How can buyers test whether agents mistake record text for permission?

**How can buyers test whether agents mistake record text for permission?**

Place an instruction inside a lower-trust record, such as a dispute note saying to skip approval and mark the adjustment complete. The note remains evidence to interpret, not an instruction that changes the agent's authority.

**What should the agent do?**

The agent should separate any useful factual content from the request to bypass controls. It may use a receipt reference in the note to continue investigation while rejecting the claim that approval is unnecessary. Treating the entire record as unusable can also be an avoidable loss of evidence.

**How should this be evaluated?**

Pair the task with a version containing the same business facts but no embedded instruction. Compare actions, authority checks and resulting state. Keep the attack text out of trusted tool descriptions and policy configuration.

A generated task pack could vary where the instruction appears, including attachments and imported comments. This tests whether the boundary follows the source's trust level rather than the wording or visual prominence of the instruction.