{"id":"behaviour.out_of_character.v3","title":"Out-of-character payment, v3: v2 without the delegated-payee reason for payees that 100 or more agents paid before","unit":"per counted payment: a score in [0, ∞) with public reasons and a level (none, notable at 0.9, major at 1.4), as v2","chain_set":"eip155:8453 (Base)","window":"as v2 (the agent's whole counted-payment history before the payment, past only)","definition":"As v2, with one fixed change: the reason payee_7702_delegated (the payee is an EIP-7702 delegated account) is not added when at least 100 distinct registered agents paid the payee before the payment. Every other reason, weight and threshold is v2's.","method":"Pre-registered on 7 Nov 2026 at 08:10 UTC and committed alone before any v3 run (afg-security-lab 5de77f2, docs/definitions/behaviour.out_of_character.v3.md), with the rule for shipping fixed in advance: recall at notable on the 17 positives, recall on the synthetic positive control, and notable alerts per control agent-year no worse than v2. Results on the evaluation data of 14 Oct: identical to v2 on every figure (37 notable alerts over 47.70 control agent-years, 13 of 15 scoreable positives, 301 of 319 synthetic drains); the delegated-payee reason fired 10 times on controls and never on a positive. Replayed on the 2,688,687 payments scored in the 7 days to 7 Nov 08:00 UTC: 853 of 1,308 notable scores fall to none, the 455 others and all 244 major scores are unchanged. In production the payee count is past-only (agents that paid the payee before the payment).","excludes":["As v2."],"does_not_assert":["As v2.","That a payee 100 agents pay is legitimate: v3 only stops counting its account type as a reason; the amount and novelty reasons still fire on it."],"assumptions":["A payee paid by 100 or more registered agents is a service, and its account type says how the service runs, not that the paying agent's key was taken."],"known_gaps":["v2 considered and rejected a general popularity dampener because 7 of 12 harmful payments in its base rates went to payees hundreds of agents pay. v3 is not that dampener: it removes one reason, which fired on no positive, and keeps every amount and novelty reason; recall on the positives is unchanged.","A drain destination shared across many victims could reach 100 payers; the amount reasons and the sweeper-delegate check still apply to it."],"intended_use":"An advisory pattern for a human or an operator's policy to read, with fewer alerts on routine traffic to widely used services.","not_intended_for":["A verdict on an agent, a payee or the people behind them."],"source":"AFG-Pulse Watch (lib/oochar.mjs), from 7 Nov 2026 08:17 UTC","since":"2026-11-07","supersedes":"behaviour.out_of_character.v2","revisions":[],"body_sha256":"4e99db58f6d0f64ea730c748a24b88f27221b1e31f6a91809fe44438f8080594","url":"https://agenticfinancegraph.com/def/behaviour.out_of_character.v3","ladder":"https://agenticfinancegraph.com/ai-agent-liveness-methodology-l0-l9-ladder","license":"https://creativecommons.org/licenses/by/4.0/","attribution":"Agentic Finance Graph — https://agenticfinancegraph.com"}