A data instance purposefully perturbed to induce misclassification by a deployed model. Relevant to security testing, autonomous vehicle litigation, and content moderation failures.
See: Adversarial attack; Data poisoning; Evaluation (evals); Robustness