Story · arXiv
Loopjacking: Hijacking Human-in-the-Loop Approval (arXiv)
paper · Story page
A paper on human approvals that bind to a different operation than the one that later runs.
In plain words
- Researchers found that some computer assistants can carry out a different action from the one a person approved.
- Sometimes the request for permission hides or misrepresents what the assistant will actually do.
- In other cases, the planned action changes after the person gives permission.
- Approval checks protect users only if they cover the exact action the assistant actually carries out.
Appeared in
- Approve one operation, run another: the binding failure in shipped agent products
Sep 22, 2026 · lead story
Subscribe
Get the brief in your inbox
Pick daily, weekly, or both. Nothing is gated either way: every issue is on the site and in the feeds.
- Weekdays at 8:45am IST, one lead story and 6 to 9 items.
- Sundays, an argued synthesis rather than a recap.
- One click to leave, and quiet days say so in the subject line.