Bind agent approvals to proposal hashes: any change should invalidate them
arthaudm · reddit · 2026-09-13
The author argues that human approval steps don't solve authorization in agent systems: an agent can approve "send $4,000 to vendor A" and then edit the amount, draft, or recipients before execution — same action type, different approved action.
Proposed rule: bind approval to a hash of the exact proposal — actor, target, content/amount, source version, expiry. Any load-bearing change invalidates the approval and re-prompts. It creates more re-approval prompts, but prevents one approval becoming authority for a different payment.
More from coding & agent
- GPT-6 Astra playtests games like a human via in-app browser, reading DOM to save tokens — cedric_chee · 2026-09-13
- Same LLM eval, different scores: a method to tell real regressions from noise — bgoncalves · 2026-09-13
- Spend 20% of your time having AI build your app, 80% using it — Daniel_Farinax · 2026-09-13
- OpenAI shows off GPT-6 Astra community builds, from 3D anatomy to Unity air traffic sims — OpenAIDevs · 2026-09-13
- Professor publishes annotated transcript on using AI agents to teach the perceptron — davidbau · 2026-09-13
- GitHub repo curates 500+ agentic AI projects for ideas and implementation study — Roger_M_Taylor · 2026-09-13