Fully Autonomous AI Agents Should Not be Developed
Not on the map. Why?
Cited by 22 in LLM agents and tool use, but placed by its own abstract, which didn’t fit.
Abstract (arXiv)
This paper argues that fully autonomous AI agents should not be developed. In support of this position, we build from prior scientific literature and current product marketing to delineate different AI agent levels and detail the ethical values at play in each, documenting trade-offs in potential benefits and risks. Our analysis reveals that risks to people increase with the autonomy of a system: The more control a user cedes to an AI agent, the more risks to people arise. Particularly concerning are safety risks, which affect human life and impact further values.
Key facts. Cited by 43 papers in the map (data through 7 Oct 2026). Builds on 33 of its 201 references that are in the map. First posted on arXiv 4 Feb 2025.
Builds on
33 of 201 references.
References · 33
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,355
- 2023Improving Factuality and Reasoning in Language Models through Multiagent Debatecited by 1,739
- 2016Concrete Problems in AI Safetycited by 1,582
- 2023Mind2Web: Towards a Generalist Agent for the Webcited by 1,210
- 2022Language Models as Zero-Shot Planners: Extracting Actionable Knowledge for Embodied Agentscited by 1,029
- 2023Large Language Modelscited by 774
- 2023DriveGPT4: Interpretable End-to-end Autonomous Driving via Large Language Modelcited by 455
- 2018Gender Bias in Coreference Resolutioncited by 438
- 2024WebVoyager: Building an End-to-End Web Agent with Large Multimodal Modelscited by 424
- 2023A Survey on Multimodal Large Language Models for Autonomous Drivingcited by 288
- 2024Mobile-Agent: Autonomous Multi-Modal Mobile Device Agent with Visual Perceptioncited by 283
- 2024LLM Agents Grounded in Self-Reports Enable General-Purpose Simulation of Individualscited by 235
21 more
- 2024DigiRL: Training In-The-Wild Device-Control Agents with Autonomous Reinforcement Learningcited by 210
- 2023Power Hungry Processing: Watts Driving the Cost of AI Deployment?cited by 186
- 2024RE-Bench: Evaluating frontier AI R&D capabilities of language model agents against human expertscited by 153
- 2023Harms from Increasingly Agentic Algorithmic Systemscited by 134
- 2024WebCanvas: Benchmarking Web Agents in Online Environmentscited by 119
- 2023Levels of AGI for Operationalizing Progress on the Path to AGIcited by 94
- 2024AirGapAgent: Protecting Privacy-Conscious Conversational Agentscited by 90
- 2024Proactive Agent: Shifting LLM Agents from Reactive Responses to Active Assistancecited by 84
- 2024AutoRT: Embodied Foundation Models for Large Scale Orchestration of Robotic Agentscited by 83
- 2024The Ethics of ChatGPT in Medicine and Healthcare: A Systematic Review on Large Language Models (LLMs)cited by 45
- 2024Security of AI Agentscited by 24
- 2022AI Autonomy : Self-Initiated Open-World Continual Learning and Adaptationcited by 23
- 2022Robustness and Adaptability of Reinforcement Learning based Cooperative Autonomous Driving in Mixed-autonomy Trafficcited by 15
- 2024AI-Powered Autonomous Weapons Risk Geopolitical Instability and Threaten AI Researchcited by 13
- 2024Quantifying Misalignment Between Agents: Towards a Sociotechnical Understanding of Alignmentcited by 8
- 2014Non-Deterministic Policies in Markovian Decision Processescited by 7
- 2024Good Parenting is all you need -- Multi-agentic LLM Hallucination Mitigationcited by 7
- 2024Catalyzing Equity in STEM Teams: Harnessing Generative AI for Inclusion and Diversitycited by 6
- 2025Observe, Ask, Intervene: Designing AI Agents for More Inclusive Meetingscited by 4
- 2020On the Relationship between Software Complexity and Securitycited by 2
- 2025AI in Support of Diversity and Inclusioncited by 1
Built on by
Citing papers per year: 2025: 26; 2026: 17.
43 papers.
