We must assume that all AI models could be compromised, and design our systems to contain them from the very beginning.  This ...