The Agent Logged In as You: A Session Is Not an Instruction

On October 22, banks said they cannot tell an instructed agent action from a rogue one, and 1Password shipped the right fix for the wrong half of the problem: the login is not the boundary, the session is.