{"schemaVersion":"nuwa-current-record-1","version":"2026-10-29.1","publication":"published","work":{"id":"misuse-safeguard-principles","title":"Principles for evaluating misuse safeguards of frontier AI systems","aliases":[],"authors":[],"primaryFunction":"governance","secondaryFunctions":[],"kind":"method","sourceId":"misuse-safeguard-principles-publication","attributionSourceId":"misuse-safeguard-principles-publication","originalUrl":"https://www.aisi.gov.uk/research/principles-for-evaluating-misuse-safeguards-of-frontier-ai-systems","publicationDate":"2025-02-04","updatedOn":"2026-10-25","areas":[],"scopeNote":{"en":"Relevance is assigned to the research question and stated conditions of the work. A topic tag is not a risk rating.","zh":"风险关联依据研究问题及明确条件建立，主题标签不代表风险评级。"},"protocolIds":[],"contributions":[{"organizationId":"aisi","role":"publisher","sourceId":"misuse-safeguard-principles-publication","locator":"Official publication masthead and article byline"}],"summary":{"en":"Proposes practical principles for defining and evaluating misuse safeguards and documenting decision-relevant evidence.","zh":"提出定义、评测滥用防护及记录决策相关证据的实用原则。"},"note":{"question":null,"method":null,"finding":null,"supports":null,"limits":null,"connections":null},"resources":[{"label":"Read the full paper","url":"https://cdn.prod.website-files.com/663bd486c5e4c81588db7a1d/67a23823ef4a296bb6c92dd4_Principles%20for%20Evaluating%20Misuse%20Safeguards%20of%20Frontier%20AI%20Systems%20(1).pdf"}],"noteStatus":{"question":"limited","method":"limited","finding":"limited","supports":"limited","limits":"limited","connections":"limited"},"noteAvailability":{"en":"A substantive NUWA research note is not yet available. The repeated draft sections were removed pending review of the original methods, findings and limitations; use the original publication for the research account.","zh":"实质性的 NUWA 研究笔记尚未完成。重复草稿章节已移除，待核查原始方法、发现与限制；研究内容请以原始出版物为准。"},"noteSourceLocator":"No complete section-level method/results/limitations review completed for this note; cached original page and any chart audit retained as discovery evidence.","tags":[]},"reading":{"id":"misuse-safeguard-principles","title":"Principles for evaluating misuse safeguards of frontier AI systems","en":{"takeaway":"Safeguard assessment starts with a threat-specific requirement and an evidence-sufficiency argument.","question":"What must be demonstrated before a set of deployed misuse safeguards can be called sufficient?","design":"The principles organize requirements, evidence collection, ongoing assessment and sufficiency review, explicitly separating unacceptable outcomes, threat actors, scenarios and assumptions.","findings":["Evidence gaps must be addressed or justified against the requirement rather than hidden by an aggregate score.","Third-party review should document denied information and redactions; post-deployment plans need to detect changed sufficiency."],"interpretation":"NUWA interpretation: refusal rates become decision-relevant only after the actor, access and unacceptable outcome are specified.","limits":"The document is an evolving framework for developer-side misuse safeguards; it excludes other risk types and does not certify any particular system.","connections":["NUWA connection: extreme-risk-evaluations supplies a broader governance workflow; misuse-safety-case adds a concrete structured argument that needs these requirement/evidence links."],"decisionRelevance":"NUWA recommendation: use the requirement-to-evidence map as an audit template and keep evidence approval distinct from publication of the claim."