The Insurability Frontier of AI Risk: Mapping Threats to Affirmative Coverage, Silent Exposures, and Exclusions
Not on the map. Why?
Abstract (arXiv)
The rapid diffusion of agentic AI has created a new coverage problem for commercial insurance: some AI-mediated losses are now affirmatively insured, some create silent-AI exposure under legacy cyber, technology errors-and-omissions (E&O), directors-and-officers (D&O), employment practices liability (EPLI), crime, and media policies, and others are being actively excluded. This paper maps that emerging boundary by coding 55 AI threat classes against 26 insurance products, endorsements, and exclusion regimes using public carrier materials and OWASP/MITRE threat catalogs. We identify a four-tier insurability frontier: affirmatively insured perils, silent-AI exposures, actively excluded perils, and perils outside conventional private insurance structures. Our coding measures publicly claimed positioning rather than executed contract wording; the headline statistics describe what carriers publicly state about coverage, not what would be paid in any specific claim. Three patterns emerge. First, affirmative AI coverage is beginning to differentiate by primary risk emphasis: public materials often position Munich Re around model performance and drift, Armilla and parts of the Lloyd's market around hallucination and broader AI liability, Tokio Marine Kiln and CFC around IP and technology E&O concerns, Apollo ibott around emerging autonomous system liability, and Coalition around deepfake and AI-enabled cyber response. Second, legacy lines retain silent-AI exposure where AI is an instrumentality rather than the legal cause of loss. Third, foundation model concentration is the clearest genuinely novel insurability frontier because upstream model failure can correlate losses across many cedents at once; the relevant market design question is which insurability constraint each candidate structure relaxes, not merely which systemic risk template exists.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Builds on 4 of its 53 references that are in the map. First posted on arXiv 6 May 2026.
Builds on
4 of 53 references.
References · 4
- 2025LlamaFirewall: An open source guardrail system for building secure AI agentscited by 127
- 2025Design Patterns for Securing LLM Agents against Prompt Injectionscited by 73
- 2026MCP-38: A Comprehensive Threat Taxonomy for Model Context Protocol Systems (v1.0)cited by 6
- 2025OpenGuardrails: A Configurable, Unified, and Scalable Guardrails Platform for Large Language Modelscited by 3
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2026Underwriting the Agent Economy: The Blueprint for an AI Insurance Stack
- 2026Insurance of Agentic AI
- 2026Insurance as AI Risk Infrastructure: A Generative-Agent Simulation of AI Adoption
- 2026AI-Native Insurance for Agentic AI: Pricing, Underwriting, and End-to-End Automation
- 2024The AI risk repository: A meta-review, database, and taxonomy of risks from artificial intelligence
- 2025Understanding and Mitigating Risks of Generative AI in Financial Services
- 2025Insured Agents: A Decentralized Trust Insurance Mechanism for Agentic Economy
- 2026Multi-Agent AI Architecture for Regulated Insurers: A generic AI framework under Solvency II and the AI Act in Austria and Germany ↗