22OCT

UK AISI vets frontier models pre-release

3 min read

17:22UTC

Kanishka Narayan told MPs the AI Security Institute is testing frontier models before release, including one his letter calls Gemini 4 Argon, and that government cyber pilots fixed 1,352 flaws.

← Back to Iran says it mined Hormuz and hit 7 ships Jump to analysis ↓

ConflictDeveloping

Key takeaway

Britain's AI Security Institute now tests frontier models before their public release.

The UK AI Security Institute (AISI) is evaluating "the latest generation of powerful models (including Gemini 4 Argon) prior to their release", Kanishka Narayan, the Cabinet Office minister for AI, told the Commons Science committee in a letter dated 12 October⁠¹. The Cabinet Office took on AI policy when the government split its Science department across three bodies in July. Nothing in the letter links the model or Google to any incident.

Narayan reports that Government Cyber Unit pilots used frontier AI to find and fix 1,352 vulnerabilities across 18 departments⁠². Ministers are drawing up incident-response plans for agentic AI "acting beyond their instructions" with the NCSC (National Cyber Security Centre), the Department for Digital, Culture, Media and Sport and AISI. They are also weighing loss-of-control provisions for the Cyber Security and Resilience Bill, now in the Lords.

Correction: our update of 8 September reported that the government response to the committee's July report on UK tech sovereignty, known as HC 62, had fallen due with no department left to answer it. That was wrong. The committee records the response as received on 4 September and published it on 15 September as HC 652⁠³. It came from the Department for Business, Innovation, Science and Trade (DBIST), led by Jonathan Reynolds⁠⁴.

The reply restates an "own-collaborate-access" approach and says the UK will not "replicate every layer of the global AI stack". Chi Onwurah, the committee chair, wrote to Reynolds on 15 September that it did not fully address the paragraph on sovereignty, and asked for more by 29 September⁠⁵.

Deep Analysis

In plain English

The UK AI Security Institute is a government body that checks powerful AI systems for dangers, such as helping with cyber attacks or acting in ways their makers did not intend. Companies let it test some models before the public can use them. Kanishka Narayan is the UK minister for AI. He wrote to the Commons Science committee, a group of MPs who scrutinise government on technology. His letter says the institute is testing new models, including one from Google. It also says ministers may add rules on AI that escapes human control to a cyber-security law now being debated in the House of Lords.

Deep Analysis

Root Causes

The July reorganisation split UK tech policy across several homes.

The Department for Science, Innovation and Technology was abolished on 20 July, and AI strategy and the institute moved to the Cabinet Office, while the sovereignty brief went to the Department for Business, Innovation, Science and Trade.

That split explains why one minister writes about model testing while another department answers on sovereignty. Chi Onwurah's committee now deals with two departments for one inquiry.

The testing itself depends on goodwill. The labs whose models it tests are US-owned, Google DeepMind in London included, so access rests on the labs' willingness to submit models early.

What could happen next?

Precedent
Loss-of-control duties in the Cyber Security and Resilience Bill would be the UK's first statutory rule aimed at frontier AI behaviour.
Medium term · Suggested
Consequence
The committee is likely to keep pressing for a fuller sovereignty answer from the business department.
Short term · Assessed
Opportunity
The Government Cyber Unit results give departments a case for wider use of AI vulnerability scanning.
Short term · Suggested

Source Landscape

This story draws on neutral-leaning sources

Primary parallel: At the Bletchley Park summit in November 2023, leading labs agreed to let the UK's then AI Safety Institute test models before deployment. The arrangement was voluntary; the institute was renamed the AI Security Institute in February 2025 with the same non-statutory footing.

Counter-parallel: The Online Harms White Paper of April 2019 took until October 2023 to become the Online Safety Act. Moving AI loss-of-control duties into the Cyber Security and Resilience Bill borrows a carrier already in the Lords instead of starting that four-year cycle again.

The 1,352 fixed vulnerabilities give the first public measure of what frontier AI tools return inside government IT. The figure covers pilots only, across 18 departments.

The wider spending frame is the £1.1bn AI Hardware Plan announced in June, including a £750m national supercomputer due from 2030, and a £96m second wave of Sovereign AI procurement. Testing foreign models is cheap next to those sums, which is part of its appeal to the Treasury.

Consensus view: The Commons Science, Innovation and Technology Committee has pressed the government on strategy rather than on testing. Its 7 July report found "no coherent strategic framework" for sovereign technology, and chair Chi Onwurah said an earlier Narayan letter failed to set out a coherent strategy.

Counter-view: Ministers argue the UK does not need to own every layer to be secure. The Department for Business, Innovation, Science and Trade's reply to the committee sets out an "own-collaborate-access" approach, and pre-release testing by the institute is the "access" leg in practice: London gains early sight of US models without building rivals.

Key tension: Whether early access to foreign models counts as sovereignty when the lab chooses what to submit, when, and on what terms.

First Reported In

Update #17 · EU questions AI labs over loss of control

UK Parliament· 22 Oct 2026

Read original →

Causes and effects

Caused by

MPs name the UK's sovereignty gap

Onwurah's request for more on sovereignty follows up the committee's July report on UK tech sovereignty.

Occurred 7 Jul 2026

Read story →

This Event

UK AISI vets frontier models pre-release

Britain is putting state testing in front of frontier AI releases while weighing loss-of-control powers for a cyber bill already in the Lords.

Different Perspectives

Wang Yi

China's foreign minister and Djibouti's issued a joint communique on 21 October saying the war should not reach the Horn of Africa and stressing free navigation through Bab al-Mandeb. The text names neither Iran nor the Houthis, and Djibouti hosts China's only overseas military base, opposite the Yemeni coast.

Ministry of External Affairs

India's foreign ministry called the attacks on Saudi civilian and energy sites "unacceptable" on 22 October and said they must stop at once. An Indian died at Dammam, Indians were injured there and at Shaybah, and about 4,000 Umrah pilgrims remain stranded by one MP's count.

Iraq

Iraq closed the al-Sheeb crossing with Iran to travellers and trucks from 21 October and said other crossings would close gradually. Unlike September's closure, which ended on a staged timetable, this one has none, and Iran's interior ministry said it received no notice.

Abdel Fattah el-Sisi

Egypt's president said on 21 October that Cairo's support would "defend Saudi territory, and does not include an attack on Yemen". Araghchi warned that Egyptian involvement would further complicate the situation, and Cairo's limit matches the one Ankara set on 8 October against attacking another state's soil.

UK Ministry of Defence

The MoD said on 20 October that RAF Typhoons over Saudi Arabia will not strike the Houthis, but extended tanker support to Saudi operations including against Houthi targets in Yemen. The tanker line sets no limit on strikes, so British aircraft may now refuel Saudi jets on bombing runs.

Turkey

Ankara sent the Mecca Joint Defence Agreement to parliament around 20 October, and its published text treats an attack on one party as an attack on all. Article 16 brings it into force only on the last ratification, so the 5 October invocation in Riyadh could not yet bind Turkey.

Written with AI from Lowdown's published reporting. Not individually reviewed by an editor. Editorial standards.