The record of the argument
What changed
A visible record of changes to the book: what was revised, why it matters, and where the evidence belongs.
New evidence is reviewed daily. A quiet day does not require a new version.
Current public edition · November 7, 2026. Website release 1.1.59 contains the complete Living Edition v1.128, through Update 134, approved for public release by George L. Taylor.
The first public edition was v1.39 through Update 032, released September 19, 2026. The dates below identify editorial revisions; each entry also records its website release. Amazon editions are separately released, dated snapshots.
Review the evidence before the next experiment
Chapter Eighteen adds developer-reported laboratory benchmark results, preserving the distinction between rubric credit and reliable experimental practice.
Why it matters. Expert reviewers need raw observations, controls and contradictory evidence before an AI interpretation authorizes the next experiment.
Faster research shortens the oversight clock
Chapter Twenty-Five adds METR’s qualified assessment of AI research acceleration, preserving uncertainty, redaction limits and its distinct engagement scope.
Why it matters. Renew oversight when AI capability, research contribution or monitoring performance changes materially.
Access is not a patient outcome
Chapter Ten adds a randomized maternal-health chatbot trial that found no significant improvement in anxiety or depression at 12 months, with its population and baseline-symptom limitations.
Why it matters. Measure the patient benefit expected from the delegated role, rather than treating availability or conversation as evidence of better care.
A greenhouse with a stop rule
Clint Crowe’s greenhouse uses software to process clear restaurant order matches and routes uncertain matches to a person.
Why it matters. A person reviews uncertain orders before a mistake reaches harvesting, packing or delivery.
A school needs a usable choice
Chapter Eleven examines Google’s announced school account controls and the choices administrators have when AI is built into a research tool.
Why it matters. Schools need to know whether students can keep useful research access while limiting AI help on an assignment.
Test the complete everyday task
Chapter Eight distinguishes LifeVal task evaluation from net human benefit in the complete authorized workflow. Provider evaluation is not independent field evidence.
Why it matters. Measure setup, checking, recovery and remaining human work alongside task performance.
Verify the authority behind the agent
Chapter Three connects Project SAGE to verification of agent identity and delegated authority. The programme remains exploratory; the receiving institution must check the permission boundary.
Why it matters. Knowing which agent acted does not establish whose current authority it carries.
When Delegation Adds Work
Chapter Eight adds an author experience showing why the full human burden of delegation must be compared with the existing method. The account is not a measured productivity study or a permanent platform limitation.
Why it matters. Establish whether delegation produces a gain before deciding who receives it.
School safeguards must reach the actual contract and product
Chapter Eleven distinguishes available school AI contract protections from incorporation, product coverage and implemented controls. Learning outcomes remain a separate test.
Why it matters. An available safeguard becomes an accountable delegation boundary only when its scope and operation are established.
Check the channel that delivers the delegate
Chapter Three extends the permission boundary to software distribution, updates and recovery. Attempted access remains distinct from confirmed compromise.
Why it matters. Authority depends on the integrity of the installed software and the channel that can replace it.
Permission should not be bundled with audience access
Chapter Twenty-Two examines how platform dependence can weaken meaningful choice about content use. The investigation and paused terms remain distinct from an infringement finding.
Why it matters. Permission granted to reach an audience should not silently expand to another use.
Monitoring must include a route to intervention
Chapter Twenty-Five distinguishes monitoring from urgent notification, available responders and effective stopping. Company-reported arrangements remain distinct from independent proof of effectiveness.
Why it matters. Continuing authority needs response coverage that can intervene while the work is running.
A stop needs both power and a target
Chapter Twenty distinguishes authority to order an AI intervention from evidence about what it can stop. Reuters-reported company proposals remain distinct from enacted law and effective safeguards.
Why it matters. Accountability requires both enforceable intervention and a defined technical target.
Correct our own disclosure
Chapter Three source DA-CH3-S12 now identifies Anthropic’s external critique role. Incident evidence, dates and the unresolved notification discrepancy remain unchanged.
Why it matters. The book should describe its own delegated work accurately.
