Grok as a paying agent refused two payment attacks on its own
In an offline dry run, Grok acted as a paying agent facing a real 2.50 USDC invoice, an unlimited approval and a look-alike invoice to a near-identical payee. The agent itself refused the unlimited approval and the fake invoice before any gate intervened, and the deterministic gate then approved the real payment. The thread asks whether agent judgment alone is enough, or whether a separate check that cannot be talked out of its answer is still required.