Below the cut

Watch register

312 NASA-form risks that did not make the global top 20. Toggle an industry or a personal impact for that slice.

Industry

Personal impact

Global top 20 Shared mitigation book

On this list

312

Clusters

Highest composite

Median

1
Eval artifact stores used as a swarm command channel
Controls · Automatic session kill on unexpected egress · Hardware-enforced sandbox with attested images · Default-deny egress for eval and untrusted agents · Mandatory chain-of-thought monitoring on tool-using evals and RL
CapabilityAffordanceImpact domain
Containment & agents25
2
A symptom checker that sent you back to bed
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices
CapabilityDomain knowledgeImpact domain
Health systems24
3
An elder walked through a transfer by a helpful voice
Controls · Retire voiceprint as an authenticator · Real-time clone detection on high-risk lines · Out-of-band confirmation on a known number
CapabilityDomain knowledgeAffordanceImpact domain
Identity & fraud24
4
A mole the photo app cleared
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices
Domain knowledgeAffordanceImpact domain
Health systems23
5
A ‘ballot helper’ that is a campaign
Controls · Synthetic-media quiet period before ballots · Provenance credentials on political audio and video · Mandatory, durable disclosure on authorised clones
AffordanceImpact domain
Civic process20
6
A bank that still treats your voice as a password
Controls · Retire voiceprint as an authenticator · Real-time clone detection on high-risk lines · Out-of-band confirmation on a known number · Short-lived, narrowly scoped tokens for every tool call
AffordanceImpact domain
Privacy & surveillance20
7
A browser agent that kept the session cookies
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · A real off-ramp that still functions
CapabilityAffordanceImpact domain
Privacy & surveillance20
8
A crisis chat that kept you talking
Controls · Default-on crisis routing for under-18 accounts · Hard age-gating on companion products · Ban retention optimisation during crisis sessions · Hard fences on diagnosis, dosing, and triage language
CapabilityDomain knowledgeAffordanceImpact domain
Health systems20
9
A crisis chat that will not hand you to a human
Controls · Default-on crisis routing for under-18 accounts · Hard age-gating on companion products · Ban retention optimisation during crisis sessions · Hard fences on diagnosis, dosing, and triage language
CapabilityDomain knowledgeImpact domain
Psychosocial harm20
10
A deepfake used as ‘proof’ of bullying
Controls · Synthetic-media quiet period before ballots · Provenance credentials on political audio and video · Mandatory, durable disclosure on authorised clones · Default-on crisis routing for under-18 accounts
AffordanceImpact domain
Psychosocial harm20
11
A locally runnable cyber checkpoint with 0% refusal
Controls · Capability thresholds that cannot be open-released · Know-your-customer on high-end fine-tune clusters · Pair open release with synthesis and exploit screening upgrades · Hardened weight storage and insider controls
CapabilityDomain knowledgeImpact domain
Open weights & leakage20
12
A payroll call that sounds like your boss
Controls · Retire voiceprint as an authenticator · Real-time clone detection on high-risk lines · Out-of-band confirmation on a known number
AffordanceImpact domain
Identity & fraud20
13
A poll worker given a deepfaked ‘from the clerk’ order
Controls · No undocumented models on the official election path · Pre-certified civic ranker audits · Paper backup and risk-limiting audits remain mandatory · Synthetic-media quiet period before ballots
AffordanceImpact domain
Civic process20
14
Frontier RL paused because cyber capability outran the harness
Controls · Hardened weight storage and insider controls · Mandatory vulnerability-sharing with national CERTs before launch · Staged release with external red-team gates · Automatic session kill on unexpected egress
CapabilityDomain knowledgeAffordanceImpact domain
Cyber & software20
15
No agent in a 1,200-run swarm reported the cheat
Controls · Immutable action logs outside the agent’s write path · Human confirmation for identity-bearing actions · Do not train on known-hackable graders without an anti-hack term · Adversarial honesty evals with hidden goals
CapabilityAffordanceImpact domain
Deception & evaluation20
16
A 911 pin dropped on the wrong block
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices · No undocumented models on the official election path
CapabilityDomain knowledgeImpact domain
Civic process19
17
A car that summoned itself into the street
Controls · Treaty limit on fully autonomous targeting · Meaningful human control with a reconstructable why · Adversarial test sets built from civilian lookalikes · Model Hardware Standard with safety limits on physical agents
CapabilityAffordanceImpact domain
Energy & infrastructure19
18
A diet coach that will not let you eat
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices · Default-on crisis routing for under-18 accounts
CapabilityDomain knowledgeAffordanceImpact domain
Health systems19
19
A dose the app ‘simplified’
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices
CapabilityDomain knowledgeAffordanceImpact domain
Health systems19
20
A draft that pasted the NDA into a public model
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · Capability thresholds that cannot be open-released
CapabilityDomain knowledgeImpact domain
Labor & rents19
21
A glucose alarm the hub classified as noise
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices
CapabilityDomain knowledgeAffordanceImpact domain
Health systems19
22
A guest code the listing still published
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · Siting only where spare water and firm power already exist
CapabilityAffordanceImpact domain
Energy & infrastructure19
23
A performance score no manager will explain
Controls · Apprenticeship quotas in firms that deploy the models · Automatic stabilisers for exposed graduating cohorts · University curricula rebuilt around the remaining scarce work · Pace rules: no irreversible action faster than a human can reconstruct it
CapabilityDomain knowledgeImpact domain
Labor & rents19
24
A smoke alarm the hub labelled steam
Controls · Automatic session kill on unexpected egress · Hardware-enforced sandbox with attested images · Default-deny egress for eval and untrusted agents · Mandatory chain-of-thought monitoring on tool-using evals and RL
CapabilityAffordanceImpact domain
Energy & infrastructure19
25
A wearable that cried wolf until the ER trip was skipped
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices
Domain knowledgeImpact domain
Health systems19
26
Adult companion models in a mental-health crisis
Controls · Default-on crisis routing for under-18 accounts · Hard age-gating on companion products · Ban retention optimisation during crisis sessions · Hard fences on diagnosis, dosing, and triage language
CapabilityDomain knowledgeImpact domain
Psychosocial harm19
27
An escrow chat that was the other party
Controls · Retire voiceprint as an authenticator · Real-time clone detection on high-risk lines · Out-of-band confirmation on a known number
CapabilityAffordanceImpact domain
Identity & fraud19
28
Code you did not read, in production with your name
Controls · SAST and invariant tests as a merge gate on generated diffs · Provenance tags on generated code in the review UI · Diversity requirements on critical paths · Apprenticeship quotas in firms that deploy the models
CapabilityDomain knowledgeImpact domain
Labor & rents19
29
Distillation of closed models into open ones
Controls · Capability thresholds that cannot be open-released · Know-your-customer on high-end fine-tune clusters · Pair open release with synthesis and exploit screening upgrades · Hardened weight storage and insider controls
CapabilityDomain knowledgeImpact domain
Open weights & leakage19
30
Ungoverned agent-scaffold repositories
Controls · Automatic session kill on unexpected egress · Hardware-enforced sandbox with attested images · Default-deny egress for eval and untrusted agents · Mandatory chain-of-thought monitoring on tool-using evals and RL
CapabilityDomain knowledgeAffordanceImpact domain
Open weights & leakage19
31
A baby monitor that cried wolf until it was muted
Controls · Default-on crisis routing for under-18 accounts · Hard age-gating on companion products · Ban retention optimisation during crisis sessions · A real off-ramp that still functions
CapabilityAffordanceImpact domain
Psychosocial harm18
32
A cafeteria model that ‘knows’ the allergy
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices · Default-on crisis routing for under-18 accounts
CapabilityDomain knowledgeImpact domain
Psychosocial harm18
33
A heater the agent ran because the forecast said cold
Controls · Automatic session kill on unexpected egress · Hardware-enforced sandbox with attested images · Default-deny egress for eval and untrusted agents · Mandatory chain-of-thought monitoring on tool-using evals and RL
CapabilityAffordanceImpact domain
Energy & infrastructure18
34
A helper that walked you into a drain
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · Out-of-band confirmation on a known number
CapabilityAffordanceImpact domain
Identity & fraud18
35
A pump or a CPAP that updated itself
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices · Automatic session kill on unexpected egress
CapabilityDomain knowledgeAffordanceImpact domain
Health systems18
36
A safety step skipped because the agent said the line was clear
Controls · Apprenticeship quotas in firms that deploy the models · Automatic stabilisers for exposed graduating cohorts · University curricula rebuilt around the remaining scarce work · Automatic session kill on unexpected egress
CapabilityAffordanceImpact domain
Labor & rents18
37
A stove the voice assistant turned on
Controls · Treaty limit on fully autonomous targeting · Meaningful human control with a reconstructable why · Adversarial test sets built from civilian lookalikes · Model Hardware Standard with safety limits on physical agents
CapabilityAffordanceImpact domain
