A FairByDesign reporting series

The Control File

Who can actually stop an AI system, and what stops when they do? Since June we have been following that question through incidents, export controls, protocols and governance claims. This page collects the reporting so far and what comes next.

The question we are following

“The button says stop. Excellent. What stopped?” Do the tasks, credentials and consequences stop with the chat, and can anyone reconstruct afterwards what the system actually did?From The Kill-Switch Test, September 8, 2026

The reporting so far

Newest first. Mercury Intelligence pieces show a public summary; members can read the full investigation.

Testing it, not just reporting it

In progress · September 2026

Evidence Lab 001 — The Agent Control Gate

A controlled, reproducible experiment asking whether runtime controls can stop unauthorized AI-agent tool actions, and whether the evidence left behind can reconstruct what happened. The protocol and project plan are published.

See the study
Next installment

The Lab 001 results

The next part of this file will report what the experiment found, including failures and limits, with the method and data needed to check it.

Get the Mercury Brief freeListen & watch

Help us report this

Have you tested what happens when an AI agent is interrupted in a real system? We are looking for evidence of what stopped, what continued, and how the event was reconstructed, including tests that challenge the premise of this file.

General tips: info@fairbydesign.org. Sensitive material: viktoriabakos@proton.me (Proton Mail, end-to-end encrypted when you write from a Proton account). How we handle sources.

Go deeper with Mercury Intelligence