Chapter 18 · Part 3: Planning, autonomy, and orchestration

Agent Graph Poisoning and Workflow Attacks

Workflow graphs can be steered, substituted, or poisoned.

Frameworks: MITRE ATLAS

Layers: planning

Public practitioner doctrine. Free doctrine. Open knowledge. Paid enforcement.