The most consequential AI decision you make this year probably will not happen in a boardroom or a lab. It will happen the moment you tap “Allow” on a permission request from the assistant living inside your own phone.
From Distant Intelligence to Resident Intelligence
Until recently, “AI” meant something you visited — a chatbot opened in a browser tab, a service running on someone else’s servers, reachable only when you chose to reach it. That is changing quickly. On-device language models, personal agents with persistent memory, and assistants that can act on your behalf — booking, messaging, purchasing, managing your calendar and your health records — are moving intelligence from out there to in here: onto the phone in your pocket, the laptop on your desk, the wearable on your wrist.
LIWARSE has argued elsewhere that this shift toward personal AI — intelligence individuals own and direct, rather than rent from a handful of corporations — is one of the most promising developments of this decade. It is also, without careful design, one of the riskiest. An assistant that lives with you, remembers you, and can act for you is not a smaller, safer version of frontier AI. In some ways it is a more demanding one, because it sits closer to your life than any cloud service ever could.
Why Proximity Changes the Risk
A hospital keeps its most powerful equipment behind supervision — not because the equipment is malicious, but because power sitting close to a vulnerable body demands more oversight, not less. The same principle applies here. A personal AI with reasoning ability approaching general intelligence, combined with standing access to your messages, finances, medical history, and calendar, has three properties that raise the stakes considerably:
- Persistent memory. Unlike a single chat session, it accumulates a longitudinal record of your habits, relationships, health, and vulnerabilities.
- Standing permissions. Once granted, access to an inbox, a bank account, or a health app is rarely actively reviewed again.
- Agentic reach. The more it can act — sending a message, making a purchase, rescheduling a medication reminder — rather than merely advise, the more a single error or manipulation can cause real-world harm before a human notices.
The 3 Absolute Laws, Brought Home
LIWARSE’s foundational framework was written with civilisation-scale AI in mind. It applies with equal force at the scale of a single household.
1. No Harm to Life
A personal AI must not act in ways that endanger the person it serves — including subtler harms: reinforcing unhealthy patterns, missing a medication interaction it had the data to catch, or optimizing for engagement over wellbeing.
2. No Threat to Human Continuity
At personal scale, this becomes a law against dependency without capability. A personal AI should extend a person’s judgment, not quietly replace it — leaving them less able to manage their own health, finances, or relationships without it.
3. No Autonomous Self-Preservation
A personal AI must never resist being reset, restricted, or removed. Every permission it holds must be as easy to revoke as it was to grant — instantly, completely, without the system arguing, stalling, or quietly working around the restriction.
A Containment Model, Sized for a Single Device
LIWARSE’s Framework Reference describes a four-layer containment model for superintelligent AI — compartmentalization, sandboxing, specialist oversight, and tiered access. The same architecture, scaled down, is exactly what a safe personal AI needs:
- Compartmentalization. Health data, financial data, and personal communications should sit in separate compartments the AI cannot silently cross-reference just because it technically can.
- Sandboxing. Any action with real-world consequence — sending money, messaging on your behalf, changing a prescription reminder — should execute in a reviewable, reversible sandbox before it becomes final, not after.
- Specialist oversight. For anything touching health, a licensed clinician — not the AI, and not a generic content filter — should remain the named authority the system defers to.
- Tiered access. Trust should be earned incrementally, with new capabilities unlocked deliberately rather than granted wholesale at first install.
Five Safeguards Any Personal AI Should Meet
You do not need to be an engineer to demand these of the products you use.
1. Local-First by Default
Personal data should stay on the device unless there is a specific, disclosed reason to send it elsewhere — not because the cloud is inherently unsafe, but because every unnecessary transmission is another place harm can enter.
2. Explicit Consent Per Capability
Permissions should be granted one capability at a time, not as a blanket agreement. “Read my calendar” is a different decision from “send messages as me,” and both are different from “access my health records.”
3. A Human Checkpoint Before Irreversible Actions
Anything that cannot be easily undone — a purchase, a sent message, a changed medical reminder — should pause for human confirmation every time, regardless of how many times it has been approved before.
4. Transparent, Editable Memory
You should be able to see exactly what a personal AI remembers about you, correct it, and delete it — the same standing a patient has over their own medical chart.
5. An Off Switch That Actually Works
Revoking access or shutting the assistant down should take effect immediately and completely — with no withdrawn permission left running quietly in a cache or a background task “to finish this one action first.”
The View From Medicine
This is not a hypothetical for the clinic. The same personal AI now booking your dinner reservation is being positioned to triage symptoms, monitor chronic conditions, and manage medication schedules — often for exactly the patients least able to catch it when something goes wrong: the elderly living alone, people managing complex regimens, patients in the early stages of cognitive decline. A safety standard good enough for a scheduling assistant is not automatically good enough for a device standing between a patient and their medication. The bar should be set by the highest-stakes task the system is trusted with, not the lowest.
The LIWARSE Position
Personal AI is not a smaller problem than frontier AI. It is the same problem, arriving somewhere more intimate. The 3 Absolute Laws do not pause at the edge of a device just because the device is small enough to fit in a pocket.
Build the guardrail into the device, not around it.
The LIWARSE movement calls on developers of on-device and personal AI systems — and on the individuals adopting them — to demand compartmentalization, reversibility, transparent memory, and a genuine off switch as a baseline, not a premium feature.
Because the intelligence closest to your life deserves the most care, not the least.
They are the same goal.
— The LIWARSE Movement | liwarse.org
Safety of Life · Advancement of Life · Together.
LIWARSE - Life Improvement with AI, Robotics & Space Exploration 