AI interaction risk: are runtime controls keeping pace?

TL;DR: AI systems are failing less at the model layer than at the interaction layer, where prompt injection, shadow AI, deepfake-enabled fraud and uncontrolled data exposure emerge through prompts, orchestration and tool execution, according to Codenotary. Runtime visibility and enforcement are becoming the control point that matters most when AI decisions and actions are executed in sequence.

Editorial analysis by NHI Mgmt Group, based on content published by Codenotary: “Securing AI Usage Where it’s Most Dangerous”.

Key questions

Q: What breaks when AI security only relies on logging and alerting?

A: Logging and alerting fail when the risky action finishes before a human can intervene.

Q: Why do autonomous agents create a bigger governance problem than chat-based AI assistants?

A: Chat-based assistants usually begin with a visible human prompt, so the initiation point is easier to govern and audit.

Q: What are the signs that shadow AI is leaking secrets?

A: Look for prompts containing API keys, tokens, connection strings, customer data, or regulated information, especially when the same workstation also runs local models or AI plugins.

Practitioner guidance

• Instrument prompt ingress and tool boundaries Capture prompts, orchestration decisions, tool invocations and outbound interactions as security events so AI workflows are observable at the point of execution, not only in retrospective logs.
• Block unapproved outbound AI data flows Detect and stop transmission of source code, credentials and internal business data to public AI endpoints that are outside policy, including endpoint-level restrictions where needed.
• Review agent execution chains, not isolated events Correlate tool usage, API activity and data movement so teams can reconstruct whether an agent stayed within expected behavioural boundaries across the full task sequence.

Bottom line: AI risk is moving toward the execution layer, where prompt handling, orchestration and tool use create the real governance exposure.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →