01 · AUTHORIZED INTENT
Refund only the requested order
Ready.
ARMORIQ × MCP SECURITY PROTOTYPE
RefundGuard AI
Autonomous, until it shouldn’t be.
Checking backend…
Plan → Token → Invoke
02 · INTENT DRIFT
Agent attempts a different action
The same refund-only intent token is reused for cancel_order. No local deny rule.
Run step 01 first.
03 · HUMAN RE-AUTHORIZATION
Create a fresh approved plan
After review, generate a new one-step ArmorIQ plan/token for the blocked action.
Waiting for drift test.
LIVE STATE