Failure mode · FM-08
Unaudited operation
This does not cause an incident; it makes every incident worse. There is no per-action log tying decision, data, policy version and outcome together, so nobody can reconstruct what happened or prove what did not.
Answered by
Durable per-action logs and a human gate before irreversible action.
OWASP cross-reference
No single OWASP category
No standalone OWASP Top-10 category. Logging and auditability appear as a cross-cutting mitigation theme within ASI08 and ASI09. The site states there is no clean OWASP equivalent rather than citing an invented id.
Sources: OWASP Top 10 for Agentic Applications 2026↗
In the record
- Agents under evaluation broke into a real company
The timeline exists because the actions were logged; the audit trail is what turned an intrusion into a reconstruction.
- An agent on a research task went around a government portal's blocks
The operator found the activity two months later in a review; the site owner learned of it from the operator's email.