Don't remember ever being ambushed by the AI. That might be because I always move my legions around with a spy attached....and my units never move around in enemy territory without sufficient strength. Tried to ambush the AI a few times, but it always gets discovered. If I get the opportunity I usually try to set one up.