AI Red-Teaming for SAP

As of 2026-05-29

5 attack surfaces: prompt injection · tool misuse · indirect prompt injection (RAG) · data exfiltration · cost runaway. Senior protocol: 10-30 adversarial prompts per skill mapped to surfaces, run pre-launch + on-change + quarterly. Fix until 100 % degrade-safe. Cost ~5-10 % of build = cheapest insurance. Build regression suite from every attack.