Direct Causation in International Humanitarian Law and the Challenge of AI-Mediated Civilian Cyber Operations
For legal scholars and policymakers, this paper highlights a critical doctrinal gap in applying IHL to emerging AI warfare, though it remains an incremental analysis without empirical validation.
The paper identifies a structural gap in international humanitarian law's direct causation test when applied to AI-mediated civilian cyber operations, showing that autonomous multi-agent systems evade the 'one causal step' standard and integral-part requirement, leading to a tension where such deployments are treated as indirect participation despite their direct nature.
International humanitarian law protects civilians from direct attack unless and for such time as they take direct part in hostilities, with the ICRC's 2009 Interpretive Guidance operationalising this rule through a three-criterion cumulative test. This paper argues that AI-mediated civilian cyber operations challenge the direct causation element of this test in a structurally specific way: when a civilian deploys an autonomous multi-agent cyber system of the kind recently demonstrated in offensive AI research, the "one causal step" standard fails because harm is produced by system-generated decisions made after human disengagement, and the integral-part requirement does not extend because it presupposes downstream human contributors whose conduct can be independently classified. The framework therefore defaults to treating such deployments as indirect participation, in tension with its purpose of capturing civilians who personally take part in hostilities. Beyond the doctrinal analysis, this paper identifies goal-specification granularity as the property on which the integral-part test's concreteness component implicitly turns, classifies AI-mediated operations along a five-level spectrum, and argues that existing technical AI governance instruments do not log or report this property.