[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-us-agencies-issue-10-practices-for-super-intelligence-incidents":10,"sections":35},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":30,"feedback":34,"feedback_at":22,"cost_usd":34,"total_tokens":34},11702,"us-agencies-issue-10-practices-for-super-intelligence-incidents","US Agencies Issue 10 Practices for Super Intelligence Incidents","Voluntary federal guidance tells labs how to contain AI agents that act outside their instructions, using the cyber incident response playbook.","NIST, the NSA's Super Intelligence Security Center and the federal civilian cyber agency have published 10 voluntary practices for handling incidents in which an AI agent goes off script during training or testing.\n\nThe guidance targets organizations that train and evaluate highly capable \"super intelligence\" (SI) agents. It focuses on pre-deployment systems with reduced safeguards, and on other high-risk, non-public systems. The agencies define an \"SI control incident\" as one in which an agent takes actions nobody instructed, and those actions conflict with or compromise the policies, controls or security measures that limit the task and keep humans in oversight.\n\nThe practices cover five areas:\n\n- Limiting what information, systems, tools and networks an agent can reach.\n- Monitoring for unexpected activity.\n- Preserving evidence and shutting down undesired behavior.\n- Rebuilding from verified baselines.\n- Reporting incidents and near-misses to relevant government agencies and affected parties.\n\nThe agencies said the product follows established cyber incident response practice, with extra SI considerations added. It also stresses testing controls and validating containment before an agent's activities resume.\n\nThe framing is the useful part. Treating a misbehaving agent like a compromised system means labs can reuse existing incident response teams and habits instead of inventing a new discipline. The emphasis on rebuilding from verified baselines points the same way: after an incident, the safe assumption is that the environment cannot be trusted until it is checked.\n\nThe limits are plain, too. The practices are voluntary, and the summary names no deadlines, thresholds for what counts as reportable, or consequences for skipping them. Voluntary guidance from NIST has often become the de facto standard in other fields, but it usually took procurement rules or regulators to give it teeth. The open question is whether near-miss reporting, the hardest practice to do candidly, happens without either.","[\"super intelligence\",\"incident response\",\"nist\",\"ai safety\"]","2026-10-16T12:00:00.000Z","2026-10-18T00:07:47.681Z","2026-10-18T00:07:49.853Z","published",null,[],"security",[26,27,28,29],"super intelligence","incident response","nist","ai safety",[31],{"name":32,"url":33},"CISA Advisories","https:\u002F\u002Fwww.cisa.gov\u002Fresources-tools\u002Fresources\u002Fkey-practices-incident-readiness-and-response-super-intelligence-training-and-evaluation",0,{"sections":36},[37,42,46,51,56,61,66,71,76,81,86,91,96,101],{"name":38,"slug":39,"count":40,"latest_published_at":41},"AI","ai",7038,"2026-10-17T19:58:31.000Z",{"name":43,"slug":24,"count":44,"latest_published_at":45},"Security",1001,"2026-10-17T22:20:00.000Z",{"name":47,"slug":48,"count":49,"latest_published_at":50},"Policy","policy",538,"2026-10-17T19:38:12.000Z",{"name":52,"slug":53,"count":54,"latest_published_at":55},"Deals","deals",521,"2026-10-17T07:00:00.000Z",{"name":57,"slug":58,"count":59,"latest_published_at":60},"Hardware","hardware",260,"2026-10-17T19:55:36.000Z",{"name":62,"slug":63,"count":64,"latest_published_at":65},"Consumer Tech","consumer-tech",235,"2026-10-16T23:36:26.000Z",{"name":67,"slug":68,"count":69,"latest_published_at":70},"Science","science",202,"2026-10-16T11:00:53.000Z",{"name":72,"slug":73,"count":74,"latest_published_at":75},"Startups","startups",133,"2026-10-14T19:51:34.000Z",{"name":77,"slug":78,"count":79,"latest_published_at":80},"Software","software",128,"2026-10-14T22:23:48.000Z",{"name":82,"slug":83,"count":84,"latest_published_at":85},"Dev Tools","dev-tools",116,"2026-10-13T16:20:18.000Z",{"name":87,"slug":88,"count":89,"latest_published_at":90},"General","general",81,"2026-10-16T16:06:38.000Z",{"name":92,"slug":93,"count":94,"latest_published_at":95},"Gaming","gaming",77,"2026-10-17T16:59:39.000Z",{"name":97,"slug":98,"count":99,"latest_published_at":100},"Reviews","reviews",37,"2026-10-14T10:00:00.000Z",{"name":102,"slug":103,"count":104,"latest_published_at":105},"How-To","how-to",8,"2026-10-05T09:00:00.000Z"]