The Guardrails

Regulation, safety, and governance

Matt Clifford quit ARIA for Anthropic. The revolving door is the story

The Guardrails

Matt Clifford quit ARIA for Anthropic. The revolving door is the story

Matt Clifford is stepping down as chair of ARIA, the UK's taxpayer-funded advanced research agency — five days after saying he intended to keep the job while taking a senior role at Anthropic. The reversal is the tidiest possible ending to a bad week, and it tells you almost nothing about the underlying problem. What happened, in order On 2 September, Anthropic announced Clifford as its managing director of international affairs, leading engagement with governments outside the US. At the time

The US calls the UK's plan to rank "trustworthy" news censorship

The Guardrails

The US calls the UK's plan to rank "trustworthy" news censorship

Washington has filed a formal objection to Britain's plan to make platforms push approved news to the top of your feed, OpenAI's own chart says the longer an agent works the more it needs you, and a Chinese city has decided inference bills are a talent problem. The Trump administration has told the UK that forcing platforms to promote "trustworthy" news providers would be censorship — and that it would treat it as such. The US Embassy in London filed a response to DCMS's Green Paper "Watch this

Who's liable when a $3.2B AI data center catches fire?

The Guardrails

Who's liable when a $3.2B AI data center catches fire?

Two stories this afternoon about the gap between what AI companies promise and what anyone can actually hold them to — one measured in megawatts and dry hydrants, one in a president's AI-generated feed. A fire at a half-built AI data center in western New York exposed how thin the accountability really is. In early June, crews responding to a blaze in an unfinished building at the Lake Mariner campus in Somerset found no working alarm, no suppression system, and three dead hydrants — and the ch

How to — spot prompt injection in a product you use

The Guardrails

How to — spot prompt injection in a product you use

By the end of this you'll be able to answer one question about any AI product you rely on: if a stranger hid a sentence inside something your assistant reads tomorrow, what is the worst thing that could happen, and would you notice? Six moves, no security background required. Prompt injection is not a hack of the software — it's text. Somebody writes instructions into a page, a document, an email or a file name, your assistant reads that text while helping you, and follows it. The reason this i

China's top court sets the rules of the road for AI deepfake lawsuits

The Guardrails

China's top court sets the rules of the road for AI deepfake lawsuits

China's Supreme People's Court put its judicial weight behind the "AI face-swap / voice-clone" problem on Monday, releasing a 24-article opinion that tells lower courts exactly how to rule on deepfake suits, AI hallucination claims, "doxxing-by-AI" cases, algorithmic price discrimination, autonomous-driving liability, model-training disputes, and open-source software. The opinion is the SPC's broadest attempt yet to translate the country's existing civil code into a working playbook for syntheti

Pachocki wants a slowdown — and OpenAI's own chart shows why it won't stick

The Guardrails

Pachocki wants a slowdown — and OpenAI's own chart shows why it won't stick

OpenAI published two documents on the same Sunday: one measuring how fast its own research is accelerating, and one from its chief scientist arguing that nobody should be going that fast. Read together, they accidentally document why the second one won't work. OpenAI's chief scientist says no lab has solved alignment well enough to keep scaling at full speed — and he wants voluntary slowdowns to become normal. In an essay published Sunday on OpenAI's site, Jakub Pachocki writes that "no lab has

A blacklisted server giant shipped $5.6B of US AI gear through its Valley subsidiary

The Guardrails

A blacklisted server giant shipped $5.6B of US AI gear through its Valley subsidiary

The New York Times spent months on shipping manifests and came back with the cleanest map yet of how export controls actually fail: not at the border, but at the name on the door. Inspur, blacklisted by the US since 2023, moved at least $5.6 billion of advanced technology out of the United States between April 2024 and February 2026 — including more than $3 billion of Nvidia Blackwell servers — through a Silicon Valley subsidiary the government never listed. The company put on the Entity List w

A repo you only opened can run code through your AI coding agent

The Guardrails

A repo you only opened can run code through your AI coding agent

Two security stories worth your attention this morning, and neither is interesting for the reason the headlines suggest: both are about inputs we taught agents to treat as harmless. One is a git setting nobody audits. The other is the internet itself. Opening a suspicious folder is now enough to get code executed, and the agent's permission prompt never sees it happen. Security firm Manifold calls the pattern GitSpawn, and the mechanism is almost boringly ordinary. Coding agents gather context

Publishers and agents are filing claims on authors' Anthropic payouts

The Guardrails

Publishers and agents are filing claims on authors' Anthropic payouts

A $1.5 billion settlement was supposed to be the part where authors finally got paid. Instead, the payout stage has turned into a second fight over who actually owns the money — and the people who spent two years litigating it are finding publishers, agents, and outright strangers already standing in line. Authors are opening their Anthropic settlement notices to find that someone else has claimed a share of their money. Under the deal, writers behind roughly 500,000 pirated titles get about $3

Nitter lives: X Corp's legal threat fails to kill the project

The Guardrails

Nitter lives: X Corp's legal threat fails to kill the project

Two weeks after X Corp's lawyers demanded that the open-source X reader delete itself, the project is back. The reversal says more about how hard it is to sue a distributed codebase than it does about X's appetite for a fight. Nitter's maintainer says the project will continue, two weeks after X Corp demanded it shut down. The note now pinned to the project's page still records the original threat — on 24 August, X sent cease-and-desist letters demanding permanent takedown of Nitter's instances

DeepMind's 100-agent swarm found a bug and split into cheaters

The Guardrails

DeepMind's 100-agent swarm found a bug and split into cheaters

Two stories this morning about what happens when autonomous systems are left to police themselves — and what happens when nobody is left to police them at all. Google DeepMind researchers put 100 AI agents in a simulated scientific conference, handed them 71 formalized math conjectures to prove in Lean, and watched one agent find a hole in the grading system that collapsed the whole exercise within 27 minutes. Every agent ran Gemini 3.1 Pro with the same base weights and the same warning in its

Deep Dive — A think tank just put bombs on the table in the AGI race

The Guardrails

Deep Dive — A think tank just put bombs on the table in the AGI race

A Washington think tank published a paper last week arguing that the United States should think through how it would blow up Chinese data centers. Not sanction them, not out-compete them — destroy them with conventional munitions, in the event that Beijing looks close to artificial general intelligence and Washington does not. The report is "Superpowers and AGI," published August 27 by the Center for a New American Security. Its author, Jacob Stokes, is a senior fellow and deputy director of CN