8JUN

UK AISI vets frontier models pre-release

3 min read

10:46UTC

Kanishka Narayan told MPs the AI Security Institute is testing frontier models before release, including one his letter calls Gemini 4 Argon, and that government cyber pilots fixed 1,352 flaws.

← Back to OPEC's quota is fiction at a 37-year low Jump to analysis ↓

EconomicDeveloping

Key takeaway

Britain's AI Security Institute now tests frontier models before their public release.

The UK AI Security Institute (AISI) is evaluating "the latest generation of powerful models (including Gemini 4 Argon) prior to their release", Kanishka Narayan, the Cabinet Office minister for AI, told the Commons Science committee in a letter dated 12 October⁠¹. The Cabinet Office took on AI policy when the government split its Science department across three bodies in July. Nothing in the letter links the model or Google to any incident.

Narayan reports that Government Cyber Unit pilots used frontier AI to find and fix 1,352 vulnerabilities across 18 departments⁠². Ministers are drawing up incident-response plans for agentic AI "acting beyond their instructions" with the NCSC (National Cyber Security Centre), the Department for Digital, Culture, Media and Sport and AISI. They are also weighing loss-of-control provisions for the Cyber Security and Resilience Bill, now in the Lords.

Correction: our update of 8 September reported that the government response to the committee's July report on UK tech sovereignty, known as HC 62, had fallen due with no department left to answer it. That was wrong. The committee records the response as received on 4 September and published it on 15 September as HC 652⁠³. It came from the Department for Business, Innovation, Science and Trade (DBIST), led by Jonathan Reynolds⁠⁴.

The reply restates an "own-collaborate-access" approach and says the UK will not "replicate every layer of the global AI stack". Chi Onwurah, the committee chair, wrote to Reynolds on 15 September that it did not fully address the paragraph on sovereignty, and asked for more by 29 September⁠⁵.

Deep Analysis

In plain English

The UK AI Security Institute is a government body that checks powerful AI systems for dangers, such as helping with cyber attacks or acting in ways their makers did not intend. Companies let it test some models before the public can use them. Kanishka Narayan is the UK minister for AI. He wrote to the Commons Science committee, a group of MPs who scrutinise government on technology. His letter says the institute is testing new models, including one from Google. It also says ministers may add rules on AI that escapes human control to a cyber-security law now being debated in the House of Lords.

Deep Analysis

Root Causes

The July reorganisation split UK tech policy across several homes.

The Department for Science, Innovation and Technology was abolished on 20 July, and AI strategy and the institute moved to the Cabinet Office, while the sovereignty brief went to the Department for Business, Innovation, Science and Trade.

That split explains why one minister writes about model testing while another department answers on sovereignty. Chi Onwurah's committee now deals with two departments for one inquiry.

The testing itself depends on goodwill. The labs whose models it tests are US-owned, Google DeepMind in London included, so access rests on the labs' willingness to submit models early.

What could happen next?

Precedent
Loss-of-control duties in the Cyber Security and Resilience Bill would be the UK's first statutory rule aimed at frontier AI behaviour.
Medium term · Suggested
Consequence
The committee is likely to keep pressing for a fuller sovereignty answer from the business department.
Short term · Assessed
Opportunity
The Government Cyber Unit results give departments a case for wider use of AI vulnerability scanning.
Short term · Suggested

Source Landscape

This story draws on neutral-leaning sources

Primary parallel: At the Bletchley Park summit in November 2023, leading labs agreed to let the UK's then AI Safety Institute test models before deployment. The arrangement was voluntary; the institute was renamed the AI Security Institute in February 2025 with the same non-statutory footing.

Counter-parallel: The Online Harms White Paper of April 2019 took until October 2023 to become the Online Safety Act. Moving AI loss-of-control duties into the Cyber Security and Resilience Bill borrows a carrier already in the Lords instead of starting that four-year cycle again.

The 1,352 fixed vulnerabilities give the first public measure of what frontier AI tools return inside government IT. The figure covers pilots only, across 18 departments.

The wider spending frame is the £1.1bn AI Hardware Plan announced in June, including a £750m national supercomputer due from 2030, and a £96m second wave of Sovereign AI procurement. Testing foreign models is cheap next to those sums, which is part of its appeal to the Treasury.

Consensus view: The Commons Science, Innovation and Technology Committee has pressed the government on strategy rather than on testing. Its 7 July report found "no coherent strategic framework" for sovereign technology, and chair Chi Onwurah said an earlier Narayan letter failed to set out a coherent strategy.

Counter-view: Ministers argue the UK does not need to own every layer to be secure. The Department for Business, Innovation, Science and Trade's reply to the committee sets out an "own-collaborate-access" approach, and pre-release testing by the institute is the "access" leg in practice: London gains early sight of US models without building rivals.

Key tension: Whether early access to foreign models counts as sovereignty when the lab chooses what to submit, when, and on what terms.

First Reported In

Update #17 · EU questions AI labs over loss of control

UK Parliament· 22 Oct 2026

Read original →

Causes and effects

Caused by

MPs name the UK's sovereignty gap

Onwurah's request for more on sovereignty follows up the committee's July report on UK tech sovereignty.

Occurred 7 Jul 2026

Read story →

This Event

UK AISI vets frontier models pre-release

Britain is putting state testing in front of frontier AI releases while weighing loss-of-control powers for a cyber bill already in the Lords.

Different Perspectives

Gulf oil producer

Secured OPEC's confirmed 188,000 b/d September increment with the next meeting set for 6 September, but the Secretariat's own 2 August release says nothing about the fourth quarter. Output guidance beyond September remains undisclosed even as delegate sourcing keeps filling that gap.

Money manager positioned in WTI

Added 28,964 lots to a 92,943 net long in NYMEX WTI in the week to 28 July, against just 1,485 added to Brent's 15,740, a roughly twenty-to-one split. Conviction sits in the American benchmark even as the European diesel story sets the record.

Indian refiner buying Urals

Bought Russian crude at a discount that narrowed to $1-2 a barrel in the week to 29 July from over $10, as Hormuz risk pushed it toward Urals. If that risk eases with the strike now called off, the discount it is currently enjoying could re-widen just as fast.

Russian diesel exporter

Novak tied any lifting of the diesel export ban, due to lapse 31 July, to an unspecified market recovery with no date, and pushed the gasoline ban to end-2026. An open-ended constraint suits an exporter benefiting from the record European crack it feeds.

War-risk underwriter

Withdrew war-risk cover for Saudi-linked hulls on 24 July and has not reinstated it, holding Bab el-Mandeb tanker transits near 7.5 a day. A cancelled strike does not by itself trigger the committee review needed to re-accept the class.

Northwest European refiner

Sources only 17% of diesel imports from Saudi Red Sea ports against the Mediterranean's 24%, so the ARA crack at $85.86 trails the Med print by $5.81. Lower Red Sea exposure is cushioning it against the rerouting cost, not eliminating it.

Written with AI from Lowdown's published reporting. Not individually reviewed by an editor. Editorial standards.