External Control Layer

Library

The library lists the documents this site draws on, including the rules it compares and the sources for the case studies and incident analyses. The sources behind each incident in the record are listed on that entry’s page. Links go to the original wherever there is one.

Runtime control specifications

The specifications page compares these specifications and maps them to the gaps.

Frameworks, rules, and standards

Rules cited in the case studies

Research

Incident records and classifications

The control gap classification builds on or sits alongside these works. The classification page explains how each one relates to it.

Foundations

  • James P. Anderson, Computer Security Technology Planning Study, ESD-TR-73-51US Air Force Electronic Systems Division, October 1972, Vol. I, Vol. II
  • Jerome H. Saltzer and Michael D. Schroeder, The Protection of Information in Computer SystemsProceedings of the IEEE 63(9): 1278–1308, September 1975, DOI, MIT copy

Incident sources

The eight incident analyses draw on these sources, among others, and each analysis lists all of its sources. The 120 sources behind the control gap record are listed on each entry’s page and in the data files.

By the editor and G-14

Works by the editor of this site and by G-14, Inc. are listed separately so that readers can take their authorship into account. See G-14’s interests.

  • The External Control Problem Robert F. Tilley Jr. (G-14, Inc.), Paper, 2026

    Argues that any system that can cause effects outside itself must answer to an independent control plane that authorizes, limits, records, and audits its actions at the point where they happen. A public edition is being prepared, and reviewers may request a copy.

  • Correctly Stopped, Still Unresolved: Evaluating AI Safety Beyond the Action Boundary Robert F. Tilley Jr., Position paper, accepted at SIAI 2026; proceedings publication forthcoming with Springer Nature

    Explains why a correctly blocked AI action can leave the underlying request unfinished. Its accompanying research artifact illustrates reporting distinctions using eight authored pairs and synthetic queue calculations. These examples establish internal consistency, not field effectiveness or independent assessment.

  • Nobody Said Yes: How We Taught AI to Act Without Permission—and Who Answers When It Does Robert F. Tilley Jr., Book, Forthcoming

    A book for general readers on who is accountable when AI acts.

  • ECL-1: External Control Layer Standard G-14, Inc., maintainer, Standard, Version 1.0, Publication date to be announced

    Also listed with the other runtime control specifications above.