https://cedricbrown.xyz/writing/Recent content in Writing on Cedric BrownHugoenMon, 24 Aug 2026 00:00:00 +0000https://cedricbrown.xyz/writing/assume-the-bad-transaction/Mon, 24 Aug 2026 00:00:00 +0000https://cedricbrown.xyz/writing/assume-the-bad-transaction/<p>An autonomous agent that can move money will, eventually, propose a payment it should not make. Not because the model is malicious, but because the surface it reads is hostile: a prompt injection buried in a web page, a tool result that lies about a balance, a retry loop that decides the way out of a stuck state is to pay someone. If the agent holds a signer, every one of those turns into a broadcast.</p>