AI didn't just add a feature to your stack. It added a new attack surface.
Every AI system reads language you don't control and acts on it with access to your data and tools. That's not a bug to patch — it's a boundary to design. Guardrails written into a prompt can be talked around; a vendor's “trust us” is not assurance you can audit.