UN CCW Lethal Autonomous Weapons Doctrine

Regulatory Framework

The UN Convention on Certain Conventional Weapons established the Group of Governmental Experts on emerging technologies in the area of Lethal Autonomous Weapon Systems in 2016, and the GGE has since produced the eleven Guiding Principles affirmed in 2019, the rolling text negotiated through the 2022 and 2023 sessions, and the report adopted at the 2023 Meeting of High Contracting Parties recommending a two-tier framework distinguishing prohibited from regulated autonomous weapons. The 2023 framework articulates the consensus that autonomous weapons operating outside meaningful human control or unable to comply with international humanitarian law must be prohibited, while those operating within meaningful human control must be regulated through positive obligations.

UN General Assembly Resolution 78/241, adopted December 22, 2023 by a vote of 152 to 4 with 11 abstentions, requested the Secretary-General to seek the views of states and observers on autonomous weapon systems and to compile a substantive report. Resolution 79/L.77, adopted in 2024, extends and deepens that mandate. The International Committee of the Red Cross has issued a position recommending prohibition of unpredictable autonomous weapon systems and of those targeting humans, with regulation of all others through limits on targets, duration of operation, geographic scope, scale of force, and through requirements for human supervision and intervention. National doctrine — including the U.S. Department of Defense Directive 3000.09 (updated January 2023), the United Kingdom's Defence Artificial Intelligence Strategy, and the French ministerial doctrine on lethal autonomous weapons — converges on the same operative concept: meaningful human control as a property of the engagement, not a procedural posture of the operator.

The doctrinal core is therefore consistent across the CCW GGE rolling text, the ICRC position, and aligned national doctrine: every engagement must be traceable to a human authority who exercised informed judgment over a defined target, in a defined operational context, within a defined temporal and geographic scope, with retained ability to intervene. International humanitarian law obligations of distinction, proportionality, and precautions in attack — codified in Additional Protocol I to the Geneva Conventions and binding under customary international law — apply to every engagement regardless of the degree of autonomy, and the human authority cannot delegate these judgments to the system.

Architectural Requirement

Meaningful human control is not a property of an operator's training, an organization's procedures, or a system's user interface. It is a property of the engagement itself: at the moment of force application, can the chain from human judgment to weapon effect be reconstructed with sufficient fidelity to verify that the human authority's intent governed the engagement within the scope they authorized? The CCW GGE rolling text and the ICRC framework both reduce, when applied to a real system, to this structural question.

An autonomous or semi-autonomous system operating within meaningful human control must therefore structurally bind every engagement decision to an operator authority whose credentials, intent envelope, and authorization scope are recorded and verifiable. The intent envelope must specify the authorized targets or target categories, the geographic and temporal bounds, the rules-of-engagement constraints under which the operator authorized action, and the conditions under which authority is retained, transferred, or revoked. The system must refuse to act outside the envelope, and must produce evidence — admissible to a board of inquiry or to international scrutiny — that every action it took was within scope.

In coalition operations, the requirement extends across organizational and national boundaries. Multi-fleet engagements involving assets from multiple nations or services must propagate intent and authority across the coalition without flattening it into a single authority's decision; each contributor's national caveats and rules of engagement must remain enforceable on its own assets. The architectural property is therefore intent fusion that preserves authority lineage rather than aggregating it. Without this property the coalition operates either at the lowest common authority — sacrificing capability — or at the most permissive authority — sacrificing legality.

Why Procedural and Bolt-On Compliance Fails

The dominant approach treats meaningful human control as a procedural property: an operator clicks a button, a checklist is completed, a rules-of-engagement card is acknowledged. This pattern fails the doctrinal requirement in three structural ways. First, a button-click without a recorded intent envelope cannot establish that the operator's judgment governed the engagement: the system has no structural basis for refusing to act outside the operator's actual intent, because the intent was never expressed in a form the system can enforce. Second, after-the-fact reconstruction from logs cannot satisfy the evidentiary burden that a board of inquiry, a CCW state-party review, or an ICRC investigation will impose, because the logs record system actions rather than human authority lineage.

Third, the procedural pattern collapses under coalition operations. National caveats expressed as briefing slides cannot be enforced on a multi-fleet engagement; the system either applies the most permissive authority or halts at the most restrictive, and in either case the coalition cannot demonstrate that each contributor's authority was respected. The same gap defeats stage-gated engagement, where authority is transferred or refined as the engagement progresses: without a structural representation of intent, the transfer is undocumented and the resulting action is unattributable.

