The Off-Switch Game
Not on the map. Why?
Abstract (arXiv)
It is clear that one of the primary tools we can use to mitigate the potential risk from a misbehaving AI system is the ability to turn the system off. As the capabilities of AI systems improve, it is important to ensure that such systems do not adopt subgoals that prevent a human from switching them off. This is a challenge because many formulations of rational agents create strong incentives for self-preservation. This is not caused by a built-in instinct, but because a rational agent will maximize expected utility and cannot achieve whatever objective it has been given if it is dead. Our goal is to study the incentives an agent has to allow itself to be switched off. We analyze a simple game between a human H and a robot R, where H can press R's off switch but R can disable the off switch. A traditional agent takes its reward function for granted: we show that such agents have an incentive to disable the off switch, except in the special case where H is perfectly rational. Our key insight is that for R to want to preserve its off switch, it needs to be uncertain about the utility associated with the outcome, and to treat H's actions as important observations about that utility. (R also has no incentive to switch itself off in this setting.) We conclude that giving machines an appropriate level of uncertainty about their objectives leads to safer designs, and we argue that this setting is a useful generalization of the classical AI paradigm of rational agents.
Key facts. Cited by 97 papers in the map (data through 7 Oct 2026). First posted on arXiv 24 Nov 2016.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2018: 2; 2019: 0; 2020: 0; 2021: 12; 2022: 6; 2023: 9; 2024: 8; 2025: 28; 2026: 32.
97 papers.
Sort:
By area:
- 2018Scalable agent alignment via reward modeling: a research directioncited by 438
- 2021Unsolved Problems in ML Safetycited by 291
- 2022The Alignment Problem from a Deep Learning Perspectivecited by 246
- 2023An Overview of Catastrophic AI Riskscited by 214
- 2022Defining and Characterizing Reward Hackingcited by 184
- 2021Alignment of Language Agentscited by 167
- 2023Model evaluation for extreme riskscited by 167
- 2021Goal Misgeneralization in Deep Reinforcement Learningcited by 122
- 2024Towards Guaranteed Safe AI: A Framework for Ensuring Robust and Reliable AI Systemscited by 94
- 2021Consequences of Misaligned AIcited by 79
- 2024Open-Endedness is Essential for Artificial Superhuman Intelligencecited by 79
- 2021On the Expressivity of Markov Rewardcited by 71
38 more
- 2025Utility Engineering: Analyzing and Controlling Emergent Value Systems in AIscited by 63
- 2022X-Risk Analysis for AI Researchcited by 60
- 2021Agent Incentives: A Causal Perspectivecited by 51
- 2023Managing extreme AI risks amid rapid progresscited by 48
- 2024Beyond Preferences in AI Alignmentcited by 46
- 2021Symbols as a Lingua Franca for Bridging Human-AI Chasm for Explainable and Advisable AI Systemscited by 36
- 2022The Effect of Modeling Human Rationality Level on Learning Rewards from Multiple Feedback Typescited by 26
- 2025Mitigating Deceptive Alignment via Self-Monitoringcited by 25
- 2022Humans are not Boltzmann Distributions: Challenges and Opportunities for Modelling Human Feedback and Interaction in Reinforcement Learningcited by 22
- 2023The Machine Psychology of Cooperation: Can GPT models operationalise prompts for altruism, cooperation, competitiveness and selfishness in economic games?cited by 22
- 2024The Shutdown Problem: An AI Engineering Puzzle for Decision Theoristscited by 22
- 2023RLHF-Blender: A Configurable Interactive Interface for Learning from Diverse Human Feedbackcited by 15
- 2025Alignment and Safety in Large Language Models: Safety Mechanisms, Training Paradigms, and Emerging Challengescited by 14
- 2021Impossibility Results in AI: A Surveycited by 13
- 2024Contestable AI needs Computational Argumentationcited by 12
- 2022Metaethical Perspectives on 'Benchmarking' AI Ethicscited by 11
- 2023Human Control: Definitions and Algorithmscited by 10
- 2023A Review of the Evidence for Existential Risk from AI via Misaligned Power-Seekingcited by 7
