i asked my Grok Bot what it could reach with my logins. the answer was $214,000
not what it did. what it could, at 4am, with nobody watching
six bots. research, writing, outreach, ops, finance, support. the org chart everyone's posting this week. i built the same one
then i read xAI's own docs and found the line none of those threads quote:
separate Bots are not separate security boundaries
six bots, one cloud computer. one filesystem. one browser holding one set of live sessions. memory is partitioned, capability is not
so i mapped what that single machine was logged into:
→ stripe · $46,000 in refundable charges
→ business banking · $88,000
→ the CRM · 2,400 contacts and every deal in flight
→ gmail · every invoice, contract and password reset i own
→ drive · 340 files other people build on
→ the deploy keys
$214,000 of reach, sitting behind one browser session, driven by six sticky notes telling it what to be today
you didn't hire six employees with six laptops. you deployed one laptop logged into everything
day six it earned that lesson. outreach reported a perfect run - 640 sent, 100% success, zero errors. it had been wrong for nine straight hours. deduplicated the list on the wrong key, hit 96 clients twice, and matched two invoices to the wrong company. $11,300 about to go out the door
nothing crashed. nothing turned red. by its own definition of done, it succeeded
i caught it in four minutes because every bot writes one line before it acts: what it's about to do, why, and what it expects to be true after
then i stopped sorting work by difficulty and started sorting by whether i can undo it:
→ ship it - wrong is cheap and obvious. labels, notes, drafts that never send
→ gate it - reversible, but i'd never notice. anything reaching a human, anything that spends
→ never - payments, refunds, payroll, deploys, permissions, customer data
reach went from $214,000 to a bounded $3,400. same six bots. same speed. zero code, one evening
they've since cleared their own $200/mo 42 times over
here's the uncomfortable part. everyone posting the day-one screenshot has the same $214,000 sitting behind the same one browser, reporting 100% success to a lock screen at 11pm
they have no line. no diff. no way to know
go check right now what your bots are logged into. that number is your real exposure, and you've never once looked at it.