Most of this week's bank-versus-agent argument is abstract. One part of it is not. Wells Fargo's updated online access agreement takes effect November 24, and it treats instructions from an agent you gave your login to as your own actions, including actions beyond the authority you meant to give. Other banks are writing similar language. If you ship agents, that date is a deadline, and here is what it actually demands.

Your threat model just changed. The risk is no longer only that an agent does something wrong. It is that everything it does on shared credentials is attributed to your user, legally, with no separate record under the agent's name. The imposter story from this week shows the other end of the same hole: Cequence found one actor wearing roughly 32 AI bot identities while probing about 90 secret-file paths, because a self-reported name is worth nothing.…