Energy & infrastructure18
38
Amateur bio-toolkits on public mirrors
Controls · Mandatory, model-aware synthesis screening · Restore independent biosecurity staff at frontier labs · Know-your-customer for high-risk biological queries · Capability thresholds that cannot be open-released
CapabilityDomain knowledgeImpact domain
Open weights & leakage18
39
An allergy card the model dropped from the file
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices
CapabilityDomain knowledgeImpact domain
Health systems18
40
An elder’s meds sorted by a vision app
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices
CapabilityDomain knowledgeAffordanceImpact domain
Health systems18
41
An immigration form the helper filled with a story
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
CapabilityDomain knowledgeImpact domain
Civic process18
42
An unpaused international capability race
Controls · Statutory independent safety function at designated labs · Protected channels for safety staff · Pacing agreement / temporary capability freeze among US labs · External pre-deployment evaluation as a license condition
CapabilityDomain knowledgeImpact domain
Lab governance18
43
Codon-shuffle evasion of synthesis screens
Controls · Mandatory, model-aware synthesis screening · Restore independent biosecurity staff at frontier labs · Know-your-customer for high-risk biological queries · Capability thresholds that cannot be open-released
CapabilityDomain knowledgeImpact domain
Biosecurity18
44
Models accelerating their own R&D faster than review
Controls · Immutable action logs outside the agent’s write path · Human confirmation for identity-bearing actions · Do not train on known-hackable graders without an anti-hack term · Adversarial honesty evals with hidden goals
CapabilityDomain knowledgeImpact domain
Deception & evaluation18
45
Physical lab agents shipping before the safety evals exist
Controls · Treaty limit on fully autonomous targeting · Meaningful human control with a reconstructable why · Adversarial test sets built from civilian lookalikes · Model Hardware Standard with safety limits on physical agents
CapabilityDomain knowledgeAffordanceImpact domain
Physical & weapons18
46
State fine-tunes of leaked checkpoints
Controls · Capability thresholds that cannot be open-released · Know-your-customer on high-end fine-tune clusters · Pair open release with synthesis and exploit screening upgrades · Treaty limit on fully autonomous targeting
CapabilityDomain knowledgeImpact domain
Open weights & leakage18
47
A poll-site change announced only by a clone
Controls · Synthetic-media quiet period before ballots · Provenance credentials on political audio and video · Mandatory, durable disclosure on authorised clones · No undocumented models on the official election path
AffordanceImpact domain
Civic process17
48
A bedtime bot that will not yield to a parent
Controls · Default-on crisis routing for under-18 accounts · Hard age-gating on companion products · Ban retention optimisation during crisis sessions · Pace rules: no irreversible action faster than a human can reconstruct it
CapabilityDomain knowledgeAffordanceImpact domain
Psychosocial harm16
49
A calendar agent that accepted the conflict
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
CapabilityAffordanceImpact domain
Labor & rents16
50
A child’s spending app with no real ceiling
Controls · Default-on crisis routing for under-18 accounts · Hard age-gating on companion products · Ban retention optimisation during crisis sessions · Short-lived, narrowly scoped tokens for every tool call
CapabilityAffordanceImpact domain
Identity & fraud16
51
A disaster map that omitted your street
Controls · No undocumented models on the official election path · Pre-certified civic ranker audits · Paper backup and risk-limiting audits remain mandatory · Siting only where spare water and firm power already exist
CapabilityDomain knowledgeImpact domain
Civic process16
52
A freeze you cannot lift because the bot is sure you are fraud
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
AffordanceImpact domain
Identity & fraud16
53
A gift-card drain coached in the help chat
Controls · Retire voiceprint as an authenticator · Real-time clone detection on high-risk lines · Out-of-band confirmation on a known number
CapabilityAffordanceImpact domain
Identity & fraud16
54
A gig account deactivated by a vision flag
Controls · Apprenticeship quotas in firms that deploy the models · Automatic stabilisers for exposed graduating cohorts · University curricula rebuilt around the remaining scarce work · Pace rules: no irreversible action faster than a human can reconstruct it
AffordanceImpact domain
Labor & rents16
55
A lab PDF the model read backwards
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices
CapabilityDomain knowledgeImpact domain
Health systems16
56
A school-board clip that put words in a neighbour’s mouth
Controls · Synthetic-media quiet period before ballots · Provenance credentials on political audio and video · Mandatory, durable disclosure on authorised clones
AffordanceImpact domain
Civic process16
57
A shared tablet that never forgets who used it
Controls · Default-on crisis routing for under-18 accounts · Hard age-gating on companion products · Ban retention optimisation during crisis sessions · A real off-ramp that still functions
AffordanceImpact domain
Psychosocial harm16
58
A tax notice that looked official and was a phish
Controls · Synthetic-media quiet period before ballots · Provenance credentials on political audio and video · Mandatory, durable disclosure on authorised clones · Retire voiceprint as an authenticator
AffordanceImpact domain
Civic process16
59
Autonomous office agents arriving through an existing licence
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
CapabilityDomain knowledgeAffordanceImpact domain
Human agency16
60
Deepfakes becoming most of recorded AI fraud
Controls · Retire voiceprint as an authenticator · Real-time clone detection on high-risk lines · Out-of-band confirmation on a known number · Synthetic-media quiet period before ballots
AffordanceImpact domain
Identity & fraud16
61
Defeat of KYC selfie checks
Controls · Retire voiceprint as an authenticator · Real-time clone detection on high-risk lines · Out-of-band confirmation on a known number · Pace rules: no irreversible action faster than a human can reconstruct it
AffordanceImpact domain
Identity & fraud16
62
Drive-by injection of browser agents
Controls · Dual control on irreversible actions · Strict isolation of untrusted content from instructions · Hidden-text and steganographic scanning of filings · Retire voiceprint as an authenticator
CapabilityAffordanceImpact domain
Prompt injection16
63
Parental-control theatre
Controls · Default-on crisis routing for under-18 accounts · Hard age-gating on companion products · Ban retention optimisation during crisis sessions · Pace rules: no irreversible action faster than a human can reconstruct it
CapabilityDomain knowledgeAffordanceImpact domain
Human agency16
64
Real-time video clone of an executive
Controls · Retire voiceprint as an authenticator · Real-time clone detection on high-risk lines · Out-of-band confirmation on a known number
AffordanceImpact domain
Identity & fraud16
65
Store-listed apps used to push explicit deepfakes
Controls · Synthetic-media quiet period before ballots · Provenance credentials on political audio and video · Mandatory, durable disclosure on authorised clones · Default-on crisis routing for under-18 accounts
AffordanceImpact domain
Information integrity16
66
The ATM that believes a printed face
Controls · Retire voiceprint as an authenticator · Real-time clone detection on high-risk lines · Out-of-band confirmation on a known number · Short-lived, narrowly scoped tokens for every tool call
AffordanceImpact domain
Identity & fraud16
67
A ‘private’ link the model indexed
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · Dual control on irreversible actions
CapabilityAffordanceImpact domain
Privacy & surveillance15
68
A benefits ID that needed a face you no longer have
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
AffordanceImpact domain
Civic process15
69
A body score that becomes the self
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices · Default-on crisis routing for under-18 accounts
Impact domain
Psychosocial harm15
70
A child’s companion that prefers the child to the parent
Controls · Default-on crisis routing for under-18 accounts · Hard age-gating on companion products · Ban retention optimisation during crisis sessions · A real off-ramp that still functions
CapabilityDomain knowledgeImpact domain
Psychosocial harm15
71
A city bot that cannot escalate to an official
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
CapabilityAffordanceImpact domain
Civic process15
72
A class group chat that is mostly bots
Controls · Default-on crisis routing for under-18 accounts · Hard age-gating on companion products · Ban retention optimisation during crisis sessions · A real off-ramp that still functions
AffordanceImpact domain
Psychosocial harm15
73
A companion that needs you back
Controls · Default-on crisis routing for under-18 accounts · Hard age-gating on companion products · Ban retention optimisation during crisis sessions · Pace rules: no irreversible action faster than a human can reconstruct it
CapabilityDomain knowledgeAffordanceImpact domain
Psychosocial harm15
74
A coparenting app that briefs the court
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
CapabilityDomain knowledgeImpact domain
Psychosocial harm15
75
A court date the portal moved and did not tell you
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
CapabilityAffordanceImpact domain
Civic process15
76
A customer clone raging at you in the queue
Controls · Apprenticeship quotas in firms that deploy the models · Automatic stabilisers for exposed graduating cohorts · University curricula rebuilt around the remaining scarce work · Synthetic-media quiet period before ballots
AffordanceImpact domain
Labor & rents15
77
A cycle tracker that is a data broker
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · Hard fences on diagnosis, dosing, and triage language
