Skip to content
MoorAI
06 — defence & response

Context tree

Also written forensic

In AI incident forensics, a reconstruction of everything that entered a model's context during a session and where each piece came from — prompts, files read, pages fetched, tool results, sub-agent reports — arranged as a tree of sources leading to each action. It answers the question a flat log cannot: which input made the agent do this.

Related terms

  • Patient zero Defence & response

    The first point at which malicious content entered an AI system in an incident — the poisoned web page, file, tool description or message an agent read…

  • Context window Agents & architecture

    The text a model can take into account at once, measured in tokens: system prompt, conversation, tool definitions, file contents and tool results.

  • W3C Trace Context Frameworks & standards

    A W3C Recommendation (November 2021) that standardises the HTTP headers carrying distributed-tracing context between services: traceparent gives a…

Defence & response

The vocabulary of running controls for agents: knowing what AI is present, cutting what it may do down to what it uses, catching misuse, and reconstructing an incident afterwards. Where MoorAI implements a term, a separate line under the definition says how; the definition itself stays vendor-neutral. To check one agent's configuration against these ideas, use the free permission right-sizer.

Context tree is term 9 of 10 in this part of the glossary.

Get started free Full glossary → How we test → Community agent on GitHub ↗

This page is one entry from the agentic AI security glossary, which defines 82 terms in the same style. Where a term belongs to a published taxonomy or standard — the HackAgent attack families, the OWASP lists, AMTSO's guidelines, MITRE ATLAS, ISO/IEC 42001, the NIST AI RMF, the EU AI Act, W3C Trace Context, the MCP specification — the authoritative wording is the source document's, not ours, and specifics should be verified there. "Lethal trifecta" is Simon Willison's term. OWASP® is a trademark of the OWASP Foundation; ATT&CK® and ATLAS™ are trademarks of The MITRE Corporation. Naming a framework here is description, not a claim of certification or endorsement.