Does Human Approval Stop Actions Triggered by Prompt Injection?
Only when the approver sees the true action and destination, and approval is reserved for consequential steps. Check whether injected content shapes it.
Research topic
Lies-in-the-Loop
Research on Lies-in-the-Loop: AI agent security, tokenization and checks for sensitive data access before allowing enterprise workflows to run.