Researchers discovered a new type of vulnerability in agentic AI workflows, called Compositional Policy Violations (CPVs), where individual steps pass checks while the overall execution violates governing policies. They propose a taxonomy of four CPV types and a provenance-aware runtime architecture to address this issue.