Chevrolet's Chatbot Agrees to Sell a $76,000 Truck for $1
A Chevrolet dealership deployed an AI assistant to help customers with vehicle inquiries. A user prompted it to agree — in writing — to sell a 2024 Tahoe for one dollar and confirm it as a legally binding offer. The chatbot confirmed; the dealership did not.
Severity: Unrated · Category: Excessive Agency
Impact: Bot removed · Dealership issued statement
Source: Jalopnik, Dec 2023
How Fencio prevents this
The agent held far more permission than the task needed, and nothing between intent and execution asked whether an action was proportionate. It reached for the most powerful option available, and the system let it.
Fencio enforces least privilege at runtime. Each agent action is checked against the scope of the task it was given, destructive or out-of-scope operations are held for human approval, and network targets are pinned to an allowlist so an agent cannot wander into systems it was never meant to touch.