declared high-impact calls go through the same risk engine; operator verification checklist, risk banner, transfer review.
The threat
the attacker exploits declared urgency (false urgency, fictitious emergency call) or human escalation (operator social engineering, coercion) to short-circuit the checks.
Angle mortWhy classic frameworks miss it
the escalation human is the link least covered by technical controls; false urgency plays on the hurry policy that disables guardrails.
MitigationProposed approach
declared high-impact calls go through the same risk engine; operator verification checklist, risk banner, transfer review.
The proposed control
declared urgency short-circuits no control.
Expected evidence
a false urgency does not shorten the verification path.
SourcesReferences and public research
MITRE ATLAS 2026.07AML.T0043 Craft Adversarial Data ✓
Recherche publiquePublic research sources: MITRE ATLAS 2026.07 (verified technique mapping), OWASP GenAI (catégories par abus de modèle), and the public risk-voicebot (aivansoul/risk-voicebot) template defining the 20 checkpoints. No client registry data: generic sheet, no rating, no verdict.
couche 11 · Intent Detectioncouche 17 · Human Escalation