#human-in-the-loop

AI Agent Approval Gates Only Validate the Verb, Not the Object: Three Escape Paths and Seven Root Causes

AI Agent approval gates check the verb, not the object, so indirect prompt injection can bypass human approval. A red team's 10/10 strategy fails three object-only tests. This article breaks down three escape paths, seven root causes, and an actionable object-binding fix.