PDF / 7 PAGES / 85 KB
Human control
for autonomous AI.
The case for independent shutdown authority, a coordinated control model, and evidence-led recovery.
THE KILLSWITCH LIBRARY
Explore the thinking, proposed architecture, and engineering requirements behind KillSwitch. Start with the overview, then go deeper.
Engineering review drafts. Product integrations and response-time commitments are still to be validated.
01 / START HERE
Read online or take the PDFs with you. Every document belongs to the same versioned design.
The case for independent shutdown authority, a coordinated control model, and evidence-led recovery.
Product scope, threat model, AWS architecture, API guidance, and twelve planned validation drills.
02 / GO DEEPER
Six guides, from the product boundary to the operating procedures.
6 guides available
The initial customer, supported workload boundary, product requirements, and what a verified stop needs to establish.
Read guide : Product brief & MVP scopeThe flagship white paper: independent human authority, coordinated enforcement, verification, and deliberate recovery.
Read guide : Human control for autonomous AITrust boundaries, misuse cases, operator permissions, agent privileges, and the failure modes the design must address.
Read guide : Threat model & security requirementsThe proposed control and workload accounts, generation fences, connectors, access controls, and verification paths.
Read guide : AWS reference architectureA proposed API contract, operator authorization, lifecycle states, idempotency, enrollment, and error handling.
Read guide : API & integration guideTwelve planned drills and practical procedures for shutdown, incomplete outcomes, human review, and recovery.
Read guide : Validation & operator runbooksTry a broader phrase, or clear the filters to see the complete library.
03 / THE SOURCE MATERIAL
The AWS documentation behind the constraints and design decisions in these drafts.
Sources checked October 27, 2026. Links open the official AWS documentation in a new tab. References support the platform behavior discussed; the KillSwitch architecture remains a proposed design.
Tell us about your environment, review the design with us, or start a conversation about becoming a design partner.