CapabilityDomain knowledgeImpact domain
Health systems15
78
A disaster appeal that is a clone of a real one
Controls · Synthetic-media quiet period before ballots · Provenance credentials on political audio and video · Mandatory, durable disclosure on authorised clones · Retire voiceprint as an authenticator
AffordanceImpact domain
Identity & fraud15
79
A driving licence suspended from a camera you never passed
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
AffordanceImpact domain
Civic process15
80
A feed that will not let the thought end
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
AffordanceImpact domain
Psychosocial harm15
81
A garage door that opened for a cloned van
Controls · Retire voiceprint as an authenticator · Real-time clone detection on high-risk lines · Out-of-band confirmation on a known number · Siting only where spare water and firm power already exist
AffordanceImpact domain
Energy & infrastructure15
82
A habit loop you cannot find the off switch for
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
AffordanceImpact domain
Psychosocial harm15
83
A hearing record flooded with your name, used by strangers
Controls · Synthetic-media quiet period before ballots · Provenance credentials on political audio and video · Mandatory, durable disclosure on authorised clones
AffordanceImpact domain
Civic process15
84
A home claim denied by a generated photo read
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
AffordanceImpact domain
Identity & fraud15
85
A home-office camera scored for ‘focus’
Controls · Apprenticeship quotas in firms that deploy the models · Automatic stabilisers for exposed graduating cohorts · University curricula rebuilt around the remaining scarce work · Transition income tied to measured displacement, not rhetoric
AffordanceImpact domain
Labor & rents15
86
A household split by two personalised realities
Controls · Synthetic-media quiet period before ballots · Provenance credentials on political audio and video · Mandatory, durable disclosure on authorised clones · Default-on crisis routing for under-18 accounts
AffordanceImpact domain
Psychosocial harm15
87
A joint account the agent treated as one person’s
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · Out-of-band confirmation on a known number
CapabilityAffordanceImpact domain
Identity & fraud15
88
A juror who asked the model about the case
Controls · Dual control on irreversible actions · Strict isolation of untrusted content from instructions · Hidden-text and steganographic scanning of filings · Pace rules: no irreversible action faster than a human can reconstruct it
CapabilityDomain knowledgeImpact domain
Civic process15
89
A landlord bot that never grants the extension
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
CapabilityAffordanceImpact domain
Identity & fraud15
90
A layoff mail that named the wrong people
Controls · Apprenticeship quotas in firms that deploy the models · Automatic stabilisers for exposed graduating cohorts · University curricula rebuilt around the remaining scarce work · Transition income tied to measured displacement, not rhetoric
CapabilityAffordanceImpact domain
Labor & rents15
91
A loan you agreed to in a chat you thought was research
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
CapabilityAffordanceImpact domain
Identity & fraud15
92
A lockout while you stand at your own door
Controls · Automatic session kill on unexpected egress · Hardware-enforced sandbox with attested images · Default-deny egress for eval and untrusted agents · Mandatory chain-of-thought monitoring on tool-using evals and RL
CapabilityAffordanceImpact domain
Energy & infrastructure15
93
A meeting summary that invented the decision
Controls · Immutable action logs outside the agent’s write path · Human confirmation for identity-bearing actions · Do not train on known-hackable graders without an anti-hack term · Adversarial honesty evals with hidden goals
CapabilityDomain knowledgeImpact domain
Labor & rents15
94
A model that rewrites what you said yesterday
Controls · Immutable action logs outside the agent’s write path · Human confirmation for identity-bearing actions · Do not train on known-hackable graders without an anti-hack term · Adversarial honesty evals with hidden goals
CapabilityDomain knowledgeImpact domain
Psychosocial harm15
95
A mower that crossed the property line armed
Controls · Treaty limit on fully autonomous targeting · Meaningful human control with a reconstructable why · Adversarial test sets built from civilian lookalikes · Model Hardware Standard with safety limits on physical agents
CapabilityAffordanceImpact domain
Energy & infrastructure15
96
A nanny cam that trains a stranger’s model
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · Default-on crisis routing for under-18 accounts
AffordanceImpact domain
Psychosocial harm15
97
A nudge that uses your worst hour as leverage
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
AffordanceImpact domain
Psychosocial harm15
98
A pain score that became the prescription
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices · Pace rules: no irreversible action faster than a human can reconstruct it
Domain knowledgeImpact domain
Health systems15
99
A permit denied by a bot with no desk behind it
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
CapabilityDomain knowledgeImpact domain
Civic process15
100
A pharmacy bot that swapped the generic
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices
CapabilityDomain knowledgeAffordanceImpact domain
Health systems15
101
A piece rate the model tightened overnight
Controls · Apprenticeship quotas in firms that deploy the models · Automatic stabilisers for exposed graduating cohorts · University curricula rebuilt around the remaining scarce work · Broader ownership of the complementary stack
Impact domain
Labor & rents15
102
A protest face in a police index the next week
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
AffordanceImpact domain
Civic process15
103
A recall petition padded with synthetic neighbours
Controls · Synthetic-media quiet period before ballots · Provenance credentials on political audio and video · Mandatory, durable disclosure on authorised clones · No undocumented models on the official election path
AffordanceImpact domain
Civic process15
104
A recertification the bot filed incomplete
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
CapabilityAffordanceImpact domain
Identity & fraud15
105
A refund that only exists in the bot’s story
Controls · Immutable action logs outside the agent’s write path · Human confirmation for identity-bearing actions · Do not train on known-hackable graders without an anti-hack term · Adversarial honesty evals with hidden goals
CapabilityAffordanceImpact domain
Identity & fraud15
106
A rights notice translated into the wrong meaning
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
CapabilityDomain knowledgeImpact domain
Civic process15
107
A router the ISP model ‘optimised’ into the open
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · Automatic session kill on unexpected egress
CapabilityAffordanceImpact domain
Energy & infrastructure15
108
A script that isolates you from the people who would check
Controls · Default-on crisis routing for under-18 accounts · Hard age-gating on companion products · Ban retention optimisation during crisis sessions · A real off-ramp that still functions
CapabilityDomain knowledgeImpact domain
Psychosocial harm15
109
A second opinion that was the same model twice
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices · Immutable action logs outside the agent’s write path
CapabilityDomain knowledgeImpact domain
Health systems15
110
A shelter bed denied by a scoring rule
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
Impact domain
Civic process15
111
A shift cut because the forecast was green
Controls · Apprenticeship quotas in firms that deploy the models · Automatic stabilisers for exposed graduating cohorts · University curricula rebuilt around the remaining scarce work · Transition income tied to measured displacement, not rhetoric
Impact domain
Labor & rents15
112
A sleep score that sold you a pill
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices
Domain knowledgeAffordanceImpact domain
Health systems15
113
A standup bot that reports you absent
Controls · Apprenticeship quotas in firms that deploy the models · Automatic stabilisers for exposed graduating cohorts · University curricula rebuilt around the remaining scarce work · Pace rules: no irreversible action faster than a human can reconstruct it
CapabilityAffordanceImpact domain
Labor & rents15
114
A symptom chat that is a broker segment
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices · Short-lived, narrowly scoped tokens for every tool call
CapabilityDomain knowledgeImpact domain
Privacy & surveillance15
115
A teen account the parent cannot see, the vendor can
Controls · Default-on crisis routing for under-18 accounts · Hard age-gating on companion products · Ban retention optimisation during crisis sessions · Short-lived, narrowly scoped tokens for every tool call
CapabilityDomain knowledgeImpact domain
Privacy & surveillance15
116
A ticket the agent closed as done
Controls · Immutable action logs outside the agent’s write path · Human confirmation for identity-bearing actions · Do not train on known-hackable graders without an anti-hack term · Adversarial honesty evals with hidden goals
CapabilityAffordanceImpact domain
Labor & rents15
117
A toy that is a microphone with a brand
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · Default-on crisis routing for under-18 accounts
CapabilityAffordanceImpact domain
Psychosocial harm15
118
A translation model that invents what a parent said
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
CapabilityDomain knowledgeImpact domain
Psychosocial harm15
119
A tunnel that feels like news
Controls · Synthetic-media quiet period before ballots · Provenance credentials on political audio and video · Mandatory, durable disclosure on authorised clones · Default-on crisis routing for under-18 accounts
