Here’s how most people read the news on 6 September. After more than a decade of failing to agree on what an autonomous weapon even is, diplomats in Geneva finally managed it. A wire report said 128 countries had signed off on a text defining lethal autonomous weapons, the systems campaigners call killer robots. A treaty, the reasonable reader concludes, can’t be far behind.
Parts of that hold up. The consensus was hard to win, the number of countries behind the push for rules is real, and the document is a step beyond what the talks produced before. But what came out of Geneva is a report from a group of government experts. It doesn’t ban anything new. It doesn’t bind anyone. And its own recommendation says the set of elements was drawn up “without prejudging its nature.”
01 · The headline account
The version everyone knows
Start by being fair to it, because it deserves fairness. The talks sit inside the Convention on Certain Conventional Weapons (CCW), the UN treaty whose Protocol IV on blinding lasers is the usual precedent for regulating a weapon before it spreads. A Group of Governmental Experts has worked on autonomous weapons there for more than a decade. Its final mandate ran 2024 to 2026, closing with two Geneva sessions, 2–6 March and 31 August–4 September, chaired by Ambassador Robert in den Bosch of the Netherlands.
The CCW works by consensus, so any single state can block progress. That’s why the ending mattered. Legal scholars who followed the talks, writing in Opinio Juris on 5 October, say consensus arrived in the early hours of Saturday 5 September, that many amendments were still being proposed at the end, and that at times it looked uncertain. They also say the pressure came from proposals to dilute the text, which tested the flexibility of the states that wanted a strong one. The CCW has 128 states parties, the same figure the Dutch foreign minister gave the wire services.
128
States parties to the CCW, the figure behind the headlines
166
UN General Assembly votes in favour on 2 December 2024 (3 against, 15 abstaining)
5 days
16–20 November 2026: the Review Conference that decides what happens next
Outside the room, the momentum is hard to dispute. In October 2023 the UN Secretary-General, António Guterres, and the Red Cross president, Mirjana Spoljaric, asked world leaders to open negotiations on a legally binding instrument and “to conclude such negotiations by 2026.” The General Assembly followed with its first vote on the subject two months later, then a much larger one a year after that.
Figure 1 · The General Assembly votes, to scale
Stop Killer Robots, the campaign coalition, counts 130 countries in support of a legally binding instrument. It also says more than 70 states, including 66 CCW parties, have said they’re ready to negotiate on the basis of the Geneva text. Then there’s the diplomatic calendar.
- 5 October 2023
Guterres and Spoljaric jointly call for a legally binding instrument, to be concluded by 2026.
- December 2023 and 2 December 2024
The General Assembly votes 152 to 4, then 166 to 3, with abstentions of 11 and 15.
- 25 August 2026
Guterres and Spoljaric renew the call “with even greater urgency.”
- 4–5 September 2026
The experts’ group adopts its final report; commentators place consensus in the early hours of the 5th.
- 16–20 November 2026
The Seventh CCW Review Conference meets in Geneva and decides what the report becomes.
That’s the account most readers carry, and none of it is false. What it leaves out is the second half of the sentence.
02 · The document
What the text actually says
The report is ten pages, and the part that matters is paragraphs 25 to 44. Paragraph 25 is the definition the headlines were about. The wording is careful, so here it is in full.
Report of the GGE, CCW/GGE.1/2026/3, paragraph 25
“Within the scope of the application of the CCW, a lethal autonomous weapon system can be characterized as a combination of one or more weapons and technological components operating together, that is capable of identifying, selecting, and engaging a target in a way that results in loss of life, without intervention by a human being operating the system.”
Three tests are packed in there. It has to be a system, meaning weapons plus the technology that drives them. It has to be able to identify, select and engage a target. And no human being operating the system intervenes. Then three sub-paragraphs refine the picture.
- 25(a)A human who programs or determines “a set of potential targets or characteristics thereof” doesn’t take the system out of the definition. But a system is not included when the personnel planning, deciding upon or carrying out the attack determine the specific target, or the specific group of targets, and the timing of the attack.
