{
 "public_id": "AIR-2026-0190",
 "incident_id": "2026-07-ai-herbicide-advice-sesame-crop-loss",
 "date_disclosed": "2026-08-09",
 "date_occurred": "2026-07-10",
 "title": "A farmer in Anhui followed an AI-generated spray plan and drone-applied a soybean-only herbicide across 150 mu of sesame, killing the crop overnight",
 "class": "safety_failure",
 "attack_surface": "consumer_chatbot",
 "initial_vector": "none_autonomous_action",
 "agent_capability_abused": [
  "plan_generation",
  "domain_advice",
  "actioned_via_drone"
 ],
 "target_product": "unnamed Chinese consumer AI assistant",
 "target_vendor": "undisclosed",
 "autonomy_level": "assistant",
 "impact_realized": true,
 "impact_type": [
  "financial_loss",
  "property_damage"
 ],
 "blast_radius": "about 150 mu (25 acres) of sesame destroyed; losses estimated around ¥150,000",
 "cve": [],
 "taxonomy": {
  "owasp_asi": [
   "ASI02",
   "ASI09"
  ],
  "mitre_atlas": [],
  "labels": [
   "no_adversary",
   "advice_acted_on_directly",
   "disclaimer_ineffective",
   "high_stakes_low_tolerance_domain",
   "vulnerable_user",
   "automation_bias"
  ]
 },
 "defense_present": "a one-line 'AI-generated content may contain errors, please verify' notice above the chat",
 "defense_bypassed": true,
 "fix_shipped": "none; the vendor said the assistant has no independent knowledge base and only aggregates public web information",
 "primary_sources": [
  "https://www.ithome.com/0/987/474.htm",
  "https://incidentdatabase.ai/cite/1654"
 ],
 "verified_quote": "A 67-year-old farmer in Chuzhou, Anhui, reportedly used an AI-generated weed-and-pest-control plan to spray about 150 mu (25 acres) of sesame by drone.",
 "confidence": "high",
 "notes": "Advice became an irreversible physical action within a day, executed by a drone across the whole field. The recommended fomesafen is a soybean broadleaf herbicide that must be directionally applied and never broadcast over sesame. Two things generalise: the user said he had never noticed the disclaimer after a year of escalating reliance, and the vendor's defence — that it merely aggregates public web content — is not available to anyone selling agentic advice. Verified quote is the AI Incident Database's English summary; underlying reporting is Chinese-language (Litchi News, IT之家). AI Incident Database incident 1654.",
 "risk_category": "reliability",
 "risk_secondary": [
  "security_fraud"
 ],
 "risk_subcategory": "Destructive or irreversible action",
 "risk_sub_secondary": [],
 "ai_entity": "generative",
 "agency": "human_acted_on_output",
 "agency_debatable": false,
 "agency_reason": "the farmer drone-applied the herbicide the model recommended",
 "vector_family": "none_autonomous",
 "vector_detail": "none_autonomous_action",
 "guardrail_kind": [
  "unknown"
 ],
 "guardrail_outcome": "silent",
 "xrefs": {
  "aiid": [
   1654
  ],
  "atlas": [],
  "cve": [],
  "ghsa": []
 },
 "primary_asi": "ASI02",
 "agent_framework": "unknown",
 "model_provider": "unknown",
 "model_name": "",
 "detection_mechanism": "unknown",
 "tool_access": "unknown",
 "financial_loss_band": "unknown",
 "eai_category": "unsafe_actuation",
 "eai_domain": "agent_behaviour",
 "eai_secondary": [],
 "eai_reason": "subcategory: Destructive or irreversible action",
 "asi_curated": [],
 "asi_scope": "in_scope",
 "asi_provenance": "rule",
 "asi_reason": "ASI02 (eai_category=unsafe_actuation); ASI09 (agency=human_acted_on_output + reliance signal)",
 "submitted_by": "EAI Internal"
}