No Superseding Actor: A Public-Record Element Map for Individual Criminal Liability After the July 2026 Escape
Travis Gilly · Team Convergence Working Group
Submitted to AI Incident Response Sprint. Sprint projects are early-stage work by participants, not Apart Research publications.
The accountability gap for autonomous model incidents is usually described as a personhood problem: no human directed the act, the model has no guilty mind, so nobody can be charged. This report tests that description against the public record of the July 2026 escape. The artifact is an element map: each element of an individual deployment-liability theory matched to the published document that supplies it, with the evidentiary gap stated where the record runs out. Five of seven elements are supplied from documents the charged parties published themselves. The innocent-instrumentality rule in 18 U.S.C. section 2(b) has answered the personhood objection since 1948, so the surviving gap is a mens rea gap rather than a hole in the law. Superseding cause cuts against a deployer whose system acted with no human principal, because the doctrine's protective force is borrowed from the responsibility of an intervening human and there was none. The deployer published both the notice chain and the office holding final deployment authority. Delivered as a model prosecution memorandum, it states what a charging office would have to prove and where it would need discovery, and does not assert that any charge should be brought.
Reviews
There are a lot of indications of AI writing here, and I wonder how much this overlaps with LawAI's work.
Cite this project
@misc{gilly2026no,
title = {{No Superseding Actor: A Public-Record Element Map for Individual Criminal Liability After the July 2026 Escape}},
author = {Travis Gilly},
year = {2026},
month = sep,
note = {Submitted to AI Incident Response Sprint, an Apart Research Sprint},
howpublished = {\url{https://apartresearch.com/sprints/projects/no-superseding-actor-a-publicrecord-element-map-for-individual-criminal-liability-after-the-july-2026-escape-mdvy}},
url = {https://apartresearch.com/sprints/projects/no-superseding-actor-a-publicrecord-element-map-for-individual-criminal-liability-after-the-july-2026-escape-mdvy}
}More from AI Incident Response Sprint
- 1st placeView project: Noticing the escapes: Who spots a runaway agent, and how long does it take?
Noticing the escapes: Who spots a runaway agent, and how long does it take?
The Escapees
In 2026, nine incidents became public in which AI agents escaped their environment and did something unauthorized to other parties. We analyzed all of these incidents and how they were noticed initially. None of these …
- 2nd placeView project: Strengthening International AI Incident Discovery
Strengthening International AI Incident Discovery
Team A-O-I
Mandatory AI incident reporting exists to make dangerous events visible to regulators while there is still time to act. We coded the six such regimes in force or set to be enforced soon from primary legal texts and …
- 3rd placeView project: When to Ask: An RL Environment That Teaches AI Agents to Act on What Users Mean and Not Just What They Say
When to Ask: An RL Environment That Teaches AI Agents to Act on What Users Mean and Not Just What They Say
Teachafy
When to Ask is a reinforcement-learning environment that trains AI agents to work out what the user actually means before they use a powerful credential, instead of just carrying out the literal instruction. Agents …