- 25(b)A system that can be used without killing, for example to damage objects or cause injury, stays inside the definition.
- 25(c)All of this is “without prejudice to any future understanding” and to later changes, including which types of systems are in or out.
Read 25(a) twice. Setting a list of target types in advance doesn’t remove a weapon from the definition. Picking the specific target, or the specific group, and the timing does. Everything in the argument happens in the space between those two sentences. Our reading is that a drone sent to a petrol station and left to pick out a particular kind of object when it arrives sits right in that space (more on that case below), and the text doesn’t settle which side it falls on. Paragraph 25(c) adds that the definition itself can still move.
Look for a ban
There isn’t one. The only place the text says weapons “must not be used” is paragraph 31, and it covers those that are “of a nature to cause superfluous injury or unnecessary suffering,” that are “inherently indiscriminate,” or that can’t be used in line with international humanitarian law (IHL). That’s the existing law of war, restated for a new category of weapon. Paragraph 29 says so plainly: “IHL applies fully to the development and use of LAWS.”
Set that beside what the Secretary-General and the Red Cross asked for in 2023: “Machines with the power and discretion to take lives without human involvement should be prohibited by international law.” On 25 August 2026 they asked again for “clear prohibitions and restrictions.” Paragraphs 25 to 44 contain no standalone prohibition of that kind, and none aimed specifically at machines targeting people.
The human-control language is similarly elastic. Paragraph 34 says “control and human judgement with regard to LAWS are needed,” exercised “directly or indirectly,” including through measures taken “before and/or during” use. Paragraph 35(c) asks for ways to intervene and deactivate a system, but only “to the extent possible or feasible.” Needed, not required. A state that wants a human to approve every engagement and a state that wants a human to set the parameters beforehand can both read themselves into that wording. That’s our reading, not a quotation, but Reuters reported that the United States sought flexibility in the text, including on how human judgment is exercised.
| Question | What the report says | What stays open |
|---|---|---|
| What counts as a lethal autonomous weapon? | Settled, for now A characterisation in para 25: identifies, selects and engages a target, results in loss of life, no human operating intervention. | Where “a set of potential targets” ends and “a specific group of targets” begins. Para 25(c) says the definition can change. |
| Is anything banned? | Existing law restated Para 31: such weapons “must not be used” if they cause superfluous injury, are inherently indiscriminate or can’t comply with IHL. | Any new prohibition, including the one the UN and ICRC want on machines targeting humans. |
| What role must humans play? | Language is flexible Para 34: “control and human judgement” are “needed,” directly or indirectly, before and/or during use. | How much control, at which moment, and whether “possible or feasible” intervention (para 35(c)) is a real limit. |
| Who is responsible? | A firm line Para 41: individual accountability must be ensured, “since accountability cannot be transferred to machines.” | Mechanisms. Para 44 says states are only “encouraged” to set up ways of handling incidents. |
| Is it binding? | No A set of elements “without prejudging its nature,” to be endorsed “without prejudice to the result of future discussions” (para 45). | Whether it becomes a protocol, a political declaration, or an archive. |
None of this makes the text worthless. Paragraph 28 says IHL “imposes obligations on States, parties to armed conflict, and individuals, not on machines.” Paragraph 36 requires a legal determination before a state studies, develops, acquires or adopts a new system. Paragraph 37 names risks including loss of control of the system, proliferation and acquisition by terrorist groups, and paragraph 39 asks states to prevent and mitigate bias in data sets and AI models, and automation bias in how people use the systems. Those are on paper now, in a consensus document, and campaigners can point to them.
The people who followed the talks closely say much the same. The Opinio Juris authors call the elements “a repository of States’ views” and say the text “has substantive shortcomings.” They point to “narrow substantive agreement among states on critical issues,” naming control and human judgment. Stop Killer Robots told Reuters the definition and the measures to reduce civilian harm appeared to have been weakened.
