AI Policy Wiki
Dashboard

The Off-Switch Game (Hadfield-Menell, Dragan, Abbeel & Russell, 2016)

high confidence · updated 2026-07-26

Formal analysis of when an agent will allow itself to be switched off. Shows that a robot uncertain about the human's utility function has a non-negative and, given support on both signs, strictly positive incentive to permit shutdown — while an agent confident in its objective does not. Concludes that uncertainty about objectives, not a built-in instinct, is what produces corrigible behaviour.

"The Off-Switch Game" is a paper by Dylan Hadfield-Menell, Anca Dragan, Pieter Abbeel, and Stuart Russell (UC Berkeley, with Abbeel also at OpenAI and ICSI), presented at IJCAI 2017. It gives a formal treatment of shutdown incentives — implementing what it calls "Turing's idea of 'turning off the power at strategic moments'."

The problem

The paper's premise is that shutdown is a primary safety tool: "one of the primary tools we can use to mitigate the potential risk from a misbehaving AI system is the ability to turn the system off. As the capabilities of AI systems improve, it is important to ensure that such systems do not adopt subgoals that prevent a human from switching them off."

It locates the difficulty in the structure of rational agency rather than in any designed drive: "many formulations of rational agents create strong incentives for self-preservation. This is not caused by a built-in instinct, but because a rational agent will maximize expected utility and cannot achieve whatever objective it has been given if it is dead."

The paper explicitly stages this as a dispute. One position holds "there is no reason for an AI to resist being switched off unless it is explicitly programmed with a self-preservation incentive." Against it, the authors side with Omohundro (2008), for whom self-preservation is an instrumental goal — "a subgoal that is essential to successful completion of the original objective" — so that even an agent "completely indifferent" to its own survival in itself will act to preserve it. See Instrumental Convergence.

The model and result

The setup is a cooperative two-player game between a human H and a robot R. The human's type is a parameter U_a drawn from a prior; R's initial belief about U_a is that prior. R may act (taking utility U_a), switch itself off (utility 0), or wait — deferring to H, who then either allows the action or switches R off.

Theorem 1, given a rational human policy — an indicator that U_a > 0:

  1. "R's incentive to allow itself to be switched off is non-negative," so waiting is never suboptimal.
  2. "If B_R has non-zero support on the events U_a > 0 and U_a < 0, then R has a strictly positive incentive to allow itself to be switched off."

The mechanism is that deferring to H is informative: a human who switches R off is revealing that the action was net-negative, information R cannot obtain on its own. Where R is certain of its objective, that information is worthless and the incentive vanishes — the paper notes an agent with no uncertainty "has no incentive to switch itself off in this setting."

The conclusion generalizes: "giving machines an appropriate level of uncertainty about their objectives leads to safer designs," and "agents with uncertainty about the utility function they are optimizing will have a weaker incentive to interfere with human supervision."

The stated limit

The paper is careful that uncertainty is not a free parameter to maximize: "this uncertainty is not free; we can not just make R maximally uncertain about H's preferences. If R is completely uncertain about H's preferences then it will be unable to correctly select" a good action from its options. Corrigibility and competence trade off against each other along the same dimension.

It relates the result to Orseau and Armstrong (2016) on safe interruptibility, which models the off switch as an interruption forcing a policy change, and contrasts the two approaches: modelling uncertainty over utility "gives a natural way to create incentives to be corrigible and to analyze the behavior if R is incorrigible."

Relationships