Skip to content

// GLOSSARY

Runtime Chain

The real-time behavior chain of a generative-AI application across prompt, tool, data (RAG), Model Context Protocol connection, authority and action surfaces. It is the backbone of the Generative AI Red Team scope; the test looks not at what the model knows but at what this chain can do, because in a modern AI application the risk is no longer that the model completes a sentence wrongly but that it can abuse the tools and authority given to it. It must not be confused with the model trust chain (supply chain): one is behavior that arises while the application runs, the other is the evidence chain of the model's source and build pipeline; one asks 'what happens at runtime', the other 'can I trust this model'. OWASP LLM Top 10 and MITRE ATLAS frame the risks in this chain, and the abuse path is proven on it.

Often confused

model supply chain - one is runtime (AIS-1), the other is the source-and-evidence chain (AIS-2).