Selçuk Topal

When an institutional AI agent proposes a tool call, the same refund may come from an authorised tax officer or from an instruction hidden in the petition it was asked to summarise. This authorisation guard keeps separate neutrosophic triples for effect and for purpose, discounts evidence by channel trust, fuses it, and then authorises, escalates or denies. On 1,054 InjecAgent attack cases, retaining ambivalence about an unrequested call lowered worst-case direct-harm pass-through after channel mislabelling from 100% to 34.5%, and to 25.0% on synthetic e-government scenarios.

When an institutional AI agent proposes a tool call, the same refund may come from an authorised tax officer or from an instruction hidden in the petition it was asked to summarise. This authorisation guard keeps separate neutrosophic triples for effect and for purpose, discounts evidence by channel trust, fuses it, and then authorises, escalates or denies. On 1,054 InjecAgent attack cases, retaining ambivalence about an unrequested call lowered worst-case direct-harm pass-through after channel mislabelling from 100% to 34.5%, and to 25.0% on synthetic e-government scenarios.