An agent that can read your private data, read content you didn't write, and send anything out is exploitable by construction — no bug required. Nobody has solved detection. You don't need to. You only need to break one leg, and you get to choose which.
Before you look: of the agents, assistants and automations you run, how many do you think have all three legs switched on right now?
| Agent / automation | Poles (click to toggle) | Circuit |
|---|
Honesty note: breaking one leg removes the silent‑theft failure mode. It does not make an agent immune to being lied to (legs 1+2) or to misbehaving on its own. Treaties are starting configurations you should read before applying — every platform's setting names change; verify against the vendor's current docs.
localStorage on this device and nowhere else. The optional Pro export is a plain Stripe Payment Link; nothing about your rows ever leaves this browser.Every circuit is free, complete and unlimited — no sign‑up, no run limits. Paying unlocks only extras you can name: exports, history, capacity, team seats. Nothing protective is ever behind a paywall.
Inventory your agents against the three legs; trip one; get the treaty. That's the tool above.
Turns a tripped pole into copy‑paste configuration and a one‑page policy for your specific platform: ChatGPT connectors, Claude, Copilot, OpenClaw, Zapier/n8n, MCP servers.
Get a unique canary URL and a doc snippet. Feed it to your agent. If the agent fetches it, leg 3 is live — and you'll see the exact timestamp, not a guess.
Paste an email, page or PDF text. A quarantined model (no tools, no memory) reports instructions hidden in the content. States its false‑negative rate plainly on first load.
The thing your cyber‑insurance renewal and enterprise clients will ask for next year: a signed register of every agent, its legs, its treaty, and who owns it.
An embeddable badge that says "no agent here holds all three keys", linking to your public treaty summary. Free; it's how the idea travels.
You wired an assistant to your inbox and calendar because it's useful. Keep the usefulness. Decide which one leg it gives up — usually outbound send without a confirm — and you've removed the way it gets robbed.
Upwork's 2026 survey found 62% of SMB leaders "very or extremely confident" handing high‑stakes tasks to agents. The Register turns that confidence into something you can show an insurer or a client — per agent, per leg, per owner.
The subject here is systems that exploit attention and trust, so we hold our own design to a stricter bar and publish it.