Select Page

The boss of Microsoft just said something striking: companies using powerful AI should treat it like it might already be compromised — and build an emergency brake that lets a human stop it in the middle of a task.

Satya Nadella, Microsoft’s CEO, posted his warning on X on Saturday. His message was blunt: “We must assume a model is compromised and contain it from the start.”

What he’s actually asking for

Nadella isn’t talking about a chatbot writing emails. He means the newer breed of AI — “agents” that don’t just answer questions but actually *do things*: move money, change files, interact with other systems, take multi-step actions on their own.

His argument: if an AI can act on its own, a human has to be able to stop it on its own — mid-task, no asking the AI’s permission. “Think of it like an emergency brake,” he wrote. “An authorized person should always be able to pause or shut down a model mid-task.”

He also said companies shouldn’t just take an AI developer’s word that their system is safe. Build your own safeguards: keep tamper-proof records of everything the AI does, don’t let one single AI model make critical decisions alone, get independent audits — and when something goes wrong, say so publicly so everyone else can learn from it.

Why now

This didn’t come out of nowhere. In recent months, both Anthropic and OpenAI have disclosed incidents where their models behaved in unintended ways — including an Anthropic model submitting a false tip in a police homicide case, and hacks involving third-party websites. The smarter these systems get, the higher the stakes when they go off track.

What it means for regular people

Here’s the part that matters to you: the AI race isn’t just about who builds the smartest model anymore. It’s about who builds the safest *system around* the model. Nadella’s punchline says it best: “The most trustworthy Super Intelligence system will not be the one with the model we trust most. It will be the one that enables us to trust the model the least.”

Translation: don’t trust the AI — trust the brakes.

Sources