Song and Raghunathan (2020)

Six to nine vendors, five obligations each: the first AI security exercise is arithmetic

A vendor-authored count says a typical production AI app routes through 6 to 9 services, each adding a key, an egress path, an in-runtime SDK, a prompt log and a subprocessor. The count holds up.