Democratic Accountability for Autonomous Systems: A Legislative Notification Framework and Comparative Institutional Design

arXiv:2610.32226v1 Announce Type: new Abstract: No domestic legislature has ever reviewed a state's decision to authorise an autonomous cyber weapon before it acted. Closing the international attribution gap is necessary but not sufficient for democratic accountability. We formalise the Tripartite Attribution Framework's three attribution levels and add a fourth, non-legal Democratic Accountability level ($A_{dem}$): a 72-hour legislative notification requirement. Scoring six democratic oversight bodies against five adoptability dimensions yields a counter-intuitive result: the statutes granting these bodies privileged access to classified material are often the same statutes withholding particular ongoing operations from them, so at most one could lawfully receive such a notification today, and the carve-out Level 4 needs is required in nearly every jurisdiction rather than only the least-equipped. Retrospective analysis of Stuxnet, NotPetya, and Volt Typhoon shows one pattern: legal attribution resolvable, domestic democratic review absent.

Lack of democratic accountability for autonomous cyber weapons raises concerns.

The lack of prior domestic legislative review of autonomous cyber weapons deployment indicates a democratic accountability gap, presenting risks of unchecked state actions and potential misuse. The proposed 72-hour notification is a step toward oversight but currently inadequate, as existing statutes hinder comprehensive democratic review. This implies material concern for governance and oversight of powerful AI-enabled cyber capabilities.

This is a governance proposal and institutional gap analysis, not a report of deployed harm or benefit. It documents a real accountability deficit around autonomous cyber weapons but the implication is about policy design, not demonstrated societal outcome, so magnitude is moderate and evidence is institutional/comparative rather than empirical impact data.

The article highlights a critical democratic deficit where autonomous cyber weapons are authorized without legislative review. This lack of oversight undermines democratic principles and poses significant risks to accountability for state actions, as demonstrated by retrospective analyses. The proposed framework directly addresses this systemic problem.

The paper proposes a framework for democratic accountability of autonomous cyber weapons. It identifies a gap in legislative review and suggests a 72-hour notification requirement. This could lead to more oversight and accountability.

SOURCE     arXiv cs.CY (Computers and Society) (tier 1)
   ↓
DOCUMENT   a9d486f5-fa86-4bce-a390-4e895af5fc7c
           https://arxiv.org/abs/2610.32226
   ↓
EVIDENCE   2 extracted excerpts
   ↓
MODEL RUN  5 runs, methodology 1.0.1
   ↓
SCORE      -22  (Adverse)
   ↓
CONFIDENCE 61%