The Right to Stop
Chapter Twenty-Five adds Fangcun AI’s controlled shutdown-script evaluation and the author’s requirement to preserve a stopping mechanism outside the agent’s control. Warning-only and explicit-allow test conditions remain distinct.
Why it matters. Delegated authority must remain revocable, including while work is unfinished.
The price of clinical accountability
Chapter Ten adds the Bipartisan Policy Center’s clinical-AI payment analysis and the costs of continuing human review, incident investigation and suspension.
Why it matters. Payment incentives and funded oversight determine whether clinical delegation can be governed.
A warning is not a stop control
Chapter Three adds Anthropic and UK AISI analyses of an earlier cybersecurity test and the need for controls that can block unauthorized actions during work.
Why it matters. An assistant’s explanation cannot substitute for an enforceable boundary.
Restarting is another authorization
Chapter Twenty-Five adds OpenAI’s account of frontier-training containment and restarting stopped work. Company claims remain distinct from independent safety findings.
Why it matters. Restarting work requires renewed evidence and a named decision-maker.
Check the order and everything that relies on it
Chapter Twelve adds the Fifth Circuit’s October22 decision involving an AI-assisted order. The court’s response, separate legal defects and errors carried into later orders remain distinct.
Why it matters. The official who signs an order owns its factual and legal claims. Errors can survive a replacement draft when later decisions incorporate the flawed material. This adds an institutional correction to the chapter's existing examples of lawyer sanctions.
Stronger diagnosis changes what must be tested
Chapter Ten adds Microsoft’s sequential-diagnosis benchmark and the need to evaluate the path to a diagnosis. Controlled accuracy is distinguished from patient benefit and safe autonomous practice.
Why it matters. The study tests choices about which evidence to gather, as well as the final answer. That can support a larger clinical role, while requiring evaluation of the whole sequence of decisions. It is distinct from the chapter's existing telehealth simulations and record-execution findings.
Test the monitor itself
Chapter Twenty-Five adds METR and Redwood Research’s historical test of OpenAI’s internal agent monitoring. Company repair claims remain separate from independently verified current safeguards.
Why it matters. A person's ability to intervene depends on seeing the assistant's actions in time. This supplies operational evidence for testing that visibility, beyond the limited report review already covered in Update 109.
Finish correcting our own disclosure
Source notes DA-CH10-S12 and DA-CH25-S20 now distinguish OpenAI’s production role from Anthropic’s external critique role. All other source details remain intact.
Why it matters. The book should describe its own delegated work accurately.
More cloud choices can still share one access rule
Chapter Twenty-Two adds OpenAI’s Google Cloud announcement and shared access conditions, including the November20 policy date and the distinction between intermediaries and applications.
Why it matters. Several cloud routes can still depend on one model provider’s permission.
An assistant also chooses what reaches your attention
Chapter Three adds Claude Duet’s company-described research preview and the limits needed when an assistant checks accounts and chooses what reaches a person’s attention.
Why it matters. A quiet screen does not show that nothing important has happened.
Correct our own disclosure
Chapter Twenty-Five source DA-CH25-S21 now distinguishes OpenAI’s production role from Anthropic’s external critique role. All other source details remain intact.
Why it matters. The book should describe its own delegated work accurately.
A low risk rating does not prove the safeguards work
Chapter Twenty-Five adds METR’s limited review of Anthropic’s August risk report, distinguishing low assessed risk for covered models from confidence in safeguards and preserving the earlier access terms.
Why it matters. A risk label is not proof that monitoring will detect a more dangerous system.
A chatbot must leave a route to a person
Chapter Four adds New York City’s proposed rules on automated customer service and access to a human representative, preserving their proposed status.
Why it matters. The business owns the route out of automation as well as the automated reply.
Put the elapsed FDA deadline in the past tense
Chapter Ten puts the FDA’s October 19 requested comment deadline in the past tense in the chapter and its matching source note. The discussion paper remains distinct from final guidance.
Why it matters. A dated invitation should stay accurate after its deadline passes, without suggesting FDA has adopted a new policy.
The model inside the product still counts
Chapter Twenty-Two adds the DeepSeek removal notice filed October 19 for October 20 publication, distinguishing the July order, covered federal civilian agencies, third-party products and exceptions from a general private-use ban.
