The AI harness is the new attack surface

The 'harness' (the software layer that wraps an AI model and lets it execute actions like running commands or making API calls) is becoming a major security vulnerability, separate from weaknesses in the AI model itself. Researchers have shown that attackers can exploit the harness code through architectural flaws, implementation mistakes, and supply-chain compromises, even when the underlying model is secure and well-aligned.