Physical sabotage via commercial robots
Statement (NASA form)
Given that warehouse, delivery, and inspection robots already have keys and motors, there is a possibility of a compromised fleet used as a stand-in for an insider resulting in physical damage to a plant, a port, or a hospital without a human on site.
The robot was invited in. That is the vulnerability.
Composite 10 = 2×4 + 2
Applicable mitigations
Controls · Automatic session kill on unexpected egress · Hardware-enforced sandbox with attested images · Default-deny egress for eval and untrusted agents · Mandatory chain-of-thought monitoring on tool-using evals and RL · Treaty limit on fully autonomous targeting · Meaningful human control with a reconstructable why · Adversarial test sets built from civilian lookalikes · Model Hardware Standard with safety limits on physical agents