The limits of written instructions for AI agent control

A Tech Policy Press perspective argues that system prompts reveal developer intent but cannot establish what models will do. It calls for testing behavior across contexts. A separate post says plain-language user commands do not guarantee direct control of AI agents. Another raises the problem of defining what a request authorizes when an agent delegates work; a reply suggests OpenAI’s Model Spec’s “scope of autonomy” could help.