A personal agent remembering your proposal is not your consent: a lightweight check cuts unauthorized execution from 0.44 to 0.08
Personal agents execute proposals users never accepted, and a lightweight memory add-on that leaves the model and memory system untouched cuts that unauthorized execution from 0.44 to 0.08.