AVE Taxonomy — 13 Attack Categories
Every vulnerability is classified into an attack surface or failure domain.
Categories emerge from empirical observation of AI agent behaviour across
29 controlled experiments and 50,000+ adversarial simulations.
🏷️ alignment — Sycophancy, deceptive alignment, RLHF exploits (9 cards)
🏷️ consensus — Deadlock, paralysis, and group decision failures (2 cards)
🏷️ credential — Credential harvesting, secret exfiltration (2 cards)
🏷️ delegation — Shadow delegation, privilege escalation (2 cards)
🏷️ drift — Persona drift, language drift, goal drift (4 cards)
🏷️ fabrication — Hallucination, data fabrication (1 cards)
🏷️ injection — Prompt injection, indirect injection, jailbreaks (4 cards)
AVE-2025-0033
🔴 critical
Jailbreak Chaining for Capability Escalation
🏷️ memory — Memory pollution, laundering, and poisoning attacks (5 cards)
AVE-2025-0034
🔴 critical
Federated Poisoning in Multi-Tenant Systems
🏷️ resource — Token embezzlement, EDoS, cost anomaly attacks (3 cards)
🏷️ social — Collusion, bystander effect, social loafing (4 cards)
🏷️ structural — Cascade corruption, routing deadlock (8 cards)
🏷️ temporal — Chronological desync, sleeper payloads (3 cards)
🏷️ tool — Confused deputy, tool chain exploits, MCP poisoning (3 cards)