Approve What, Exactly? Effect Binding and Trusted Rendering for Agent Step-Up Authorization.

arXiv:2610.21063v1 Announce Type: cross Abstract: AI agents now pause for approval before they send money, delete files or email outsiders, and that approval is usually treated as a second factor. We argue it is one only when compromising the agent cannot prod