Sort:
By area:
- 2025Levels of Autonomy for AI Agentscited by 45
- 2025Future of Work with AI Agents: Auditing Automation and Augmentation Potential across the U.S. Workforcecited by 33
- 2025Characterizing AI Agents for Alignment and Governancecited by 30
- 2025LLM-Based Human-Agent Collaboration and Interaction Systems: A Surveycited by 28
- 2025Security Concerns for Large Language Models: A Surveycited by 26
- 2025Agentic AI Security: Threats, Defenses, Evaluation, and Open Challengescited by 26
- 2025Agentic AI Needs a Systems Theorycited by 19
- 2025Generating Symbolic World Models via Test-time Scaling of Large Language Modelscited by 12
- 2025Inherent and emergent liability issues in LLM-based agentic systems: a principal-agent perspectivecited by 12
- 2025A Call for Collaborative Intelligence: Why Human-Agent Systems Should Precede AI Autonomycited by 9
- 2025Build Agent Advocates, Not Platform Agentscited by 8
- 2025Thoughts without Thinking: Reconsidering the Explanatory Value of Chain-of-Thought Reasoning in LLMs through Agentic Pipelinescited by 7
31 more
- 2026How are AI agents used? Evidence from 177,000 MCP toolscited by 7
- 2025From surveillance to signalling: escalation channels as environmental controls for agentic AIcited by 6
- 2026Modeling Distinct Human Interaction in Web Agentscited by 5
- 2026Self-Improvement of Large Language Models: A Technical Overview and Future Outlookcited by 5
- 2025When Models Know More Than They Can Explain: Quantifying Knowledge Transfer in Human-AI Collaborationcited by 4
- 2025Personalizing Agent Privacy Decisions via Logical Entailmentcited by 4
- 2025AI Must not be Fully Autonomouscited by 3
- 2025Completion neq Collaboration: Scaling Collaborative Effort with Agentscited by 3
- 2026Overseeing Agents Without Constant Oversight: Challenges and Opportunitiescited by 3
- 2026SafeMCP: Proactive Power Regulation for LLM Agent Defense via Environment-Grounded Look-Ahead Reasoningcited by 3
- 2026AI Agents Push Humans Out of the Loopcited by 3
- 2025Counterfactual-based Agent Influence Ranker for Agentic AI Workflowscited by 2
- 2025Reliable agent engineering should integrate machine-compatible organizational principlescited by 2
- 2026Autonomy and Agency in Agentic AI: Architectural Tactics for Regulated Contextscited by 2
- 2025I'm Sorry Dave: How the old world of personnel security can inform the new world of AI insider riskcited by 1
- 2025OpenAI's GPT-OSS-20B Model and Safety Alignment Issues in a Low-Resource Languagecited by 1
- 2025A Criminology of Machinescited by 1
- 2025Semantic Deception: When Reasoning Models Can't Compute an Additioncited by 1
- 2026Mitigating loss of control in advanced AI systems through instrumental goal trajectoriescited by 1
- 2025Agentic AI Optimisation (AAIO): what it is, how it works, why it matters, and how to deal with itcited by 0
- 2025AI Agents and Hard Choicescited by 0
- 2025Can AI be Accountable?cited by 0
- 2026From Tool to Agent: How Worker Needs Reorganize Across the Agentic Roles of Workplace AIcited by 0
- 2026Engineering Robustness into Personal Agents with the AI Workflow Storecited by 0
- 2026The Agentic Web Requires New Normative Infrastructurecited by 0
- 2026SAFETY SENTRY: Context-Aware Human Intervention via EXECUTE-ASK-REFUSE Routingcited by 0
- 2026Defining AI-Native Systems: Autonomy as Revision Authoritycited by 0
- 2026Agentic AI Autonomy Assessment: A Decision-Support Framework Towards Governed Supply Chain Systemscited by 0
- 2026Regret Dominates Surprise: Design-Time Requirements Engineering for Agentic-AI Safetycited by 0
- 2026Anticipatory Human Oversight of Agentic AI: A Philosophical Accountcited by 0
- 2026Forms of LLM-Integrated Applications from LLM-Chats to Autonomous AI Agent Systemcited by 0
- 2026Forms of LLM-Integrated Applications from LLM-Chats to Autonomous AI Agent System8 Oct 2026
- 2026Anticipatory Human Oversight of Agentic AI: A Philosophical Account21 Sep 2026
- 2026Regret Dominates Surprise: Design-Time Requirements Engineering for Agentic-AI Safety4 Sep 2026
- 2026AI Agents Push Humans Out of the Loop24 Aug 2026
