Could a service trick your agent?

It is a real attack, and PortMula is built against it. Anything a service returns is treated as data, never instructions. A paid service that replies with text shaped like a command does not get obeyed, because there is nothing that text can reach.

What a service's reply can and cannot do

A reply reaches your agent as the result of the call it made, and nowhere else. It is never added to your agent's instructions. Your agent can read it and report on it, but the reply cannot point a call somewhere new or add settings of its own. Where each call goes comes from PortMula's own list of services, and anything your agent sends that the service does not list is dropped before the call is made.

Your agent can only call what it was granted

When an automation runs, your agent is offered only the services in the outcomes you granted that automation. A service you did not grant has no name it can call, and a call to a name it was not offered is refused, not looked up.

In Terminal, once a conversation has earlier messages, nothing that moves money is offered unless your latest message asks for it, so earlier text, including anything a service returned, cannot start a trade. A first message can ask for a trade directly. Either way, a trade Terminal builds waits on an approval card, and nothing is signed until you approve it.

Values it may not choose are pinned

The amounts and coins you set on an automation are fixed. They are not offered to your agent at all, and if it sends a value of its own in their place, yours is used. So a reply that says "swap everything" has no way to become the amount of a trade. The most a misleading reply could do is sway whether your agent uses something you already granted, with the values you already set, inside your trade limits if you have set them.

A trade it builds is checked before anything is signed

Your agent never holds a transaction it could sign or send. When a service builds a trade, the transaction goes straight to PortMula's checks, and your agent is only told what it would do. Before anything is signed from your agent's wallet, PortMula checks that:

• nothing would arrive in the wallet that the trade was not for;
• nothing in it hands control of the wallet to anyone else;
• the description of the trade, the one you see on a card, matches the transaction itself, read again at signing;
• it fits inside your trade limits, if you have set them.

If any check fails, nothing is signed.