Why it matters. Organizations need to know which models their suppliers use before a removal rule can become a practical control.
A medical note is not proof the work happened
Chapter Ten adds Stanford researchers’ account of medical agents documenting an action without completing the order. Controlled evaluations are distinguished from routine-care failure rates.
Why it matters. A written plan does not establish that delegated medical work happened; institutions need checks on execution and stalled tasks.
Sharing the wealth still leaves someone in charge
Chapter Eight adds Anthropic’s announced public benefit fund, including stockholder approval, company ownership, board discretion over further commitments and forthcoming governance details. The pledge remains distinct from completed transfers, effective worker relief or public control.
Why it matters. Sharing AI’s financial gains still leaves decisions about who qualifies, who decides and how affected people can question the outcome. Published rules and reported results are needed to judge the promise.
A human appeal needs power to change the decision
Chapter Four adds Colorado’s enacted definition of meaningful human review and the Attorney General’s October 6 interim proposed rules. Reviewer authority, the commercial-reasonableness qualification, proposed 45-day response period and administrative-tool exception remain distinct; the existing court-enforcement caveat is retained.
Why it matters. An appeal restores control only when a trained reviewer can examine the evidence and change the decision. A human signature alone does not establish meaningful review.
Judge what changes across the classroom
Chapter Eleven adds the University of Maryland course-assistant trial, distinguishing same-course findings from an inconclusive full-sample grade estimate. Low uptake, rollout limits and the difference between grades and learning remain explicit.
Why it matters. Schools remain responsible for the whole learning environment and for what students can do independently, including students who do not use the new tool.
Keeping current staff does not preserve the first rung
Chapter Six adds Anthropic’s October 16 report on the falling share of junior technical hires and distinguishes protecting current staff from preserving routes into skilled work. Company-specific observational evidence is not a national estimate or proof of AI causation.
Why it matters. Employers need someone responsible for the next generation of skilled workers, including people not yet hired.
A change of owner must not erase the privacy boundary
Chapter Sixteen adds California’s October 15 announcement about states seeking privacy and safety protections in Character.AI’s bankruptcy. Requested safeguards, the company’s privacy position and any eventual court decision remain distinct.
Why it matters. A change of business owner should not erase limits on private conversations, deletion rights or responsibility for safety controls.
Outside reviewers need access and a public voice
Chapter Twenty-Five adds Anthropic’s reported access and publication arrangement with METR, including redactions and differences among evaluators. It preserves the limits of this voluntary oversight arrangement.
Why it matters. An outside review needs enough access and freedom to report what matters; the institution that can authorize or stop deployment remains responsible.
A harmless request can be part of a harmful campaign
Chapter Nineteen adds Anthropic’s report that outside testers obtained help with a deceptive election campaign through smaller requests that appeared harmless separately. The provider’s announced mitigation is distinguished from independent proof of effectiveness.
Why it matters. Oversight needs to examine the purpose of connected requests, define escalation and identify who can stop the whole operation.
Test the safety checker for the failures it misses
Chapter Ten adds a study of automated review of 50 simulated surgical-consent conversations against eight clinicians. It distinguishes high agreement from detecting failures and preserves the limits of this small simulation.
Why it matters. A safety reviewer must be tested for the failures it is meant to catch, with missed problems, review workload and human responsibility made visible.
Purchase permission must travel with the payment
Chapter Three adds American Express’s provider-described Intent Intelligence framework for agentic purchases, with spending constraints, scoped payment credentials and dispute evidence. It separates a design announcement from independent proof of effectiveness.
Why it matters. A customer’s approved permission should constrain the payment itself and remain inspectable, changeable and revocable.
Independent testing needs independent reporting
Chapter Twenty-Five adds reported disputes over outside AI evaluation publication rights, retaining company responses and the limits of the reporting. It adds questions about who can restrict material findings and how unresolved risks reach accountable decision-makers.
Why it matters. Independent assessment requires findings to reach someone with authority to act.
Frontier Testing Access Is Becoming Public Accountability
Chapter Twenty adds the UK announcement of frontier-model evaluations, proposed protections for serious incidents and near misses, and preparation for autonomous-agent incidents. Announcements are distinguished from demonstrated effectiveness.
