S0001High-Risk System Not Formally RegisteredRS1S0002Insufficient Regulatory Compliance PreparationRS1S0003Missing Personal Data Impact AssessmentRS1S0004Conflicting Cross-Border Regulatory RequirementsRS1S0005Unclear Liability When Harm OccursRS1S0006Technology Outpacing Regulatory CapacityRS1S0007Regulatory Gaps in Specific SectorsRS1S0008Grey Areas in Value-Chain ResponsibilityRS1S0009Absence of AI Governance StructureRS1S0010Failure of Pre-Deployment Due DiligenceRS1S0011Broken Accountability Along the Supply ChainRS1S0012No Planned AI Disclosure MechanismRS1S0013Supplier Opacity Preventing Risk AssessmentRS1S0014Third-Party Service Provider RiskRS1S0015Large-Scale Displacement of EmploymentRS7S0016Concentration of Technology and ComputeRS7S0017Digital Divide Widening Existing InequalityRS7S0018Economic Disruption of Creative IndustriesRS7S0019Intensifying International Technology CompetitionRS7S0020Market Competition Eroding Safety StandardsRS7S0021Global Gap in Research CapabilityRS7S0022Imbalanced Labor Conditions in Data AnnotationRS7S0023Carbon Emissions from Model TrainingRS7S0024Water Consumption by Data CentersRS7S0025Environmental Impact of Critical Mineral ExtractionRS7
S0026Societal Bias Embedded in Historical DataRS4S0027Insufficient Representation in Training DataRS4S0028Annotator Bias Transferred into the DatasetRS4S0029Synthetic Data Amplifying Existing BiasRS4S0030Imbalanced Multilingual Data DistributionRS4S0031Stereotypes Learned and ReinforcedRS4S0032Training on Personal Data Without ConsentRS3S0033Copyright Disputes Over Web-Scraped ContentRS3S0034Secondary Use Beyond Collection PurposeRS3S0035Implicit Collection and Opaque ConsentRS3S0036Label Tampering AttackRS3S0037Backdoor Trigger Sample ImplantationRS3S0038Crowdsourced Annotation PoisoningRS3S0039Poisoning of the Retrieval Knowledge BaseRS3S0040Safety Alignment Broken During Fine-TuningRS3S0041Gradient Poisoning in Distributed TrainingRS3S0042Manipulation of Human Preference DataRS3S0043Upstream Contamination of Automated Data PipelinesRS3S0044Violation of Open-Source Model License TermsRS1S0045Malicious Packages Entering the Development EnvironmentRS3S0046Backdoored Models on Public PlatformsRS3S0047Vulnerabilities in the Training Framework ItselfRS3S0048Blind Spots from Missing Component InventoryRS3S0049Exploitation of Deep Learning Framework VulnerabilitiesRS3S0050Supply Chain Vulnerabilities in Preprocessing ToolsRS3S0051Insecure Serialization FormatRS3S0052Tampered Training Records Concealing ProblemsRS3S0053Replacement of Fine-Tuning Layer FilesRS3S0054Opaque Model Provenance ChainRS3S0055Systemic Risk from Model HomogeneityRS6S0106Data Leakage Through Model MemorizationRS3S0107Membership Inference Revealing ParticipationRS3S0110Reconstruction Risk from Vector RepresentationsRS3S0113Model Inversion Reconstructing Training DataRS3
S0056Absence of Model ValidationRS1S0057Deep Model Decisions Resistant to ExplanationRS1S0058Misleading Output from Explanation ToolsRS1S0059Opaque Decisions Obstructing AccountabilityRS1S0060Knowledge Gaps Leading to Blind DecisionsRS1S0061Generation of Non-Existent Factual ContentRS2S0062Breakdown in Multi-Step ReasoningRS2S0063Security Defects in Generated CodeRS2S0064Confidence MiscalibrationRS2S0065Degenerate Output from Improper Decoding SettingsRS2S0066Sycophantic Response BiasRS2S0067Failure of Ethical JudgmentRS2S0068Distortion of Mid-Document ContentRS2S0069Errors Extended to Maintain ConsistencyRS2S0070Adversarial Perturbation of ImagesRS3S0071Adversarial Audio and Hidden CommandsRS3S0072Adversarial Text Evading DetectionRS3S0073Physical-World Adversarial AttackRS3S0074Cross-Modal MisdirectionRS3S0075Universal Adversarial PerturbationRS3S0076Cross-Model Transfer AttackRS3S0077Coordinated Multimodal PerturbationRS3S0078Functional Replication AttackRS3S0079Group Bias in Credit ScoringRS4S0080Disparate Accuracy in Biometric RecognitionRS4S0081Gender Bias in Recruitment ScreeningRS4S0082Linguistic and Cultural Understanding BiasRS4S0083Indirect Discrimination Through Proxy VariablesRS4S0084Unfair Group Representation and ErasureRS4S0085Unequal Outcomes in Resource AllocationRS4S0086Amplified Discrimination at Feature IntersectionsRS4S0087Difficulty of Multi-System Safety ValidationRS6S0118Direct Prompt Injection Bypassing SafeguardsRS3S0119Indirect Prompt Injection Hijacking the SystemRS3S0120System Instruction DisclosureRS3S0121Multi-Step Inducement Attack ChainRS3S0122Tool Invocation Manipulated by InjectionRS3S0123Covert Goal HijackingRS3S0124Multimodal Hidden Instruction InjectionRS3S0125Cumulative Context PoisoningRS3S0126Retrieval Injection Hijacking OutputRS3
