Rob T. Lee and Indre Altman compared the [un]prompted AI Security Practitioner Conference CFP rounds: 469 submissions in March and 490 in October. Harness-layer attack proposals rose from 12 to 33. 94 submissions used the word 'harness'. 71% of the October pool is agent-native (harness, MCP and skill supply chain, agent identity, prompt injection, agentic-browser attacks). Only 12% carry production evidence. Caveat: this is a CFP census, not incident data. The full report is linked from the conference site; we've only verified the figures quoted in the author's post.