Enterprise AI Incident Response: A Runbook for Containing Compromised Agents

TL;DR Enterprise AI incident response must address identity, execution, data, persistent state, and downstream business systems. Stopping an agent is only one containment action. Responders must also restrict tool and disclosure paths, revoke the relevant authority, account for queued and delegated work, preserve evidence, and reconcile actions already accepted by other systems. This runbook conne