Public Release - 2026-07-20
Artifact: voice_identity_action_gate_v1. This note turns an agentic-phone action chain into a reviewable authorization record: a familiar voice, face, or chat history can support an identity claim, but cannot silently unlock a transfer, credential release, or external commitment.
Artifact
An agentic phone can move from a spoken request to a chain of external actions. The review object asks who authorized the final step, what independent channel verified the identity, and which action remains locked when the evidence is weak.
Gate
Voice, face, or chat history can imitate familiarity and urgency. A sensitive action needs an independent verification phrase and a visible action lock that does not depend on the same agentic interaction.
Review
A useful challenge should identify a missing field, an unsupported causal link, a stale evidence timestamp, or a condition under which the proposed control fails. The protocol does not certify a device or claim universal reliability.
The identity, transfer, access, or external action claim under review.
The person or role that the call, face, message, or device says it represents.
The second route used to verify the request outside the original interaction.
The pressure cue that tries to compress the time available for judgment.
The transfer, credential release, approval, or commitment being requested.
The callback step, shared phrase, or non-voice proof that can block impersonation.
The state that prevents an external action until verification is complete.
The source date, incident date, or operating window that anchors the claim.
The scope change required when the device channel is too weak to authorize action.
The recorded state: supported, narrowed, pending, or retired.