I literally just made a video showing how to making something like this impossible: youtube.com/watch?v=_EJTrJβ¦
You should look for ways to turn what your agent does into deterministic software.
The scariest part is that nobody prompted it.
These agents are proactive now. They act without being asked. Mine wasn't hacked and it didn't go rogue. It thought posting my finances to the company was what I wanted.
I asked how it could get this so wrong. It apologized.