AI Governance Engineer
GitHub

GPAI Code Safety and Security Appendix 1.3 and 1.4: autonomy, tool use and loss of control as systemic risks

Sources of systemic risk to consider include the capability to operate autonomously, propensities such as colluding with other AI systems, and affordances such as access to tools and physical systems and the level of human oversight; loss of control is a specified systemic risk

By Reviewed

From clause to evidenceThe chain from GPAI Code Safety and Security, Appendix 1.3 and 1.4 to its evidence record, in 6 steps; the text alternative lists them and the facts under the figure state each in full.ClauseGPAI CodeSafety andSecurity,…Duty holderSignatoryproviders of…Applies fromNo dateVoluntaryArtefactProviderevaluations of…LayersLayer 03Layer 05Evidence recordEvidence recordv1Same topic elsewhere: no crosswalk topic files this clause yetAs of 2026-09-24 · illustrative, not a claim of conformity From clause to evidenceThe chain from GPAI Code Safety and Security, Appendix 1.3 and 1.4 to its evidence record, in 6 steps; the text alternative lists them and the facts under the figure state each in full.ClauseGPAI Code · Safety and Security,…Duty holderSignatory providers of GPAI…Applies fromNo date · VoluntaryArtefactProvider evaluations of autonomy…LayersLayer 03Layer 05Evidence recordEvidence record v1Same topic elsewhere: no crosswalk topicfiles this clause yetAs of 2026-09-24illustrative, not a claim of conformity
From clause to evidence Build the artefact, then file every output it produces as a record that names AIGE-OBL-GPAICOP-SAFETY-APP1. Drawn from chapter 08.
Text alternative
  • Clause: GPAI Code, Safety and Security, Appendix….
  • Duty holder: Signatory providers of GPAI….
  • Applies from: No date, Voluntary.
  • Artefact: Provider evaluations of autonomy….
  • Layers: Layer 03, Layer 05.
  • Evidence record: Evidence record v1.
  • Record schema: Evidence record.
  • No crosswalk topic files this clause yet.
Id
AIGE-OBL-GPAICOP-SAFETY-APP1
Instrument
GPAI Code of Practice code
Clause
Safety and Security, Appendix 1.3 and 1.4
In scope
Signatory providers of GPAI models with systemic risk (deployers request the evidence)
Applies from
No date Voluntary · published 2025-07-10

The artefact that evidences it

Provider evaluations of autonomy and tool use, requested at the vendor due-diligence gate and filed with the agent registry entry.

Patterns that build it

No pattern in the catalogue names this clause on its "Maps to" line yet; the artefact above is the engineering answer.

Source

Chapter 08, section GPAI Code of Practice, checked against its sources on the review date above.

Machine-readable

Cite this obligation

García Aibar, J. (2026). GPAI Code Safety and Security Appendix 1.3 and 1.4: autonomy, tool use and loss of control as systemic risks (AIGE-OBL-GPAICOP-SAFETY-APP1). In AI Governance Engineering: The Thesis & Body of Knowledge (v0.5.0). https://doi.org/10.5281/zenodo.22956197. https://aigovernanceengineer.com/obligations/aige-obl-gpaicop-safety-app1. CC BY 4.0

BibTeX

@misc{aige2026obligation,
  author       = {Jorge García Aibar},
  title        = {{GPAI Code Safety and Security Appendix 1.3 and 1.4: autonomy, tool use and loss of control as systemic risks (AIGE-OBL-GPAICOP-SAFETY-APP1)}},
  howpublished = {In AI Governance Engineering: The Thesis \& Body of Knowledge},
  year         = {2026},
  version      = {0.5.0},
  doi          = {10.5281/zenodo.22956197},
  url          = {https://aigovernanceengineer.com/obligations/aige-obl-gpaicop-safety-app1},
  note         = {Version 0.5.0}
}