AI Threat · Module 5 · Machines Beyond Control

Gradual Disempowerment and Correlated Failure

The lesson examines a path to the machine dystopia that needs no single moment: delegation in small, reasonable steps and correlated failure at machine speed. Participants learn the argument for gradual disempowerment, the distinction between decisive and accumulative risk, the lesson of the 2010 flash crash and of normal accidents, and the five things that erode inside one organisation. They build a delegation register entry and design a reversibility test.

Lesson 26 of 35Chapter 2675 minutes

Read the chapterThe whitepaperThe slides

All courses / AI Threat / Module 5 / Chapter 26

Learning objectives

After the lesson the participant can:

Key concepts

Gradual disempowerment
The argument that systems stay responsive to people partly because they depend on human participation. Each time AI replaces human labour or cognition, that dependence and the reason to remain responsive weaken, without anyone intending it.
Decisive and accumulative risk
Kasirzadeh's vocabulary: the decisive type is an abrupt catastrophe; the accumulative type arises from many smaller disruptions that build up and weaken resilience until a shock that would once have been absorbed causes collapse.
Circuit breaker
A pre-decided limit that acts at machine speed without waiting for a person, such as budgets, rate limits and automatic pauses. It is often the only form of human control fast enough, as the flash crash showed.
Delegation register
A list of every material function handed to an AI system, with the decision behind each step, the usage mode, the human role that remains and the path back. It lists functions, not systems, because what matters is the human capacity no longer exercised.
Reversibility test
A test of whether the organisation could perform a delegated function at an acceptable level without the AI system for a defined period. A failed test freezes further delegation in that function until the path back is restored.

Interactive exercises

Do them here and get feedback at once. Choose a card and then where it belongs, or drag it.

Interactive exercise 1 · Sort

Observable, expected or speculation

Sort each claim about gradual disempowerment and correlated failure under the label the chapter's verdict gives it.

Interactive exercise 2 · Scenario

After a failed reversibility test

Apply the practical guide on running a reversibility test and acting on its result.

Teaching plan

12 minThe teacher rereads The Machine Stops as three hypotheses, then presents the gradual disempowerment argument and the explicit and implicit mechanisms that keep systems responsive.
12 minExplain decisive and accumulative risk, the flash crash by mechanism, and normal accidents; participants name one tightly coupled process in their organisation that agents touch.
11 minWalk a single function through the steps from drafting assistant to agent acting within rules, listing what erodes at each step: skill, process, capacity, interfaces and memory.
30 minExercise in groups: write a delegation register entry and a reversibility test for one function, modelled on DEL-NR-BEN-01, with acceptance criteria and an abort rule.
10 minStage the debate, where both sides rest on reversibility as a checkable fact, and review the verdicts on T8, T2 and T9.

Discussion

  1. Risk registers record fallback to manual process as a mitigation without anyone having run the manual process for years. Which fallback in your organisation would you least like to be asked to demonstrate tomorrow?
  2. Hansa's test found that an evaluation check used to approve the fallback called the primary provider's model. Why are hidden dependencies of this kind so hard to see in normal operation?
  3. The concern side holds that the ability to change course erodes as delegation deepens; the calm side holds that societies and organisations can change course. What would count as evidence for each in your own setting?

Written exercise

Exercise · 30 minutes

A delegation register entry with a reversibility test

Choose one function in your organisation that has been handed, step by step, to an AI system, or Hansa Mutual's claims triage. Write the register entry: the function, the system and usage mode, the decisions behind each step, the human role that remains, the function owner and the reversal path with any legal constraints. Then design the reversibility test: the scenario and its period, the test form (desk exercise or live exercise), the acceptance criteria written before the test, the abort rule and who decides, and what will be measured, including hidden dependencies. State what each possible result means: passed, passed with conditions or failed, and what a failure freezes. Name the forum that receives the result.

Deliverable: A register entry with reversal path and a test design with scenario, criteria, abort rule, measures, result categories and reporting line.

Self-test

Choose an answer to see whether it is right, or open the answer below each question.

  1. Why does the gradual disempowerment argument not require misaligned AI, according to the chapter?

    Show the answer

    C. Systems that do exactly what their operators ask, in competition, are enough
    The implicit check is that states, firms and culture need people. As AI replaces participation, that need and the responsiveness it produced weaken, without any system having goals of its own.

  2. What does the 2010 flash crash show about remedies for correlated failure at machine speed?

    Show the answer

    D. Automatic pauses and circuit breakers designed by people in advance act fast enough where people cannot
    No algorithm malfunctioned; a proxy failed. A brief automatic pause helped the market recover, which is why pre-decided limits belong in any agent-run process.

  3. What was the result of Nordvik's reversibility test RVT-NR-2027-01, and what followed from it?

    Show the answer

    A. Passed with conditions; further delegation of benefits triage is frozen until the conditions are met
    The checklist referred to a retired form, two newer caseworkers had never triaged unranked claims and capacity was short; each finding is cheap to fix now and costly in a real outage.