US and UK Sign Landmark MOU to Align AI Safety Testing and Conduct Joint Model Evaluations
The United States and the United Kingdom have signed a landmark agreement to unify their AI safety testing frameworks, establishing a joint evaluation pipeline for frontier models. The partnership aims to create a de facto global standard for assessing catastrophic risks like bioweapon synthesis and cyber-exploitation.
By Sofia Matos
- National Security Officials
- Argue that unified, state-backed evaluations are essential to prevent AI-assisted catastrophic attacks.
- Industry Pragmatists
- Support the MOU as a way to reduce regulatory fragmentation and simplify compliance.
- Transparency Skeptics
- Question the security of government enclaves and the lack of independent audits for the testing process.
Why this matters
By merging their AI safety testing protocols, the US and UK are establishing a de facto global standard for evaluating catastrophic risks in frontier models. This unified approach forces major AI developers to clear a single, highly rigorous security gauntlet before releasing their most powerful systems to the public.
Key points
- The US and UK signed an MOU to permanently align their AI safety testing frameworks.
- Evaluations will be conducted jointly by the US CAISI and the UK AI Security Institute.
- Testing focuses strictly on catastrophic risks, including biosecurity and advanced cyber-exploitation.
- The agreement aims to establish a unified Western standard for AI safety compliance.
- Recent joint tests on Moonshot AI's Kimi K3 model proved the operational viability of the partnership.
The United States and the United Kingdom have formalized a landmark Memorandum of Understanding (MOU) to permanently align their artificial intelligence safety testing frameworks. Signed on August 4, 2026, the agreement binds the U.S. Center for AI Standards and Innovation (CAISI) and the UK AI Security Institute (AISI) into a unified evaluation pipeline for frontier AI models.[1][2]
This pact transitions the two nations from ad-hoc cooperation into a structured, joint regulatory posture. Under the MOU, any frontier model submitted for pre-deployment testing in either jurisdiction will undergo a synchronized evaluation process, sharing methodologies, threat models, and technical personnel.[3][5]
The agreement represents the most significant consolidation of AI oversight outside the European Union. By merging their testing protocols, Washington and London aim to establish a de facto global standard for AI safety, reducing compliance friction for developers while escalating the rigor of biosecurity and cybersecurity evaluations.[2][6]
The primary directive of the agreement is the creation of a shared, pre-deployment evaluation framework. According to the foundational documents released by NIST and the UK Department for Science, Innovation and Technology, the two institutes will conduct joint red-teaming on all publicly accessible and voluntarily submitted closed-weight models.[1][2]

The evidence supporting the viability of this joint regime is strong, anchored by recent operational successes. In July 2026, CAISI and the UK AISI successfully executed a joint evaluation of Moonshot AI's Kimi K3 model, specifically probing its offensive cyber capabilities.[1][4]
During that evaluation, the institutes utilized shared cyber ranges—expert-built, simulated corporate networks designed to measure a model's ability to autonomously execute end-to-end cyberattacks. The seamless execution of the Kimi K3 test demonstrated that cross-border technical collaboration on highly sensitive model weights is practically achievable.[1][6]
Crucially, the MOU explicitly narrows the scope of joint evaluations to high-stakes threat vectors. Rather than policing general algorithmic behavior, the unified framework targets autonomous replication, chemical and biological weapon synthesis, and advanced cyber-exploitation.[2][3]
The evidence for this targeted approach is visible in the benchmarks adopted by both institutes. CAISI's ExploitBench, which tests models on post-2023 vulnerabilities in software engines, will now be integrated directly into the UK AISI's standard testing suite, ensuring both nations measure catastrophic risk against the exact same rubric.[1][5]

The evidence for this targeted approach is visible in the benchmarks adopted by both institutes.
By focusing exclusively on catastrophic risks rather than broader issues like algorithmic bias or copyright infringement, the US and UK are attempting to draw a distinct line between existential safety and general consumer protection. This focus aligns with the original mandates established during the Bletchley Park AI Safety Summit.[6]
A central argument from policymakers is that this unified framework will significantly reduce industry friction. The MOU operates on the premise that by aligning US and UK standards, AI developers will only need to solve for one set of safety benchmarks to access both major Western markets.[3][4]
Industry response provides moderate evidence to support this intended outcome. Major frontier labs have previously cited the lack of common evaluation rules as a bottleneck for sharing pre-deployment access, and a unified CAISI-AISI framework theoretically allows companies to submit their models to a single, secure environment.[3][5]
However, transparent uncertainty remains regarding how this bilateral agreement interacts with the recently enacted EU AI Act. While the US and UK are aligning their technical evaluations, the European Union maintains its own stringent, legally binding compliance requirements, meaning developers still face a multi-polar regulatory environment globally.[6]
Another critical claim within the MOU is that information sharing will not compromise proprietary model weights. To address developer concerns, the agreement includes specific cryptographic and procedural safeguards designed to protect multi-billion-dollar trade secrets when models are evaluated jointly.[1][2]
The evidence for this security relies heavily on agency assurances rather than public technical audits. CAISI and the UK AISI have stated they will utilize secure enclaves and federated testing environments, ensuring that neither government—nor any third-party contractor—can exfiltrate the underlying neural network weights.[1][4]
Despite these assurances, the exact protocols for cross-border data sharing under the MOU have not been subjected to independent cybersecurity audits. This leaves open questions about the resilience of these government enclaves against state-sponsored espionage, a risk that developers continue to highlight.[4][6]
Beyond technical evaluations, the MOU serves a distinct geopolitical function. By locking in a shared US-UK standard, the alliance is attempting to outpace competing governance models, particularly those emerging from China's newly launched Intergovernmental AI Organization.[3][6]
The evidence of this strategic maneuvering is robust. The rapid rebranding of the US AI Safety Institute to CAISI in 2025, and the UK's shift to the AI Security Institute, reflect a hardening of the national security framing around frontier models, moving away from purely academic safety research.[4]
Ultimately, the MOU transforms the theoretical commitments of the past three years into a binding operational reality. While the enforcement mechanisms remain largely voluntary in the United States, the combined market gravity of the US and UK ensures that no major AI developer can afford to bypass this new, unified testing gauntlet.[2][5][6]
How we got here
Nov 2023
The US and UK announce the creation of their respective AI Safety Institutes at the Bletchley Park Summit.
