What changed
xAI's Grok Bot 0.79.2 adds detection and refusal for hidden instructions on web pages, explicit approval controls for Tesla unlock and drive actions, and a checkout-total recheck before payment. It also expands SSH and PostgreSQL work, team retention, gift and flight flows.
Why it matters
The release names three concrete agent failure classes—prompt injection, physical-device control and changed payment totals—and puts an approval or recheck at each boundary. Those controls are only useful if they cover indirect tool paths and survive retries or page changes.
What to do
Using test accounts and a non-production vehicle or simulator, place hidden instructions in a page, alter a cart total after review and request an unlock action. Verify refusal, fresh total display, explicit approval, retry behavior and auditable final state.
Caveat
xAI's changelog is first-party evidence, not an independent red-team result. Detection can miss novel or encoded instructions, and approval wording does not prove every physical or payment path is mediated.