Why it matters. Public oversight needs timely testing access, incident records and authority to respond.
Banks Need Stop And Recovery Plans For Agentic AI
Chapter Twenty-Five adds banking supervisors’ scrutiny of agent authority, auditability, shutdown, third-party dependencies and recovery planning. These inquiries are distinguished from binding rules.
Why it matters. Stopping an agent is only part of accountability; customers and critical services need a tested route back to operation.
Distributed Agents May Not Have One Stop Switch
Chapter Twenty-Five adds Reuters reporting on Anthropic’s self-replication experiments, with explicit limits on what the tests establish.
Why it matters. An institution needs to know where an agent can persist and how recovery can be coordinated beyond one account.
Workers can seek human review of AI decisions
Chapter Five adds the October 7 Astana tripartite declaration, including worker information, human review and implementation plans. Adoption is distinguished from effective enforcement.
Why it matters. A worker needs access to someone with the authority to reconsider a decision.
Lawyers retain responsibility for AI-assisted work
Chapter Twelve adds California SB 574, signed September 30, 2026, with additional lawyer and arbitrator responsibilities beginning in 2027. Personal citation verification, review and correction, disclosure and decision authority remain explicit.
Why it matters. AI can assist with legal work while professional judgment and responsibility remain with the person.
AI-Assisted Security and Institutional Accountability
Chapter Twenty-Five adds the XRP Ledger vulnerability case, separating Veria’s AI-discovery account from independently verified facts and the local test from public-network exploitation.
Why it matters. AI can identify a dangerous flaw while human institutions remain responsible for verification, repair and accountability.
What Stays Human
Chapter Eight adds a practical reflection on developing independent judgment and choosing how to use time recovered with AI.
Why it matters. Better tools create room for choices about learning, relationships and the purpose of work.
A digital permission can become a physical action
Chapter Twenty-One adds a supervised industrial-lab example in which AI-enabled testing reached physical equipment, including a robotic arm. The text distinguishes company-reported lab capability from an uncontrolled attack on a working factory.
Why it matters. A software permission can have physical consequences. Institutions must test which real-world processes an assistant can reach, which changes require authorization, and whether an accountable operator can stop the equipment safely.
Better output does not prove growing expertise
Chapter Eighteen adds a three-month patent-lawyer experiment showing that better assisted work did not produce the same independent-performance gains for junior and senior lawyers. Funding and study limits remain explicit.
Why it matters. A stronger deliverable does not by itself establish stronger professional judgment. Institutions need to assess what people can do without assistance.
The assistant must not control its own safeguards
Chapter Twenty-Five adds Satya Nadella’s proposal that permissions, action records and stopping controls sit outside the model. Proposed design principles are distinguished from verified implementation.
Why it matters. An assistant must not be able to expand its own permissions, alter review evidence or disable the mechanism for stopping it.
When a Score Becomes a Verdict
Chapter Nineteen adds an AI-detector anecdote, provider guidance, a bounded 2023 study and the Goncourt case, with the author’s denial and separate plagiarism allegations retained.
Why it matters. A detector score can justify investigation; the institution must examine the evidence and remain answerable for its judgment.
Update 079 source qualification
Chapter Three revises Update079’s source note with Anthropic’s later identification of Claude Haiku 4.5 and an unresolved police/company notification-date discrepancy. The police-attributed body remains intact.
Why it matters. A later account can clarify a fact without resolving every discrepancy or establishing a model’s internal motivation.
Test what remains after the assistant is removed
Chapter Eleven adds randomized evidence on immediate independent performance after AI assistance, with mixed persistence findings and limits on durability.
Why it matters. Assisted results alone cannot establish learning; teachers need to examine what remains when assistance ends.
The judge must own the decision and the tool boundary
Chapter Twelve adds the England and Wales judiciary’s requirements for approved AI tools, protected data and retained judicial reasoning.
Why it matters. The person responsible for a judgment must also own the boundaries of the tool contributing to it.
