Dataset methodology
The tracker separates reported events from controlled demonstrations, labels the quality of the evidence, and links every record to its sources. The dataset currently contains 135 records and was last updated 2026-09-08.
Classification
The consequence occurred in a real environment or operating workflow, based on the cited account.
A researcher or operator reproduced the behavior in a controlled setting. Demonstrated records cannot receive a Critical severity label.
Severity reflects the reported or demonstrated consequence, exposure, and reversibility. Every incident page publishes its own severity rationale. A source-quality label of Operator report or Unverified is capped at High.
Source quality
A disclosure, advisory, paper, issue, or incident report from the researcher or affected organization.
A statement or post from the company responsible for the product or service.
Reporting from a news organization that attributes the incident to named sources or documents.
A first-person account from a company founder or executive.
A first-person account from the practitioner who ran or observed the system.
A public claim that lacks enough independent evidence for a stronger label.
Limitations and corrections
This is a sourced public-record dataset, not a complete census of agent failures. Reporting frequency varies by vendor and industry. The authorization analysis is conditional: a gate can only hold an action routed through that enforcement boundary.
If a source changes, a record duplicates another event, or a classification is unsupported, send the stable incident URL and the stronger evidence to [email protected].