What these five papers share is a preoccupation with failure modes that commercial AI narratives actively avoid naming. ClawGuard's documentation of indirect prompt injection [2] and OIDA's argument for epistemic infrastructure [4] both point to the same structural problem: the industry built capability on top of trust assumptions that adversaries and organizational complexity are now systematically violating. The reactor-model approach to nondeterminism in cyber-physical systems extends this logic into hardware — an LLM-powered driving coach that behaves unpredictably is not a research curiosity, it is a liability. The Chinese…