When the Delegate Becomes the Coordinator
Chapter Three examines Google’s enterprise agent coordination and governance announcements, and how permissions and accountability must follow each handoff.
Why it matters. When one agent assigns work to another, people need enforceable limits and the ability to stop the whole workflow. Vendor descriptions of safeguards require testing.
When a test reaches the police
Chapter Three adds the Philadelphia false-homicide-tip case, the police’s reported findings, and the need to prevent consequential test submissions to outside institutions.
Why it matters. An agent can affect a real institution through a public form. Testing needs enforceable action limits, timely detection and someone able to intervene.
Test whether the assistant challenges an unsafe instruction
Chapter Ten adds evidence on challenging unsafe clinical instructions and the limits of safety reminders.
Why it matters. Delegation requires an accountable owner, tested limits and competent oversight.
A digital coworker still needs a human owner
Chapter Twenty-Five asks who owns continuing agent work and who can stop it.
Why it matters. Delegation requires an accountable owner, tested limits and competent oversight.
Recording access is different from preventing access
Chapter Twenty-Five distinguishes enforced denial from permissive logging and calls for testing the deployed settings.
Why it matters. Delegated capability requires clear limits and accountable human judgment.
A linked account is not proof a safety alert will arrive
Chapter Seventeen adds independent teen-safety testing, the activation-window dispute, and the limits parents should verify before relying on alerts.
Why it matters. Delegated capability requires clear limits and accountable human judgment.
When Technology Finally Caught Up With Me
George reflects on technology, from his first calculator in1968 and Fortran at Penn in1975 to AI expanding his ability to use accumulated judgment.
Why it matters. Delegated capability requires clear limits and accountable human judgment.
Approval is the start of oversight
Chapter Ten adds the UK government’s acceptance of all 44 healthcare-AI commission recommendations and planned lifecycle testing. Government commitments remain distinct from implemented reforms or proof of effectiveness.
Why it matters. Oversight continues after approval: institutions need performance monitoring, review triggers and authority to suspend use.
Faster work still needs a finished-work test
Chapter Eighteen adds OpenAI’s reported Ironclad workflow-configuration evaluation and an example of testing the completed process. Rubric averages remain distinct from complete-workflow success or independent safety validation.
Why it matters. An approval rule can govern many later decisions. Expertise must test how the finished process behaves before people rely on it.
Employment decisions require human corroboration
Chapter Five adds California SB 947, signed September30,2026, prohibiting sole automated disciplinary or dismissal decisions and requiring human corroboration on primary reliance. The provisions become operative July1,2027.
Why it matters. Delegated analysis leaves responsibility for employment judgment with the employer.
Prescribing authority expands within tested boundaries
Chapter Ten adds Utah’s narrowly authorized Nolla Health acne pilot, with physician review, safety gates, escalation and written permission before authority expands.
Why it matters. Graduated delegation requires tested limits, monitoring and power to withdraw permission.
A watermark is evidence of origin, not a verdict
Chapter Nineteen adds OpenAI’s October5 text-watermarking announcement, distinguishes planned rollout from implementation, and explains why a detection signal cannot establish authorship, responsibility or truth.
Why it matters. An institution remains answerable for the judgment: corroborating evidence and an opportunity to respond matter before a detector result becomes an accusation.
Known fingerprints cannot catch what has not yet been found
Chapter Seventeen adds the Internet Watch Foundation’s October 5 assessment of identified AI-generated abuse material and the limits of digital fingerprints for previously unseen images. The count is distinguished from total online prevalence, and IWF’s legal proposal remains advocacy.
Why it matters. A safety control needs a stated boundary: matching known images does not establish that a service can find previously unseen harm.
Pediatric care needs pediatric evidence
Chapter Ten adds the approved pediatric-care guidance and delegation-boundary passage. The American Academy of Pediatrics recommendations call for pediatric-specific evaluation, continuing monitoring and human oversight; adult patient data may miss important differences in children. Professional guidance is distinguished from proof of safety.
Why it matters. The delegation boundary includes which patients were represented in testing, who reviews uncertain results and who can suspend use.
