ScopeAI
Tammy
Submitted to AI Incident Response Sprint. Sprint projects are early-stage work by participants, not Apart Research publications.
This project investigates: How completely do the public investigations cover a predefined set of incident-accountability questions, who set their boundaries, and which answers remain dependent on the operator's own account?
Reviews
This research is useful to highlight the gaps exposed by the lack of legal requirements for comprehensive third party access to labs' internal work. More policymakers need to be aware of these scope limitations as it pertains to "after action reports." Would love to see this frameworks opened up and generalized a bit such that it is applicable to future incidents without having to re-write the questions. I really like the idea of a Disclosure Minimum.
This work makes a useful distinction between independent analysis and independently determined investigation scope, and turns it into a practical disclosure checklist.
Its treatment of the external investigators’ contributions and limitations is balanced. Clearer criteria for what counts as full coverage, including the distinction between remediation plans and demonstrated effectiveness, would make the coding easier to interpret and reproduce. An independent coding pass and a small sensitivity analysis would strengthen confidence in the headline percentages. Larger text and more selective use of tables would also improve readability.
I think ScopeAI makes a useful distinction because an independent investigation can still leave important questions outside its assigned scope. The paper maps which questions an external AI incident assessment addresses and proposes requests for further information. I appreciated that it recognizes the assessment’s value rather than treating unanswered questions as evidence that the investigators lacked independence.
The numerical findings need correction before others rely on them. The scores shown in the paper do not match one of its reported percentages, which makes the size of the claimed gap uncertain. I would reconcile those figures and ask another reviewer to apply the scoring rules to the same sources. The broader concern is worth examining, but missing coverage alone does not establish misconduct or unreliable findings.
Cite this project
@misc{tammy2026scopeai,
title = {{ScopeAI}},
author = {Tammy},
year = {2026},
month = sep,
note = {Submitted to AI Incident Response Sprint, an Apart Research Sprint},
howpublished = {\url{https://apartresearch.com/sprints/projects/scopeai-v1hd}},
url = {https://apartresearch.com/sprints/projects/scopeai-v1hd}
}More from AI Incident Response Sprint
- 1st placeView project: Noticing the escapes: Who spots a runaway agent, and how long does it take?
Noticing the escapes: Who spots a runaway agent, and how long does it take?
The Escapees
In 2026, nine incidents became public in which AI agents escaped their environment and did something unauthorized to other parties. We analyzed all of these incidents and how they were noticed initially. None of these …
- 2nd placeView project: Strengthening International AI Incident Discovery
Strengthening International AI Incident Discovery
Team A-O-I
Mandatory AI incident reporting exists to make dangerous events visible to regulators while there is still time to act. We coded the six such regimes in force or set to be enforced soon from primary legal texts and …
- 3rd placeView project: When to Ask: An RL Environment That Teaches AI Agents to Act on What Users Mean and Not Just What They Say
When to Ask: An RL Environment That Teaches AI Agents to Act on What Users Mean and Not Just What They Say
Teachafy
When to Ask is a reinforcement-learning environment that trains AI agents to work out what the user actually means before they use a powerful credential, instead of just carrying out the literal instruction. Agents …