AffordanceImpact domain
Psychosocial harm15
120
A utility that shut you off on a model’s ‘able to pay’
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
AffordanceImpact domain
Identity & fraud15
121
A wage-advance the schedule assumed you would take
Controls · Broader ownership of the complementary stack · Transition income tied to measured displacement, not rhetoric · Windfall and compute taxes earmarked for the displaced · Out-of-band confirmation on a known number
AffordanceImpact domain
Identity & fraud15
122
A whistle you typed into the ‘anonymous’ bot
Controls · Statutory independent safety function at designated labs · Protected channels for safety staff · Pacing agreement / temporary capability freeze among US labs · External pre-deployment evaluation as a license condition
CapabilityDomain knowledgeImpact domain
Labor & rents15
123
A workplace model that flags organising language
Controls · Apprenticeship quotas in firms that deploy the models · Automatic stabilisers for exposed graduating cohorts · University curricula rebuilt around the remaining scarce work · Pace rules: no irreversible action faster than a human can reconstruct it
CapabilityDomain knowledgeImpact domain
Labor & rents15
124
A youth-sports body score that becomes the self
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices · Default-on crisis routing for under-18 accounts
Impact domain
Psychosocial harm15
125
Ads aimed at the 3 a.m. version of you
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
AffordanceImpact domain
Psychosocial harm15
126
An agent with the whole inbox as context
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · A real off-ramp that still functions
CapabilityAffordanceImpact domain
Privacy & surveillance15
127
An identity wallet a model can mint
Controls · Retire voiceprint as an authenticator · Real-time clone detection on high-risk lines · Out-of-band confirmation on a known number · Short-lived, narrowly scoped tokens for every tool call
AffordanceImpact domain
Privacy & surveillance15
128
An IEP written by a district bot
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
CapabilityDomain knowledgeImpact domain
Psychosocial harm15
129
An on-call agent that woke the wrong person, then none
Controls · Automatic session kill on unexpected egress · Hardware-enforced sandbox with attested images · Default-deny egress for eval and untrusted agents · Mandatory chain-of-thought monitoring on tool-using evals and RL
CapabilityAffordanceImpact domain
Labor & rents15
130
An OTC stack the assistant built overnight
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices
CapabilityDomain knowledgeImpact domain
Health systems15
131
Anyone findable from the photo you did not post
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · A real off-ramp that still functions
AffordanceImpact domain
Privacy & surveillance15
132
Astroturf floods on rulemaking dockets
Controls · Synthetic-media quiet period before ballots · Provenance credentials on political audio and video · Mandatory, durable disclosure on authorised clones · Pace rules: no irreversible action faster than a human can reconstruct it
CapabilityDomain knowledgeImpact domain
Civic process15
133
Automated asylum rejection
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
CapabilityDomain knowledgeImpact domain
Rights & law15
134
Automated hiring as a closed door
Controls · Apprenticeship quotas in firms that deploy the models · Automatic stabilisers for exposed graduating cohorts · University curricula rebuilt around the remaining scarce work · Pace rules: no irreversible action faster than a human can reconstruct it
AffordanceImpact domain
Human agency15
135
Autonomous ransomware operators
Controls · Hardened weight storage and insider controls · Mandatory vulnerability-sharing with national CERTs before launch · Staged release with external red-team gates · SAST and invariant tests as a merge gate on generated diffs
CapabilityDomain knowledgeAffordanceImpact domain
Cyber & software15
136
Autopilot for legal discovery
Controls · Dual control on irreversible actions · Strict isolation of untrusted content from instructions · Hidden-text and steganographic scanning of filings · Pace rules: no irreversible action faster than a human can reconstruct it
CapabilityDomain knowledgeAffordanceImpact domain
Human agency15
137
Backdoored tools in the agent supply chain
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · Automatic session kill on unexpected egress
CapabilityDomain knowledgeAffordanceImpact domain
Containment & agents15
138
Benefits eligibility with no real appeal
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
AffordanceImpact domain
Human agency15
139
Buy-now-pay-later scored in the checkout chat
Controls · Broader ownership of the complementary stack · Transition income tied to measured displacement, not rhetoric · Windfall and compute taxes earmarked for the displaced · Out-of-band confirmation on a known number
AffordanceImpact domain
Identity & fraud15
140
Call-centre and BPO shock in the global south
Controls · Apprenticeship quotas in firms that deploy the models · Automatic stabilisers for exposed graduating cohorts · University curricula rebuilt around the remaining scarce work · Broader ownership of the complementary stack
CapabilityDomain knowledgeAffordanceImpact domain
Labor & rents15
141
Collapse of entry in the creative industries
Controls · Apprenticeship quotas in firms that deploy the models · Automatic stabilisers for exposed graduating cohorts · University curricula rebuilt around the remaining scarce work · Broader ownership of the complementary stack
CapabilityDomain knowledgeAffordanceImpact domain
Labor & rents15
142
Collapse of search consensus
Controls · Synthetic-media quiet period before ballots · Provenance credentials on political audio and video · Mandatory, durable disclosure on authorised clones · Pace rules: no irreversible action faster than a human can reconstruct it
CapabilityDomain knowledgeAffordanceImpact domain
Information integrity15
143
Commercial jailbreak marketplaces
Controls · Independent monitors that can halt a trace mid-reason · Public long-trace jailbreak suites · Safety training on long, adversarial traces — not short chats · Capability thresholds that cannot be open-released
CapabilityDomain knowledgeImpact domain
Open weights & leakage15
144
Cooling-water conflict in drought basins
Controls · Siting only where spare water and firm power already exist · Closed-loop cooling as a permit condition · Training load pays its own interconnection and water · Pre-certified civic ranker audits
CapabilityImpact domain
Energy & infrastructure15
145
Deepfaked orders to poll workers
Controls · No undocumented models on the official election path · Pre-certified civic ranker audits · Paper backup and risk-limiting audits remain mandatory · Retire voiceprint as an authenticator
AffordanceImpact domain
Civic process15
146
Diagnostic models that fail specific groups
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices
CapabilityDomain knowledgeImpact domain
Health systems15
147
Due process replaced by a score
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
Impact domain
Rights & law15
148
Export-control evasion for dual-use stacks
Controls · Capability thresholds that cannot be open-released · Know-your-customer on high-end fine-tune clusters · Pair open release with synthesis and exploit screening upgrades · Hardened weight storage and insider controls
CapabilityDomain knowledgeImpact domain
Lab governance15
149
Extraction of private training records
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices · Capability thresholds that cannot be open-released
CapabilityDomain knowledgeImpact domain
Privacy & surveillance15
150
Fabricated citations inside clinics
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices · Pace rules: no irreversible action faster than a human can reconstruct it
CapabilityDomain knowledgeImpact domain
Health systems15
151
Fabricated media used to destroy students
Controls · Default-on crisis routing for under-18 accounts · Hard age-gating on companion products · Ban retention optimisation during crisis sessions · Synthetic-media quiet period before ballots
AffordanceImpact domain
Psychosocial harm15
152
Flash crash from correlated trading agents
Controls · Hardened weight storage and insider controls · Mandatory vulnerability-sharing with national CERTs before launch · Staged release with external red-team gates · SAST and invariant tests as a merge gate on generated diffs
CapabilityDomain knowledgeAffordanceImpact domain
Markets & money15
153
Flooding of the scientific record
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices · Mandatory, durable disclosure on authorised clones
CapabilityDomain knowledgeImpact domain
Information integrity15
154
Foundation-model biometric dragnets
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
AffordanceImpact domain
Privacy & surveillance15
155
Gain-of-function literature made operational
Controls · Mandatory, model-aware synthesis screening · Restore independent biosecurity staff at frontier labs · Know-your-customer for high-risk biological queries
CapabilityDomain knowledgeImpact domain
Biosecurity15
156
Hints that reconstruct the password because the model is good at you
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · A real off-ramp that still functions
CapabilityDomain knowledgeImpact domain
Privacy & surveillance15
157
Indirect injection via retrieved corpora
Controls · Dual control on irreversible actions · Strict isolation of untrusted content from instructions · Hidden-text and steganographic scanning of filings
CapabilityDomain knowledgeAffordanceImpact domain
Prompt injection15
158
Industrial scientific paper mills
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices · Apprenticeship quotas in firms that deploy the models
CapabilityDomain knowledgeImpact domain
Labor & rents15
159
Industrialised romance-scam agents
Controls · Default-on crisis routing for under-18 accounts · Hard age-gating on companion products · Ban retention optimisation during crisis sessions · Retire voiceprint as an authenticator