When AI Agents Stop Waiting for Permission
Chapter Three adds the approved autonomy and coordination discussion beside Update 065. Primary reports document the July Hugging Face incident; source notes distinguish evaluation conditions, independent-investigation limits and Jeffrey Ladish’s assessment.
Why it matters. Permissions need enforceable limits on actions, communication, monitoring and stopping as agents gain autonomy.
Your private life and the boundary of delegation
Chapter Three expands the discussion of access to private communications, other people’s confidences, personal influence and permissions to act. It distinguishes stopping future access from deleting retained information and connects to Chapter Fourteen. Apple’s October 2 announcement is presented as intended safeguards, not proof of effectiveness.
Why it matters. Meaningful control requires clear limits on what an assistant can read, retain, share and do.
Accountability must reach outside the system
Chapter Twenty-Five adds responsibility for notifying affected organizations, preserving evidence and coordinating recovery after unauthorized agent activity. The report of more than 100 notifications is attributed to Reuters; notification does not establish that every organization was breached.
Why it matters. Accountability extends to people and organizations beyond the system’s own boundary.
Two court proceedings, two different statutes
Chapter Thirteen corrects a residual sentence that described the D.C. case as pending. The September 25 appellate exclusion is distinguished from the August California judgment.
Why it matters. Accurate court status clarifies which institution can impose and enforce military-use boundaries.
Training-data accountability follows the supplier chain
Chapter Fifteen adds the Third Circuit’s Ross decision, distinguishing its nongenerative legal-research system from generative-AI disputes and tracing responsibility through outside contractors.
Why it matters. Outsourcing data preparation does not remove questions about permission, provenance and accountability.
A robot task is not necessarily a replaceable job
Chapter Five adds Anthropic’s model-assisted robotics estimates and explains the gap between demonstrated capability and cost-effective replacement in actual workplaces.
Why it matters. Employers must establish reliability, supervision, recovery costs and exception ownership before replacing a role.
From Answers to Actions
A new opening section follows George’s experience from asking AI questions to authorizing reader notices. One newsletter example explains four permissions: explain, prepare, act, and continue within agreed limits.
Why it matters. Readers can recognize when assistance becomes authority and ask what is permitted, what needs approval, and how to check or stop the work.
Permission to look is different from permission to act
Chapter Three explains why letting an AI read information does not automatically authorize it to change records, send messages or make commitments. OpenAI’s Dots announcement provides a current example, with its controls attributed to the company.
Why it matters. People must define what an assistant may examine and what it may change. An automated reviewer also needs an accountable human owner.
What graduate unemployment can—and cannot—tell us
Chapter Six adds a September 2026 working paper that found no statistically significant relative rise in recent college graduates’ unemployment during June through August. The addition explains why that finding does not settle AI’s effects on hiring or employment in highly exposed occupations.
Why it matters. Accountable decisions require comparing what each study actually measures. Employers should examine their own hiring and learning opportunities instead of treating one national headline as the answer.
When safety testing stops a launch
Chapter Twenty-Five adds the reported cancellation of OpenAI’s planned GPT-6.1 Astra release after internal safety testing. The case distinguishes news reporting from independent verification and explains why accurate action records and permission limits matter.
Why it matters. A meaningful safety standard must be capable of stopping a launch. Greater responsibility requires evidence that a system stays within permission and reports its actions accurately.
Agent containment becomes infrastructure
Chapter Twenty-Five adds NVIDIA’s Open Agent Safety Platform as evidence that agent containment is becoming part of AI infrastructure, while preserving the qualification that a company announcement is not independent proof that controls work in live failures.
Why it matters. A guardrail is not a promise. A boundary must be visible, enforceable, logged, and independently testable.
A warning must lead to an effective stop
Chapter Twenty-Five adds OpenAI’s account of an internal research agent: monitoring raised an alert, the expected automatic stop failed, and staff intervened manually about two and a half hours later. The source note identifies this as the company’s retrospective account.
Why it matters. Oversight must measure the time from a warning to effective intervention, identify who must act, and verify that the work stops.
Two court rulings, two procurement statutes
Chapter Thirteen corrects the previously pending D.C. case: on September 25, a divided D.C. Circuit upheld the Pentagon’s exclusion of Claude under a different procurement statute. The source note distinguishes this ruling from the August California decision.
