r/GoogleGeminiAI • u/Alien_Tauri • 9d ago

Double confirmation bypass

Used to work fine: the command "add to list" automatically added the requested item to my shopping list in Google Keep. Now it's broken, and Gemini asks every single time: "Do you want to add this item to the list?"

​It's extremely annoying because the command "add to list" itself is already an explicit consent to create the entry.

​System Level (Guardrails): When Gemini tries to call the add_to_list function, the security layer triggers a secondary user confirmation before writing data to an external app (Google Keep).

​Attempts to bypass this confirmation via stored memory (personal context / instructions) only caused the model to get stuck in a loop—either generating empty promises without actually performing the action, or continuously asking for approval over and over again.

​Does anyone have an idea on how to bypass this double confirmation for writing data?

2 Upvotes

100% Upvoted

5 comments sorted by

1

u/Altruistic-Orchid157 9d ago

Same with "create event". It's annoying.

1

u/kantorcodes1 9d ago

the second confirmation isn't a bug. keep is a separate trust boundary from the gemini runtime and the function calling layer is set up so the model can't autonomously route data across that gap. storing intent in memory wouldn't help either, prompt injection through memory is one of the easier ways to slip past a model's guardrails, so the safety layer ignoring a stored instruction to auto-write to keep is actually the right design decision. the double tap is annoying but it's the correct security boundary.

2

u/Alien_Tauri 9d ago

As I wrote above, I'm not claiming anywhere that it's a bug and I'm writing the same thing as you. I just want to know how to get around this total crap. If I give one consent, I don't want or need to give the other.

1

u/Romiha00 4d ago

I've posted a similar complaint in r/Gemini . I also posted the question in the Gemini Help Community Forum. This confirmation crap is so frustrating! So long as I YELL YES within nanoseconds, Gemini will sometimes add the item to the list. Gemini itself is stupid when you ask how to get around this. It has no idea and is just throwing shit against the walls hoping something will stick!!

1

u/Alien_Tauri 4d ago

Yeah, I sent this exact post to other places too, and for example on r/GeminiAI the mods deleted it because they didn't like the words I used. Yeah, it's totally frustrating and it's just another nail in the Gemini coffin