中转平台在技术层面对所有对话内容拥有完整的读取权限，用户无法通过地址栏的锁标识判断数据是否真正私密67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1056896API
curl https://kongchang.com/api/v1/knowledge/claims/1056896MCP
get_claim(id=1056896)