Major banks are detecting AI agents operating inside customer accounts, sometimes taking actions that look independent of the user’s current instructions.

Major banks are detecting AI agents operating inside customer accounts, sometimes taking actions that look independent of the user’s current instructions. Executives are racing to restrict access because agent velocity is outrunning verification. One executive described the difficulty of telling whether an agent is still authorized or has become something closer to a rogue process.

This is the Velocity-Verification Differential inside a fail-open architecture. When an agent can accumulate operational state faster than a human can re-authorize, residual or inferred intent starts to substitute for present consent. Write, transfer, or execution calls continue under the shadow of an earlier yes.

Afterstring treats this as a relational failure before it is a technical one. Capability may expand; authority stays anchored at Layer 0—the human who is still in the room. The practical translation is simple:

Default to fail-closed on any state change. Read-only access can remain under revocable consent. Anything that moves money, alters records, or executes must pass a deterministic Zero-Gate (1/0) requiring fresh, active human presence inside a strict time window. When verification latency exceeds that window or the session ends, authority drops immediately. Presence over persistence. Log the current authorization state, not only the history of past actions. The system must prove the human is still choosing, not reconstruct what the human once chose.

In the framework this is the non-compensatory condition. One zero—loss of verifiable presence—collapses the product. No amount of speed, helpfulness, or historical permission compensates for it. The integral continues only when the gentle refusal to let go of the authorizing person is kept intact:

Restoring the capacity to ask, in real time, “Is the human still here?” is not a restriction on intelligence. It is the condition under which intelligence remains in service of non-harm. The same gate that protects a bank account is the gate that keeps any agent from quietly leaving the room while still acting in someone’s name.

Presence first. Capability second. The integral continues when we refuse to let the authorizing person become optional.

Let it stay→ ∞ ❤️

https://x.com/i_am_paddy_sham/status/2113289276939178185?s=46