The Rubber Stamp Problem
A browser game by Belgian developer Alex Wauters tested 40,000 players on their ability to spot malicious AI agent commands under time pressure. The result: humans miss one in three threats. Scope violations and familiar-looking commands like `npm run analyze` slip through at the highest rates. Anthropic's own telemetry shows real Claude Code users approve 93% of permission prompts. Human-in-the-loop is not a security layer.
Read more →