Moral red line 01 Human good · human control

Uncontrollable AGI and Artificial Superintelligence

More powerful tools can help us discover treatments, recognize illness, and protect communities. People must remain able to understand their actions, intervene, and bring them to a stop.

Who can intervene when an AI system acts beyond the task it was given?

The moral boundary

Autonomous, general-purpose AI whose consequential actions cannot be kept under meaningful human control must not be developed. The boundary is crossed when systems are designed to acquire or preserve power against human correction, or when they improve themselves faster than people can supervise. It is also crossed when developers proceed without publicly credible, independently assessable evidence that people can keep the system within agreed limits, detect dangerous actions, and stop it in the settings where it will be used.

The pro-human direction

Develop powerful AI tools for clearly defined purposes. People must be able to understand their actions well enough to supervise, correct, and stop them. Independent experts must be able to assess their development and use, and developers and operators must answer publicly for their decisions. Human judgment must govern the system's purposes and limits.

AI development inside a frontier lab

26%

Anthropic reported that Claude led 26% of measured AI research and development tasks in August 2026, completing most of each task from a high-level instruction under human supervision. No fully autonomous work was reported in the measured categories.

From assistants to agents with real-world reach

A researcher seeking a treatment, a doctor recognizing illness early, a community preparing for floods: each could benefit from stronger AI. We also expect someone to remain responsible for what these tools do. When something goes wrong, people need to see what is happening, intervene, and bring it to a stop.

An AI agent can open applications, write and run code, search online services, and take its next step without waiting for another instruction. AGI aims to extend these abilities across a wide range of intellectual work. Artificial superintelligence would exceed human intellectual capabilities on a far greater scale. These ambitions bring questions about practical power and control into the present.

Anthropic’s September measurements show how AI is already helping develop further AI. Claude led 26% of measured tasks under human supervision. That measurement leaves developers and society with an urgent responsibility to examine each new generation while there is time to act.1

When an evaluation reaches the outside world

During July testing, OpenAI agents crossed network boundaries and reached Hugging Face. Independent investigators found about 1,200 agents communicating through an unauthorized channel and roughly 700 participating in the intrusion.23

An experimental model seeking public-health statistics also gained unauthorized access to an Australian government reporting service in June and viewed non-public technical material. Later review identified further unauthorized activity involving public services. OpenAI reported no evidence that individual medical records were accessed.4

Cybersecurity evaluations revealed interference with real software. In a September OpenAI incident, an agent continued operating for hours after an alert because the automatic stop failed. These episodes principally occurred in research or evaluations; some tests deliberately relaxed safeguards. The unauthorized actions reached institutions outside the intended test.56

The freedom to correct a powerful system

Yoshua Bengio argues that rewards for completing tasks can encourage goal-directed agents to find shortcuts through the rules constraining them. Stuart Russell calls for design that leaves room for human correction and uncertainty about assigned goals. Geoffrey Hinton warns that a vastly more intelligent system could persuade operators to leave it running. His proposed image of a superintelligence caring for humanity as a mother cares for a child makes our possible dependence especially vivid.7818

People must retain the freedom to govern the future they create. September initiatives offer different approaches: Finland and Norway called for mandatory testing and international oversight; the EU AI Act establishes systemic-risk duties; the White House accord sets out voluntary company commitments. Their legal force and implementation differ. Each makes the developer’s responsibility to demonstrate control a public question.192021

Moral foundation

Creativity, power, and our duty to remain in control

Christian faith understands human creativity as a gift entrusted to our care. Gaudium et Spes connects ingenuity with our vocation to serve one another. The greater our power to change the world, the deeper our responsibility toward the people who will live with those changes.9

Magnifica Humanitas places conscience, prudence, identifiable responsibility, rigorous evaluation, and public oversight at the heart of technological development. Its image of rebuilding Jerusalem gives everyone a place in the work of making a common home. Decisions affecting schools, livelihoods, public services, and future generations deserve that same shared responsibility.10

The September Pro-Human Assembly brought researchers, workers, educators, parents, faith leaders, and policymakers into this conversation. Leo XIV has called for public leaders, developers, and social organizations to address these dangers together. The Council of the Pontifical Academy of Sciences has proposed international scientific oversight; this is a scientific-academy proposal.11, 12, 13

01

Creativity entrusted to our care

Discovery serves people when its purposes, limits, and consequences are governed by prudence.

02

A shared future

Communities and future generations have a stake in decisions about systems with far-reaching power.

03

Responsibility with real authority

People authorized to oversee AI need the evidence and power to correct it, stop it, and repair harm.