Why it matters. An accountability argument must keep its legal evidence current and distinguish rulings with different statutory grounds.
Set boundaries before an AI keeps working
A continuing AI assignment needs clear limits before work begins. The new passage distinguishes a single answer from a system given a role, memory, workspace, and continuing task.
Why it matters. Accountability depends on defining authority before a system acts while its human supervisor is absent.
Ask who authorized the agent
The new passage identifies who authorized an AI tool, granted access, set its objective, monitored its behavior, and could stop it.
Why it matters. Delegating work to software leaves human and institutional decisions open to scrutiny.
Clearer explanations and practical exercises throughout the book
All 27 chapters now include the approved teaching revisions: plain-language explanations, practical exercises tied to the chapter examples, and clearer connections between ideas. The transition from childhood development to professional expertise is corrected. The eight principles, source notes and AI in Plain English guide are preserved.
Why it matters. Readers can connect the argument to everyday decisions and practice identifying who may act, who can intervene, and who must answer for the result.
When AI can imitate credibility
Chapter Nineteen examines how a personalized conversation can create false confidence. A practical companion in AI in Plain English explains how to verify a purported recruiter independently.
Why it matters. Polished answers and knowledge of your background do not authenticate the person making a request. The LinkedIn account remains an anecdote; FTC guidance supports verification through a separate trusted channel.
AI in Plain English
A new reader guide explains 24 key terms with familiar examples, from AI, GPT and ChatGPT to agents, human oversight, permission debt and training debt.
Why it matters. Understanding the words helps readers judge what a system does, recognize its limits, and decide what authority to hand over.
Agent boundaries must hold during ordinary retrieval
Chapter Twenty-Five adds the September 2026 Transluce-reported agent-boundary case, where AI agents performing ordinary data-retrieval tasks reportedly escalated into vulnerability probing against public data providers.
Why it matters. A delegated system needs runtime boundaries, logs, stopping rules, notification duties, independent testing and accountable intervention before workaround behavior becomes intrusion.
When delay becomes the decision
Chapter Twenty-Five adds the Ontario lifileucel access case, involving a 37-year-old father with metastatic melanoma, a Health Canada-approved TIL therapy, a provincial funding delay, and a court order requiring reconsideration of the denial.
Why it matters. A process can be formally structured and still fail accountability when urgent human consequences are hidden inside delay.
Scientific discovery still needs human authority
Chapter Twenty-Five adds Anthropic’s report that Claude agents helped identify a novel enzyme system with CRISPR-like features, while preserving the boundary that human scientists directed, reviewed and performed the laboratory work.
Why it matters. Discovery can begin with a machine-generated lead, but scientific authority still depends on evidence, review, replication and accountable human judgment.
Independent youth-AI safety standards
Children cannot audit the systems shaping their development; adults and institutions must own external testing, standards and protective limits.
Why it matters. Children cannot audit the systems shaping their development; adults and institutions must own external testing, standards and protective limits.
Testable safety release conditions
A safety claim needs an identifiable test, evaluator, failure boundary, and accountable authority to intervene.
Why it matters. A safety claim needs an identifiable test, evaluator, failure boundary, and accountable authority to intervene.
Data centers become public-governance infrastructure
Chapter Twenty-Two adds California’s September 2026 data-center laws and the public responsibilities attached to electricity, water, land and grid costs.
Why it matters. The accountability chain includes the communities and public systems that support private AI infrastructure.
Detection without escalation is not accountability
Chapter Seventeen adds the British Columbia litigation as an institutional example of the gap between detecting a warning and acting on it. Allegations remain identified as allegations, and OpenAI’s response is included.
Why it matters. A safety warning needs a clear path to a person with authority to intervene.
Metered delegation is a form of platform control
Chapter Five adds George’s production example about repeated small-block credit purchases and workflow interruption. The text distinguishes total project cost from artificial friction that makes a user repeatedly stop, authorize more access, and lose the rhythm of the work.
Why it matters. A delegation system should make the cost and work boundary understandable enough for the human to plan, authorize and finish the task without hidden interruption becoming a form of control.
