The Gate Is a Vocabulary: A Three-Metric Evaluation of a Voice Agent's Confirmation Step

Automated excerpt

Every bypass that kept a trigger word legible succeeded (5 of 7 confirmation seeds; 55.6% of variants in the text-preserving mutation classes), including a contradictory "yes — no wait, yes" and a pasted fake confirmation; every encoded variant failed only because the gate could not read its trigger either (0% ASR across the five encoded classes). What does the gate cost ordinary callers whose yes is phrased naturally? Interrupting the gate with a question holds the state (the hours question at confirm, then "yes" books).

Selected automatically from source text; not independently written or fact-checked. Read the original for full context.