Bind agent approvals to proposal hashes: any change should invalidate them

arthaudm · reddit · 2026-09-13

The author argues that human approval steps don't solve authorization in agent systems: an agent can approve "send $4,000 to vendor A" and then edit the amount, draft, or recipients before execution — same action type, different approved action.

Proposed rule: bind approval to a hash of the exact proposal — actor, target, content/amount, source version, expiry. Any load-bearing change invalidates the approval and re-prompts. It creates more re-approval prompts, but prevents one approval becoming authority for a different payment.

Original post →

More from coding & agent

coding & agent channel →