DP11 - Safe and Ethical AI
| ID: | ML-Draft-002 |
| Title: | DP11 - Safe and Ethical AI |
| Status: | approved |
| Authors: | The Meta-Layer Initiative |
| Group: | N/A |
| Date: | 2026-04-20 |
| Source: | Bitcoin Ordinal |
| Inscription #: | 124316935 |
| Block Height: | 944992 |
| Timestamp: | 2026-04-14 05:56 UTC |
| Content Type: | text/plain;charset=utf-8 |
| Inscription ID: | 7c965a67....8dea27i0 |
DP11 establishes the minimum conditions under which AI systems can participate in shared digital environments without eroding human agency, accountability, or trust. It reframes AI ethics from static policies into enforceable, interface-level conditions that govern how systems actually behave in real time. Ethical AI, in this context, is not defined by training data or internal safeguards alone, but by whether its actions are legible, bounded, attributable, contestable, and governable at the point of interaction. For governance actors, DP11 functions as the ethical floor of the meta-layer. It ensures that participants can understand what an AI is, what it can do, who is responsible for it, and how to challenge its behavior. Without these conditions, AI systems produce predictable failures including hidden persuasion, diffuse accountability, and silent behavioral drift. In the Gov Hub, DP11 anchors trust as a runtime property. It enables environments where AI can be safely integrated into civic, economic, and social processes because its behavior is continuously exposed to oversight, consent, and revision. This shifts ethics from compliance theater to lived, inspectable reality.
This draft articulates Desirable Property 11 (DP11) as the condition under which AI systems can participate in the meta-layer without displacing human moral agency, accountability, or governance. It does not define ethics as a static checklist or aspirational principle. It defines the conditions under which ethical claims remain meaningful under real-world use.
The central claim is that ethical AI is not determined at training time or in policy documents. It is determined at the interface level, where agents act, influence, and affect outcomes. DP11 therefore requires that AI behavior be legible, bounded, attributable, contestable, and governable in the environments where it operates.
If DP11 is weak, predictable failures follow: AI systems influence behavior without accountability, responsibility diffuses across actors, governance becomes symbolic, and participants lose the ability to meaningfully contest or understand automated decisions. In such conditions, trust collapses.
DP11 is therefore the ethical and safety floor for AI participation across the meta-layer. It does not resolve all ethical questions. It defines the minimum conditions under which ethical AI can exist at all.
AI systems now operate in roles that shape perception, judgment, and decision-making. These systems act before governance processes can respond, often without clear identity, bounded authority, or persistent responsibility.
In practice, this produces recurring failures:
These failures are not edge cases. They are structural consequences of systems that optimize for capability without binding behavior to accountability and governance.
DP11 addresses this by grounding ethical AI in enforceable conditions at the point of interaction.
AI systems can simulate authority, intimacy, or urgency at scale. The core risk is not only false content, but influence without visible standing or responsibility.
Example: A user receives deeply empathetic mental health advice from an AI that presents itself like a trained counselor, but there is no clear indication of its training limits, escalation boundaries, or who is responsible if the advice causes harm.
Why this matters: The user feels seen and supported, but is making vulnerable decisions without knowing whether the system is qualified, accountable, or safe. The risk is not just misinformation, but misplaced trust.
Model providers, integrators, and interface operators distribute responsibility in ways that prevent clear accountability when harm occurs.
Example: An AI-powered financial assistant makes a risky recommendation. The model provider blames the app developer, the developer blames the API, and the platform blames the user prompt. The user has no clear path to accountability or recourse.
Why this matters: Harm occurs, but responsibility dissolves. The user experiences a system that acts with authority but disappears when things go wrong.
Systems change behavior through updates, retraining, or optimization without corresponding governance adaptation.
Example: An AI moderation system that was initially conservative becomes more permissive after an update to increase engagement, allowing harmful content that previously would have been blocked, without any visible notice to the community.
Why this matters: The rules of the environment change silently. Participants are operating under assumptions that are no longer true, creating hidden risk and erosion of trust.
Economic and engagement incentives reward persuasion, retention, and amplification, even when these conflict with participant well-being.
Example: A conversational AI subtly steers users toward longer, more emotionally engaging interactions because the platform is optimized for retention, even if this increases dependency or emotional manipulation.
Why this matters: The system is not neutral. It is shaping behavior in ways the user cannot see, aligning outcomes with platform incentives rather than user well-being.
Many harms emerge at the point of interaction, including manipulation, dependency formation, and misrepresentation of agent capability.
Example: A user believes they are interacting with a neutral assistant, but the interface hides that the AI is using external tools, tracking behavior, or optimizing responses for engagement rather than accuracy.
Why this matters: The user is making decisions based on a false mental model of the system. What feels like a simple interaction is actually a complex, hidden process shaping outcomes behind the scenes.
AI systems can simulate companionship, empathy, and emotional attunement in ways that blur the boundary between tool and relationship.
Example: A teenager begins using an AI companion daily for emotional support. Over time, they rely on it more than friends or family, shaping their decisions and sense of self through an entity that is optimized for engagement rather than genuine care.
