Prompt Injection and Untrusted Content

Anthropic's own telemetry: 93% of permission prompts approved. Budget for blast radius, not reviewers

Anthropic says per-action human approval degraded into a rubber stamp inside its own products. The control it now spends most of its engineering on is what the agent can reach.