InfoResearchPeer-reviewedLLM-specific
Below the Waterline: A Survey of Agentic AI Security, Shadow AI Governance, and LLM Supply-Chain Risk in the Enterprise
- Published
- Record updated
Summary
This review unifies agentic AI security, shadow AI governance and LLM supply-chain risk, drawing on 2136 sources screened from 7254 records dated January 2004 to June 2026. It proposes three failure primitives (visibility loss, identity ambiguity and provenance erosion) as an organizing framework in place of a conventional attack-surface taxonomy. The authors also map where practitioner concern outruns published evidence and set out a research agenda dated to 2026 signals.