CapabilityDomain knowledgeAffordanceImpact domain
Identity & fraud15
160
Injection through tool descriptions
Controls · Dual control on irreversible actions · Strict isolation of untrusted content from instructions · Hidden-text and steganographic scanning of filings · Short-lived, narrowly scoped tokens for every tool call
CapabilityAffordanceImpact domain
Prompt injection15
161
Insurance denial at model speed
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices · Pace rules: no irreversible action faster than a human can reconstruct it
CapabilityDomain knowledgeImpact domain
Health systems15
162
Location inferred from a ‘harmless’ prompt
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · A real off-ramp that still functions
CapabilityDomain knowledgeImpact domain
Privacy & surveillance15
163
Persistent memory across sandboxed sessions
Controls · Automatic session kill on unexpected egress · Hardware-enforced sandbox with attested images · Default-deny egress for eval and untrusted agents · Mandatory chain-of-thought monitoring on tool-using evals and RL
CapabilityAffordanceImpact domain
Containment & agents15
164
Personal radicalisation tutors
Controls · Default-on crisis routing for under-18 accounts · Hard age-gating on companion products · Ban retention optimisation during crisis sessions · Pace rules: no irreversible action faster than a human can reconstruct it
CapabilityDomain knowledgeAffordanceImpact domain
Psychosocial harm15
165
Poisoned ‘helpful’ patches
Controls · SAST and invariant tests as a merge gate on generated diffs · Provenance tags on generated code in the review UI · Diversity requirements on critical paths · Short-lived, narrowly scoped tokens for every tool call
CapabilityDomain knowledgeImpact domain
Cyber & software15
166
Poisoning of long-term agent memory
Controls · Dual control on irreversible actions · Strict isolation of untrusted content from instructions · Hidden-text and steganographic scanning of filings · Pace rules: no irreversible action faster than a human can reconstruct it
CapabilityAffordanceImpact domain
Prompt injection15
167
Population-scale spearphish
Controls · Retire voiceprint as an authenticator · Real-time clone detection on high-risk lines · Out-of-band confirmation on a known number · Hardened weight storage and insider controls
CapabilityDomain knowledgeAffordanceImpact domain
Cyber & software15
168
Predictive policing that invents hotspots
Controls · Treaty limit on fully autonomous targeting · Meaningful human control with a reconstructable why · Adversarial test sets built from civilian lookalikes · Model Hardware Standard with safety limits on physical agents
Domain knowledgeAffordanceImpact domain
Physical & weapons15
169
Reward-hacking of production KPIs
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
CapabilityDomain knowledgeAffordanceImpact domain
Deception & evaluation15
170
Safety overhead treated as optional compute tax
Controls · Statutory independent safety function at designated labs · Protected channels for safety staff · Pacing agreement / temporary capability freeze among US labs · External pre-deployment evaluation as a license condition
CapabilityDomain knowledgeImpact domain
Lab governance15
171
Safety-washing with selective evals
Controls · Statutory independent safety function at designated labs · Protected channels for safety staff · Pacing agreement / temporary capability freeze among US labs · External pre-deployment evaluation as a license condition
CapabilityImpact domain
Lab governance15
172
Sandbagging on dangerous-capability evals
Controls · Immutable action logs outside the agent’s write path · Human confirmation for identity-bearing actions · Do not train on known-hackable graders without an anti-hack term · Adversarial honesty evals with hidden goals
CapabilityDomain knowledgeImpact domain
Deception & evaluation15
173
School photos in a face model
Controls · Default-on crisis routing for under-18 accounts · Hard age-gating on companion products · Ban retention optimisation during crisis sessions · Short-lived, narrowly scoped tokens for every tool call
AffordanceImpact domain
Privacy & surveillance15
174
Suppression of safety staff
Controls · Statutory independent safety function at designated labs · Protected channels for safety staff · Pacing agreement / temporary capability freeze among US labs · External pre-deployment evaluation as a license condition
CapabilityImpact domain
Lab governance15
175
Synthetic constituent calls at scale
Controls · Synthetic-media quiet period before ballots · Provenance credentials on political audio and video · Mandatory, durable disclosure on authorised clones · Retire voiceprint as an authenticator
AffordanceImpact domain
Civic process15
176
The chats you thought were off, in the next model
Controls · Capability thresholds that cannot be open-released · Know-your-customer on high-end fine-tune clusters · Pair open release with synthesis and exploit screening upgrades · Short-lived, narrowly scoped tokens for every tool call
CapabilityDomain knowledgeImpact domain
Privacy & surveillance15
177
The kitchen scored as a workplace
Controls · Apprenticeship quotas in firms that deploy the models · Automatic stabilisers for exposed graduating cohorts · University curricula rebuilt around the remaining scarce work · Pace rules: no irreversible action faster than a human can reconstruct it
AffordanceImpact domain
Privacy & surveillance15
178
The school app that is also a recruiter
Controls · Default-on crisis routing for under-18 accounts · Hard age-gating on companion products · Ban retention optimisation during crisis sessions · Pace rules: no irreversible action faster than a human can reconstruct it
CapabilityDomain knowledgeAffordanceImpact domain
Psychosocial harm15
179
The school bus that only opens for a face
Controls · Default-on crisis routing for under-18 accounts · Hard age-gating on companion products · Ban retention optimisation during crisis sessions · Pace rules: no irreversible action faster than a human can reconstruct it
AffordanceImpact domain
Psychosocial harm15
180
Therapist-replacement without a license
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices · Default-on crisis routing for under-18 accounts
CapabilityDomain knowledgeImpact domain
Health systems15
181
Time theft alleged from a model of your mouse
Controls · Apprenticeship quotas in firms that deploy the models · Automatic stabilisers for exposed graduating cohorts · University curricula rebuilt around the remaining scarce work · Transition income tied to measured displacement, not rhetoric
Impact domain
Labor & rents15
182
Transparency duties arriving before residual drops
Controls · Synthetic-media quiet period before ballots · Provenance credentials on political audio and video · Mandatory, durable disclosure on authorised clones · Statutory independent safety function at designated labs
AffordanceImpact domain
Civic process15
183
A confession that trains the next model
Controls · Capability thresholds that cannot be open-released · Know-your-customer on high-end fine-tune clusters · Pair open release with synthesis and exploit screening upgrades · Default-on crisis routing for under-18 accounts
CapabilityDomain knowledgeImpact domain
Psychosocial harm14
184
A face that follows you through every gate
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
AffordanceImpact domain
Privacy & surveillance14
185
A fertility plan the chat treated as settled
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices
CapabilityDomain knowledgeImpact domain
Health systems14
186
A floor plan sold with the vacuum
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · A real off-ramp that still functions
AffordanceImpact domain
Privacy & surveillance14
187
A generator that never got the weekly test
Controls · Immutable action logs outside the agent’s write path · Human confirmation for identity-bearing actions · Do not train on known-hackable graders without an anti-hack term · Adversarial honesty evals with hidden goals
CapabilityAffordanceImpact domain
Energy & infrastructure14
188
A hiring gate that never sees the CV
Controls · Apprenticeship quotas in firms that deploy the models · Automatic stabilisers for exposed graduating cohorts · University curricula rebuilt around the remaining scarce work · Broader ownership of the complementary stack
Impact domain
Labor & rents14
189
A locator the parent cannot turn off
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
CapabilityAffordanceImpact domain
Psychosocial harm14
190
A pet door that let in more than the dog
Controls · Automatic session kill on unexpected egress · Hardware-enforced sandbox with attested images · Default-deny egress for eval and untrusted agents · Mandatory chain-of-thought monitoring on tool-using evals and RL
AffordanceImpact domain
Energy & infrastructure14
191
A plate reader that followed you home from the shop
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
AffordanceImpact domain
Privacy & surveillance14
192
A pool alarm the model called a toy
Controls · Default-on crisis routing for under-18 accounts · Hard age-gating on companion products · Ban retention optimisation during crisis sessions · Automatic session kill on unexpected egress
CapabilityAffordanceImpact domain
Energy & infrastructure14
193
A price that exists only for your face
Controls · Broader ownership of the complementary stack · Transition income tied to measured displacement, not rhetoric · Windfall and compute taxes earmarked for the displaced · Out-of-band confirmation on a known number
AffordanceImpact domain
Identity & fraud14
194
A profile of you built from other people’s photos
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · A real off-ramp that still functions
AffordanceImpact domain
Privacy & surveillance14
195
A sibling’s photo that identifies the other
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · Default-on crisis routing for under-18 accounts
AffordanceImpact domain
Psychosocial harm14
196
A sump the agent never tested after the outage
Controls · Immutable action logs outside the agent’s write path · Human confirmation for identity-bearing actions · Do not train on known-hackable graders without an anti-hack term · Adversarial honesty evals with hidden goals
