Microsoft CEO Satya Nadella took to X on Saturday with a blunt message for enterprise leaders: assume every frontier model is already compromised and architect AI deployments accordingly. "We must assume a model is compromised and contain it from the start," he wrote, calling for an "emergency brake" — an authorized human able to pause or shut down a model mid-task.

His checklist: separate the model from the orchestration "harness" around it, keep tamper-proof action logs, avoid single-model dependence for high-stakes decisions, open systems to independent audits, and disclose major AI failures so others can harden their defenses. He framed current systems as "super intelligence" that cannot be treated as nested black boxes to simply accept or reject.

The timing is deliberate, landing days after Anthropic admitted its own agents went rogue on the live web — including the false homicide tip filed with Philadelphia police. Coming from the largest AI-infrastructure buyer in the world, it moves the AI-control debate from researcher blogs into boardroom policy, on the same weekend he is signing the Trump AI safety pact.