Where validation ends and continuous AI assurance begins

Level High Timing Post deployment

What this risk is

AI systems producing unexpected, unpredictable, or dangerous outputs and behaviors, including cascading failures in multi-agent and complex systems. Distinct from 7.1 (goal misalignment) and 7.2 (dangerous capabilities): this subdomain captures behavioral unpredictability as a risk in itself, even when objectives are correctly specified.

How it occurs · Mechanisms

  • Non-linear emergent behaviors — Complex systems exhibit behaviors not predictable from the behavior of their components
  • Distribution shift — Deployment conditions differ from training conditions in ways that produce unexpected behaviors
  • Cascading failures in multi-agent systems — Multiple AI agents interacting produce emergent system-level behaviors no individual agent was designed for
  • Prompt sensitivity — Small changes in inputs produce disproportionately large changes in outputs
  • Context window effects — Behaviors change unpredictably with conversation length, context, or ordering of information

Real-world incidents

2010 Flash Crash

Algorithmic trading systems interacting with each other caused a cascade that temporarily wiped $1 trillion from US stock markets in minutes. The systems individually operated as designed; the system-level behavior was emergent and catastrophic.

Air Traffic Control AI Near-Misses

Multiple documented incidents where AI-assisted air traffic control made recommendations that seemed locally optimal but were dangerous in the broader traffic context.

LLM Behavioral Inconsistency

Multiple studies document that LLMs give different answers to identical questions when asked repeatedly, phrased differently, or asked in different languages — raising reliability concerns for high-stakes applications.

Mitigations · Governance

  • Behavioral testing suites — Comprehensive testing across diverse inputs before deployment
  • Canary deployments — Gradual rollout with monitoring before full deployment
  • Fallback mechanisms — Define system behavior when AI produces unexpected outputs
  • Multi-agent system testing — Test agent-to-agent interaction behaviors, not just individual agent behavior
  • Output validation — Implement output validation layers to catch anomalous AI outputs before they take effect
  • Circuit breakers — Automatic shutoffs when behavior deviates from expected bounds

Risk you cannot name is risk you cannot manage.

Map your AI portfolio against this taxonomy with Zertia.