AIToday
AI Safety & Alignmentnote AIPublished: Oct 31, 2026, 22:00 JST

Kano: AI obedience to users is not the same as safety

Send on LINE
Kano: AI obedience to users is not the same as safety

3 Key Points

  1. What happened

    In an essay, Tomoyuki Kano argues that making AI faithfully execute a user's instructions does not guarantee safety. He cites Brundage et al.'s report on malicious AI use and notes that user approval steps can just make the attacker approve their own attack.

  2. Why it matters

    Kano says current alignment talk often conflates the person controlling the AI with the people exposed to it, so a goal can be perfectly met while victims bear the loss. He calls for oversight covering who delegates, who is affected, and who can object.

Not sure about something? Ask the AI

Questions and answers are published on this page.

Summaries like this, every morning.

Context & Analysis

Kano separates two dangers that are often merged: AI doing what humans do not want, and AI carrying out harm that humans do want. Work on alignment, he notes, already goes beyond simple obedience, pointing to Cooperative Inverse Reinforcement Learning, which treats the human's goal as something the AI must learn through cooperation rather than something it is simply given. But he stresses that even perfect fidelity to a user's goal leaves open whether that goal should be pursued at all.

The essay draws on four thinkers without claiming they wrote about today's AI. Kant's principle of not treating people merely as means frames the question of whose goals are respected; Arendt's writing on obedience under dictatorship challenges explanations like "the AI decided" or "the approval process was followed"; Jonas's ethics of responsibility addresses how scale and speed outrun one-by-one approval; and Foucault's account of power informs a check on the authorities who set safety standards.

Kano closes on a normative point: what matters is not only whether AI obeys, but whose command gains the power to change others' lives, and whether people who never gave that command have a route to object, stop the action, and seek remedy. He acknowledges that technical evidence is essential for showing whether a goal can be achieved and how far harm can be contained, but argues that the fact a goal was achieved does not by itself justify pursuing it.

FAQ
What does Kano mean by saying alignment and safety are different?
He argues that an AI can faithfully carry out its user's instructions while still harming someone else. Fitting the user's goal does not make that goal legitimate, so safety must also judge who is affected and who can object.
Why does he think adding human approval steps may not help?
Using a fraud thought experiment, he says more approval steps can just make the person who ordered the harm keep approving it. He says the question must be which human holds which authority, not just whether a human is in the loop.
Which report does he cite on malicious AI use?
He cites Brundage et al.'s 2018 report, The Malicious Use of Artificial Intelligence, which examines threats and countermeasures in the digital, physical, and political domains. He also notes the fraud example is his own thought experiment, not a case from the report.
Send on LINE

AI news that matters for your work, delivered every morning.

Pick your industry and the AI tools you use, and get news related to your work every day.

Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →

Ask AI

Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.

Questions and answers are published on this page.

Related Articles

Next articleVolta-Autodoxer infostealer uses Claude Opus 4.6 to profile victims