“The longer an AI system can operate and the more actions it takes, the more difficult it becomes to distinguish between benign and malicious behaviors.”