CHATBOT VS LONG-HORIZON AGENT
Risk grows across a trajectory, not only in one response
Chat interaction
prompt → answer
few actions, short feedback loop
Long-horizon trajectory
observe → act → retry
adapt → escalate → persist
many opportunities to find a weak boundary