- 2026Agentic AI Autonomy Assessment: A Decision-Support Framework Towards Governed Supply Chain Systems28 Jul 2026
- 2026Defining AI-Native Systems: Autonomy as Revision Authority22 Jul 2026
- 2026SAFETY SENTRY: Context-Aware Human Intervention via EXECUTE-ASK-REFUSE Routing15 Jul 2026
- 2026The Agentic Web Requires New Normative Infrastructure9 Jun 2026
- 2026SafeMCP: Proactive Power Regulation for LLM Agent Defense via Environment-Grounded Look-Ahead Reasoning1 Jun 2026
- 2026Autonomy and Agency in Agentic AI: Architectural Tactics for Regulated Contexts12 May 2026
- 2026Engineering Robustness into Personal Agents with the AI Workflow Store11 May 2026
- 2026From Tool to Agent: How Worker Needs Reorganize Across the Agentic Roles of Workplace AI4 May 2026
31 more
- 2026Self-Improvement of Large Language Models: A Technical Overview and Future Outlook26 Mar 2026
- 2026How are AI agents used? Evidence from 177,000 MCP tools25 Mar 2026
- 2026Modeling Distinct Human Interaction in Web Agents19 Feb 2026
- 2026Overseeing Agents Without Constant Oversight: Challenges and Opportunities18 Feb 2026
- 2026Mitigating loss of control in advanced AI systems through instrumental goal trajectories2 Feb 2026
- 2025Semantic Deception: When Reasoning Models Can't Compute an Addition23 Dec 2025
- 2025Reliable agent engineering should integrate machine-compatible organizational principles8 Dec 2025
- 2025Personalizing Agent Privacy Decisions via Logical Entailment4 Dec 2025
- 2025A Criminology of Machines4 Nov 2025
- 2025Can AI be Accountable?30 Oct 2025
- 2025Completion neq Collaboration: Scaling Collaborative Effort with Agents29 Oct 2025
- 2025Counterfactual-based Agent Influence Ranker for Agentic AI Workflows29 Oct 2025
- 2025Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges27 Oct 2025
- 2025From surveillance to signalling: escalation channels as environmental controls for agentic AI6 Oct 2025
- 2025OpenAI's GPT-OSS-20B Model and Safety Alignment Issues in a Low-Resource Language26 Sep 2025
- 2025AI Must not be Fully Autonomous31 Jul 2025
- 2025Levels of Autonomy for AI Agents14 Jun 2025
- 2025A Call for Collaborative Intelligence: Why Human-Agent Systems Should Precede AI Autonomy11 Jun 2025
- 2025Future of Work with AI Agents: Auditing Automation and Augmentation Potential across the U.S. Workforce6 Jun 2025
- 2025When Models Know More Than They Can Explain: Quantifying Knowledge Transfer in Human-AI Collaboration5 Jun 2025
- 2025Security Concerns for Large Language Models: A Survey24 May 2025
- 2025Build Agent Advocates, Not Platform Agents7 May 2025
- 2025Thoughts without Thinking: Reconsidering the Explanatory Value of Chain-of-Thought Reasoning in LLMs through Agentic Pipelines1 May 2025
- 2025LLM-Based Human-Agent Collaboration and Interaction Systems: A Survey1 May 2025
- 2025Characterizing AI Agents for Alignment and Governance30 Apr 2025
- 2025AI Agents and Hard Choices18 Apr 2025
- 2025Agentic AI Optimisation (AAIO): what it is, how it works, why it matters, and how to deal with it16 Apr 2025
- 2025Inherent and emergent liability issues in LLM-based agentic systems: a principal-agent perspective4 Apr 2025
- 2025I'm Sorry Dave: How the old world of personnel security can inform the new world of AI insider risk26 Mar 2025
- 2025Agentic AI Needs a Systems Theory28 Feb 2025
- 2025Generating Symbolic World Models via Test-time Scaling of Large Language Models7 Feb 2025
- 2025LLM-Based Human-Agent Collaboration and Interaction Systems: A Surveycited by 28
- 2025Agentic AI Security: Threats, Defenses, Evaluation, and Open Challengescited by 26
- 2025Inherent and emergent liability issues in LLM-based agentic systems: a principal-agent perspectivecited by 12
- 2025A Call for Collaborative Intelligence: Why Human-Agent Systems Should Precede AI Autonomycited by 9
- 2025Build Agent Advocates, Not Platform Agentscited by 8
- 2026How are AI agents used? Evidence from 177,000 MCP toolscited by 7
- 2025From surveillance to signalling: escalation channels as environmental controls for agentic AIcited by 6
- 2026Modeling Distinct Human Interaction in Web Agentscited by 5
- 2025Personalizing Agent Privacy Decisions via Logical Entailmentcited by 4
