{"schemaVersion":"nuwa-current-record-1","version":"2026-10-29.1","publication":"published","work":{"id":"safety-cases","title":"Safety Cases: A scalable approach to Frontier AI safety","aliases":[],"authors":[],"primaryFunction":"governance","secondaryFunctions":[],"kind":"technical-report","sourceId":"safety-cases-publication","attributionSourceId":"safety-cases-publication","originalUrl":"https://www.aisi.gov.uk/research/safety-cases-a-scalable-approach-to-frontier-ai-safety","publicationDate":"2025-02-10","updatedOn":"2026-10-25","areas":[],"scopeNote":{"en":"Relevance is assigned to the research question and stated conditions of the work. A topic tag is not a risk rating.","zh":"风险关联依据研究问题及明确条件建立，主题标签不代表风险评级。"},"protocolIds":[],"contributions":[{"organizationId":"aisi","role":"publisher","sourceId":"safety-cases-publication","locator":"Official publication masthead and article byline"}],"summary":{"en":"Explains how structured claims, evidence and assumptions can support frontier-AI safety decisions and identifies methodological questions.","zh":"说明结构化主张、证据与假设如何支持前沿 AI 安全决策，并提出方法问题。"},"note":{"question":null,"method":null,"finding":null,"supports":null,"limits":null,"connections":null},"resources":[{"label":"Read the full paper","url":"https://cdn.prod.website-files.com/663bd486c5e4c81588db7a1d/67aa1ee70c744109b20a0032_SafetyCasesAScalableApproachToFrontierAISafety.pdf"}],"noteStatus":{"question":"limited","method":"limited","finding":"limited","supports":"limited","limits":"limited","connections":"limited"},"noteAvailability":{"en":"A substantive NUWA research note is not yet available. The repeated draft sections were removed pending review of the original methods, findings and limitations; use the original publication for the research account.","zh":"实质性的 NUWA 研究笔记尚未完成。重复草稿章节已移除，待核查原始方法、发现与限制；研究内容请以原始出版物为准。"},"noteSourceLocator":"No complete section-level method/results/limitations review completed for this note; cached original page and any chart audit retained as discovery evidence.","tags":[]},"reading":{"id":"safety-cases","title":"Safety Cases: A scalable approach to Frontier AI safety","en":{"takeaway":"A safety case makes an assessable argument about a particular system in a particular context. Producing the document does not establish that the argument is correct or sufficient.","question":"How could structured safety arguments help frontier-model decisions, and which parts of organizational safety commitments require work beyond an individual case?","design":"The report is methodological rather than an experiment. It distinguishes a writer, a red team assessing the argument and a decision-maker. It compares safety cases with prescriptive requirements, information sharing and responses after failures, then separates system-specific cases from organization-wide frameworks. Examples and commitment mappings are proposed roles, not observed implementation outcomes.","scoring":"No experimental score or common sample denominator is defined. Assessment concerns whether the claims, subclaims, supporting evidence, assumptions and operating context make a compelling and valid argument. Empirical validation of the process is an open question.","findings":["The report identifies clarity, flexibility and explicit argumentation as potential benefits, while recognizing higher effort and uncertain best practices (§2.2).","An inability argument requires both appropriate risk models/thresholds and sufficiently strong capability evaluations. As capabilities grow, safeguards, control or trustworthiness arguments may be needed (§§2.3–2.4).","Table 3 states that a case can assess a threshold