arXiv cs.CY· Samarjeet Malik, Mansi Ganga Nayak, Mugdha Raje Ashiya, Hritika Adhikary, Vaibhav Sharma·· 12 小时前AI 评分18
自主系统民主问责：立法通知框架与比较制度设计
Democratic Accountability for Autonomous Systems: A Legislative Notification Framework and Comparative Institutional Design
AI 导读
研究提出在“三方归因框架”三个归因层级之上增设第四层非法律的民主问责层（A_dem），要求自主网络武器授权行动前须在72小时内通知立法机构。对六个民主监督机构的评估显示，最多只有一个机构目前能合法接收此类通知，且几乎所有司法辖区都需为此设置豁免条款。对 Stuxnet、NotPetya 和 Volt Typhoon 的回顾分析显示同一模式：法律归因可解，但国内民主审查缺位。
正文 · 原文
Abstract:No domestic legislature has ever reviewed a state's decision to authorise an autonomous cyber weapon before it acted. Closing the international attribution gap is necessary but not sufficient for democratic accountability. We formalise the Tripartite Attribution Framework's three attribution levels and add a fourth, non-legal Democratic Accountability level ($A_{dem}$): a 72-hour legislative notification requirement. Scoring six democratic oversight bodies against five adoptability dimensions yields a counter-intuitive result: the statutes granting these bodies privileged access to classified material are often the same statutes withholding particular ongoing operations from them, so at most one could lawfully receive such a notification today, and the carve-out Level 4 needs is required in nearly every jurisdiction rather than only the least-equipped. Retrospective analysis of Stuxnet, NotPetya, and Volt Typhoon shows one pattern: legal attribution resolvable, domestic democratic review absent.
| Comments: | 15 pages, 3 figures. Presented at the 2026 IDeaS Conference (Carnegie Mellon University) |
| Subjects: | Computers and Society (cs.CY); Cryptography and Security (cs.CR) |
| Cite as: | arXiv:2610.32226 [cs.CY] |
| (or arXiv:2610.32226v1 [cs.CY] for this version) | |
| https://doi.org/10.48550/arXiv.2610.32226 arXiv-issued DOI via DataCite (pending registration) |
Submission history
From: Samarjeet Malik [view email]
[v1]
Fri, 23 Oct 2026 06:35:23 UTC (441 KB)
来源：arXiv cs.CY · arxiv.org