In the generative AI context, an attack conducted by the primary user of the system through query access (e.g., as opposed to through resource control).
Sources:
NIST AI 100-2e2025