Voice, identity, and the CEO call

Sarah’s alert: cloned-voice calls claiming to be the CEO, asking staff to move money or reset access. Voice is not authentication.

Policy: unexpected voice instructions get a second channel. A known phrase is not enough. A ticket with a named approver is.

If your agent can place a call or send a voice note, it can impersonate. That is a write. It needs a confirmation.