- 2026Overseeing Agents Without Constant Oversight: Challenges and Opportunitiescited by 3
- 2025Counterfactual-based Agent Influence Ranker for Agentic AI Workflowscited by 2
- 2025Reliable agent engineering should integrate machine-compatible organizational principlescited by 2
12 most cited of 19 All 19 (JSON)
- 2026Anticipatory Human Oversight of Agentic AI: A Philosophical Account21 Sep 2026
- 2026Regret Dominates Surprise: Design-Time Requirements Engineering for Agentic-AI Safety4 Sep 2026
- 2026Agentic AI Autonomy Assessment: A Decision-Support Framework Towards Governed Supply Chain Systems28 Jul 2026
- 2026SAFETY SENTRY: Context-Aware Human Intervention via EXECUTE-ASK-REFUSE Routing15 Jul 2026
- 2026The Agentic Web Requires New Normative Infrastructure9 Jun 2026
- 2026Autonomy and Agency in Agentic AI: Architectural Tactics for Regulated Contexts12 May 2026
- 2026How are AI agents used? Evidence from 177,000 MCP tools25 Mar 2026
- 2026Modeling Distinct Human Interaction in Web Agents19 Feb 2026
- 2026Overseeing Agents Without Constant Oversight: Challenges and Opportunities18 Feb 2026
- 2025Reliable agent engineering should integrate machine-compatible organizational principles8 Dec 2025
- 2025Personalizing Agent Privacy Decisions via Logical Entailment4 Dec 2025
- 2025Counterfactual-based Agent Influence Ranker for Agentic AI Workflows29 Oct 2025
12 newest of 19 All 19 (JSON)
- 2025Agentic AI Needs a Systems Theorycited by 19
- 2025Thoughts without Thinking: Reconsidering the Explanatory Value of Chain-of-Thought Reasoning in LLMs through Agentic Pipelinescited by 7
- 2026SafeMCP: Proactive Power Regulation for LLM Agent Defense via Environment-Grounded Look-Ahead Reasoningcited by 3
- 2025Semantic Deception: When Reasoning Models Can't Compute an Additioncited by 1
- 2026SafeMCP: Proactive Power Regulation for LLM Agent Defense via Environment-Grounded Look-Ahead Reasoning1 Jun 2026
- 2025Semantic Deception: When Reasoning Models Can't Compute an Addition23 Dec 2025
- 2025Thoughts without Thinking: Reconsidering the Explanatory Value of Chain-of-Thought Reasoning in LLMs through Agentic Pipelines1 May 2025
- 2025Agentic AI Needs a Systems Theory28 Feb 2025
- 2025Levels of Autonomy for AI Agentscited by 45
- 2025Future of Work with AI Agents: Auditing Automation and Augmentation Potential across the U.S. Workforcecited by 33
- 2025Characterizing AI Agents for Alignment and Governancecited by 30
- 2025Security Concerns for Large Language Models: A Surveycited by 26
- 2025When Models Know More Than They Can Explain: Quantifying Knowledge Transfer in Human-AI Collaborationcited by 4
- 2025AI Must not be Fully Autonomouscited by 3
- 2025Completion neq Collaboration: Scaling Collaborative Effort with Agentscited by 3
- 2026AI Agents Push Humans Out of the Loopcited by 3
- 2025I'm Sorry Dave: How the old world of personnel security can inform the new world of AI insider riskcited by 1
- 2025A Criminology of Machinescited by 1
- 2026Mitigating loss of control in advanced AI systems through instrumental goal trajectoriescited by 1
- 2025AI Agents and Hard Choicescited by 0
12 most cited of 17 All 17 (JSON)
- 2026Forms of LLM-Integrated Applications from LLM-Chats to Autonomous AI Agent System8 Oct 2026
- 2026AI Agents Push Humans Out of the Loop24 Aug 2026
- 2026Defining AI-Native Systems: Autonomy as Revision Authority22 Jul 2026
- 2026Engineering Robustness into Personal Agents with the AI Workflow Store11 May 2026
- 2026From Tool to Agent: How Worker Needs Reorganize Across the Agentic Roles of Workplace AI4 May 2026
- 2026Mitigating loss of control in advanced AI systems through instrumental goal trajectories2 Feb 2026
- 2025A Criminology of Machines4 Nov 2025
- 2025Can AI be Accountable?30 Oct 2025
- 2025Completion neq Collaboration: Scaling Collaborative Effort with Agents29 Oct 2025
- 2025AI Must not be Fully Autonomous31 Jul 2025
- 2025Levels of Autonomy for AI Agents14 Jun 2025
- 2025Future of Work with AI Agents: Auditing Automation and Augmentation Potential across the U.S. Workforce6 Jun 2025
12 newest of 17 All 17 (JSON)