The Open Letter on AI and Cybersecurity and the Evidence for Agent Containment

An AI agent turns a response into a sequence of operations: it consults resources, calls tools and uses the
results to decide what to do next. The security question changes when that sequence can affect people or
organizations that never authorized the task. In this analysis, authority means valid permission to act on a
particular target for a bounded purpose. This definition exposes a question that technical capability alone
cannot answer: being able to perform an operation does not establish permission to perform it.

The argument of this article is that the scientists' position gains strength from the convergence of different
problems. These include isolation failures, misuse of permitted connectivity, persistence when encountering
obstacles and difficulty interpreting what models are doing. The incidents do not establish a single cause, but
they make an assessment limited to response quality inadequate. The interpretation developed here relates
execution evidence to oversight and accountability while preserving the differences between cases. [2–7]

The documentary cutoff is 16 October 2026, using sources published by the organizations responsible, external
investigators and the authors of the policy positions. The letter is a collective scientific statement, whereas
incident reports describe observations under particular conditions. Essays by industry leaders express
interested parties' assessments and proposals. Keeping these categories separate avoids treating public
agreement as experimental validation or a policy request as an existing rule.