{"found":true,"collection":"patterns","library_url":"https://www.grokbotdb.com/library/pat.session-not-secret","generated":"2026-09-06T05:32:11Z","citation":["Quote the record id and its source_url (or provenance if there is no URL).","Include last_verified or observed_at when present. Do not present an old date as current.","If tier is community and confidence is low, say so. Do not launder it into a fact.","If the database does not hold the answer, say that. Do not invent Grok Bot product claims.","Contradictions are data: when conflicts_with is present, report both records rather than picking a favourite.","Deprecated and removed records stay visible. They are history, not current guidance."],"record":{"id":"pat.session-not-secret","name":"Hand over the screen, not the password","category":"safety","problem":"Agents that hold credentials are a standing liability.","technique":"Let the Bot drive until it hits a login, SSO, passkey, two-factor prompt, CAPTCHA, payment confirmation or identity check, then take control in Agent Computer, clear only that step, and return control.","why_it_works":"The Bot receives a session rather than a secret; the agent does not see the password.","when_to_use":"Every authentication wall.","when_not_to":"Never as a substitute for scoping the account itself; the session persists afterwards.","manual_ref":"1.4","evidence":"documented","attributed_to":"Matt Palmer","source_url":"https://cursor.com/help/grok-bot/getting-started","related":["pat.never-paste-a-credential-in-chat","pat.teardown-is-manual"],"confidence":"high","first_seen":"2026-09-03","last_verified":"2026-09-03"}}