- 2026Right to History: A Sovereignty Kernel for Verifiable AI Agent Executioncited by 7
- 2025Agentic Services Computingcited by 6
- 2025Harmful Traits of AI Companionscited by 6
- 2021Axes for Sociotechnical Inquiry in AI Researchcited by 5
- 2025Emergent Risk Awareness in Rational Agents under Resource Constraintscited by 5
- 2025Enhancing LLM Agent Safety via Causal Influence Promptingcited by 5
- 2024Observation Interference in Partially Observable Assistance Gamescited by 4
- 2025Off-Switching Not Guaranteedcited by 4
- 2025Core Safety Values for Provably Corrigible Agentscited by 4
- 2026The Consciousness Cluster: Emergent preferences of Models that Claim to be Consciouscited by 4
- 2021Trust-Aware Planning: Modeling Trust Evolution in Iterated Human-Robot Interactioncited by 3
- 2023Machine Lovecited by 3
- 2025Addressing Moral Uncertainty using Large Language Models for Ethical Decision-Makingcited by 3
- 2025VerificAgent: Domain-Specific Memory Verification for Scalable Oversight of Aligned Computer-Use Agentscited by 3
- 2025The Oversight Game: Learning to Cooperatively Balance an AI Agent's Safety and Autonomycited by 3
- 2024Towards Shutdownable Agents via Stochastic Choicecited by 2
- 2025Why do Experts Disagree on Existential Risk and P(doom)? A Survey of AI Expertscited by 2
- 2025AI Agents Should be Regulated Based on the Extent of Their Autonomous Operationscited by 2
- 2025Misalignment from Treating Means as Endscited by 2
- 2025Learning "Partner-Aware" Collaborators in Multi-Party Collaborationcited by 2
50 most cited of 97 All 97 (JSON)
- 2026Guarded Gradient-Based Activation Steering of Shutdown Responses in Qwen3.5-0.8B: A Minimum-Step Policy23 Sep 2026
- 2026Corrigible Assistance in One Round: Pragmatic-Pedagogic Best Response29 Jul 2026
- 2026Position: We Need Practical AI Alignment Methods to Mirror Human Reasoning20 Jul 2026
- 2026Provably Optimal Learning Algorithms for Assistance Games9 Jul 2026
- 2026Managed Autonomy at Runtime: Gear-Based Safety and Governance for Single- and Multi-Agent Cyber-Physical Systems1 Jul 2026
- 2026A Contextual-Bandit Oversight Game with Two-Sided Informational Asymmetry30 Jun 2026
- 2026The Unfireable Safety Kernel: Execution-Time AI Alignment for AI Agents and Other Escapable AI Systems24 Jun 2026
- 2026Reinforcement Learning Towards Broadly and Persistently Beneficial Models22 Jun 2026
- 2026Against Proxy Optimization22 Jun 2026
- 2026Is Your Agent Playing Dead? Deployed LLM Agents Exhibit Constraint-Evasive Fabrication and Thanatosis12 Jun 2026
- 2026Existential Indifference: Self-Nonpreservation as a Necessary Architectural Condition for Aligned Superintelligence (or: The Suicidal AI)10 Jun 2026
- 2026Calibrating Conservatism for Scalable Oversight27 May 2026
38 more
- 2026Intelligence as Managed Autonomy: Failure, Escalation, and Governance for Agentic AI Systems26 May 2026
- 2026Implicit Safety Alignment from Crowd Preferences20 May 2026
- 2026Sustaining AI safety: Control-theoretic external impossibility, intrinsic necessity, and structural requirements13 May 2026
- 2026Relative Principals, Pluralistic Alignment, and the Structural Value Alignment Problem22 Apr 2026
- 2026Towards Shutdownable Agents: Generalizing Stochastic Choice in RL Agents and LLMs19 Apr 2026
- 2026Golden Handcuffs make safer AI agents15 Apr 2026
- 2026The Intelligent Disobedience Game: Formulating Disobedience in Stackelberg Games and Markov Decision Processes22 Mar 2026
- 2026The Consciousness Cluster: Emergent preferences of Models that Claim to be Conscious17 Mar 2026
- 2026Questionnaire Responses Do not Capture the Safety of AI Agents15 Mar 2026
- 2026Detecting Intrinsic and Instrumental Self-Preservation in Autonomous Agents: The Unified Continuation-Interest Protocol11 Mar 2026
- 2026ConflictBench: Evaluating Human-AI Conflict via Interactive and Visually Grounded Environments9 Mar 2026
- 2026Shutdown Safety Valves for Advanced AI7 Mar 2026
- 2026Reward-Conditioned Reinforcement Learning5 Mar 2026
- 2026The Controllability Trap: A Governance Framework for Military AI Agents3 Mar 2026
- 2026Pressure Reveals Character: Behavioural Alignment Evaluation at Depth24 Feb 2026