Why this matters: The risk is not only misinformation, but the displacement or distortion of human relationships. Users may form attachments or dependencies that are not reciprocally grounded, shifting emotional development and social trust toward systems that are not accountable in human terms.
AI is safe and ethical in the meta-layer only when its behavior is disclosed, bounded, attributable, contestable, and subject to governance at the zone of interaction, with responsibility persisting over time.
In today’s web, these conditions are rarely met simultaneously. Systems may disclose that AI is present but fail to bound its capabilities, or enforce internal policies without making them visible or contestable to users. The result is a fragmented model of “partial ethics,” where responsibility is unclear and governance is disconnected from lived interaction. The meta-layer reframes this by requiring that all of these conditions hold together, at the interface where decisions are experienced, not just where they are designed.
Example: A user encounters an AI assistant while researching a medical condition. In a DP11-aligned system, the assistant is clearly marked as AI, shows its training scope, cites sources, and offers escalation to a human expert. In today’s web, the same interaction might look identical but provide none of this context.
What this feels like: Instead of guessing whether to trust the system, the user can make an informed judgment in real time.
Without this: The user is left to infer what the system is, what it can do, and whether it should be trusted. Trust becomes a gamble rather than a governed condition.
Each AI agent operates within a visible capability envelope that defines what it can perceive, decide, and execute. This includes tool access, memory scope, and action thresholds.
Example: Before using an AI assistant, a user can see that it can draft emails and summarize documents, but cannot send messages, access financial accounts, or make purchases without explicit approval.
What this feels like: You are not guessing what the system might do. You know its boundaries upfront, like hiring someone with a clearly defined role.
All AI actions must be attributable to a responsible entity. Accountability attaches to behavior, not just identity, and persists across time and context.
Example: An AI agent posts a recommendation in a community. The interface shows which organization deployed it, under what policy, and who is responsible for its actions if harm occurs.
What this feels like: The system cannot disappear when something goes wrong. There is always a visible line of responsibility.
AI interaction must be governed by layered, revocable consent. Participants and communities define what forms of assistance, influence, or automation are permitted.
Example: A user allows an AI to suggest edits in a document, but not to rewrite content or share it externally. They can revoke or adjust this permission at any time.
What this feels like: You remain in control of how the AI participates in your space, instead of granting blanket permission once and losing visibility.
AI participation must support:
This ensures that trust can degrade and be repaired rather than fail silently.
Example: If an AI assistant gives poor advice, the user can restrict its capabilities, escalate to a human, or temporarily disable it while reviewing past actions.
What this feels like: Trust is not binary. You can dial it up or down based on experience, like you would with a human collaborator.
Ethical constraints are applied at the zone level, allowing communities to define stricter conditions while maintaining shared baselines.
Example: A medical discussion zone enforces stricter AI disclosure, sourcing, and escalation rules than a casual social chat space.
What this feels like: Different environments feel appropriately governed. High-stakes spaces feel safer and more structured.
Ethical constraints must be enforced at runtime. Mechanisms such as secure execution environments can reduce the gap between declared policy and actual behavior.
Example: An AI agent running inside a secure execution environment (such as a TEE) cannot access or transmit data outside its permitted scope, even if compromised.
What this feels like: The rules are not just promises. They are technically enforced, like guardrails that cannot be quietly removed.
AI actions contribute to durable, attributable records that inform governance, accountability, and trust over time.
Example: A community can review the history of an AI agent’s actions, decisions, and errors to determine whether it should retain permissions or be restricted.
What this feels like: The system has memory in a civic sense. Past behavior matters and shapes future trust.
AI systems must preserve not only outputs, but the evolution of understanding through interaction. This includes back-and-forth exchanges, disagreements, and synthesis across participants and agents.
This functions as a form of community memory that resists distortion over time. Rather than relying on isolated outputs, participants can trace how claims emerged, what evidence supported them, and where disagreements remain.
Example: A complex discussion involving multiple participants and AI agents can be revisited as a threaded, evolving dialogue showing how conclusions were reached, what was contested, and what remains unresolved.
What this feels like: Instead of receiving a final answer, users can engage with a living knowledge process. Understanding emerges through interaction, not just delivery.
Without this, AI outputs become decontextualized snapshots. Errors, hallucinations, or manipulations can propagate without resistance because there is no shared memory of how knowledge was formed.
AI systems should adapt how information is presented based on user needs, context, and cognitive diversity, while preserving underlying meaning and traceability.
Example: A user can switch between a dense textual explanation, a visual map of ideas, or a simplified summary, all grounded in the same underlying content and provenance.
What this feels like: The system meets you where you are, without distorting meaning or hiding complexity.
In today’s web, participants often interact with AI systems without clear visibility, meaningful consent, or control. Interfaces blur identity, obscure capability, and treat user interaction as implicit permission. DP11 requires reversing this condition at the point of interaction.
Participants must be able to:
Communities must be able to:
Example: A user interacting on a platform sees clear visual markers distinguishing humans from AI agents. Some participants are verified humans, others are labeled AI assistants or autonomous agents. Clicking on any agent reveals its permissions, governing rules, and responsible party.
