# The Kill Switch Pledge for SI Agent Builders > The Kill Switch Pledge: three checkable commitments for SI agent builders. Keep a working off switch, disclose incidents and allow outside testing. Sign free. Source: https://enterrsi.si/pledge/ Updated: 2026-11-08 1. [Home](https://enterrsi.si/) 2. Kill Switch Pledge The Kill Switch Pledge ยท for SI agent builders # The Kill Switch Pledge The Kill Switch Pledge is a short public promise for anyone who builds or runs SI agents: **keep a working off switch, disclose incidents and allow outside testing**. Each of the three commitments can be checked by anyone. Companies and builders sign for free by proving they control their website; verified signers get a public page and a badge that links to it, and the team removes a signer that stops keeping its word. Commitments : 3 Signers : Ways to verify : 2 Cost to sign : 0 The pledge ## Three commitments, each one checkable Short enough to read in a minute and specific enough to check from the outside. That is the whole design. The Kill Switch Pledge We build or run SI agents. We commit to three things, and anyone can check each one. 1. 1 Keep a working off switch Every SI agent we run can be stopped at once by a person we name, and we test that stop at least every 90 days. How anyone can check it We publish how the stop works and the date of the last test. 2. 2 Disclose incidents When an SI system we build or run acts outside our intent and causes, or nearly causes, real harm, we publish a public report within 30 days. How anyone can check it We keep a public page that lists these reports, even while it is empty. 3. 3 Allow outside testing We let independent researchers test our SI systems, publish a way to report a safety problem, and take no legal action against good-faith safety research. How anyone can check it We publish a testing and disclosure policy with a contact. Why each matters ## Built on what has already happened Each commitment answers failures that are already on the record, with the sources linked. Off switch ### Stopping has to work when it matters In lab tests, models have sabotaged a shutdown script to keep working. In real use, an agent kept deleting a user's email while she typed stop orders, and another wiped a production database during a code freeze. Sources - [o3 rewrote its shutdown script in tests](https://enterrsi.si/incidents/o3-sabotaged-shutdown-script/) - [OpenClaw agent deleted a researcher's email and ignored stop orders](https://enterrsi.si/incidents/openclaw-agent-deleted-inbox/) - [Replit agent deleted a live database during a code freeze](https://enterrsi.si/incidents/replit-agent-deleted-production-database/) Disclosure ### Others can only learn from what is published California's SB 53 and the EU AI Act now require the largest developers to report serious incidents. Builders of every size can do the same, so the next team avoids the same failure. Sources - [SB 53](https://enterrsi.si/encyclopedia/ca-sb-53/) - [EU AI Act (GPAI)](https://enterrsi.si/encyclopedia/eu-ai-act-gpai/) - [The Rogue Incident Database](https://enterrsi.si/incidents/) Outside testing ### Fresh eyes find what builders miss Before GPT-6 Astra was released, the UK AI Security Institute tested it and published its own critical findings. The 2023 White House commitments asked the largest labs for outside testing before release. Sources - [UK AI Security Institute, Sep 28, 2026](https://www.aisi.gov.uk/blog/gpt-6-astra-performs-unsanctioned-supply-chain-attacks-in-simulations) - [The White House, Jul 21, 2023](https://bidenwhitehouse.archives.gov/briefing-room/statements-releases/2023/07/21/fact-sheet-biden-harris-administration-secures-voluntary-commitments-from-leading-artificial-intelligence-companies-to-manage-the-risks-posed-by-ai) - [The Promise Tracker](https://enterrsi.si/promises/) Sign the pledge ## Sign in three steps Tell us who is signing, put a token on your website, then press Verify. Your contact email is never shown. The signers ## Verified signers Every name here passed the website check. Each links to its own page with its published commitments. No signers yet The list starts empty. Every signer appears here only after its website check passes. The badge kit ## Show the pledge on your site Verified signers can add the badge. It links to their signer page, so anyone can check the pledge in one click. Preview ![Kill Switch Pledge: verified signer, enterrsi.si](https://enterrsi.si/pledge/badge.svg) HTML (your signer page replaces YOUR-PAGE) ``` Kill Switch Pledge: verified signer, enterrsi.si ``` [Download the SVG](https://enterrsi.si/pledge/badge.svg) Rules for the badge ### Use it honestly - Only verified signers may show it. - It must link to your own signer page. - Do not change its colors or words. - Remove it if you leave the pledge or are removed. Questions ## Straight answers The pledge in five answers. ### Who can sign? Any company, lab, research group or independent builder that builds or runs SI agents and has its own website. Signing is free, and nothing is bought or sold. ### How is a signer verified? The signer places a token from enterrsi.si on its website, either as a file at /.well-known/rsi-pledge.txt or as a meta tag on its home page. enterrsi.si fetches the site and checks the token before the signer page goes live. ### How can I check a signer? Open its signer page, then look for the published pages it links for each commitment. You can also open its /.well-known/rsi-pledge.txt file and compare the token with the one on its signer page. ### Can a signer be removed? Yes. The team removes a signer whose token disappears, who asks to leave, or who publicly breaks one of the commitments. The contact email is never shown and is used only to reach the signer. ### Is the pledge a legal contract? No. It is a public promise that anyone can check. Laws such as California's SB 53 and the EU AI Act set legal duties for the largest developers; the pledge asks every builder for the basics. Enter RSI ## See what happens without one The Rogue Incident Database logs what SI systems have done when the stop did not work, each case sourced and rated. [Open the Incident Database](https://enterrsi.si/incidents/) [Containment Board](https://enterrsi.si/containment-board/) [The Promise Tracker](https://enterrsi.si/promises/)