Every mature engineering team has a Security Incident Response Plan, refined over years of postmortems. But when the incident involves AI — a toxic hallucination with real consequences, a discriminatory algorithmic output, PII leaking out of a RAG pipeline — the old playbook stops working. There's no CVE to patch, no clean indicator of compromise. What you get instead is a probabilistic failure paired with legal escalation happening in real time. One hallucination, a thousand claims: that's the shape of the risk nobody budgeted for.