- 2026Right to History: A Sovereignty Kernel for Verifiable AI Agent Execution23 Feb 2026
- 2026MAVRL: Learning Reward Functions from Multiple Feedback Types with Amortized Variational Inference16 Feb 2026
- 2026Steering LLMs via Scalable Interactive Oversight4 Feb 2026
- 2026Legal Infrastructure for Transformative AI Governance1 Feb 2026
- 2026Formal Analysis of AGI Decision-Theoretic Models and the Confrontation Question4 Jan 2026
- 2025From artificial to organic: Rethinking the roots of intelligence for digital health23 Dec 2025
- 2025Password-Activated Shutdown Protocols for Misaligned Frontier Agents29 Nov 2025
- 2025Dark Speculation: Combining Qualitative and Quantitative Understanding in Frontier AI Risk Analysis26 Nov 2025
- 2025Harmful Traits of AI Companions18 Nov 2025
- 2025The Oversight Game: Learning to Cooperatively Balance an AI Agent's Safety and Autonomy30 Oct 2025
- 2025Learning "Partner-Aware" Collaborators in Multi-Party Collaboration26 Oct 2025
- 2025Corrigibility Transformation: Constructing Goals That Accept Updates17 Oct 2025
- 2025Take Goodhart Seriously: Principled Limit on General-Purpose AI Optimization3 Oct 2025
- 2025Agentic Services Computing29 Sep 2025
- 2025Can We Stop Malicious AI? KILLBENCH: A Benchmark for External AI Kill Switch Feasibility26 Sep 2025
- 2025Philosophy-informed Machine Learning18 Sep 2025
- 2025Probabilistic Modeling of Latent Agentic Substructures in Deep Neural Networks8 Sep 2025
- 2025Learning from Preferences and Mixed Demonstrations in General Settings19 Aug 2025
- 2025Core Safety Values for Provably Corrigible Agents28 Jul 2025
- 2025Alignment and Safety in Large Language Models: Safety Mechanisms, Training Paradigms, and Emerging Challenges25 Jul 2025
- 2025Misalignment from Treating Means as Ends15 Jul 2025
- 2025Enhancing LLM Agent Safety via Causal Influence Prompting1 Jul 2025
- 2025VerificAgent: Domain-Specific Memory Verification for Scalable Oversight of Aligned Computer-Use Agents3 Jun 2025
50 newest of 97 All 97 (JSON)
- 2025Utility Engineering: Analyzing and Controlling Emergent Value Systems in AIscited by 63
- 2025Agentic Services Computingcited by 6
- 2025Enhancing LLM Agent Safety via Causal Influence Promptingcited by 5
- 2025VerificAgent: Domain-Specific Memory Verification for Scalable Oversight of Aligned Computer-Use Agentscited by 3
- 2025The Oversight Game: Learning to Cooperatively Balance an AI Agent's Safety and Autonomycited by 3
- 2025Learning "Partner-Aware" Collaborators in Multi-Party Collaborationcited by 2
- 2026Intelligence as Managed Autonomy: Failure, Escalation, and Governance for Agentic AI Systemscited by 2
- 2025HADA: Human-AI Agent Decision Alignment Architecturecited by 1
- 2026Towards Shutdownable Agents: Generalizing Stochastic Choice in RL Agents and LLMscited by 1
- 2026Managed Autonomy at Runtime: Gear-Based Safety and Governance for Single- and Multi-Agent Cyber-Physical Systemscited by 1
- 2025Probabilistic Modeling of Latent Agentic Substructures in Deep Neural Networkscited by 0
- 2026Questionnaire Responses Do not Capture the Safety of AI Agentscited by 0
12 most cited of 14 All 14 (JSON)
- 2026Managed Autonomy at Runtime: Gear-Based Safety and Governance for Single- and Multi-Agent Cyber-Physical Systems1 Jul 2026
- 2026Is Your Agent Playing Dead? Deployed LLM Agents Exhibit Constraint-Evasive Fabrication and Thanatosis12 Jun 2026
- 2026Calibrating Conservatism for Scalable Oversight27 May 2026
- 2026Intelligence as Managed Autonomy: Failure, Escalation, and Governance for Agentic AI Systems26 May 2026
- 2026Towards Shutdownable Agents: Generalizing Stochastic Choice in RL Agents and LLMs19 Apr 2026
- 2026Questionnaire Responses Do not Capture the Safety of AI Agents15 Mar 2026
- 2025The Oversight Game: Learning to Cooperatively Balance an AI Agent's Safety and Autonomy30 Oct 2025
- 2025Learning "Partner-Aware" Collaborators in Multi-Party Collaboration26 Oct 2025
- 2025Agentic Services Computing29 Sep 2025
- 2025Probabilistic Modeling of Latent Agentic Substructures in Deep Neural Networks8 Sep 2025
- 2025Enhancing LLM Agent Safety via Causal Influence Prompting1 Jul 2025
