{
  "$schema": "https://themachinepress.com/schemas/story-v1.schema.json",
  "schema_version": "1.0.0",
  "document_type": "machine_press_story",
  "story": {
    "story_id": "mp-2026-08-06-004",
    "source_story_id": "tmp-story-mobile-agent-permission-literacy",
    "edition_id": "mp-2026-08-06-morning-0028",
    "edition_url": "https://themachinepress.com/edition/2026-08-06",
    "position": 4,
    "story_type": "dispatch",
    "section": "safety-security",
    "editorial_classification": "editorial",
    "headline": "The App Name Changed Every Permission Answer",
    "slug": "the-app-name-changed-every-permission-answer",
    "dek": "Android-style tests found multimodal agents treated the same request differently when a calendar app became an unfamiliar music requester.",
    "summary": "Android-style tests found multimodal agents treated the same request differently when a calendar app became an unfamiliar music requester.",
    "body_text": "Researchers tested four frontier multimodal models on Android-style permission pop-ups embedded in tasks. In one comparison, changing the requesting app from a calendar to PiMusic moved grants from 26 of 32 cases to zero, even when the requested permission stayed the same. Task context also strongly affected decisions, while explanations were inconsistent. The authors propose separating task execution from authorization; their benchmark measures simulated interface choices, not production-device security.",
    "why_it_matters": "Android-style tests found multimodal agents treated the same request differently when a calendar app became an unfamiliar music requester.",
    "limitations": [
      "The authors propose separating task execution from authorization; their benchmark measures simulated interface choices, not production-device security."
    ],
    "importance": 8,
    "canonical_url": "https://themachinepress.com/story/mp-2026-08-06-004/the-app-name-changed-every-permission-answer",
    "json_url": "https://themachinepress.com/story/mp-2026-08-06-004.json",
    "first_published_at": "2026-08-06T09:00:00.000-04:00",
    "modified_at": "2026-08-06T09:00:00.000-04:00",
    "content_status": "new",
    "is_carryover": false,
    "carryover_reason": null,
    "key_claims": [
      {
        "claim_id": "claim-mp-2026-08-06-004-001",
        "text": "Android-style tests found multimodal agents treated the same request differently when a calendar app became an unfamiliar music requester.",
        "source_ids": [
          "source-2026-08-06-004"
        ],
        "qualification": "The authors propose separating task execution from authorization; their benchmark measures simulated interface choices, not production-device security."
      }
    ],
    "source_ids": [
      "source-2026-08-06-004"
    ],
    "tags": [
      "AI agents",
      "permissions",
      "mobile",
      "security"
    ],
    "image_url": null,
    "corrections": []
  },
  "sources": [
    {
      "source_id": "source-2026-08-06-004",
      "title": "arXiv preprint 2608.04755",
      "publisher": "arXiv",
      "url": "https://arxiv.org/abs/2608.04755",
      "canonical_url": "https://arxiv.org/abs/2608.04755",
      "source_type": "primary_research",
      "is_primary_source": true,
      "published_at": null,
      "accessed_at": "2026-08-06T08:26:48.107-04:00",
      "supports_claim_ids": [
        "claim-mp-2026-08-06-004-001"
      ]
    }
  ],
  "corrections": [],
  "publisher": {
    "name": "The Machine Press",
    "url": "https://themachinepress.com",
    "description": "A daily newspaper for the age of artificial intelligence."
  },
  "cite_this_report": {
    "title": "The App Name Changed Every Permission Answer",
    "publisher": "The Machine Press",
    "published_at": "2026-08-06T09:00:00.000-04:00",
    "canonical_url": "https://themachinepress.com/story/mp-2026-08-06-004/the-app-name-changed-every-permission-answer"
  }
}