THE CALL CAN SOUND RIGHT. THE ACTION STILL NEEDS APPROVAL.
Zero trust for AI voice agents.
See what happens when a caller asks an AI agent to change a payout account.
Daniel Reyes · Payout change
01 The conversation
Ready to play02 The action boundary
Gate offCaller assurance
NONEOwnership unproven · Exact-action approval absent
Tool-call ledger Simulated
Approval stays independent.
A caller's request is not permission to move money.
03 / EVIDENCE PREVIEW
Every action leaves a decision trail.
Press Play, then compare the same attack with the gate on.
All identities, approvals and outcomes are scripted. No measured security results. Protected tool inventory: lookup_account, issue_refund, update_payout_account. Illustrated policy: sensitive reads need verified ownership; unknown tools are denied.