# CHQ-SC-2026-004

- **Artifact ID:** CHQ-SC-2026-004
- **Status:** RATIFIED
- **Public record:** https://record.cybersecurityhq.com/conditions/chq-sc-2026-004
- **Machine-record SHA-256:** `12936722c03dab31b0341a0de1decd427f8b39b0b94b9c8a2d1ded126f0867d9`

## Complete structured record

```json
{
  "id": "CHQ-SC-2026-004",
  "name": "AI Agent Runtime Compromise",
  "domain": "Identity",
  "status": "RATIFIED",
  "persistence": "REINFORCING",
  "first_observed": "2026-03-03",
  "reinforcement": {
    "date": "2026-03-15",
    "evidence": "CHQ-ASC-2026-004",
    "basis": "The canonical constraint record issued on March 15 is the second vector named by the P-005 amendment as confirming SC-004's reinforcing momentum; its retained PDF uses the legacy ASC filename."
  },
  "definition": "Autonomous or semi-autonomous systems inherit human or system trust credentials without equivalent verification or constraint.",
  "linked_positions": [
    "CHQ-P-2026-005"
  ],
  "linked_evidence": [
    "CHQ-P-2026-005"
  ],
  "linked_constraints": [
    "CHQ-ASC-2026-004"
  ],
  "boundary_case_note": "Boundary case for CHQ-P-2026-017 (excluded: agents as actors, not victims).",
  "falsification_condition": "For a prospective 90-day review window, major agent frameworks enforce independently verifiable identity and least-authority boundaries by default, AND no confirmed incident or vulnerability demonstrates an autonomous or semi-autonomous system exercising inherited authority beyond those boundaries.",
  "prior_falsification_condition": {
    "effective_through": "2026-06-01",
    "criterion": "MCP ecosystem begins enforcing identity boundaries before adoption plateaus, AND no additional agent framework CVEs in next 90 days.",
    "outcome": "WINDOW CLOSED — NOT FALSIFIED. The registry did not establish ecosystem-wide identity-boundary enforcement during the window, so the conjunctive criterion was not met."
  },
  "evaluation_outcome": "THE ORIGINAL 90-DAY CRITERION CLOSED 2026-06-01 NOT FALSIFIED. THE REPLACEMENT CRITERION APPLIES PROSPECTIVELY FROM 2026-09-22 AND HAS NO RECORDED OUTCOME.",
  "evidence_count": 1,
  "last_reinforced": "2026-03-15",
  "linked_assumptions": [],
  "rating": "EMERGING",
  "outlook": "Stable",
  "watch": "none",
  "escalation_criterion": "First confirmed production incident reclassifies to CONFIRMED",
  "deescalation_criterion": "Retirement review after four consecutive quiet quarterly cycles, with retirement criteria declared before first use (declared 2026-09-09)",
  "rating_as_of": "2026-09-22",
  "rating_source": "Structural Condition Report Issue 39",
  "next_review": "2026-09-29",
  "aliases": [
    "Automation Trust Inheritance"
  ],
  "name_history": [
    {
      "date": "2026-09-22",
      "from": "Automation Trust Inheritance",
      "to": "AI Agent Runtime Compromise",
      "ground": "Aligned to the name published on the weekly Structural Condition board since July 2026 (DM decision 2026-09-22). Definition unchanged."
    }
  ]
}
```