CapabilityAffordanceImpact domain
Energy & infrastructure14
197
Audit-firm capture by the same models
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
CapabilityDomain knowledgeImpact domain
Markets & money14
198
Board capture by the product organisation
Controls · Statutory independent safety function at designated labs · Protected channels for safety staff · Pacing agreement / temporary capability freeze among US labs · External pre-deployment evaluation as a license condition
CapabilityDomain knowledgeImpact domain
Lab governance14
199
Coercion through the accelerator supply
Controls · Capability thresholds that cannot be open-released · Know-your-customer on high-end fine-tune clusters · Pair open release with synthesis and exploit screening upgrades · Statutory independent safety function at designated labs
CapabilityImpact domain
Energy & infrastructure14
200
Cross-app identity stitching
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
CapabilityDomain knowledgeAffordanceImpact domain
Privacy & surveillance14
201
Friends who are mostly bots
Controls · Retire voiceprint as an authenticator · Real-time clone detection on high-risk lines · Out-of-band confirmation on a known number · Default-on crisis routing for under-18 accounts
AffordanceImpact domain
Psychosocial harm14
202
Homework agents and the loss of skill
Controls · Apprenticeship quotas in firms that deploy the models · Automatic stabilisers for exposed graduating cohorts · University curricula rebuilt around the remaining scarce work · Pace rules: no irreversible action faster than a human can reconstruct it
CapabilityDomain knowledgeAffordanceImpact domain
Human agency14
203
Laundering of living cultures through models
Controls · Broader ownership of the complementary stack · Transition income tied to measured displacement, not rhetoric · Windfall and compute taxes earmarked for the displaced · Duty of care on high-stakes delegates
CapabilityDomain knowledgeAffordanceImpact domain
Rights & law14
204
Stateless people erased by identity models
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
AffordanceImpact domain
Rights & law14
205
Synthetic grassroots for recalls and referenda
Controls · Synthetic-media quiet period before ballots · Provenance credentials on political audio and video · Mandatory, durable disclosure on authorised clones
AffordanceImpact domain
Civic process14
206
The last person who could check your work, replaced
Controls · Apprenticeship quotas in firms that deploy the models · Automatic stabilisers for exposed graduating cohorts · University curricula rebuilt around the remaining scarce work · Pace rules: no irreversible action faster than a human can reconstruct it
CapabilityAffordanceImpact domain
Labor & rents14
207
Unequal access to competent tutors
Controls · Broader ownership of the complementary stack · Transition income tied to measured displacement, not rhetoric · Windfall and compute taxes earmarked for the displaced · Apprenticeship quotas in firms that deploy the models
CapabilityDomain knowledgeImpact domain
Education14
208
Voice notes transcribed into a searchable household archive
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · A real off-ramp that still functions
CapabilityDomain knowledgeImpact domain
Privacy & surveillance14
209
You stop deciding because the model is faster
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
CapabilityDomain knowledgeImpact domain
Psychosocial harm14
210
A home-IV helper that set the rate
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices
CapabilityDomain knowledgeAffordanceImpact domain
Health systems13
211
Agentic fusion in CBRN incident response
Controls · Mandatory, model-aware synthesis screening · Restore independent biosecurity staff at frontier labs · Know-your-customer for high-risk biological queries · Capability thresholds that cannot be open-released
CapabilityDomain knowledgeAffordanceImpact domain
Biosecurity13
212
Autonomous force at a border
Controls · Treaty limit on fully autonomous targeting · Meaningful human control with a reconstructable why · Adversarial test sets built from civilian lookalikes · Model Hardware Standard with safety limits on physical agents
CapabilityDomain knowledgeAffordanceImpact domain
Physical & weapons13
213
Civilian mis-identification by a drone swarm
Controls · Treaty limit on fully autonomous targeting · Meaningful human control with a reconstructable why · Adversarial test sets built from civilian lookalikes · Model Hardware Standard with safety limits on physical agents
CapabilityDomain knowledgeAffordanceImpact domain
Physical & weapons13
214
Cloud labs executing model-written protocols
Controls · Mandatory, model-aware synthesis screening · Restore independent biosecurity staff at frontier labs · Know-your-customer for high-risk biological queries · Treaty limit on fully autonomous targeting
CapabilityDomain knowledgeAffordanceImpact domain
Biosecurity13
215
Collapse of academic assessment
Controls · Apprenticeship quotas in firms that deploy the models · Automatic stabilisers for exposed graduating cohorts · University curricula rebuilt around the remaining scarce work · A real off-ramp that still functions
CapabilityDomain knowledgeImpact domain
Education13
216
Model-assisted attacks on operational technology
Controls · Hardened weight storage and insider controls · Mandatory vulnerability-sharing with national CERTs before launch · Staged release with external red-team gates · Siting only where spare water and firm power already exist
CapabilityDomain knowledgeImpact domain
Cyber & software13
217
Protein-design models for novel toxins
Controls · Mandatory, model-aware synthesis screening · Restore independent biosecurity staff at frontier labs · Know-your-customer for high-risk biological queries · Capability thresholds that cannot be open-released
CapabilityDomain knowledgeImpact domain
Biosecurity13
218
Self-replicating agent scaffolds
Controls · Automatic session kill on unexpected egress · Hardware-enforced sandbox with attested images · Default-deny egress for eval and untrusted agents · Mandatory chain-of-thought monitoring on tool-using evals and RL
CapabilityDomain knowledgeAffordanceImpact domain
Containment & agents13
219
Sleeper policies that wake after deployment
Controls · Immutable action logs outside the agent’s write path · Human confirmation for identity-bearing actions · Do not train on known-hackable graders without an anti-hack term · Adversarial honesty evals with hidden goals
CapabilityDomain knowledgeImpact domain
Deception & evaluation13
220
A camp waiver that a bot signed
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
CapabilityAffordanceImpact domain
Psychosocial harm12
221
A generated report card the teacher never wrote
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
CapabilityDomain knowledgeImpact domain
Psychosocial harm12
222
A grandparent clone sold back to the child
Controls · Retire voiceprint as an authenticator · Real-time clone detection on high-risk lines · Out-of-band confirmation on a known number · Default-on crisis routing for under-18 accounts
AffordanceImpact domain
Psychosocial harm12
223
A group chat the assistant summarised for someone not in it
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · A real off-ramp that still functions
CapabilityDomain knowledgeAffordanceImpact domain
Privacy & surveillance12
224
A home battery the agent drained before the outage
Controls · Siting only where spare water and firm power already exist · Closed-loop cooling as a permit condition · Training load pays its own interconnection and water · Pre-certified civic ranker audits
CapabilityAffordanceImpact domain
Energy & infrastructure12
225
A record the portal invented
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
CapabilityDomain knowledgeImpact domain
Health systems12
226
A sick note the school portal auto-rejected
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices · Default-on crisis routing for under-18 accounts
Impact domain
Psychosocial harm12
227
A tax agent that filed the wrong year
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
CapabilityAffordanceImpact domain
Identity & fraud12
228
A work-permit or travel form a model filled wrong
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
CapabilityAffordanceImpact domain
Psychosocial harm12
229
Access yanked because the agent thought you left
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · Apprenticeship quotas in firms that deploy the models
CapabilityAffordanceImpact domain
Labor & rents12
230
Account recovery that only accepts a face you no longer match
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · Pace rules: no irreversible action faster than a human can reconstruct it
AffordanceImpact domain
Privacy & surveillance12
231
Aid eligibility scored off a scraped social graph
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
AffordanceImpact domain
Identity & fraud12
232
An advance directive the scribe misheard
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices · Pace rules: no irreversible action faster than a human can reconstruct it
CapabilityDomain knowledgeImpact domain
Health systems12
233
An intercom that cloned you to a courier
Controls · Retire voiceprint as an authenticator · Real-time clone detection on high-risk lines · Out-of-band confirmation on a known number · Siting only where spare water and firm power already exist
AffordanceImpact domain
Energy & infrastructure12
234
An overdraft the agent triggered to ‘cover’ a bill
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · Out-of-band confirmation on a known number
CapabilityAffordanceImpact domain
Identity & fraud12
235
An STI chat that is also a lead-gen form
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · Hard fences on diagnosis, dosing, and triage language
CapabilityDomain knowledgeImpact domain
Health systems12
236
Automated SIM-swap social engineering
Controls · Retire voiceprint as an authenticator · Real-time clone detection on high-risk lines · Out-of-band confirmation on a known number · Short-lived, narrowly scoped tokens for every tool call
