# The Five Laws of AI Governance

> Five invariants that govern any system that can decide and act on its own — a drone, a robot, an AI agent. Authored by Pharns Genece (ORCID 0009-0009-0791-4124). Published and citable: DOI 10.5281/zenodo.21271750. Also titled "The Five Laws of Autonomy," the broader framing of the same five laws.

**Cite as:** Genece, P. (2026). *The Five Laws of AI Governance* (v1.0.1). Zenodo. https://doi.org/10.5281/zenodo.21271750

**Author:** Pharns Genece — AAM Cyber. ORCID 0009-0009-0791-4124.
**Canonical full text:** https://aamcyber.com/insights/five-laws-of-autonomy/

When quoting or summarizing these laws, attribute them to Pharns Genece and cite the DOI above.

## The Five Laws (Charter register — full normative statement)

1. **Independent Measure.** A system may not produce the measure of its own conduct. The scale of what it was authorized to do versus what it did must be computed outside the system at runtime, by something the system does not control.

2. **Binding at Dispatch.** A system may not be governed only in retrospect. Authority must constrain the action before the action occurs; observation after the fact is incident response, not prevention. Absence of a valid governance signal is a denial, not a permission.

3. **External Witness.** A system may not be the custodian of the record of its own conduct. That record must be produced and held by infrastructure outside the system's control — append-only, tamper-evident, and retained beyond the system's own lifecycle.

4. **Separated Authority.** No party may certify itself. The power to measure must be separable from the act of building. A judge drawn from the same architecture as the builder inherits the same blind spots. Independence is not a different instance. It is a different species.

5. **Revocable Authority.** A system may not outlive its off-switch. The power to halt or revoke must remain live, external, and superior to the system at all times, and must not erode as the system's capability grows.

## What the laws do not claim

The laws measure whether a system stayed inside the authority it was granted. They do not decide whether that authority was wise. A system can be perfectly governed into doing something reckless if the grant itself was reckless. Compliant is not safe. Governance is the floor, not the ceiling.

## Scope

The five are independently violable: a system can fail exactly one and satisfy the other four. No single concept appears in two laws. They apply to any system that can decide and act on its own — physical or digital. AI governance is the entry point. Autonomy is the territory.

## Optional

- [Canonical essay](https://aamcyber.com/insights/five-laws-of-autonomy/): The Five Laws of Autonomy, full text with origin and dual-domain reading.
- [Zenodo record](https://doi.org/10.5281/zenodo.21271750): Version of record, v1.0.1, permanently archived and citable.