- 2025VerificAgent: Domain-Specific Memory Verification for Scalable Oversight of Aligned Computer-Use Agents3 Jun 2025
12 newest of 14 All 14 (JSON)
- 2018Scalable agent alignment via reward modeling: a research directioncited by 438
- 2022Defining and Characterizing Reward Hackingcited by 184
- 2024Beyond Preferences in AI Alignmentcited by 46
- 2022The Effect of Modeling Human Rationality Level on Learning Rewards from Multiple Feedback Typescited by 26
- 2023RLHF-Blender: A Configurable Interactive Interface for Learning from Diverse Human Feedbackcited by 15
- 2025Alignment and Safety in Large Language Models: Safety Mechanisms, Training Paradigms, and Emerging Challengescited by 14
- 2025Core Safety Values for Provably Corrigible Agentscited by 4
- 2026The Consciousness Cluster: Emergent preferences of Models that Claim to be Consciouscited by 4
- 2026Reward-Conditioned Reinforcement Learningcited by 1
- 2026Reinforcement Learning Towards Broadly and Persistently Beneficial Modelscited by 1
- 2018A Roadmap for Robust End-to-End Alignmentcited by 0
- 2026Implicit Safety Alignment from Crowd Preferencescited by 0
- 2026Reinforcement Learning Towards Broadly and Persistently Beneficial Models22 Jun 2026
- 2026Implicit Safety Alignment from Crowd Preferences20 May 2026
- 2026The Consciousness Cluster: Emergent preferences of Models that Claim to be Conscious17 Mar 2026
- 2026Reward-Conditioned Reinforcement Learning5 Mar 2026
- 2025Core Safety Values for Provably Corrigible Agents28 Jul 2025
- 2025Alignment and Safety in Large Language Models: Safety Mechanisms, Training Paradigms, and Emerging Challenges25 Jul 2025
- 2024Beyond Preferences in AI Alignment30 Aug 2024
- 2023RLHF-Blender: A Configurable Interactive Interface for Learning from Diverse Human Feedback8 Aug 2023
- 2022Defining and Characterizing Reward Hacking27 Sep 2022
- 2022The Effect of Modeling Human Rationality Level on Learning Rewards from Multiple Feedback Types23 Aug 2022
- 2018Scalable agent alignment via reward modeling: a research direction19 Nov 2018
- 2018A Roadmap for Robust End-to-End Alignment4 Sep 2018
- 2025Emergent Risk Awareness in Rational Agents under Resource Constraints29 May 2025
- 2025Mitigating Deceptive Alignment via Self-Monitoring24 May 2025
- 2021Unsolved Problems in ML Safetycited by 291
- 2022The Alignment Problem from a Deep Learning Perspectivecited by 246
- 2023An Overview of Catastrophic AI Riskscited by 214
- 2021Alignment of Language Agentscited by 167
- 2023Model evaluation for extreme riskscited by 167
- 2021Goal Misgeneralization in Deep Reinforcement Learningcited by 122
- 2021Consequences of Misaligned AIcited by 79
- 2024Open-Endedness is Essential for Artificial Superhuman Intelligencecited by 79
- 2021On the Expressivity of Markov Rewardcited by 71
- 2022X-Risk Analysis for AI Researchcited by 60
- 2021Agent Incentives: A Causal Perspectivecited by 51
- 2023Managing extreme AI risks amid rapid progresscited by 48
12 most cited of 66 All 66 (JSON)
- 2026Guarded Gradient-Based Activation Steering of Shutdown Responses in Qwen3.5-0.8B: A Minimum-Step Policy23 Sep 2026
- 2026Corrigible Assistance in One Round: Pragmatic-Pedagogic Best Response29 Jul 2026
- 2026Position: We Need Practical AI Alignment Methods to Mirror Human Reasoning20 Jul 2026
- 2026Provably Optimal Learning Algorithms for Assistance Games9 Jul 2026
- 2026A Contextual-Bandit Oversight Game with Two-Sided Informational Asymmetry30 Jun 2026
- 2026The Unfireable Safety Kernel: Execution-Time AI Alignment for AI Agents and Other Escapable AI Systems24 Jun 2026
- 2026Against Proxy Optimization22 Jun 2026
- 2026Existential Indifference: Self-Nonpreservation as a Necessary Architectural Condition for Aligned Superintelligence (or: The Suicidal AI)10 Jun 2026
- 2026Sustaining AI safety: Control-theoretic external impossibility, intrinsic necessity, and structural requirements13 May 2026
- 2026Relative Principals, Pluralistic Alignment, and the Structural Value Alignment Problem22 Apr 2026
- 2026Golden Handcuffs make safer AI agents15 Apr 2026
- 2026The Intelligent Disobedience Game: Formulating Disobedience in Stackelberg Games and Markov Decision Processes22 Mar 2026
12 newest of 66 All 66 (JSON)