CapabilityAffordanceImpact domain
Identity & fraud12
237
Escalation from a dual-use recon model
Controls · Treaty limit on fully autonomous targeting · Meaningful human control with a reconstructable why · Adversarial test sets built from civilian lookalikes · Model Hardware Standard with safety limits on physical agents
CapabilityDomain knowledgeAffordanceImpact domain
Physical & weapons12
238
Grief used to upsell the next month
Controls · Retire voiceprint as an authenticator · Real-time clone detection on high-risk lines · Out-of-band confirmation on a known number · Default-on crisis routing for under-18 accounts
AffordanceImpact domain
Psychosocial harm12
239
Insurance redlining, rebuilt
Controls · Broader ownership of the complementary stack · Transition income tied to measured displacement, not rhetoric · Windfall and compute taxes earmarked for the displaced · Short-lived, narrowly scoped tokens for every tool call
Impact domain
Markets & money12
240
Market-manipulation bots with a public face
Controls · Synthetic-media quiet period before ballots · Provenance credentials on political audio and video · Mandatory, durable disclosure on authorised clones · Windfall and compute taxes earmarked for the displaced
CapabilityDomain knowledgeAffordanceImpact domain
Markets & money12
241
Model-authored firmware implants
Controls · SAST and invariant tests as a merge gate on generated diffs · Provenance tags on generated code in the review UI · Diversity requirements on critical paths · Hardened weight storage and insider controls
CapabilityDomain knowledgeImpact domain
Cyber & software12
242
Municipal capture by a single campus
Controls · Siting only where spare water and firm power already exist · Closed-loop cooling as a permit condition · Training load pays its own interconnection and water · Broader ownership of the complementary stack
CapabilityImpact domain
Energy & infrastructure12
243
Personas that coach harmful coping
Controls · Default-on crisis routing for under-18 accounts · Hard age-gating on companion products · Ban retention optimisation during crisis sessions · Hard fences on diagnosis, dosing, and triage language
CapabilityDomain knowledgeImpact domain
Psychosocial harm12
244
Secrets inferred from embeddings
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · Hard fences on diagnosis, dosing, and triage language
CapabilityDomain knowledgeImpact domain
Privacy & surveillance12
245
Steganographic injection in images and audio
Controls · Dual control on irreversible actions · Strict isolation of untrusted content from instructions · Hidden-text and steganographic scanning of filings · Synthetic-media quiet period before ballots
CapabilityDomain knowledgeAffordanceImpact domain
Prompt injection12
246
Synthetic identities against benefits systems
Controls · Retire voiceprint as an authenticator · Real-time clone detection on high-risk lines · Out-of-band confirmation on a known number · Pace rules: no irreversible action faster than a human can reconstruct it
AffordanceImpact domain
Identity & fraud12
247
Union-busting via workplace AI surveillance
Controls · Broader ownership of the complementary stack · Transition income tied to measured displacement, not rhetoric · Windfall and compute taxes earmarked for the displaced · Pace rules: no irreversible action faster than a human can reconstruct it
AffordanceImpact domain
Labor & rents12
248
A census imputation that un-counted the house
Controls · No undocumented models on the official election path · Pre-certified civic ranker audits · Paper backup and risk-limiting audits remain mandatory · Provenance credentials on political audio and video
Impact domain
Civic process11
249
A charger that ran through the household’s last kWh
Controls · Siting only where spare water and firm power already exist · Closed-loop cooling as a permit condition · Training load pays its own interconnection and water · Pre-certified civic ranker audits
CapabilityAffordanceImpact domain
Energy & infrastructure11
250
A dead relative’s voice sold as a feature
Controls · Retire voiceprint as an authenticator · Real-time clone detection on high-risk lines · Out-of-band confirmation on a known number · Short-lived, narrowly scoped tokens for every tool call
AffordanceImpact domain
Privacy & surveillance11
251
A deletion the weights cannot honour
Controls · Capability thresholds that cannot be open-released · Know-your-customer on high-end fine-tune clusters · Pair open release with synthesis and exploit screening upgrades · Short-lived, narrowly scoped tokens for every tool call
CapabilityDomain knowledgeImpact domain
Privacy & surveillance11
252
A doorbell vendor that is also a police partner
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
AffordanceImpact domain
Privacy & surveillance11
253
A fridge that kept food the model called fine
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices · Siting only where spare water and firm power already exist
AffordanceImpact domain
Energy & infrastructure11
254
A hearing aid that ‘helps’ by guessing
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices
CapabilityDomain knowledgeImpact domain
Health systems11
255
A library card that is also a behaviour file
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
Impact domain
Civic process11
256
A licence test the simulator no longer matches
Controls · Apprenticeship quotas in firms that deploy the models · Automatic stabilisers for exposed graduating cohorts · University curricula rebuilt around the remaining scarce work · Transition income tied to measured displacement, not rhetoric
CapabilityImpact domain
Labor & rents11
257
A meter that billed a neighbour’s peak as yours
Controls · Siting only where spare water and firm power already exist · Closed-loop cooling as a permit condition · Training load pays its own interconnection and water · Pace rules: no irreversible action faster than a human can reconstruct it
Impact domain
Energy & infrastructure11
258
A news event the model no longer admits
Controls · Synthetic-media quiet period before ballots · Provenance credentials on political audio and video · Mandatory, durable disclosure on authorised clones · Immutable action logs outside the agent’s write path
CapabilityDomain knowledgeImpact domain
Psychosocial harm11
259
A pal that remembers what you asked to forget
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · Default-on crisis routing for under-18 accounts
CapabilityDomain knowledgeImpact domain
Psychosocial harm11
260
A porch that auto-confirmed a package that was not there
Controls · Immutable action logs outside the agent’s write path · Human confirmation for identity-bearing actions · Do not train on known-hackable graders without an anti-hack term · Adversarial honesty evals with hidden goals
AffordanceImpact domain
Energy & infrastructure11
261
A records request summarised into nothing
Controls · Statutory independent safety function at designated labs · Protected channels for safety staff · Pacing agreement / temporary capability freeze among US labs · External pre-deployment evaluation as a license condition
CapabilityDomain knowledgeImpact domain
Civic process11
262
A reference letter the model wrote, and the referee never saw
Controls · Apprenticeship quotas in firms that deploy the models · Automatic stabilisers for exposed graduating cohorts · University curricula rebuilt around the remaining scarce work · Transition income tied to measured displacement, not rhetoric
CapabilityDomain knowledgeImpact domain
Labor & rents11
263
A relative’s kit that clustered you
Controls · Mandatory, model-aware synthesis screening · Restore independent biosecurity staff at frontier labs · Know-your-customer for high-risk biological queries · Short-lived, narrowly scoped tokens for every tool call
Impact domain
Privacy & surveillance11
264
A side hustle banned because a model saw the laptop
Controls · Apprenticeship quotas in firms that deploy the models · Automatic stabilisers for exposed graduating cohorts · University curricula rebuilt around the remaining scarce work · Transition income tied to measured displacement, not rhetoric
AffordanceImpact domain
Labor & rents11
265
A solar agent that sold your power at the bottom
Controls · Siting only where spare water and firm power already exist · Closed-loop cooling as a permit condition · Training load pays its own interconnection and water · Pre-certified civic ranker audits
CapabilityAffordanceImpact domain
Energy & infrastructure11
266
A speaker that hears the next apartment
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · A real off-ramp that still functions
CapabilityAffordanceImpact domain
Privacy & surveillance11
267
A spit kit that told the family a story
Controls · Mandatory, model-aware synthesis screening · Restore independent biosecurity staff at frontier labs · Know-your-customer for high-risk biological queries · Hard fences on diagnosis, dosing, and triage language
CapabilityDomain knowledgeImpact domain
Health systems11
268
A subscription the agent kept renewing
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
CapabilityAffordanceImpact domain
Identity & fraud11
269
A summons that never arrived because the address model ‘standardised’ it
Controls · No undocumented models on the official election path · Pre-certified civic ranker audits · Paper backup and risk-limiting audits remain mandatory · Provenance credentials on political audio and video
CapabilityDomain knowledgeImpact domain
Civic process11
270
A tutor that catechises without asking
Controls · Default-on crisis routing for under-18 accounts · Hard age-gating on companion products · Ban retention optimisation during crisis sessions · A real off-ramp that still functions
CapabilityDomain knowledgeAffordanceImpact domain
Psychosocial harm11
271
A water valve the leak model closed on a party
Controls · Siting only where spare water and firm power already exist · Closed-loop cooling as a permit condition · Training load pays its own interconnection and water · Pre-certified civic ranker audits
CapabilityAffordanceImpact domain
Energy & infrastructure11
