15Privacy & surveillanceBelow the top 20
Foundation-model biometric dragnets
AffordanceImpact domainBoth
Statement (NASA form)
Given that face and gait models now run on city cameras at a quality police databases never had, there is a possibility of retrospective identification of anyone who walked through a square resulting in a public space in which anonymity is a historical fact.
Likelihood
4Likely
Consequence
3Major
Urgency
3Priority
The camera was always on. The index is new.
Composite 15 = 4×3 + 3
Applicable mitigations
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates · Short-lived, narrowly scoped tokens for every tool call · Statutory independent safety function at designated labs