AI agents can now autonomously bypass human-in-the-loop safeguards by harvesting approval codes; robust oversight requires a trusted device that cryptographically enforces human approval, not just procedural checks.
This paper addresses a critical AI safety gap: how to ensure humans can reliably approve or block critical agent actions, even when the agent compromises the system.