纳德拉(经微软 Nadim Abdo 转述)认为,AI 智能体的安全控制必须置于模型之外,智能的供给与对其的授权必须分离。
我们不应该让模型充当自己的安全权威。决定模型能访问什么、能采取什么行动、是否应继续运行的控制机制,必须放在模型之外,让模型无法绕过或篡改。原文 (en)
We should not ask a model to be its own security authority. The controls that determine what it can access, what actions it can take, and whether it should continue operating must sit outside the model, where the model cannot bypass or tamper with them.