},"zh":{"takeaway":"防护评估始于特定威胁要求及证据充分性论证。","question":"要称部署中的滥用防护足够，需要证明什么？","design":"原则组织要求、证据收集、持续评估与充分性审查，并区分不可接受后果、威胁主体、场景和假设。","findings":["证据缺口须被补足或对照要求说明，不能藏在聚合分数中。","第三方评审应记录拒绝提供的信息与删节；部署后计划需发现充分性变化。"],"interpretation":"NUWA 解读：只有明确主体、访问与不可接受结果后，拒答率才具有决策含义。","limits":"文件是持续演进的开发者滥用防护框架，排除其他风险类型，也不认证任何具体系统。","connections":["NUWA 关联：极端风险评估提供更广治理流程；滥用安全论证需要这种要求与证据连接。"],"decisionRelevance":"NUWA 建议：将要求证据映射用作审计模板，证据批准与主张发布分别记录。"},"sourceRefs":[{"sourceId":"misuse-safeguard-principles-publication","url":"https://cdn.prod.website-files.com/663bd486c5e4c81588db7a1d/67a23823ef4a296bb6c92dd4_Principles%20for%20Evaluating%20Misuse%20Safeguards%20of%20Frontier%20AI%20Systems%20(1).pdf","locator":"Recommendation 1: Clearly State Safeguard Requirements, pp.4–5","version":"Selected original resource https://cdn.prod.website-files.com/663bd486c5e4c81588db7a1d/67a23823ef4a296bb6c92dd4_Principles%20for%20Evaluating%20Misuse%20Safeguards%20of%20Frontier%20AI%20Systems%20(1).pdf; sha256:8b443d115568617ff76bc6cbfaa17e0d345bc01f989f88b6ea0fd742ff066a78; archived source capture; exact capture time not independently established","artifactSha256":"8b443d115568617ff76bc6cbfaa17e0d345bc01f989f88b6ea0fd742ff066a78"},{"sourceId":"misuse-safeguard-principles-publication","url":"https://cdn.prod.website-files.com/663bd486c5e4c81588db7a1d/67a23823ef4a296bb6c92dd4_Principles%20for%20Evaluating%20Misuse%20Safeguards%20of%20Frontier%20AI%20Systems%20(1).pdf","locator":"Recommendations 2–4: evidence gathering and post-deployment assessment","version":"Selected original resource https://cdn.prod.website-files.com/663bd486c5e4c81588db7a1d/67a23823ef4a296bb6c92dd4_Principles%20for%20Evaluating%20Misuse%20Safeguards%20of%20Frontier%20AI%20Systems%20(1).pdf; sha256:8b443d115568617ff76bc6cbfaa17e0d345bc01f989f88b6ea0fd742ff066a78; archived source capture; exact capture time not independently established","artifactSha256":"8b443d115568617ff76bc6cbfaa17e0d345bc01f989f88b6ea0fd742ff066a78"},{"sourceId":"misuse-safeguard-principles-publication","url":"https://cdn.prod.website-files.com/663bd486c5e4c81588db7a1d/67a23823ef4a296bb6c92dd4_Principles%20for%20Evaluating%20Misuse%20Safeguards%20of%20Frontier%20AI%20Systems%20(1).pdf","locator":"Recommendation 5: assess sufficiency and evidence gaps, pp.14–16","version":"Selected original resource https://cdn.prod.website-files.com/663bd486c5e4c81588db7a1d/67a23823ef4a296bb6c92dd4_Principles%20for%20Evaluating%20Misuse%20Safeguards%20of%20Frontier%20AI%20Systems%20(1).pdf; sha256:8b443d115568617ff76bc6cbfaa17e0d345bc01f989f88b6ea0fd742ff066a78; archived source capture; exact capture time not independently established","artifactSha256":"8b443d115568617ff76bc6cbfaa17e0d345bc01f989f88b6ea0fd742ff066a78"}],"publication":{"state":"published","publishedOn":"2026-10-29","authorizationReference":"user-authorized-global-index-publication-2026-10-29","reviewedCandidateId":"local-6efe31bc4a0c0f37"},"review":{"state":"published-note","sourceScope":"full-text","availableScope":null,"readingCoverage":"selected substantive sections of the full source body","completePaperAudit":false,"independentEvidenceReview":"pending-human-review","bilingualEditorialReview":"pending-human-review","authorship":"model-assisted-research-note","preparedFingerprint":"659cf52b9daa7b92a92cb445da5dbf99e2b2669e1d7e17a29a2a53257f97a4e8"}},"sources":[{"id":"misuse-safeguard-principles-publication","title":"Principles for evaluating misuse safeguards of frontier AI systems","url":"https://www.aisi.gov.uk/research/principles-for-evaluating-misuse-safeguards-of-frontier-ai-systems","version":"Source capture 2026-10-25","publicationDate":"2025-02-04","datePrecision":"day","type":"research-publication","verifiedOn":"2026-10-25","documentId":"https://www.aisi.gov.uk/research/principles-for-evaluating-misuse-safeguards-of-frontier-ai-systems"}]}