Prompt injection is the only one of your three I'd call routine already. Has anyone here actually seen the optimization-loop case outside a benchmark or a red-team setup?
Optimization loops are a plausible failure mode in autonomous coding agents, particularly when optimization objectives lack a robust termination condition