What your tools miss at 2:13 AM: How gen AI attack chains exploit telemetry lag – Part 1