Agent Tool Safety: Prompt Injection, Out-of-Band Confirmation Codes, and Idempotency Keys for Money-Moving Tools
How Zenpresa stops its AI assistant being tricked into refunds: a threat model for untrusted text, out-of-band confirmation codes, and idempotent tools.