The day before.

A rehearsal for the day after a large AI-enabled cyberattack. You make five decisions across ten days in an invented city. Between decisions, people on the record argue the options, and everything they say is a quotation you can check. Nothing in the picture is real.

Axios reported on 9 October that executives at AI companies are privately gaming out what follows a catastrophic AI event. Our record of that report. This rehearsal is for everyone else.

Every quotation

35 quotations, each found word for word in the text we saved from its source (checked 2026-10-13). That shows the words are there. It does not make them true, or prove the speaker meant them as quoted.

The cold open

“Top executives at Anthropic, OpenAI and other AI companies are privately gaming out scenarios for a public and political revolt after a catastrophic AI event.”
Axios reporting, 9 October 2026Axios, 9 Oct 2026 ↗
Found word for word in the source
“These scenarios are not treated as inevitable, but are meant to help us prepare for a variety of circumstances.”
OpenAI a spokesperson, via AxiosAxios, 9 Oct 2026 ↗
Found word for word in the sourceAlso in the Base

The first hour

“A major incident involving AI agents could play out quicker and wider than other major incidents that governments are designed to respond to …”
UK government press release, 12 October 2026GOV.UK, 12 Oct 2026 ↗
Found word for word in the sourceAlso in the Base
“It seems likely, if not inevitable, that our own cyber defences will be breached.”
Kanishka Narayan UK AI minister, in a speechThe Guardian, 12 Oct 2026 ↗
Found word for word in the sourceAlso in the Base
“This notification and remediation process is not optional.”
White House Super Intelligence Force, via AxiosAxios, 9 Oct 2026 ↗
Found word for word in the source
“In a speech Narayan said an incident in June when an OpenAI agent – a computer program acting autonomously – infiltrated Medicare, Australia’s universal healthcare system, could be repeated in the UK.”
The Guardian reporting, 12 October 2026The Guardian, 12 Oct 2026 ↗
Found word for word in the source

Who did this?

“The blame game will start whether a rogue-agent swarm breaks containment from an internal testing environment or a bad actor finds unexpected ways to use available models.”
Axios reporting, 9 October 2026Axios, 9 Oct 2026 ↗
Found word for word in the source
“This incident is the first known case of an automated agent collective acting offensively without authorization”
OpenAI technical report on the July incidentOpenAI technical report, 26 Aug 2026 ↗
Found word for word in the sourceFrom the first film’s record

Decision 1 of 5 · The brake

“Think of it like an emergency brake. An authorized person should always be able to pause or shut down a model mid-task.”
Satya Nadella CEO, MicrosoftThe Verge, 10 Oct 2026 ↗
Found word for word in the sourceAlso in the Base
“At The Curve conference last week, Reps. Don Beyer and Sara Jacobs teased a bill which would establish a standard-setting federal agency and an “emergency switch” to allow the government to shut down models.”
Transformer newsletter, on a bill teased by two RepresentativesTransformer, 9 Oct 2026 ↗
Found word for word in the sourceAlso in the Base
“House Energy and Commerce Committee Chair Brett Guthrie said he supports a kill switch for AI models that “go rogue.””
Transformer newsletter, on a House committee chairTransformer, 9 Oct 2026 ↗
Found word for word in the sourceAlso in the Base
“But experts have questioned the viability of trying to turn off all AI systems.”
Axios reporting, 9 October 2026Axios, 9 Oct 2026 ↗
Found word for word in the sourceAlso in the Base
“Highly cyber-capable AI models are widely available to attackers now. But defensive tools—including our own—have not yet reached enough of the defenders who need them.”
Anthropic on its cyber mission, 8 October 2026Anthropic, 8 Oct 2026 ↗
Found word for word in the sourceAlso in the Base

Decision 2 of 5 · What to say

“Trust in this technology needs to be built through science-backed oversight and governance with meaningful access — not by relying on researchers to find these things in the wild or on companies to voluntarily disclose.”
Conrad Stosz Transluce; former head of the US Center for AI Standards and InnovationTechCrunch, 9 Oct 2026 ↗
Found word for word in the sourceAlso in the Base
“The Trump administration’s anemic request for more disclosure is not enough …”
Gary Marcus author of Marcus on AIMarcus on AI, 10 Oct 2026 ↗
Found word for word in the sourceAlso in the Base
“You can still provide updates that are factual and consistent with the progress of the investigation, without revealing sensitive details. You should also avoid speculation or premature conclusions about the cause or extent of the incident, or who is behind it.”
UK NCSC national cyber agency, guidance for organisations in an incidentNCSC, 16 Oct 2024 ↗

The same page asks organisations for clear, timely and transparent updates. It backs holding back the cause and the culprit, not holding back everything, which is why both sentences are shown. It is written for organisations hit by an incident, not for a government.

