A Structured Approach to Safety Case Construction for AI Systems
Not on the map. Why?
Abstract (arXiv)
Safety cases, structured arguments that a system is acceptably safe, are becoming central to the governance of AI systems. Yet, traditional safety-case practices from aviation or nuclear engineering rely on well-specified system boundaries, stable architectures, and known failure modes. Modern AI systems, such as generative and agentic AI, are the opposite. Their capabilities emerge unpredictably from low-level training objectives, their behaviour varies with prompts, and their risk profiles shift through fine-tuning, scaffolding, or deployment context. This study examines how safety cases are currently constructed for AI systems and why classical approaches fail to capture these dynamics. This study introduces comprehensive taxonomies for AI-specific claim types (assertion-based, constraint-based, capability-based), argument types (demonstrative, comparative, causal/explanatory, risk-based, and normative), and evidence families (empirical, mechanistic, comparative, expert-driven, formal methods, operational/field data, and model-based). It then proposes a reusable safety-case template, each of which follows a predefined structure of claims, arguments, and evidence tailored for AI systems. Each template is illustrated by end-to-end patterns that address distinctive challenges, such as evaluation without ground truth, dynamic model updates, and threshold-based risk decisions. The result is a systematic, composable, and reusable approach to constructing and maintaining safety cases that are credible, auditable, and adaptive to the evolving behaviour of generative and frontier AI systems.
Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). First posted on arXiv 30 Jan 2026.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2026: 6.
6 papers.
- 2026Externalization in LLM Agents: A Unified Review of Memory, Skills, Protocols and Harness Engineeringcited by 74
- 2026Uncertainty Propagation in LLM-Based Systemscited by 3
- 2026Position: Behavioural Assurance Cannot Verify the Safety Claims Governance Now Demandscited by 2
- 2026Testing and Evaluation of Agentic AI Systems In Military Command and Controlcited by 0
- 2026Dependable AI-Assisted Engineering: A Formal Framework for AI Participation and Assurance in Safety-Critical Workflowscited by 0
- 2026From Probe Scores to Alarm Policies: Operational Validity of Activation Monitors for Language-Model Agentscited by 0
- 2026From Probe Scores to Alarm Policies: Operational Validity of Activation Monitors for Language-Model Agents3 Oct 2026
- 2026Dependable AI-Assisted Engineering: A Formal Framework for AI Participation and Assurance in Safety-Critical Workflows2 Oct 2026
- 2026Testing and Evaluation of Agentic AI Systems In Military Command and Control20 Aug 2026
- 2026Position: Behavioural Assurance Cannot Verify the Safety Claims Governance Now Demands14 May 2026
- 2026Uncertainty Propagation in LLM-Based Systems26 Apr 2026
- 2026Externalization in LLM Agents: A Unified Review of Memory, Skills, Protocols and Harness Engineering9 Apr 2026
Similar, not cited
Close in wording, no citation either way
- 2026Understanding as an Explicit and Assessable Component of Frontier AI Safety Decisions ↗
- 2026The safety failures we are not instrumenting: a perspective on hidden safety-critical challenges in modern AI systems
- 2026Compliance-by-Construction Argument Graphs: Using Generative AI to Produce Evidence-Linked Formal Arguments for Certification-Grade Accountability
- 2026Taxonomy and Consistency Analysis of Safety Benchmarks for AI Agents
- 2024SafetyAnalyst: Interpretable, Transparent, and Steerable Safety Moderation for AI Behavior
- 2025Safety by Measurement: A Systematic Literature Review of AI Safety Evaluation Methods
- 2025An Example Safety Case for Safeguards Against Misuse
- 2026Agentic Safety is an Epistemic Property, Not a Behavioral One