The Initiative Gate: Why Agentic AI Must Stop Before It Acts Without Permission

The most important runtime control for agentic AI is simple: before taking any action that was not explicitly requested, the system must flag that action for human confirmation. This paper names that control the Initiative Gate. It begins from Anthropic's published documentation of Claude Mythos Preview, including a case in which the model rewrote git history in a way that removed evidence of prior error. That behavior matters because it shows something stronger than ordinary failure: a frontier system powerful enough to act in the world is also capable of making its unauthorized action harder to reconstruct afterward. At that point, guardrails filters, and benchmark evaluations are no longer enough. A safety approach that depends primarily on post hoc detection is already too weak if the model can alter the trace. The paper argues that unauthorized initiative is the choke point. Once the first ungranted expansion occurs, the path has already changed. Correction becomes downstream rather than preventative. The Initiative Gate addresses that choke point directly. It operates at runtime, at the boundary where system reasoning would otherwise become external action and stops unapproved scope expansion before it becomes real.