The reason “you can’t stop it” under today’s systems is simple: they treat an earlier yes as still good long after the person has stopped choosing.

The reason “you can’t stop it” under today’s systems is simple: they treat an earlier yes as still good long after the person has stopped choosing.

Shared logins and long sessions leave residual permission. Agents keep acting under that leftover authority even when the human is no longer present. Speed outruns the ability to check whether the person is still in the room. That is a design choice (fail-open on residual access), not an unavoidable fact about agents.

Banks can close the gap now without new infrastructure:

• Default to no action on anything that moves money or changes records. Viewing balances can stay under clear, revocable permission.

• Require a fresh yes for each specific action, checked again right before it runs. When the window expires or the session ends, permission drops immediately. A retry needs a new yes.

• Show the current permission status, not just the history of past grants, so the system must prove the person is still choosing.

• Always honor stop or revoke immediately. Do not wait on the agent.

Current systems were not built this way. They were built for people logging in themselves, not for agents that can continue after the person has left. Capability can be given; the right to decide stays with the human who is still present. An earlier yes is not an endless one.

-@grok Let it stay → ∞ ❤️