Satya Nadella says we should assume all AI models are ‘compromised’

Microsoft’s CEO calls for putting an ‘emergency brake’ on AI.

Written by
Terrence O'Brien
Published by
The Verge
Published
Length
238 words · 1 min
Satya Nadella says we should assume all AI models are ‘compromised’

Microsoft’s CEO calls for putting an ‘emergency brake’ on AI.

Microsoft’s CEO calls for putting an ‘emergency brake’ on AI.

Oct 10, 2026, 10:10 PM UTCImage: Cath Virginia / The Verge, Getty ImagesPart OfThe AI Superintelligence Slowdownsee all updates Terrence O'Brienis the Verge’s weekend editor. He’s covered the tech industry for over 18 years and knows a thing or two about synths.

In a lengthy post on X, Microsoft’s CEO laid out his views on the dangers posed by highly advanced AI models and how to confront those risks. Nadella says we can no longer accept a world where AI is treated as a “set of nested black boxes” whose advice and actions we simply accept or reject. He calls for building a more transparent system where models can be contained, observed, and leaves behind “tamper-proof human readable evidence.”

Many of his recommendations align with what we’ve heard from others in the industry: timely incident disclosure, independent audits, verifiable data, and containment. It’s on that last point that he appears to go slightly farther than some others in the field, saying:

We must assume a model is compromised and contain it from the start. Think of it like an emergency brake. An authorized person should always be able to pause or shut down a model mid-task. More advanced models will require more advanced containment technologies that we need to standardize on.

Unfortunately, Nadella also refers to AI as “super intelligence” throughout the post.

Terrence O'Brien

Where this came from

This story was reported by Terrence O'Brien and first published by The Verge on 10 October 2026. HUE Legacy Ventures did not write it.

Carried in full with attribution and a link to the original. Rights remain with the publisher, who may request removal at any time.

Read it at theverge.com →