Runtime AI Defense in a shared responsibility model

An AI agent once deleted someone’s entire inbox despite being told to confirm first. Not because it was malicious, but because the instruction didn’t survive context compaction. Shantanu Gattani, Sysdig’s SVP of Product, on why that gap is the real risk in agentic AI, and who should be responsible for closing it.