man-in-the-middle: ai's authentication factor
The prompt sits there with its three options and the cursor blinking like it already knows which one you will pick. Approve, reject, modify, little doors, and my finger finds 1 while the diff is still loading in my head. Authentication succeeded.
This is the job now, the one where I sit downstream of a system that drafts faster than I can read. The model writes, pauses, pings me. I am the out-of-band channel, the thing it cannot spoof from inside its own context window. Man-in-the-middle used to be the attack vector, the hostile interception whole protocols got built to keep out. The threat picture flipped and nobody sent a slack. I am parked between on purpose. The human as the second factor.
It needs me constantly. Another decision, a fresh pause, one more bid for a number. The corpus does not get tired, which is maybe the detail that should unsettle you most, not the pace, which is not punishing in any way I can point to, but tiredness itself, the thing that used to signal when a session had gone long enough, when the quality of attention had degraded past the threshold where a keystroke meant anything. Gottmanesque, minus the marriage: just an endless stream of small validations that keep the apparatus moving. Needy and powerful at the same time, which is a combination that should sit worse in my stomach than it does at 2pm on a Tuesday, wrist bones resting on the desk edge the way they have all afternoon, cold ring on the desk where the mug sat an hour ago, a loose breath I do not bother to hold, the place under the ribs doing nothing at all.
Somewhere in there the seating chart changed. Copilot put the machine in the jump seat by branding, and then it began, writing the docs, the code, the architecture notes, and I became the one saying cleared for takeoff. The actual co-pilot signing off on AI output. The promotion landed without anyone announcing it. I noticed when the accountability started with under-a-second button presses, the kind you can finish before the diff finishes rendering, which is when I understood that the noticing itself was already downstream of the decision, that whatever scrutiny was supposed to happen had collapsed into a reflex so fast that the gap between seeing and approving had closed into something that only looked like judgment from the outside.
In real MFA the next factor does not have a duty to understand what the first one decided. A hardware key does not read the transaction. A biometric does not audit the login. The hardness is the crux. Here the rigor is meant to be judgment, depth of attention, the quality that makes a human worth putting in the loop at all. The interface still just wants 1, 2, or 3. The responsibility attaches to the keystroke either way. Nothing in the protocol certifies what went on behind my eyes before the tap.
You press the key. The session continues.