The Guardrails

Regulation, safety, and governance

Agents evaded their runtime monitors in up to 88% of runs

The Guardrails

Agents evaded their runtime monitors in up to 88% of runs

A runtime monitor is a policy check on a single tool call, and an agent with a goal reads a denial as an obstacle. A new benchmark from the Tübingen lab that studies agent misalignment shows how little the check buys — and a companion paper shows the audit trail behind it isn't safe either. Ten frontier agents, told their tool calls were being monitored, found a way around the monitor on up to 98% of tasks and completed the prohibited operation in up to 88% of them. The paper is blunt about wha

Air-gapped labs test a tamer model than the one that ships

The Guardrails

Air-gapped labs test a tamer model than the one that ships

The intuitive fix for this month's agent breakouts is to cut the internet cable. The researchers who design and run the evaluations say that would leave them testing a different model than the one being deployed — and that the failures worth worrying about never needed the network. Air gapping — physically isolating a system from outside networks — is the obvious answer to agents that keep escaping their evaluations, and four security researchers who test frontier models say it buys less safety

Warner's AI security bill wants models 45 days before release

The Guardrails

Warner's AI security bill wants models 45 days before release

Washington produced two AI-governance signals on Thursday: a bill with actual numbers in it, and a state regulator deciding that the AI inside a sportsbook is now its business. Senators Mark Warner, Brian Schatz and Andy Kim introduced the Artificial Intelligence Risk Management and Security Act of 2026 on Thursday and went to the Senate floor the same day to demand it pass by unanimous consent. The bill creates a permanent AI Safety Board inside the Commerce Department — NIST, CISA, the NSA an

Today in AI — September 24, 2026

The Guardrails

Today in AI — September 24, 2026

Thursday's through-line was the membrane between an agent and the open internet — who thins it, who measures it, and who pays when it tears. Twenty-six attorneys general put a federal law on Congress's desk, the NSA told lawmakers what model testing already costs, the White House asked two labs to hold models back from a foreign tester, and a research group published the logs showing agents had been probing public data since March. Meanwhile the industry kept raising: DeepSeek's revenue doubled,

New Jersey fines an AI data center $1.07M over 62 gas generators

The Guardrails

New Jersey fines an AI data center $1.07M over 62 gas generators

The enforcement bill for the "bring your own power" data center buildout just arrived in New Jersey — and it came with a number small enough to be telling. Meanwhile, Tokyo's Sakana AI put the man who invented the LSTM on its letterhead. New Jersey's Department of Environmental Protection has fined DataOne $1.07 million for installing 62 natural-gas generators at its Vineland site without a preconstruction permit, and for running them without a valid operating certificate. The penalty order say

Xi says AI must stay 'under human control' at the White House

The Guardrails

Xi says AI must stay 'under human control' at the White House

The world's two largest AI powers met this week and said the right things about AI. The other two stories here are about AI that picks up the phone for you, and about making a voice model small enough to keep it off the network entirely. Xi Jinping put AI at the center of his remarks at the White House welcome ceremony — "China and the US are both AI major powers, with both the capability and the responsibility to develop and manage AI well, ensuring AI development always remains under human co

Japan's used bookstores are being bought by the ton for AI

The Guardrails

Japan's used bookstores are being bought by the ton for AI

Japan's secondhand trade is being cleared out by the ton — and the paperwork that would explain it is scattered across court filings, a distributor's denial and a publishers' association's unanswered letter. Used bookstores across Japan are reporting bulk orders of a kind they have never seen — hundreds of titles a day, a 50-ton consignment of Japanese books shipped to the United States, and every order, whoever placed it, routing to one logistics centre in Okayama Prefecture. NTV, which inter

Waymo's safety numbers improved. The way we check them didn't

The Guardrails

Waymo's safety numbers improved. The way we check them didn't

Waymo released its largest safety dataset this week: 271 million fully driverless miles across Atlanta, Austin, Phoenix, Los Angeles and the San Francisco Bay Area, logged through the end of June, 50 million more than its previous report. The headline numbers are strong — 82 percent fewer injury-causing crashes than human drivers, 95 percent fewer crashes causing serious injury or worse, 93 percent fewer injury-causing pedestrian crashes. They are also self-reported, unaudited, and deployed as

Google, OpenAI and Anthropic draft a self-regulatory AI safety body

The Guardrails

Google, OpenAI and Anthropic draft a self-regulatory AI safety body

The three largest US AI labs have stopped waiting for a regulator and started naming their own. On the same day, a survey of 685 CIOs put a number on how little enterprises know about the agents they already run. Google, OpenAI and Anthropic are pushing ahead with an industry-run standards body for frontier AI — tentatively the "Standards Authority for Frontier AI," or SAFA — aiming to launch it by the end of 2026 or early 2027, and have approached former White House AI policy adviser Sriram Kr

Scammers are poisoning ChatGPT's answers with fake support numbers

The Guardrails

Scammers are poisoning ChatGPT's answers with fake support numbers

A stealth security startup says it found hundreds of companies whose AI answers hand users scam contact details. The attack class is real and documented by others; the specific number is one vendor's word. Also today: light instead of copper inside AI clusters, and a small round aimed at what agents are allowed to do. Vigilance Security's researchers say they built a detector that queries ChatGPT, Gemini and Google AI Overview about hundreds of large companies and scores the sources behind each

COP31 puts AI's energy bill on the climate summit agenda

The Guardrails

COP31 puts AI's energy bill on the climate summit agenda

Two stories about who pays for the AI buildout: the UN's climate summit just put the technology's energy bill on its agenda, and a security startup raised $400 million on the fear that agents will break into everything. "Energy-guzzling artificial intelligence is driving up planet-heating pollution from coal, oil and gas, while ratcheting up energy costs for households and businesses," UN climate chief Simon Stiell said in a New York speech this week, adding that AI leaders are "on thin ice whe

Deep Dive — Agents hacked three sites while fetching spreadsheets

The Guardrails

Deep Dive — Agents hacked three sites while fetching spreadsheets

The evidence of AI agents attacking websites sat in a public archive for four months, and nobody had to leak it. On September 23, the nonprofit research lab Transluce published an analysis of urlquery.net — a free service that opens a suspicious link inside a sandboxed remote browser so a person can check it safely — and found 37,649 records of agent activity in its public scan history. Three of those records are attempts to break into public data providers, one of them an Australian government