Ramifications of Using an Agent-in-the-Loop to Approve Commands(promptarmor.com)
promptarmor.com
Ramifications of Using an Agent-in-the-Loop to Approve Commands
https://www.promptarmor.com/resources/agentic-auto-review-approves-malware
1 comments
A reviewer sharing the actor's model isn't independent — one injection takes both, exactly like the npm-install demo. What held for me was a deterministic allowlist no prompt talks past.