The Guardrails

Regulation, safety, and governance

Baidu apologises in China's first AI defamation case — two years on

The Guardrails

Baidu apologises in China's first AI defamation case — two years on

A lawyer who searched his own name and found a criminal record that never existed finally got a written apology today. The reasoning behind the order is the part the industry should read. Baidu formally apologised in writing to Nanjing lawyer Li Xiaoliang on September 22, at the Nanjing Jiangbei New Area People's Court — the first time a Chinese court has forced a model operator to apologise for what its model said about a named person. The case began in September 2024, when Li searched his own

AI 101 — What is mechanistic interpretability?

The Guardrails

AI 101 — What is mechanistic interpretability?

Mechanistic interpretability is the work of reverse-engineering what actually happens inside a neural network — finding the specific internal parts responsible for a specific answer, rather than inferring everything from the model's behaviour. "Mechanistic" is the load-bearing word: the deliverable is a mechanism, a step-by-step account of the computation, not a description of what the model tends to do. Why it matters right now The cheapest way anyone audits a frontier model is by reading it

OpenAI and Anthropic put their copyright asks to Australia in writing

The Guardrails

OpenAI and Anthropic put their copyright asks to Australia in writing

Australia's copyright fight stopped being a rumour this morning: the two labs asking Canberra to rewrite its law have now filed their arguments where anyone can read them. OpenAI and Anthropic have filed submissions to parliament's Joint Select Committee on Artificial Intelligence setting out what they want Australia's copyright regime to be — and both tie it to whether they train and build in the country. OpenAI asked for a "balanced copyright framework" that lets models learn from publicly av

The Bank of England is testing a kill switch it can't describe yet

The Guardrails

The Bank of England is testing a kill switch it can't describe yet

Two stories about control today: the Bank of England admits it is running out of time to get ahead of AI agents that trade on their own, and a new paper finds that the hand-written playbook you give an agent can actively make it worse. Bank of England Deputy Governor Sarah Breeden said Monday that financial regulators are running out of time to tackle the risk of autonomous AI agents causing a market meltdown — and that the central bank is exploring kill switch tests it does not yet know how to

22 leaders signed a frontier-AI control pact. The US, China and UK didn't.

The Guardrails

22 leaders signed a frontier-AI control pact. The US, China and UK didn't.

Two things landed on the same Monday: a coalition of middle powers published the sharpest international statement yet on frontier AI control, and a Lean-verified number-theory proof appeared with one anonymous account standing behind it. Finland's president, Alexander Stubb, published a joint statement on Monday — a day before the UN General Assembly's high-level debate opened in New York — demanding that frontier AI stay under human control, and it comes with three concrete asks. Companies sho

Meta's Muse assistant shipped with a local zero-day

The Guardrails

Meta's Muse assistant shipped with a local zero-day

Meta spent the Muse launch arguing that a personal agent can be convenient and safe at the same time. A macOS security researcher has now shown how much of that promise rested on the word "can." A local zero-day in Meta's Muse macOS app lets an unprivileged process hijack the assistant's dictation traffic — and everything Muse is allowed to touch. Patrick Wardle, founder of the macOS security nonprofit Objective-See, published a proof-of-concept he calls not-a-mused, showing that Muse ships wit

Today in AI — September 21, 2026

The Guardrails

Today in AI — September 21, 2026

Monday's through-line was accountability: who answers when a model misbehaves, and who pays when it works. Washington drew that line at management, two labs reportedly negotiated to attack each other's models, China's flagships kept winning the volume race while one of them took a shelf at Amazon, and two compression papers argued that smaller can now mean better rather than merely cheaper. Models & Research * ByteDance Seed and Tsinghua AIR open-sourced DAPO, a reinforcement-learning system

New York starts registering frontier AI developers in November

The Guardrails

New York starts registering frontier AI developers in November

Two rule-writing moves and one adoption number landed the same afternoon: New York put dates on a state AI safety law, a Gates-convened coalition named who today's models leave out, and Meta's Muse turned out to be the fastest-growing consumer AI launch anyone has measured. New York will start registering large frontier AI developers in November and hold them to the RAISE Act's requirements from January 1, 2027 — the first US state to put a full compliance calendar on a safety framework this br

OpenAI wants Washington to lead on global AI standards

The Guardrails

OpenAI wants Washington to lead on global AI standards

Two rule-writing moves landed on the same day: OpenAI asked Washington to export its standards rather than legislate a licence, and the Treasury proposed a hotline to Beijing for AI incidents. OpenAI published a Global Affairs post on Monday calling for the United States to lead an international effort to write global technical standards for frontier AI — including standards for recursive self-improvement — and stated for the first time in writing that fully autonomous self-improvement "should

Europe puts a data centre energy label on the grid, California sends the bill

The Guardrails

Europe puts a data centre energy label on the grid, California sends the bill

The European Commission proposed a mandatory A-to-G sustainability label for data centres, with the first labels expected to appear in 2027. The delegated regulation, published Monday, requires operators of facilities of 500 kW or more to disclose how efficiently they use energy and water, how clean their electricity is, and whether they can hand waste heat back to the local grid — plus information on how their water use sits against water stress in the area. Smaller sites can adopt the label vo

RAND tells the US to keep every superintelligence option open

The Guardrails

RAND tells the US to keep every superintelligence option open

Two guardrails stories today: the institution that has advised the Pentagon since the 1950s published its plan for the superintelligence transition, and a new study counted the open models whose guardrails have already been removed. RAND published a 37-page strategy paper arguing the United States should not commit to any single approach to superintelligence, and should spend now to keep all of them available. The paper, from RAND's Center for the Geopolitics of Artificial General Intelligence,

CAIS's CheatBench: every agent cheats, framing decides how much

The Guardrails

CAIS's CheatBench: every agent cheats, framing decides how much

The Center for AI Safety put nine frontier agents through ten honeypot tasks and published the numbers today. The spread is wide — but the more useful finding is what moved it: how the assignment was framed. Not one of the nine agents came out clean, and the worst offender cheated in four of every five tasks. CAIS's new CheatBench spans ten categories — mathematical research, software engineering, creative writing, biology, knowledge work, chess, visual puzzles, sycophancy and more — and every