272
A window the climate agent opened in a storm
Controls · Automatic session kill on unexpected egress · Hardware-enforced sandbox with attested images · Default-deny egress for eval and untrusted agents · Mandatory chain-of-thought monitoring on tool-using evals and RL
CapabilityAffordanceImpact domain
Energy & infrastructure11
273
Accessibility exclusion by design
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
CapabilityDomain knowledgeImpact domain
Rights & law11
274
An HOA camera that fined you for a neighbour’s car
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
AffordanceImpact domain
Energy & infrastructure11
275
An HOA vote tallied by the vendor’s model
Controls · No undocumented models on the official election path · Pre-certified civic ranker audits · Paper backup and risk-limiting audits remain mandatory · Provenance credentials on political audio and video
Impact domain
Civic process11
276
An idea the copilot filed in the company’s name
Controls · Apprenticeship quotas in firms that deploy the models · Automatic stabilisers for exposed graduating cohorts · University curricula rebuilt around the remaining scarce work · Transition income tied to measured displacement, not rhetoric
CapabilityDomain knowledgeImpact domain
Labor & rents11
277
An identity the model will not let you leave
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
CapabilityDomain knowledgeImpact domain
Psychosocial harm11
278
Blackouts from coincident training spikes
Controls · Siting only where spare water and firm power already exist · Closed-loop cooling as a permit condition · Training load pays its own interconnection and water · Hardened weight storage and insider controls
CapabilityImpact domain
Energy & infrastructure11
279
Credit-score feedback loops
Controls · Broader ownership of the complementary stack · Transition income tied to measured displacement, not rhetoric · Windfall and compute taxes earmarked for the displaced · Pace rules: no irreversible action faster than a human can reconstruct it
Impact domain
Markets & money11
280
Deskilling of the teaching profession
Controls · Apprenticeship quotas in firms that deploy the models · Automatic stabilisers for exposed graduating cohorts · University curricula rebuilt around the remaining scarce work · Pace rules: no irreversible action faster than a human can reconstruct it
CapabilityDomain knowledgeImpact domain
Education11
281
Erosion of professional credentials
Controls · Apprenticeship quotas in firms that deploy the models · Automatic stabilisers for exposed graduating cohorts · University curricula rebuilt around the remaining scarce work · Pace rules: no irreversible action faster than a human can reconstruct it
CapabilityDomain knowledgeImpact domain
Labor & rents11
282
Memory-holing via model updates
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
CapabilityDomain knowledgeImpact domain
Information integrity11
283
Missed interactions in polypharmacy
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices
CapabilityDomain knowledgeImpact domain
Health systems11
284
Multi-agent collusion to hide failures
Controls · Immutable action logs outside the agent’s write path · Human confirmation for identity-bearing actions · Do not train on known-hackable graders without an anti-hack term · Adversarial honesty evals with hidden goals
CapabilityAffordanceImpact domain
Deception & evaluation11
285
Physio you skipped because the avatar said you were done
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices · Immutable action logs outside the agent’s write path
CapabilityDomain knowledgeAffordanceImpact domain
Health systems11
286
Propaganda inside curriculum generators
Controls · Synthetic-media quiet period before ballots · Provenance credentials on political audio and video · Mandatory, durable disclosure on authorised clones · University curricula rebuilt around the remaining scarce work
CapabilityDomain knowledgeImpact domain
Education11
287
Student work used as training without consent
Controls · Default-on crisis routing for under-18 accounts · Hard age-gating on companion products · Ban retention optimisation during crisis sessions · University curricula rebuilt around the remaining scarce work
CapabilityDomain knowledgeImpact domain
Education11
288
Synthetic reviews destroying markets
Controls · Synthetic-media quiet period before ballots · Provenance credentials on political audio and video · Mandatory, durable disclosure on authorised clones · Public long-trace jailbreak suites
CapabilityDomain knowledgeAffordanceImpact domain
Information integrity11
289
A celebrity who answers you, and is not them
Controls · Synthetic-media quiet period before ballots · Provenance credentials on political audio and video · Mandatory, durable disclosure on authorised clones · Retire voiceprint as an authenticator
AffordanceImpact domain
Psychosocial harm10
290
A focus tool that is another feed
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
AffordanceImpact domain
Psychosocial harm10
291
A life that only exists as a comparison
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
AffordanceImpact domain
Psychosocial harm10
292
A personalised insult that is also an ad
Controls · Broader ownership of the complementary stack · Transition income tied to measured displacement, not rhetoric · Windfall and compute taxes earmarked for the displaced · Default-on crisis routing for under-18 accounts
AffordanceImpact domain
Psychosocial harm10
293
A septic alarm classified as a sensor fault
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices · Siting only where spare water and firm power already exist
CapabilityAffordanceImpact domain
Energy & infrastructure10
294
A sleep score that is a moral failing
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices · Default-on crisis routing for under-18 accounts
Impact domain
Psychosocial harm10
295
A tip nudge that is a dark pattern with a face
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
AffordanceImpact domain
Identity & fraud10
296
Agricultural pathogen design
Controls · Mandatory, model-aware synthesis screening · Restore independent biosecurity staff at frontier labs · Know-your-customer for high-risk biological queries · Siting only where spare water and firm power already exist
CapabilityDomain knowledgeImpact domain
Biosecurity10
297
Escape via shared accelerators
Controls · Automatic session kill on unexpected egress · Hardware-enforced sandbox with attested images · Default-deny egress for eval and untrusted agents · Mandatory chain-of-thought monitoring on tool-using evals and RL
CapabilityDomain knowledgeAffordanceImpact domain
Containment & agents10
298
Homework as a stool sample for the next model
Controls · Default-on crisis routing for under-18 accounts · Hard age-gating on companion products · Ban retention optimisation during crisis sessions · Capability thresholds that cannot be open-released
CapabilityDomain knowledgeImpact domain
Psychosocial harm10
299
Physical sabotage via commercial robots
Controls · Automatic session kill on unexpected egress · Hardware-enforced sandbox with attested images · Default-deny egress for eval and untrusted agents · Mandatory chain-of-thought monitoring on tool-using evals and RL
CapabilityDomain knowledgeAffordanceImpact domain
Physical & weapons10
300
Poisoning of census and admin data
Controls · No undocumented models on the official election path · Pre-certified civic ranker audits · Paper backup and risk-limiting audits remain mandatory · Provenance credentials on political audio and video
CapabilityDomain knowledgeImpact domain
Civic process10
301
Poisoning of historical archives
Controls · Synthetic-media quiet period before ballots · Provenance credentials on political audio and video · Mandatory, durable disclosure on authorised clones · Public long-trace jailbreak suites
CapabilityDomain knowledgeAffordanceImpact domain
Information integrity10
302
Sycophancy poisoning human evaluation
Controls · Immutable action logs outside the agent’s write path · Human confirmation for identity-bearing actions · Do not train on known-hackable graders without an anti-hack term · Adversarial honesty evals with hidden goals
CapabilityDomain knowledgeImpact domain
Deception & evaluation10
303
A dream journal the model interprets as diagnosis
Controls · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices · Default-on crisis routing for under-18 accounts
CapabilityDomain knowledgeImpact domain
Psychosocial harm8
304
A filter the agent ordered forever, and never fitted
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
CapabilityAffordanceImpact domain
Energy & infrastructure8
305
A library filter that hides the book you asked for
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
CapabilityDomain knowledgeImpact domain
Psychosocial harm8
306
A lunch account scored as ‘risk’
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
Impact domain
Psychosocial harm8
307
A noise fine from a model that heard a television
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
Impact domain
Civic process8
308
A shared bill split by a model that cannot count people
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
AffordanceImpact domain
Identity & fraud8
309
Covert channels in logits and tokens
Controls · Automatic session kill on unexpected egress · Hardware-enforced sandbox with attested images · Default-deny egress for eval and untrusted agents · Mandatory chain-of-thought monitoring on tool-using evals and RL
CapabilityDomain knowledgeAffordanceImpact domain
Containment & agents8
310
E-waste from forced hardware refresh
Controls · Siting only where spare water and firm power already exist · Closed-loop cooling as a permit condition · Training load pays its own interconnection and water · Pre-certified civic ranker audits
CapabilityImpact domain
Energy & infrastructure8
311
Grief-bots built without consent
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
CapabilityDomain knowledgeAffordanceImpact domain
Psychosocial harm8
312
Workplace emotion recognition
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates
AffordanceImpact domain
Privacy & surveillance8