ot ai exposure derived

{
  "input": {
    "type": "http",
    "method": "GET",
    "queryParams": {
      "vendor": "Siemens"
    }
  },
  "output": {
    "type": "json",
    "example": {
      "access": "Honeywell Experion Process Knowledge System (DCS); continuous operational data across the facility. Explicitly makes 'recommendations and automated decisions' to resolve anomalies.",
      "source": "Honeywell press release; corroborated by ARC Advisory Group, Control Engineering, and 6+ other independent trade outlets",
      "vendor": "Honeywell",
      "product": "Experion Cognition (AI-enabled control system platform)",
      "confidence": "moderate — proof-of-concept, not yet generally available",
      "data_sources": [
        "MITRE ATLAS (atlas.mitre.org)",
        "Vendor public disclosures"
      ],
      "atlas_mappings": [
        {
          "shared_risk": true,
          "technique_id": "AML.T0051",
          "technique_name": "LLM Prompt Injection"
        },
        {
          "rationale": "Agents hold automated decision-making authority in the control loop.",
          "shared_risk": false,
          "technique_id": "AML.T0053",
          "technique_name": "AI Agent Tool Invocation"
        },
        {
          "rationale": "Ongoing autonomous operation makes persistence via poisoned tool definitions materially higher-consequence.",
          "shared_risk": false,
          "technique_id": "AML.T0110",
          "technique_name": "AI Agent Tool Poisoning"
        }
      ],
      "exposure_level": "agentic",
      "deployment_status": "Live proof-of-concept at Borouge International's Ruwais facility (Abu Dhabi); commercial availability not yet general."
    }
  }
}