Accountable partial understanding: securing the epistemic attack surface of agentic systems

According to the abstract, Josiah Dykstra argues that agentic AI widens the gap between what software does and what humans understand. The paper sets out a taxonomy of four attack categories and defines accountable partial understanding, with six necessary conditions such as inspectable evidence and assigned responsibility.

Why it matters

The same thing, for different readers.

What it means for you

As AI agents take on security-relevant work, people may understand less of what the software does, and this paper says that gap is itself something attackers can exploit.

For lawmakers

The paper lists six conditions, including assigned responsibility and visible unknowns, that organizations could be asked to meet when delegating security decisions to AI agents.

How the finding was reached

In our words, from the source. Weigh the finding by how it was made.

What was done
A conceptual paper with a taxonomy of four attack categories and a definition of accountable partial understanding with six conditions.
What it found
No measurement in the excerpt; the argument is that delegating interpretation to software agents differs from distributing knowledge among people.
What it does not show
Not stated in the excerpt.
Status
A preprint: not yet peer reviewed

The record

Questions
Are AI companies putting stronger safeguards into practice? · How is AI used in attacks, defence and war?
People
Josiah Dykstra (Wrote it)
What we read
We have read only the description the publisher gives. No quotations until someone reads the source itself.
Found by
The Radar, run of October 20, 2026, via arxiv-ai-safety-query (tier 1: the source’s own channel or an official record)
Cite this
arXiv, “Accountable partial understanding: securing the epistemic attack surface of agentic systems”, October 19, 2026. Entry in the Ctrl AI Base, https://ctrlai.com/base/arxiv-2026-10-19-accountable-partial-understanding
Our notesLight lane: only the abstract was read.