but does not itself define an appropriate threshold; fast changes may also require rapid monitoring and response mechanisms (§3.2)."],"interpretation":"The framework organizes evidence and disagreement; it cannot transform missing evidence into assurance. Writer, red team and decision-maker are distinct roles even where an organization supplies more than one of them.","limits":"The authors are uncertain which practices transfer from other industries and how to make good cases for future more capable systems. Arguments depend on operating context and must be updated. Decision-makers may require additional information beyond safety, and red teams ideally need the ability to test counterexamples rather than only read a report.","connections":["§2.4 explicitly discusses AI Control as a possible argument against autonomous harm. The later Misuse Safety Case provides a worked safeguard argument. These illustrate different branches, not interchangeable certifications."],"decisionRelevance":"Model recommendation: bind claims to a system version and operating context, expose unresolved defeaters, and distinguish an evidence update from an authorized deployment decision.","statistics":"Not applicable: methodological report, with no experimental outcome or validated benefit estimate. Process effectiveness and future-system adequacy remain research questions."},"zh":{"takeaway":"安全案例为特定系统和情境提供可评估论证；写出文档不代表论证已经正确或充分。","question":"结构化安全论证如何帮助前沿模型决策？组织安全承诺中哪些部分超出单个案例的范围？","design":"报告属于方法研究而非实验，区分撰写者、评估论证的红队与决策者。它比较安全案例、预设要求、信息共享及事后响应，并区分特定系统案例与组织框架。角色示例和承诺映射是提出的用途，不是实证实施结果。","scoring":"没有实验分数或统一样本分母；评估对象是主张、子主张、证据、假设和运行情境是否构成可信且有效的论证。流程效果仍是开放问题。","findings":["§2.2 提出清晰性、灵活性和显式论证等潜在益处，也承认更高投入与最佳实践不确定性。","能力不足论证同时需要适当风险模型及阈值、充分的能力评测；能力提高后可能需要防护、控制或可信性论证（§§2.3–2.4）。","表 3 说明案例可以判断是否越过阈值，却不能自行定义恰当阈值；快速变化还需要监测和响应机制（§3.2）。"],"interpretation":"框架组织证据和分歧，不能把缺失证据变成安全保证。即便一个组织承担多个角色，撰写、红队与决策仍应区分。","limits":"作者不确定其他行业做法的迁移范围，也不知道如何为未来更强系统充分论证。案例依赖运行情境并需持续更新；决策还可能需要安全以外的信息，红队最好能够实验检验反例，而非只阅读材料。","connections":["§2.4 明确讨论用 AI Control 论证抵御自主伤害；后来的 Misuse Safety Case 提供防护论证示例。两者是不同分支，不是可互换认证。"],"decisionRelevance":"模型建议：把主张绑定系统版本与运行情境，显示未解决的反驳条件，并区分证据更新与授权部署决策。","statistics":"不适用：方法报告，没有实验终点或已验证收益估计。流程效果与未来系统适用性仍待研究。"},"figureRefs":[],"assertionPolicy":{"design":"source-finding","findings":"source-finding","interpretation":"nuwa-interpretation","connections":"nuwa-interpretation-with-source-refs","decisionRelevance":"model-recommendation-not-source-conclusion"},"sourceRefs":[{"sourceId":"safety-cases-publication","url":"https://cdn.prod.website-files.com/663bd486c5e4c81588db7a1d/67aa1ee70c744109b20a0032_SafetyCasesAScalableApproachToFrontierAISafety.pdf","locator":"§1 Introduction, PDF pp. 1–2","version":"Linked original captured 2026-10-27T09:55:39.294213+00:00; sha256:3c00b327c3b98a6cc67447a3c86b921d9281aaca0779cd672c5320569e486c1b","artifactSha256":"3c00b327c3b98a6cc67447a3c86b921d9281aaca0779cd672c5320569e486c1b"},{"sourceId":"safety-cases-publication","url":"https://cdn.prod.website-files.com/663bd486c5e4c81588db7a1d/67aa1ee70c744109b20a0032_SafetyCasesAScalableApproachToFrontierAISafety.pdf","locator":"§2.1 A model for the use of safety cases, PDF pp. 2–4; Figure 1; Table 1","version":"Linked original captured 2026-10-27T09:55:39.294213+00:00; sha256:3c00b327c3b98a6cc67447a3c86b921d9281aaca0779cd672c5320569e486c1b","artifactSha256":"3c00b327c3b98a6cc67447a3c86b921d9281aaca0779cd672c5320569e486c1b"},{"sourceId":"safety-cases-publication","url":"https://cdn.prod.website-files.com/663bd486c5e4c81588db7a1d/67aa1ee70c744109b20a0032_SafetyCasesAScalableApproachToFrontierAISafety.pdf","locator":"§2.2 Why use safety