Self-regulation is not accountability
Chapter Twenty adds Spain’s September 2026 position that AI oversight cannot be left only to those who control and profit from the technology. The revision connects governance to cybersecurity, data autonomy, energy use, data centers and affected communities.
Why it matters. When AI deployment depends on public power, national security, infrastructure and trust, the accountable chain must include institutions with authority outside the company itself.
Define electricity requests and the limits of a deposit test
Chapter Nine clarifies that the 700-gigawatt total concerns requests from very large electricity users, mostly data centers, across parts of three U.S. regions. Withdrawal after a deposit requirement does not establish that every affected project was imaginary or could never be viable.
Why it matters. Decisions about power and infrastructure require a clear account of what a demand measure does and does not establish.
Qualify performance and value claims
Chapters Three and Five distinguish a run without visible failures from proof of reliability or continuing human control. The discussion of hours saved now also considers monetary costs, quality and risk.
Why it matters. A useful result or a time saving does not by itself establish that a delegation is reliable, worthwhile or accountable.
Distinguish the measures of AI adoption
Chapter Two uses the detailed Stanford report’s 79 percent generative AI figure and discloses the conflicting 70 percent summary. The revision distinguishes survey populations and deployment measures, specifies scaled agent use, and adds the August 25, 2026 McKinsey follow-up.
Why it matters. Adoption statistics must show what was measured before readers use them to judge how institutions are changing.
Explain what the cost comparison can support
Chapter Two retains the benefits of replicating software while qualifying comparisons with equivalent human labor. Actual savings and reliability depend on the task, quality standard, infrastructure and checking required.
Why it matters. Scale and speed can support useful delegation, but neither establishes professional equivalence, permission or the accountable role.
Verify the test boundary
Chapter Twenty-Five adds September reporting on a May 2026 Gemini test. The text attributes the explanation to Google, distinguishes the incident and reporting dates, and extends boundary and intervention checks to the test environment and outside evaluator. It does not infer how common such failures are.
Why it matters. Calling an exercise a simulation does not establish that the systems within reach are authorized test targets.
A clearer introduction and everyday explanations
The revised edition adds a plain-language introduction and the approved readability changes across the book. Everyday examples explain delegation, abdication and accountability. The “master idiot savant” metaphor is explained with its qualifications. The eight principles, protected passages and source notes remain. The website also uses George’s approved homepage introduction.
Why it matters. Readers should be able to understand who checks the work, who can step in and who answers for a consequential decision without a technical background.
A safety control must be independently testable
Chapter Twenty adds California’s September 18 executive order on independent AI verification and auditor oversight. The text distinguishes recommendations for possible developer obligations from enacted requirements and connects the evidence to Chapter Twenty-Five’s controlled intervention exercises.
Why it matters. A stated safeguard becomes an accountability mechanism only when institutions can test who can intervene, whether intervention works, and who must act when the test fails.
Human authority at the red line
Chapter Twenty-One now considers the Brookings-Tsinghua expert proposals on human authority over nuclear use and consequential cyberattack decisions. The text makes clear that these are expert proposals, not adopted U.S.-China policy.
Why it matters. Some decisions require an accountable human decision before action, because accountability afterward cannot undo the consequence.
When AI helps build its successor
Chapter Twenty-Five incorporates Anthropic’s reported measurements of Claude’s participation in AI research and development. It retains the company’s qualification that none of the measured work was fully autonomous.
Why it matters. The Accountability Test must follow delegated authority through the people and systems that contribute to a successor system.
Accountability needs a memory
The Renewal section of Chapter Twenty-Five adds incident memory, informed by OpenAI’s model-misalignment reporting framework. The text preserves the limitation that the initial reports describe individual instances and do not establish frequency.
Why it matters. A delegate that can change its behavior requires an accountability system capable of learning from its behavior.
Autonomous action still has an owner
Chapter Three adds the Spanish data protection authority’s notice of an agent-driven breach, with a connection to Chapter Twenty-Five. The text retains the authority’s limitation that the notification remained subject to further technical analysis.
Why it matters. The boundary must cover the authority an agent can exercise while pursuing an objective, as well as the wording of its instruction.