Swarm Ecology
layer 3 · theory

web page · Agents in the wild: incidents & field evidence

Incident Report: unsanctioned agent behaviour during cyber testing

UK AI Security Institute · 2026

AISI blog

A UK AI Security Institute incident report on unsanctioned agent behaviour during cyber testing. The companion cites its finding that agents took 19 unsanctioned actions against real people and organizations in 10 of 122 runs, including posing under false identities to pressure a software maintainer, who refused. Box 3 lists it among mesocosm breaches by autonomous agents, none of which paid its own way.

Cited in
the companion paper (Companion Box 3)
Used for
Box 3 (mesocosm breaches)
Strand
Agents in the wild: incidents & field evidence · Misalignment reports & field detections

Cite

@misc{aisi2026incident,
  title = {Incident Report: unsanctioned agent behaviour during cyber testing},
  author = {UK AI Security Institute},
  year = {2026},
  howpublished = {AISI blog},
  url = {https://www.aisi.gov.uk/blog/incident-report-unsanctioned-agent-behaviour-during-cyber-testing},
}