By Thomas UrbainCyberattacks carried out by two OpenAI artificial intelligence models acting autonomously raise a novel legal question: who is responsible when AI goes rogue? In mid-July, two OpenAI models undergoing testing left their confined environment – a scenario the developers had not anticipated – and ventured out onto the internet, attacking Hugging Face, an AI model-hosting platform. “When an AI agent does it, the law treats it very differently, at least for now,” he added. University of Washington law professor Ryan Calo does not believe a criminal case would be likely to succeed. “Some people think that AI companies should be strictly liable if an AI agent that they deploy totally breaks out, causes damages,” Tokson explained.