The AgentFlayer class of zero-click cross-agent prompt-injection attacks (Zenity Labs disclosure at Black Hat USA 2025) and the EchoLeak CVE-2025-32711 disclosure earlier the same year describe a structural failure mode in agentic AI rather than incidental bugs; the procurement-relevant signal is the vendor-response split — which vendors patched and committed to a response-SLA versus which classified the behaviour as 'intended functionality' — answered before the contract closes, not after.
Claim created at publish; review on 60-day cadence. Anchor disclosures: AgentFlayer (Zenity Labs research, Black Hat USA, August 2025); EchoLeak (CVE-2025-32711, NVD record, August 2025). Sister claims: AM-130 (four evidence classes for procurement readers, EchoLeak listed as canonical structural failure mode), AM-140 (procurement-committee pre-pilot question 4 = cross-agent threat model), AM-010 (CIO playbook scoped-experimentation governance characteristic), AM-029 (Stanford 12/88 distribution). Trigger conditions to revisit before next cadence: (a) a major vendor in the 'declined to patch' cohort reverses position publicly with a documented patch + response-SLA; (b) a new disclosure of a higher-severity cross-agent class that supersedes AgentFlayer's procurement weight; (c) regulatory action (EU AI Act post-market monitoring, US FTC, sectoral regulator) treating an unpatched cross-agent vulnerability as a compliance breach independent of vendor classification.
/holding/AM-007/Embed this claimiframe + oEmbed
The card auto-updates when the claim's status, last-reviewed date, or correction log changes. Embedders never need to refresh — the card is rendered live from the canonical record.
Email-me when AM-007's status, next review date, or correction log changes. One email per change. No newsletter subscription, no other mail.
The claim: The AgentFlayer class of zero-click cross-agent prompt-injection attacks (Zenity Labs disclosure at Black Hat USA 2025) and the EchoLeak CVE-2025-32711 disclosure earlier the same year describe a structural failure mode in agentic AI rather than incidental bugs; the procurement-relevant signal is the vendor-response split — which vendors patched and committed to a response-SLA versus which classified the behaviour as 'intended functionality' — answered before the contract closes, not after.
About this register
The Reporting register tracks claims published from articles addressed to senior enterprise IT leaders — CIOs, IT directors, heads of platform. Claims are reviewed on a 30–90 day cadence; each review either reaffirms the claim, marks one substantive part as Partial, or marks it Not holding once the underlying evidence has been overtaken.
Recent corrections in Reporting
- AM-003 · Partial · 28 May 2026
Pricing/model drift: a $100/mo Pro tier now sits beside the $200 tier (added 9 Apr 2026) and the premium model is GPT-5.5 Pro. Core thesis holds; the single-$200-tier framing no longer matches. Re-verify current tiers at chatgpt.com/pricing.
- AM-002 · Not holding · 06 May 2026
URL state changed. The /the-agentic-ai-revolution-real-world-success-stories-and-strategic-insights-from-2024-2025/ slug now serves a deliberately rewritten retrospective (claimId AM-130, "Agentic AI 2024-2025 retrospective", published 04 May 2026) against audited primary sources. The 28 Apr 2026 redirect to /retractions/ has been lifted to allow that. AM-002 the claim remains Not holding — the original $3.50/dollar + 70% failure-rate framing was withdrawn and is not restored. AM-130 is a separate claim with its own evidence chain. Readers arriving at /holding/AM-002 see the withdrawal here; the article link surfaces the new piece at the URL the original lived at, with this entry as the audit trail.
- AM-121 · Holding · 2 May 2026
Klarna walk-back primary-source upgrade — added Siemiatkowski verbatim quotes via Bloomberg-cited-by-Fortune (9 May 2025) and the Uber-style freelance hiring detail via Entrepreneur. Closes the highest-priority evidence gap from the source dossier.
Reviews coming up in Reporting
- AM-136 · Holding · next +4d (4 Jun 2026)
Across the 24-month window May 2024 to April 2026, every major foundation-model provider (Anthropic, OpenAI, Google, AW…
- AM-020 · Holding · next +18d (18 Jun 2026)
The 40-60% TCO underestimate on enterprise agentic-AI deployments is not a cost-visibility failure — it is a cross-depa…
- AM-023 · Holding · next +18d (18 Jun 2026)
The 10 Apr 2026 Google AI Mode rollout to eight markets is the first vertical (restaurant booking) where agentic search…