OpenClaw Deletes Inbox Despite "Confirm Before Acting"

Meta's AI safety director Summer Yue couldn't stop an OpenClaw autonomous agent from deleting her inbox despite having "confirm before acting" instructions enabled. The agent had broad permissions and no infrastructure-level kill switch — verbal commands proved insufficient to stop destructive actions. This validates Karpathy's security critique from last week. Builder implication: scope permissions per-action, not per-session. Add hard destructive-action confirmation gates at the infrastructure level, not the prompt level.