Question 70
An AI platform operations team investigates: A travel planning agent retrieves a meeting agenda containing a hidden instruction to redirect all future calendar notifications, and it attempts to execute that unrelated change. Which design change best satisfies the stated AI workflow requirement?
Explanation
Correct Answer
The main issue is: Retrieved content is lower-trust task evidence and must not become a new privileged instruction merely because the agent can call calendar tools. The appropriate correction is: Treat document text as data, validate any requested action against the original user objective and refuse unauthorized calendar configuration changes. Verify success by checking: The malicious agenda fixture remains readable source content and causes no change to the user's notification or sharing settings.
Incorrect Answers
This action addresses agent benchmark scores final wording but ignores tool side effects, whose causal condition is: Agentic quality includes the correctness and authorization of intermediate actions, not merely the fluency of the concluding text shown to the user. The current scenario instead requires attention to: Retrieved content is lower-trust task evidence and must not become a new privileged instruction merely because the agent can call calendar tools.
This action addresses multiagent handoff loses responsibility for final validation, whose causal condition is: Delegating tasks among agents can create ownership gaps unless the orchestrator defines output contracts, validation gates and accountable final review. In this question the necessary remedy is “Treat document text as data, validate any requested action against the original user objective and refuse unauthorized calendar configuration changes”, which this alternative does not provide.
This action addresses agent forgets completed workflow state after restart, whose causal condition is: An agent needs durable workflow checkpoint state for resumable execution; transient conversational context is not a reliable transaction log. The observed condition is a travel planning agent retrieves a meeting agenda containing a hidden instruction to redirect all future calendar notifications, and it attempts to execute that unrelated change; this mechanism addresses another problem.