Never gonna stop. Consider it normal. Hey, at least humans still have a job. Incident response
What is the source of truth? If the LLM auto discovers when it needs to mitigate then it can get prompt injected. It's basically a backdoor into the system.