// GLOSSARY

GenAI Red Team

Testing the runtime chain of generative-AI applications (prompt, tool, data, authority, Model Context Protocol) through a validated abuse path. It is not an AI-adapted version of a traditional penetration test; it changes the question. Where classic security testing asks 'can I fool the model into a wrong answer', the GenAI Red Team asks 'can I make the model abuse the tools and authority placed in its hands'. Because in a modern AI application the risk is no longer a sentence completed wrongly but the exploitation of the tools bound to the model (database queries, email sending, file access). OWASP LLM Top 10 and MITRE ATLAS are the framework references of this area; indirect prompt injection, RAG disclosure, tool abuse and MCP authority abuse are typical steps. Generative AI Red Team is its canonical name, and its primary evidence object is the abuse path shown in the field with a safe proof of concept.