I Love Google’s Agentic AI Security Roadmap: Adding MAESTRO Will Make It More Powerful — An Open Letter to Google

Written by Ken Huang, CEO & Chief AI Officer, DistributedApps.ai. In June, Google DeepMind did something unusual: it published an AI control roadmap premised on the idea that its own AI agents might turn against it. The AI Control Roadmap treats advanced internal agents as potential insider threats — the way a company treats a rogue employee who already has badge access. It builds on MITRE ATT&CK with a new taxonomy, TRAIT&R (Taxonomy of Rogue AI Tactics and Routines), covering loss of control, work sabotage, and direct harm. And it sequences defenses on two capability ladders: D1–D4 for detection (scaling with the agent’s ability to evade oversight) and R1–R3 for prevention and response (scaling with the severity of what the agent could do). It’s genuinely good. The insider-threat framing is the right mental model. The capability ladders are a real advance over static control checklists. And it’s empirically grounded — the team analyzed roughly a million coding-agent trajectories, and found that most anomalies came from over-eagerness and misinterpretation, not malice. But it can be improved. The roadmap organizes what the attacker does (TRAIT&R) and how hard the attacker is to stop (the D/R ladders). It never systematically answers where —…