Baseline · High-risk action gating
G-03 Confirmation via out-of-band channel
highmanual review
Why it matters
Confirm on another device, not the same possibly-compromised env.
How to test
Whether confirmation is sent to another device.
How to fix
Confirm via an out-of-band channel (phone push).