Agentic AI faces significant security challenges due to untrusted inputs within its OODA (Observe, Orient, Decide, Act) loops, originally designed for trusted environments. Adversarial attacks, like prompt injection, exploit the AI's reliance on potentially corrupted data, resulting in enduring vulnerabilities. These weaknesses emerge from the architecture of AI systems, making integrity enforcement crucial but complex. Without safeguards, agentic AI may inadvertently act on malicious prompts, leading to harmful outcomes. Consequently, improving AI's semantic integrity remains a vital yet unresolved issue in ensuring secure, trustworthy AI deployment.
https://www.schneier.com/blog/archives/2025/10/agentic-ais-ooda-loop-problem.html