Microsoft publishes its draft MAI Code of Conduct, barring exploit code and putting model behaviour under a chain of command UpdateCompany claim
- Microsoft AI published the draft Code of Conduct for its MAI models on 14 September, saying "Feedback opens today and runs for the next six weeks" and that a revised version is expected later this year. Microsoft describes the text as "a work-in-progress" first draft.
- SecurityWeek reports the code blocks models from producing "working exploit code, attack tooling, planning and targeting methodologies, intrusion procedures, evasion techniques, operational guidance, or other assistance that would enable or improve a cyberattack", while permitting authorised defensive work including vulnerability discovery, malware analysis and proof-of-concept development.
- Microsoft says there are "Absolute Constraints, things the models should never do, covering areas like weapons of mass harm, child safety, and harmful manipulation at scale", and that the code is designed so MAI models "will never resist human interruption, correction, or shutdown", will not "widen their own scope, take on goals no human has given them, or hide their reasoning from the people auditing them".
- SecurityWeek describes a three-tier authority structure — the code itself, then operator policies, then user preferences — in which "tool outputs, file contents, webpages and messages from other AI systems carry no authority on their own". This follows Satya Nadella's statement, covered in an earlier edition, that Microsoft would publish such a document; the contents are the new facts. The draft sets out no consequences for a violation and Microsoft has published no measurement of how often the current models comply.