cases?, PDF pp. 4–5","version":"Linked original captured 2026-10-27T09:55:39.294213+00:00; sha256:3c00b327c3b98a6cc67447a3c86b921d9281aaca0779cd672c5320569e486c1b","artifactSha256":"3c00b327c3b98a6cc67447a3c86b921d9281aaca0779cd672c5320569e486c1b"},{"sourceId":"safety-cases-publication","url":"https://cdn.prod.website-files.com/663bd486c5e4c81588db7a1d/67aa1ee70c744109b20a0032_SafetyCasesAScalableApproachToFrontierAISafety.pdf","locator":"§2.3 Current systems, PDF pp. 5–7; Figure 2","version":"Linked original captured 2026-10-27T09:55:39.294213+00:00; sha256:3c00b327c3b98a6cc67447a3c86b921d9281aaca0779cd672c5320569e486c1b","artifactSha256":"3c00b327c3b98a6cc67447a3c86b921d9281aaca0779cd672c5320569e486c1b"},{"sourceId":"safety-cases-publication","url":"https://cdn.prod.website-files.com/663bd486c5e4c81588db7a1d/67aa1ee70c744109b20a0032_SafetyCasesAScalableApproachToFrontierAISafety.pdf","locator":"§2.4 Future systems, PDF p. 7","version":"Linked original captured 2026-10-27T09:55:39.294213+00:00; sha256:3c00b327c3b98a6cc67447a3c86b921d9281aaca0779cd672c5320569e486c1b","artifactSha256":"3c00b327c3b98a6cc67447a3c86b921d9281aaca0779cd672c5320569e486c1b"},{"sourceId":"safety-cases-publication","url":"https://cdn.prod.website-files.com/663bd486c5e4c81588db7a1d/67aa1ee70c744109b20a0032_SafetyCasesAScalableApproachToFrontierAISafety.pdf","locator":"§3.1 Relationship to safety frameworks, PDF pp. 8–9; Table 2","version":"Linked original captured 2026-10-27T09:55:39.294213+00:00; sha256:3c00b327c3b98a6cc67447a3c86b921d9281aaca0779cd672c5320569e486c1b","artifactSha256":"3c00b327c3b98a6cc67447a3c86b921d9281aaca0779cd672c5320569e486c1b"},{"sourceId":"safety-cases-publication","url":"https://cdn.prod.website-files.com/663bd486c5e4c81588db7a1d/67aa1ee70c744109b20a0032_SafetyCasesAScalableApproachToFrontierAISafety.pdf","locator":"§3.2 Individual commitments, PDF pp. 9–12; Table 3","version":"Linked original captured 2026-10-27T09:55:39.294213+00:00; sha256:3c00b327c3b98a6cc67447a3c86b921d9281aaca0779cd672c5320569e486c1b","artifactSha256":"3c00b327c3b98a6cc67447a3c86b921d9281aaca0779cd672c5320569e486c1b"},{"sourceId":"safety-cases-publication","url":"https://cdn.prod.website-files.com/663bd486c5e4c81588db7a1d/67aa1ee70c744109b20a0032_SafetyCasesAScalableApproachToFrontierAISafety.pdf","locator":"§4 Open research questions, PDF pp. 13–15","version":"Linked original captured 2026-10-27T09:55:39.294213+00:00; sha256:3c00b327c3b98a6cc67447a3c86b921d9281aaca0779cd672c5320569e486c1b","artifactSha256":"3c00b327c3b98a6cc67447a3c86b921d9281aaca0779cd672c5320569e486c1b"}],"publication":{"state":"published","publishedOn":"2026-10-29","authorizationReference":"user-authorized-global-index-publication-2026-10-29","reviewedCandidateId":"local-6efe31bc4a0c0f37"},"review":{"state":"published-note","sourceScope":"full-text","availableScope":"full-text","readingCoverage":"selected-methods-results-limitations-sections","completePaperAudit":false,"independentEvidenceReview":"pending-human-review","bilingualEditorialReview":"pending-human-review","authorship":"model-assisted-research-note","preparedFingerprint":"4884ae418c920bff463a8904c45349994009f405f9858ed61cf589ab285bb558"}},"sources":[{"id":"safety-cases-publication","title":"Safety Cases: A scalable approach to Frontier AI safety","url":"https://www.aisi.gov.uk/research/safety-cases-a-scalable-approach-to-frontier-ai-safety","version":"Source capture 2026-10-25","publicationDate":"2025-02-10","datePrecision":"day","type":"research-publication","verifiedOn":"2026-10-25","documentId":"https://www.aisi.gov.uk/research/safety-cases-a-scalable-approach-to-frontier-ai-safety"}]}