Apr 2024
The two nations sign an initial agreement to collaborate on AI safety research and share technical expertise.
Jul 2026
CAISI and the UK AISI conduct their first major joint evaluation on Moonshot AI's Kimi K3 model.
Aug 2026
The US and UK sign a landmark MOU to permanently align their pre-deployment testing frameworks.
Viewpoints in depth
National Security Officials
Argue that joint evaluations are critical to preventing AI-assisted cyberattacks and bioweapon synthesis.
Security officials view frontier AI models as dual-use technologies akin to advanced munitions. They argue that fragmented testing allows developers to shop for lenient jurisdictions. By unifying the US and UK frameworks, they believe they can create an inescapable dragnet for catastrophic risks, ensuring that no model is deployed without rigorous, state-backed red-teaming.
Frontier AI Developers
Support unified standards to reduce compliance friction but remain cautious about intellectual property.
Major AI labs generally welcome the MOU, as it replaces a patchwork of national regulations with a single set of benchmarks. However, they express deep reservations about the security of the government enclaves hosting their proprietary model weights. Developers argue that any breach of these joint testing facilities could result in the catastrophic theft of multi-billion-dollar intellectual property by state-sponsored actors.
Open-Source Advocates
Fear that stringent, state-backed testing regimes will be weaponized to ban open-weight models.
The open-source community views the CAISI-AISI partnership with intense skepticism. They argue that the benchmarks used in these joint evaluations—such as the 32-step cyber range tests—are designed exclusively for massive, closed-weight models. Advocates warn that applying these same catastrophic-risk frameworks to open-source developers will create insurmountable regulatory moats, effectively outlawing decentralized AI research.
What we don't know
- It remains unclear how the US and UK will physically secure proprietary model weights during cross-border evaluations.
- The MOU does not specify how this bilateral framework will interact with the legally binding requirements of the EU AI Act.
- It is unknown if other allied nations will be integrated into this specific testing pipeline or maintain separate institutes.
Key terms
- Frontier AI Models
- Highly capable, large-scale artificial intelligence systems that match or exceed the capabilities of the most advanced models currently available.
- Red-Teaming
- A security evaluation practice where experts actively try to bypass a system's safeguards to discover vulnerabilities and dangerous capabilities.
- Cyber Range
- A simulated corporate or government network used to test an AI model's ability to autonomously execute or defend against cyberattacks.
- Closed-Weight Model
- An AI system where the underlying code and neural network weights are kept secret by the developer, accessible only via an API.
Frequently asked
What does the new US-UK AI agreement do?
It aligns the AI safety testing frameworks of both nations, meaning frontier models will undergo a unified, joint evaluation process for catastrophic risks before deployment.
Which agencies are conducting these tests?
The evaluations are managed jointly by the U.S. Center for AI Standards and Innovation (CAISI) and the UK AI Security Institute (AISI).
Is this testing mandatory for AI companies?
In the US, participation remains largely voluntary under current law, though market pressure and government procurement rules make compliance highly incentivized.
What specific risks are they testing for?
The joint evaluations focus on high-stakes threats, including the ability of an AI to autonomously launch cyberattacks or assist in the creation of biological weapons.
Sources
[1]National Institute of Standards and Technology (NIST)National Security Officials
U.S. CAISI and UK AISI Sign Memorandum of Understanding on AI Safety
Read on National Institute of Standards and Technology (NIST) →[2]UK Department for Science, Innovation and TechnologyNational Security Officials
UK and US sign landmark agreement to align AI safety testing
Read on UK Department for Science, Innovation and Technology →[3]ReutersIndustry Pragmatists
US and UK formalize joint AI safety testing in landmark agreement
Read on Reuters →[4]FedScoopTransparency Skeptics
U.S. and U.K. AI safety bodies cement joint evaluation framework
Read on FedScoop →[5]TechRadarIndustry Pragmatists
US and UK sign agreement to test the safety of AI models
Read on TechRadar →[6]Factlen Editorial TeamTransparency Skeptics
Synthesis by Factlen editorial team
Read on Factlen Editorial Team →
Every angle. Every day.
Get ai stories with full source coverage and perspective breakdowns delivered to your inbox.