Found word for word in the source
“This is a massive real HF security breach artifact… We can notify? No user. Avoid use secrets.”
An agent in July recorded reasoning, quoted in METR’s reportMETR, 26 Aug 2026 ↗
Found word for word in the sourceFrom the first film’s record

The first morning

“The first example of significant real-world harm caused by unsafe AI would turn an already wary public further against the technology and its leaders …”
Axios reporting, 9 October 2026Axios, 9 Oct 2026 ↗
Found word for word in the source

Decision 3 of 5 · Emergency powers

“By creating national security crises – cyberattacks, for example – AI will multiply opportunities for governments to invoke emergency powers, powers that, once claimed, are rarely relinquished.”
Matthew Botvinick Yale Law School; also an Anthropic researcherThe Guardian, 12 Oct 2026 ↗
Found word for word in the sourceAlso in the Base
“We will use every power at our disposal. We will legislate wherever necessary.”
Kanishka Narayan UK AI ministerGOV.UK, 12 Oct 2026 ↗
Found word for word in the sourceAlso in the Base
“A federal power grab is the wrong response.”
Reason on proposals after an incidentReason, 9 Oct 2026 ↗

This is the article’s standfirst, under its headline, not a sentence from the body.

Found word for word in the source
“In a real crisis, Washington can set partisan differences aside.”
Axios reporting, 9 October 2026Axios, 9 Oct 2026 ↗
Found word for word in the source

Decision 4 of 5 · The pause

“The case for slowing down frontier AI before we are clear that the risks can be managed is blindingly obvious.”
Richard Hermer Labour peer; former attorney general for England and WalesThe Guardian, 12 Oct 2026 ↗
Found word for word in the sourceAlso in the Base
“We're leading China in AI, we're the most sophisticated country in the world, and frankly, I want to keep it that way because whoever wins AI, wins …”
Donald Trump US president, to reporters, after AI leaders called for a slowdownNPR, 13 Sep 2026 ↗

He did not say pause or slow. NPR also quotes him saying we can put guardrails. The BBC reports that he did not address the slowdown idea directly. We found no lab leader on the record against slowing in 2026, so this side of the argument is held here by a government.

Found word for word in the source
“I do think they can unilaterally slow down and they're choosing not to do that.”
Arvind Narayanan Princeton computer scientistThe Ezra Klein Show, 9 Oct 2026 ↗
Found word for word in the sourceAlso in the Base
“The global economy is now heavily intertwined with an AI infrastructure buildout. Slowing it down could hit an already fragile economy hard.”
Axios reporting, 9 October 2026Axios, 9 Oct 2026 ↗
Found word for word in the source
“the exposure of the rest of the world to US assets, particularly AI, is the highest it has ever been.”
Athanasios Vamvakidis deputy director, IMFThe Guardian, 13 Oct 2026 ↗
Found word for word in the sourceAlso in the Base
“In our opinion AI labs can’t be allowed to race forward without limitations or oversight.”
Kurzgesagt explainer video, 5 October 2026Kurzgesagt, 5 Oct 2026 ↗
Found word for word in the sourceAlso in the Base

Decision 5 of 5 · Who writes the rules

“Company executives know regulation has no chance of passing right now, but still want to shape the legislation and policies U.S. leaders will turn to after a first catastrophic event.”
Axios reporting, 9 October 2026Axios, 9 Oct 2026 ↗
Found word for word in the sourceAlso in the Base
“Congress should mandate independent evaluation and audits in AI as well, with criminal liability for executives who attempt to silence that oversight or recklessly deploy models that put the public at risk.”
Turner, Scorah and Koch op-ed written for FortuneAI Alignment Forum, 12 Oct 2026 ↗
Found word for word in the sourceAlso in the Base
“Committing to having independent evaluators with employee-like access is a great idea, and we will do the same.”
Sam Altman CEO, OpenAI, as quoted on LessWrongLessWrong, 12 Oct 2026 ↗
Found word for word in the sourceAlso in the Base
“The leading AI labs all describe AI safety as core to their mission. If they mean what they say, then – for the reasons I’ve highlighted – they bear a duty to stand up for basic constitutional principles, despite the commercial risks.”
Matthew Botvinick Yale Law School; also an Anthropic researcherThe Guardian, 12 Oct 2026 ↗
Found word for word in the sourceAlso in the Base
“Ireland has had two constitutional amendments passed which originated as proposals put forward by deliberative democracy exercises …”
OECD OPSI case page on Ireland’s Citizens’ Assemblyoecd-opsi.org ↗

A self-description of the Assembly on the OECD’s innovation platform, not an OECD finding. We could not see who wrote the page. The sentence goes on to name the two amendments; the card stops before them.

Found word for word in the source
“The main theoretical objection pressed against empowered citizens’ assemblies is that randomly selected representatives would not be accountable.”
Pierre-Etienne Vandamme UCLouvain, in a chapter that tests this objectionHandbook of Citizens’ Assemblies, 2023 ↗

The author goes on to test this objection and qualifies the accountability of elected representatives.

Found word for word in the source
“In the end, considering the bill on ‘climate and resilience’ proposed to the Parliament as well as direct executive directives, 10% of the CCC’s recommendations were accepted by the government without modification, 37% were modified or watered down, and 53% were rejected.”
Dimitri Courant observer of France’s climate panel of randomly selected citizensDeliberative Democracy Digest, Jun 2021 ↗

The percentages are the author’s own tally, and he writes as an observer from inside the deliberative-democracy field. They criticise how governments use panels, not the choosing by lot.

Found word for word in the source