Your AI Can Click “Buy.” Should It?

A discussion of agent identity and authorization, using a fictional finance agent to explore prompt injection, the confused deputy problem, and why an agent's intent should shape what it is allowed to do. It draws parallels to fraud detection in banking and social engineering, then turns to practical consumer use of agents for daily briefings, trip planning, and German bureaucracy, asking where convenience becomes risk and when a human should make the final call.