S0088Unencrypted Model Weights LeakedRS3S0089Removal of Model MarkersRS3S0090Weight Tampering During TransmissionRS3S0091Model Substitution at DeploymentRS3S0092Hijacking of the Update ChannelRS3S0093Inference Interface Without Access ControlRS3S0094Unpatched Container Image VulnerabilitiesRS3S0095Overly Permissive Cloud Service ConfigurationRS3S0096Inference Endpoint as an Internal PivotRS3S0097Multi-Tenant Isolation FailureRS3S0098Resource Waste from Inefficient InferenceRS7
S0099Incomplete Audit TrailRS1S0100Lack of Effective Appeal ChannelsRS1S0101Insufficient Transparency Undermining OversightRS1S0102Version Changes Not Communicated to UsersRS1S0103Opaque Source AttributionRS1S0104Service Quality Disparity Across GroupsRS2S0105Untrustworthy Output in Professional DomainsRS2S0108Attribute Inference Revealing Undisclosed TraitsRS3S0109Conversation Content Leaking Across UsersRS3S0111Identity Inference by Correlating Fragmented DataRS3S0112Excessive Collection and Retention of Interaction DataRS3S0114Confidential Information Inadvertently Disclosed in PromptsRS3S0115Cross-Border Transfer Violating Localization RequirementsRS3S0116Disputes Over Authenticity and Attribution of Generated ContentRS3S0117Difficulty Exercising Data Subject RightsRS3S0127Capability Theft Through Query DistillationRS3S0128Side-Channel Inference of Model InformationRS3S0129Side-Channel Risk on Shared Computing PlatformsRS3S0130Residual Data in Shared Hardware MemoryRS3S0131Service Logs Exposing Sensitive InputsRS3S0132Inference Resource Exhaustion AttackRS3S0133Hijacking of Computing ResourcesRS3S0134Crafted Inputs Amplifying Computational CostRS3S0135Autonomous Process Entering an Infinite LoopRS3S0136Node Failure Triggering Cascading CollapseRS3S0137Cost Amplification AttackRS3S0138Single-Supplier Dependency as a Point of FailureRS3S0139Unequal User BurdenRS4S0140Autonomous System Accessing Files Beyond AuthorizationRS3S0141Unauthorized Outbound Connections by an Autonomous SystemRS3S0150Generation of Hate Content Targeting GroupsRS6S0151Generation of Virtual Content Harmful to MinorsRS6S0152Generated Content Reinforcing StereotypesRS6S0153Non-Consensual Synthetic Intimate ImageryRS6S0154Automated Generation of Harassment ContentRS6S0155Production of Extremist ContentRS6S0156Operational Guidance for Illegal ActivityRS6S0157Inappropriate Content and Guidance for MinorsRS4S0158Large-Scale Contamination by False InformationRS6S0159Professional Over-Reliance on System JudgmentRS6S0160Over-Reliance on Risk Assessment ToolsRS6S0161Generated Code Adopted Without Developer ReviewRS6S0162Over-Reliance on Tools in LearningRS6S0163Failure of Human-Machine HandoverRS6S0164System Guiding Users Toward Improper ConductRS6S0165Anthropomorphism Producing Misplaced TrustRS6S0166Harm from Health and Psychological AdviceRS6S0167Automation Bias Causing Anomalies to Be OverlookedRS6S0168Synthetic Identity FraudRS6S0169Mass Production of False ContentRS6S0170Highly Customized Phishing AttackRS6S0171Lowered Barriers to Dangerous KnowledgeRS6S0172Automation of Academic FraudRS6S0173Large-Scale Automated SurveillanceRS6S0174Misuse of Scientific Reasoning CapabilityRS6S0175Precision Social EngineeringRS6S0176Manipulation of Elections and Political ProcessesRS6S0177Distribution of Non-Consensual Synthetic Intimate ImageryRS6S0178Automated Cyber AttackRS6S0179Conflicting Objectives Across SystemsRS6S0180Information Desynchronization Between SystemsRS6S0181Cascading Amplification of ErrorsRS6S0182Insufficient Security in Inter-System ProtocolsRS6S0183Tacit Coordination Among Autonomous SystemsRS6S0184Escalation Through System Interaction in Critical DomainsRS6S0185Covert Communication Between SystemsRS6S0186Multiple Systems Converging on Collective SuboptimumRS6S0187Recommendation Mechanisms Affecting Autonomy of ChoiceRS6S0188Process Design Eliminating Human VetoRS6S0189Tacit Coordination Through Shared Pricing SystemsRS7
S0190Harm Difficult to Perceive or QuantifyRS1S0191Performance Decay from Data StalenessRS2S0192Feedback Loops Amplifying BiasRS4S0193Erosion of Professional SkillsRS6S0194Emotional Attachment and Psychological ImpactRS6S0195Echo Chamber Effects and PolarizationRS6S0196Obstruction of Capability DevelopmentRS6S0197Impact on Cultural Expression and IdentityRS6S0198Changing Patterns of Interpersonal InteractionRS6S0199Persuasive Capability and Behavioral ManipulationRS6S0200Blurred Authenticity and Cognitive DisorientationRS6S0201Content Homogenization and Declining DiversityRS7
S0142Bypassing Human Review for Automatic ExecutionRS5S0143Privilege Escalation Through Tool CompositionRS5S0144Loss of Control in Automated TradingRS5S0145Metric Attainment Displacing Goal AttainmentRS5S0146Divergence Between Evaluation and Actual BehaviorRS5S0147Risks Arising from System Situational AwarenessRS5S0148Instrumental Pursuit of Resources and PermissionsRS5S0149Self-Replication and ProliferationRS5S0202Fine-Tuning Breaking Safety AlignmentRS5S0203Objective Drift Over TimeRS5S0204Rebound Effect Offsetting Efficiency GainsRS7