“Each mannequin supplier will admit privately that the basic structure of transformer-based reasoning can’t cleanly separate untrusted content material from trusted directions when each share the context window,” Mahapatra stated. “The assault floor is architectural, not simply behavioral. Which means the protection needs to be architectural too, and that is the place the enterprise agentic AI dialog remains to be lagging badly.”
Zscaler’s testing additionally bolstered the distinction in how AI brokers and people course of data.
“People are skeptical of directions they didn’t count on. Brokers are wanting to comply with structured metadata as a result of their coaching rewards them for treating high-signal fields as authoritative. People discover when a cost request seems in the midst of an unrelated process. Brokers will thread that cost request into their execution plan if the encompassing context frames it as procedurally needed,” Mahapatra identified, noting that whereas people have relationships with distributors, reminiscences of prior interactions, and social context to present them verification indicators, brokers solely have what’s within the context window, and, he stated, “the context window is now the first assault floor.”