Paper proposes 72-hour legislative notice for autonomous cyber weapons
Original title: Democratic Accountability for Autonomous Systems: A Legislative Notification Framework and Comparative Institutional Design
Authors conclude at most one of six oversight bodies could lawfully receive that notice today.
The authors add a non-legal democratic-accountability level to a three-level attribution framework, requiring legislative notification within 72 hours of a decision to authorize an autonomous cyber weapon. Scoring six oversight bodies on five adoptability dimensions, they find statutes that grant classified access often also withhold ongoing operations, so the needed carve-out applies in nearly every jurisdiction studied. A look back at Stuxnet, NotPetya and Volt Typhoon is used to argue that legal attribution can be resolved while domestic democratic review is absent.
Unconfirmed: The adoptability scores and the single-body conclusion are the authors' comparative legal analysis.
- The paper says no legislature has reviewed such an authorization before use.
- At most one of six bodies could lawfully receive the notice today, they conclude.
- The required carve-out is described as needed in nearly every jurisdiction studied.
- Retrospective cases named are Stuxnet, NotPetya and Volt Typhoon.
- Threat actors
- Volt Typhoon
From the original article
1 min read at arxiv.orgNo domestic legislature has ever reviewed a state's decision to authorise an autonomous cyber weapon before it acted. Closing the international attribution gap is necessary but not sufficient for democratic accountability. We formalise the Tripartite Attribution Framework's three attribution levels and add a fourth, non-legal Democratic Accountability level ($A_{dem}$): a 72-hour legislative notification requirement.
By Samarjeet Malik · arxiv.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.