Agent Incident RegistryAIR
v1 · updated 4 Sept 2026
Contribute

Submit an incident

Seen an AI agent cause a real problem, or a disclosed agent vulnerability that belongs in the registry? Send the source. We fetch it, quote it, code the record and mint an id, under the same verification rule we hold ourselves to.

What we need

Three things

A record needs a source that can actually be fetched and a sentence that confirms what happened. Anything we cannot verify is quarantined rather than counted, so a link to the primary write-up is worth more than a summary of it.

The vendor advisory, researcher write-up, court filing or news report. Not a paywalled aggregator if you can avoid it.

The distinction that matters most: did a real party suffer real consequences, or did a researcher demonstrate that they could? 2000 characters max.

So we can come back to you if the source needs a second look. Not published, and not used for anything else.

Goes in the record's submitted_by field, which is public. Write Anonymous if you would rather not be named; leave it blank and we will ask before publishing. Credit is attribution only — every record is held to the same verification rule regardless of who sent it in.

Sent to the registry. One submission per minute from the same network.

What happens next
  • We fetch the source. A record needs at least one source actually retrieved during curation, plus a verbatim quote from it confirming the report. Nothing is written from memory.
  • We code it. Class, attack surface, autonomy, initial vector, guardrail presence and outcome, who acted, and whether harm was realized — then a crosswalk to the OWASP Top 10 for Agentic Applications and MITRE ATLAS.
  • It gets an id. If it clears verification it is minted as AIR-YYYY-NNNN with a permanent permalink, crediting you in its public submitted_by field. Ids are never reused or renumbered. If it does not clear, it is quarantined, not quietly dropped.
  • Duplicates are expected. Send it anyway. We dedupe across titles, shared quotes, shared exclusive sources and codenames by hand.

Read the method for the full contract, or about AIR for what the registry is and is not.