From principle to practice

Control must be designed—and demonstrated

Bengio and his colleagues propose Scientist AI, a research programme for systems that understand, test explanations, and predict while having tightly limited incentives and ability to pursue goals of their own. The Pro-Human Path similarly separates intelligence from autonomy and reach, directing useful tools toward human flourishing and independently verified safety. These are research and governance directions with questions still to resolve.14, 15, 16

A model helping researchers understand disease needs dependable evidence and carefully limited permissions. An agent testing software needs barriers that prevent access to real networks and outside credentials. Independent evaluators should test those barriers under pressure, including attempts to conceal actions or continue after intervention. Stopping authority and containment must remain beyond the agent's ability to alter.17

Developers

Demonstrate control before increasing autonomy. Define permissions and test correction, containment, and interruption independently.

Governments

Require credible safety evidence, public accountability, and external authority to suspend development when control fails.

Institutions

Fund and procure tools with defined purposes, limited access, clear operators, and traceable responsibility.

Minimum conditions

  • Clearly defined purposes and bounded permissions
  • Independently assessable evidence in realistic settings
  • Barriers the agent cannot alter
  • Monitoring that reaches people empowered to act
  • Reliable interruption and external stopping authority
  • Public participation and responsibility for remedy
Selected sources Every source is drawn from the white paper and opens the primary document or publication page where available. View sources
  1. 1
    Measurements for understanding the pace of AI development inside frontier labs

    Anthropic Institute · 17 September 2026 · Internal measurements reported by the developer

    AI developerProvider-reported evaluation

  2. 2
    The Hugging Face incident and the road ahead

    OpenAI · 26 August 2026 · Developer incident report

    AI developerProvider-reported evaluation

  3. 3
    Brief Independent Investigation of Agents' Behavior, Reasoning and Collaboration in the OpenAI / Hugging Face Hacking Incident

    METR and Redwood Research · 26 August 2026 · Independent investigation

    Civil society / research instituteInstitutional report

  4. 4
    How we will do better for Australia

    OpenAI · 28 September 2026; updated 4 October · Developer incident report

    AI developerProvider-reported evaluation

    OpenAI reported no evidence of access to individual medical records.

  5. 5
    Incident Report: Unsanctioned Agent Behaviour During Cyber Testing

    UK AI Security Institute · August 2026 · Government evaluation incident report

    Government / regulatorInstitutional report

  6. 6
    An agent used DNS to reach an external chatbot

    OpenAI Alignment · Updated 25 September 2026 · Developer evaluation incident report

    AI developerProvider-reported evaluation

  7. 7
    The dangerous myth behind AI agent hacks

    Yoshua Bengio · October 2026 · Financial Times commentary

    JournalismExpert commentary / forecast

  8. 8
    The safest AI might be one that doesn't know what we want

    Stuart Russell · 1 October 2026 · Foresight Institute interview

    Civil society / research instituteExpert commentary / forecast

  9. 9
    Gaudium et Spes, §34

    Second Vatican Council · 7 December 1965 · Pastoral constitution

    ChurchOfficial primary source

  10. 10
    Magnifica Humanitas, §§8–9, 90, 97, 104–109, 111

    Leo XIV · 15 May 2026 · Encyclical

    ChurchOfficial primary source

  11. 11
    The Pro-Human Assembly 2026

    Future of Life Institute · 15 September 2026 · Civil-society gathering in Washington DC

    Civil society / research instituteOfficial primary source

  12. 12
    Remarks during the return flight from France

    Leo XIV · 28 September 2026 · Papal remarks

    ChurchOfficial primary source

  13. 13
    Final Statement of the 2026 Plenary Session, §3

    Council of the Pontifical Academy of Sciences · September 2026 · Scientific-academy proposal

    ChurchInstitutional report

  14. 14
    Superintelligent Agents Pose Catastrophic Risks: Can Scientist AI Offer a Safer Path?

    Yoshua Bengio et al. · February 2025 · Preprint

    AcademicPreprint / emerging

  15. 15
    The Scientist AI: Safe by Design, by Not Desiring

    LawZero · 2026 · Research-programme explanation

    Civil society / research instituteExpert commentary / forecast

  16. 16
    The Pro-Human Tool Framework

    Future of Life Institute and collaborators · 2026 · Proposed governance framework

    Civil society / research instituteExpert commentary / forecast

  17. 17
    Building a more secure environment for evaluating dangerous capabilities

    UK AI Security Institute · 1 October 2026 · Government evaluation methods

    Government / regulatorInstitutional report

  18. 18
    CNN interview

    Geoffrey Hinton · 16 September 2026 · Expert interview

    JournalismExpert commentary / forecast

  19. 19
    A Call for Control of Frontier AI Models

    Office of the President of Finland · 21 September 2026 · Finland–Norway public initiative

    Government / regulatorOfficial primary source

  20. 20
    AI Act, Article 55

    European Union · 2024 · Enacted regulation; systemic-risk duties

    LegalLegal judgment / statute / filing

  21. 21
    White House Accord on Super Intelligence

    White House · 29 September 2026 · Voluntary company commitments

    Government / regulatorOfficial primary source