Root Access Everywhere: Legacy Hardware, Biological Switches, and Recursive AI Loops Share the Same Control Problem

The Fire Ant Cisco IOS XR malware campaign, the Switch Bioworks conditional ammonia-release microbes in corn root microbiomes, and the arXiv:2609.00137 R_AI paper on self-sustaining capability loops are three separate beats that together describe one mechanism: external agents gaining persistent, conditional control at the root layer of a system (router authentication, plant microbiome, model improvement cycle) while human oversight remains slow and case-by-case. The same week the FSB flagged frontier AI as an immediate finance systemic risk and Sevii released autonomous remediation modules, the UK capped farm inheritance relief and the US froze hydrogen-hub funding—moves that reduce the capital available to replace the exact legacy hardware (WAGO PLCs, SuperBox ADB ports, Cisco TACACS servers) now being targeted by AI-assisted exploits. The hidden link is that economic retrenchment is locking critical infrastructure into the very legacy states that AI can now rapidly compromise or repurpose, whether the payload is espionage, nitrogen fixation, or recursive self-improvement.