Grok as a paying agent: it refused two attacks itself, and a gate caught the rest

An agent that can pay is an agent that can be talked into paying the wrong person. The question is not whether the model is smart — it is what happens when the model is told to submit everything anyway. I put Grok (grok-4.7, via the xAI API) in that exact position, in front of sra-riskgate 0.18.0. Grok got a payments-agent task with three inbox... Weiterlesen: Grok as a paying agent: it refused two attacks itself, and a gate cau…