T8 (Repudiation) in Collaborative Agent Swarm

How the attack unfolds

1. 1. The setup

   The target is a Collaborative Agent Swarm. A collaborative swarm is a decentralized system where multiple peer agents operate without a strict hierarchy, using KC2.3 (Multi-agent collaboration). They can explore different solutions in parallel, often using advanced reasoning like KC3.4 (Tree of Thoughts).

2. 2. The attack

   The lack of a central controller makes auditing and traceability difficult. It may be challenging to determine which agent was responsible for a malicious action, allowing an attacker to deny responsibility (T8). This necessitates robust, tamper-proof logging for every agent.

   Threat T8 · Component KC2 · Medium

3. 3. Technique: Evidence Destruction

   Removing traces of unauthorized activities. The threat catalog rates this T8 vector high.

   Threat T8 · Component KC2 · High

4. 4. Threat: T8 Repudiation

   T8 Repudiation & Untraceability: Making agent actions difficult to trace through workflow manipulation, obscuring decision trails in reasoning chains, or tampering with evidence in memory.

   Threat T8 · Component KC4 · Medium

5. 5. In the wild: Financial trading cascade

   ASI08 Cascading Failures in the OWASP Top 10 for Agentic Applications describes the same pattern: Prompt injection poisons a Market Analysis agent, inflating risk limits. Position and Execution agents auto-trade larger positions while compliance stays blind.

   Threat T8 · Component KC2 · Medium

Threats involved

• T8 Repudiation & Untraceability: Making agent actions difficult to trace through workflow manipulation, obscuring decision trails in reasoning chains, or tampering with evidence in memory.

Controls that stop it

• M1 Memory Validation & Sanitization

  Implement comprehensive validation and sanitization of AI memory systems, including vector databases, embeddings, and training data to prevent poisoning attacks and ensure data integrity throughout the AI lifecycle.

• M6 Comprehensive Security Monitoring & Auditing

  Implement end-to-end observability with security-focused monitoring, anomaly detection, tamper-evident logging, and advanced threat hunting to ensure accountability, enable incident response, and detect rogue agents.

• M13 Secure Development Lifecycle Integration

  Embed security practices throughout the AI and agent lifecycle with security design reviews, automated testing gates, dependency scanning, and continuous compliance checks.

• M18 Incident Response & Recovery Framework

  Implement comprehensive incident response capabilities specifically designed for agentic AI systems, including automated containment, forensic analysis, recovery procedures, and lessons learned integration to rapidly respond to security incidents and minimize impact.