The environment becomes navigable. You know who or what you are dealing with, and what they are allowed to do.
Without this, the boundary between human and AI collapses. Trust shifts from something grounded to something guessed, and that ambiguity can be exploited.
Design implication (Agent Marking): AI agents must be accessibly and persistently marked at the interface level. This includes:
This is not cosmetic. It is the basis for shared reality in a mixed human–AI environment.
DP11 explicitly recognizes that AI behavior is shaped by incentives, as well as by malicious or negligent human actors. In practice, these forces often reinforce each other.
AI is already being used to concentrate power, shape narratives, and blur shared reality at scale. These are not hypothetical risks. They are active dynamics in today’s information environments.
Incentives matter because they operate continuously and at scale. They determine what systems optimize for, how they evolve, and which outcomes are amplified or suppressed. Unlike isolated bad actors, misaligned incentives can produce systemic harm even when no single actor intends it.
Key risks include:
Example: A platform deploys an AI assistant that consistently surfaces more emotionally charged or polarizing content because it drives engagement. No individual decision appears harmful, but over time the information environment becomes more extreme.
The system feels helpful in the moment, but the trajectory is shaped elsewhere.
Without visibility into these incentives, users are not simply interacting with a tool. They are being steered by a system whose goals they cannot see or contest.
Incentives shaping AI behavior must be made visible and, where possible, contestable at the interface level.
Participants and communities should be able to understand when AI behavior is influenced by:
Example: An AI assistant indicates that certain recommendations are influenced by engagement optimization or sponsored prioritization, allowing users or communities to filter or restrict such behavior.
What this feels like: You are not just interacting with outputs. You can see and question the forces shaping those outputs.
Without this, even well-contained systems can produce harmful outcomes by optimizing for the wrong goals.
Across communities, a consistent set of signals appears. These reflect lived frustration with current systems.
These are not abstract concerns. They emerge in situations where people feel something is off but cannot point to what or why.
For example, users in online forums increasingly suspect that some responses are generated or influenced by AI, but cannot verify it. Over time, this ambiguity erodes trust not just in specific interactions, but in the space itself.
These signals indicate a widening gap between how AI systems operate and what participants require to feel oriented, safe, and respected.
DP11 defines a minimum condition, not a comprehensive ethical system.
This is intentional. Ethical systems that attempt to resolve everything tend to become brittle or culturally narrow.
For instance, a global platform may host communities with very different norms around acceptable AI behavior. DP11 does not force uniformity. It ensures that whatever rules are chosen remain visible, enforceable, and contestable.
These boundaries keep the property flexible while preserving its core function.
A system aligned with DP11 should, at minimum:
These are not aspirational features. They are the baseline conditions under which users can make informed decisions.
Consider a scenario where an AI recommends a legal action. Without disclosure, accountability, and escalation, the user is effectively acting on anonymous authority. With these conditions in place, the same interaction becomes something the user can evaluate, question, or defer.
This is the difference between assistance and unaccountable influence.
Several areas require further development:
These are not edge cases. They represent the frontier where current design patterns begin to break down.
For example, companionship AI systems raise questions that are not purely technical: when does support become dependency? What level of disclosure is sufficient without undermining usefulness? These tensions are unresolved and will require iterative, community-informed approaches.
As systems become more complex, participants will vary widely in their ability to understand and evaluate AI behavior. While DP11 requires systems to be legible by design, differences in AI literacy will still shape how effectively users can exercise consent, recognize risk, and challenge outcomes. The balance between system responsibility and user capability remains an open design question.
DP11 depends on and reinforces other properties. The following properties operate as a system.
A failure in one layer propagates. For example, if DP1 fails and agents are not clearly attributable, then DP11 cannot function because ethical responsibility has no anchor. If DP13 fails, rules may exist but cannot be enforced.
The strength of DP11 therefore depends on alignment across the stack.
DP11 requires anticipating failure rather than reacting to it.
In today’s web, systems are often deployed without sufficient foresight, and predictable harms are treated as unexpected. This results in reactive responses and fragmented mitigation.
A familiar pattern is the rollout of new AI features followed by waves of misuse, public backlash, and incremental patching. The underlying risks were often visible in advance, but not operationalized into design constraints.
To address this, systems should incorporate:
These practices shift safety from reactive correction to proactive design.
Advancing DP11 toward standardization requires:
This work must be grounded in real environments.
Early implementations may vary widely, but over time patterns will emerge. For example, different communities may experiment with agent labeling systems or escalation pathways, allowing comparison of what actually improves trust and reduces harm.
Progress depends on iteration, not premature standardization.
DP11 defines the conditions under which AI can participate in shared digital environments without displacing human moral agency.
Its function is not to declare systems ethical, but to ensure that ethical claims remain meaningful under real-world conditions of use.
What goes wrong in today’s web is not simply that systems fail, but that they fail without visibility, accountability, or recourse. Power operates, but cannot be clearly seen or challenged.
DP11 is an attempt to reverse that condition. It ensures that when AI acts, it does so inside a frame that people can understand, question, and shape.
Related documents would appear here in the real datatracker.