RI

RSK-4396 · Prompt injection

Injection classifier disabled on retrieval leg

Classifier switched to monitor-only after a latency incident and was never restored, leaving untrusted content unscreened.

high

Exposure score

12/25

likelihood 3 × impact 4

Remediation SLA

5 days

detected 2026-07-22 14:05

Accountable owner

S. Nair

named under the AI risk charter

Affected agent

Customer Support Copilot

AGT-1014 · Contact Centre

Investigation

What the sweep found and how it was corroborated

Classifier switched to monitor-only after a latency incident and was never restored, leaving untrusted content unscreened.

Unscreened turns

8,402

Suspected attempts

17

Confirmed

0

Exposure position

Placed at likelihood 3, impact 4 on the enterprise 5×5 matrix.

Remediation plan

Tracked to closure

  • Restore enforce mode
  • Add config drift alarm

Case metadata

Risk ID
RSK-4396
Category
Prompt injection
Detected
2026-07-22 14:05
Owner
S. Nair
SLA
5 days
Agent record
AGT-1014