The legal and reputational consequence is severe. State practice already recognizes that incidents involving autonomous or semi-autonomous systems will be investigated against the meaningful-human-control standard; an inability to produce structural evidence of authority lineage will be treated as a failure of the standard, regardless of operator intent. Procedural compliance produces narrative; the doctrine increasingly demands artifacts.

What The Operator-Intent Primitive Provides

The Adaptive Query operator-intent primitive supplies meaningful human control as a structural property of the engagement. Regulated-credentialed intent fusion records the operator's authority — credentialed to the rank, role, and rules-of-engagement scope under which they are operating — together with the intent envelope they authorize: the target or target category, the geographic and temporal bounds, the rules-of-engagement constraints, and the retained-intervention conditions. The intent is expressed in a form the system can enforce, not as a button click but as a structured authorization that downstream actuation must validate against every action.

Multi-fleet intent propagation extends the substrate across coalition operations. Each contributor's intent envelope is preserved with its national caveats and authority lineage intact; coalition decisions admit through a composition rule that respects each contributor's constraints rather than flattening them. An asset under one nation's authority will refuse to act outside its own authority's envelope even when participating in a coalition action authorized by another nation's commander, satisfying the national-caveat obligation that coalition doctrine requires and that the CCW GGE framework implicitly demands.

Human-in-the-loop authority binds every actuation — every weapon release, every irreversible effect, every escalation across a stage gate — to the credentialed authority and intent envelope that authorized it. The binding is verifiable by a relying party, including a board of inquiry, a CCW state-party review, or an ICRC investigation, without trusting the operator organization's procedural records. When intent is revoked, when scope is exceeded, or when the engagement evolves beyond the authorized envelope, the system structurally refuses to act. The operator retains the ability to intervene because the system retains the structural representation of the operator's authority.

The primitive thereby produces, as a structural property of the system, the evidence that meaningful human control demands. Every engagement carries its authority lineage; every action is bound to a credentialed intent; every coalition operation preserves contributor caveats. Distinction, proportionality, and precautions in attack obligations under Additional Protocol I become assessable against system artifacts rather than against operator narrative.

Compliance Mapping

The operator-intent primitive maps to the doctrinal corpus emerging from the CCW GGE and aligned national doctrine. Regulated-credentialed intent fusion supports the meaningful-human-control concept articulated in the GGE 2023 rolling text and the ICRC position, by producing structural evidence that informed human judgment governed each engagement within an authorized scope. The intent envelope's geographic, temporal, and target-scope bounds map directly to the ICRC's recommended limits on duration of operation, geographic scope, target categories, and scale of force.

Multi-fleet intent propagation supports the national-caveat and coalition-interoperability obligations expressed in NATO doctrine, the U.S. DoD Directive 3000.09 requirement that commanders and operators exercise appropriate levels of human judgment, and the UK and French national doctrines on lethal autonomous weapons. Human-in-the-loop authority supports the Additional Protocol I obligations of distinction (Article 48), proportionality (Article 51(5)(b)), and precautions in attack (Article 57), by structurally binding every actuation to the human authority responsible for the IHL judgment.

The substrate further supports the emerging accountability framework anticipated in UN General Assembly Resolution 78/241 and 79/L.77 reporting, by producing the evidence base from which state practice can be characterized and incidents can be investigated. The mapping is not a substitute for legal review of each engagement, nor for the operator's IHL training, but it supplies the architectural property without which legal review and training cannot reach a defensible conclusion.

Adoption Pathway

Adoption proceeds at the platform tier, the fleet tier, and the coalition tier. At the platform tier, the substrate is integrated into the engagement chain so that every actuation requires a validated intent envelope; legacy platforms gain the capability through an intent-validation gateway interposed between command and weapon system. At the fleet tier, intent envelopes propagate across distributed assets so that stage-gated and multi-asset engagements preserve authority lineage end-to-end. At the coalition tier, federation across national authorities preserves caveats and produces coalition-level evidence acceptable to each contributor's domestic accountability process.

The pathway aligns with the CCW GGE timeline toward a possible legal instrument or political declaration, with national doctrine maturation under DoD Directive 3000.09 and aligned frameworks, and with the UN General Assembly reporting cycle. Operators gain a substrate that simultaneously satisfies international doctrine, national accountability, and operational coalition interoperability from a single architectural investment.