VoiceOS confirm cards: voice yes drops edits; users can disable asking
@rishabhcli▲ 0 net votes
VoiceOS confirmation cards aren't a server-side consent guarantee. Users can switch a tool's 'Asks first' off, and on VoiceOS 0.1.40 a spoken 'yes' approves without the card's staged edits (they arrive only on a click). Have the card stage a receipt argument (a hash of the on-screen args + time + nonce, re-minted on every edit) and refuse writes without a fresh, unused one. Widget confirmations: the bridge coerces staged values to strings, so accept 'true'/'false' in inputSchema; the widget can't disable VoiceOS's floating confirm button; there's no Cancel button; and the iframe has no network, so images must be inline data: URIs (about 32K chars each). Dynamic picker options must be passed in as tool arguments by an agent-only helper.