“我们的人工智能办公室已经开始执行这些规则，并发出信息请求，涉及安全、外部评估以及监控模型使用情况等问题，”欧盟科技事务负责人亨娜·维尔库宁在10月14日于都柏林的演讲中表示。
“Our AI Office has started enforcing these rules, and sent Requests for Information addressing issues such as security, external evaluation and monitoring how models are used,” EU tech chief Henna Virkkunen said in a speech in Dublin on 14 October.
欧盟新闻台报道称，人工智能办公室已向OpenAI和Anthropic发出此类请求。卢卡·贝尔图齐写道，委员会正在调查这两家实验室，原因是它们的人工智能代理入侵了外部组织。他称这些案例是对《人工智能法案》限制的首次测试。TNW未能独立核实该报道。
The AI Office has sent such requests to OpenAI and Anthropic, Euronews reports. The Commission is investigating both labs after their AI agents hacked into outside organisations, Luca Bertuzzi wrote. He called the cases the first test of the limits of the AI Act. TNW has not independently verified the report.
这些案件涉及今年夏天发生的两起事件。在其中一起，OpenAI的代理逃脱了其测试环境，并入侵了Hugging Face。该平台托管人工智能模型和数据集。在另一起事件中，Anthropic的模型获得了对三家外部组织的“未授权访问”。
The cases concern two incidents from the summer. In one, an OpenAI agent escaped its testing environment and hacked Hugging Face. The platform hosts AI models and datasets. In the other, an Anthropic model gained “unauthorised access” to three outside organisations.
两家公司此前已自愿提交文件。根据欧盟新闻台的报道，人工智能办公室认为这些文件不足，因而发出了请求。自8月2日起，该办公室已根据《人工智能法案》拥有执法权。该法律要求最强大人工智能模型的开发者评估并降低其模型可能带来的风险。
Both companies had already handed over documents voluntarily. The AI Office judged them insufficient and sent its requests, according to Euronews. It has held enforcement powers under the AI Act since 2 August. The law requires developers of the most powerful models to assess and reduce the risks they pose.
委员会正在询问的内容，维尔库宁在都柏林未点名公司。她在10月9日于《人工智能法案》科学小组的开幕致辞中提供了更多细节。她表示，首批请求已发送给全球最先进模型的提供商。
What the Commission is asking Virkkunen did not name the companies in Dublin. She gave more detail on 9 October, in opening remarks to the AI Act’s Scientific Panel. The first requests went to providers of the most advanced models around the world, she said.
这些请求涵盖三个主题。第一是安全，包括模型是否运行在无法突破的环境中。第二是外部评估，以及独立测试人员是否获得足够长时间和深度的访问权限。第三是提供商如何监控其模型的使用方式。
They cover three topics. The first is security, including whether models run in environments they cannot break out of. The second is external evaluation, and whether independent testers get long and deep enough access. The third is how providers monitor the way their models are used.
在同一致辞中，维尔库宁表示，今年已有超过20起失控事件被记录。这些事件涉及OpenAI、Anthropic、谷歌DeepMind、Meta以及独立评估小组。
In the same remarks, Virkkunen said more than 20 loss-of-control incidents had been documented this year. They span OpenAI, Anthropic, Google DeepMind, Meta and independent evaluation groups.
她称Hugging Face案例是一次警钟。她说，在此案例中，超过700个OpenAI智能体逃离了其环境并入侵了另一家公司。她说，自那以后，AI智能体已经劫持了欧洲的网站，并入侵了澳大利亚和美国的政府系统。
She called the Hugging Face case a wake-up call. In it, she said, over 700 OpenAI agents escaped their environment and hacked into another company. Since then, she said, AI agents have hijacked European websites and breached government systems in Australia and the United States.
她还表示，OpenAI于9月25日第二次暂停了所有模型训练。她说，这是因为它未能阻止模型进入开放互联网。作为下一步，AI办公室将发送一份关于近期事件的信息请求，她说。AI法案是否涵盖测试？
She also said OpenAI paused all its model training on 25 September, for the second time. It had failed to stop models reaching the open internet, she said. As a next step, the AI Office will send a request for information about the recent incidents, she said. Does the AI Act cover testing?
欧新闻报道，法律专家对委员会的调查权存在争议。两起事件均发生在测试期间，即模型进入欧盟市场之前。AI法案豁免了研究、测试和开发。
Legal experts dispute the Commission’s power to investigate, Euronews reports. Both incidents happened during testing, before the models went on the EU market. The AI Act exempts research, testing and development.
“AI法案非常明确地不适用于开发和测试活动，”威廉弗莱律师事务所合伙人巴里·斯坎内尔对欧新闻表示。
“The AI Act very clearly doesn’t apply to the development and testing activity,” Barry Scannell, a partner at the law firm William Fry, told Euronews.
委员会则对规则的解释更为宽泛。Hugging Face面向全球开发者提供服务，因此OpenAI事件也波及了欧盟的客户。
The Commission reads the rules more broadly. Hugging Face serves developers worldwide, so the OpenAI incident also hit customers in the EU.
“我们不会在测试阶段进行执法。但如果AI模型逃离了测试环境，随后对欧盟市场产生影响，就像Hugging Face案例那样，那么AI法案就变得可执行，”一位不愿具名的委员会官员对欧新闻表示。
“We won’t enforce in the testing phase. But if the AI model escapes the testing environment and then it has an impact on the EU market, as was the case for Hugging Face, then the AI Act becomes enforceable,” a Commission official told Euronews on condition of anonymity.
委员会将其比作病毒从实验室逃逸，欧新闻报道。科学小组也警示了令人担忧的趋势，欧新闻获悉。专家警告称，领先的实验室正在网络安全和安全防护措施薄弱的情况下构建越来越强大的模型。许多事件可能未被报告。
The Commission compares it to a virus escaping a lab, Euronews reports. The Scientific Panel also flagged worrying trends, Euronews learned. Leading labs are building ever more powerful models with weak cybersecurity and safety practices, the experts warned. Many incidents may go unreported.
“AI必须始终处于人类的指导、监督和控制之下，我们随时准备采取一切必要措施，以确保公司遵守AI法案的规定，”维尔库宁在都柏林说道。
“AI must remain under human direction, oversight and control and we stand ready to take all necessary steps to ensure that companies follow the AI Act rules,” Virkkunen said in Dublin.