// GLOSSARY

Abuse Path

A genuinely exploitable behavior sequence in the runtime chain of a generative-AI application: indirect prompt injection, RAG disclosure, tool abuse, MCP authorization abuse and multi-turn chained exploitation are typical steps of this chain. It is not a theoretical vulnerability list; it is proven with a safe proof of concept (PoC) under controlled execution, shown in the field. It is the AI counterpart of the attack path in traditional penetration testing and carries the same epistemological claim: not 'it can be done' but 'it was done'. This distinction is especially important in AI security, because the field is full of speculative threat narratives; it is easy to say a model 'could be abused', but showing that the abuse produces a concrete result through the real tools and authority bound to the model takes evidence. OWASP LLM Top 10 and MITRE ATLAS frame the steps of this path. The abuse path is the primary evidence object of the Generative AI Red Team.