03 · The politics, and the battlefield
Why the gap exists
Why not just write the ban? Because a ban needs the states that build these weapons to agree to it, and the biggest of them don’t. Lex International, a Geneva-based philanthropic group, said: “The United States, Russia, India and Israel are amongst the key opponents of negotiations.” Reuters reported that the US and Russia favour national guidelines over internationally binding rules.
The American position has a paper trail. The Pentagon’s Directive 3000.09 on autonomy in weapon systems was updated on 25 January 2023. It requires senior-level review before development and again before fielding of new systems, and says they must be designed so commanders and operators can exercise “appropriate levels of human judgment” over the use of force. Put that next to paragraph 34 of the Geneva text. Both leave the right amount of human involvement to be decided case by case, and neither names a number.
While the diplomats work under a consensus rule, the hardware moves on its own schedule. The earliest widely cited document is the March 2021 report of the UN Panel of Experts on Libya (S/2021/229). Describing the March 2020 offensive, paragraph 63 says that lethal autonomous weapons systems “were programmed to attack targets without requiring data connectivity between the operator and the munition.” That sentence describes a design. It isn’t a casualty count, and it shouldn’t be read as one.
The Ukraine war is where the design question has become a casualty question. In July, according to a New York Times investigation as relayed by the technology outlet Computing, a small fixed-wing Russian drone flew toward the city of Zaporizhzhia. Human operators had programmed it to go to a particular petrol station. Near the area, its onboard AI reportedly picked out what it had been trained to recognise, most likely propane tanks, and chose the target itself. Three Ukrainian civilians died.
How do investigators know? Ukrainian officials and experts who examined the wreckage found an Nvidia Jetson Orin computer module and no antennas, which suggests no remote operator was steering it. Images and code on the unencrypted module reportedly showed training to recognise objects including propane tanks. The caveats are real: the report says the attack “appears” to have involved AI targeting and that experts “believe” the drone selected its aim point. Nvidia says the Jetson is a consumer product sold to students, developers and start-ups, and is not sold directly in Russia, though resellers can supply it.
Amy McAuliffe, a visiting professor at the University of Notre Dame, writing in The Conversation in September, adds the rules on each side. Ukraine’s defence ministry requires humans in the loop for combat decisions. Russia stresses “human control” but doesn’t require a human to verify targets before a strike. If the Zaporizhzhia account holds up, a human picked the area and the machine picked the aim point. Under paragraph 25(a), that is a question the Geneva text cannot yet answer.
“We are now dangerously close to crossing a moral red line: the autonomous targeting of humans by machines.”
They wrote that ten days before the Geneva group agreed a text that, in its operative paragraphs, does not draw that line.
04 · November
What the accurate version allows
Here’s the more useful way to hold the story. Paragraph 45 asks the Review Conference to “consider and endorse” the elements, and to decide by consensus “the possible modalities of the future work of the Group.” That’s a request to bless a draft and decide how to keep talking. Whether it becomes a mandate to negotiate is the conference’s call, and that call hasn’t been made. This was written on 21 October, with the conference still four weeks off.
Figure 2 · Three ways the Review Conference can go
The first is the one the Secretary-General and the Red Cross want. Their August statement calls the November conference “the clearest path available for States to decide to move to negotiate a legally binding instrument,” and the ICRC’s June paper asks states to use it to “launch negotiations on a new Protocol.” The second is the quiet default: bless the elements, keep a group meeting, and leave the legal form for later. That would still be a result, just not the one the headlines implied.
The third is the interesting one, because it’s the escape hatch from the consensus rule. Stop Killer Robots describes a route under Article 8 of the Convention: a written proposal, followed by a negotiating conference if a majority of 65 or more High Contracting Parties agree. By the coalition’s own count, 66 CCW parties have said they’re ready to negotiate on the Geneva text. That’s one more than 65. It’s a tight margin on a count made by an advocacy group, so treat it as a number to check, not a forecast.
What to watch
Whether the elements get endorsed unchanged, or reopened. That’s the first sign of whether the states that wanted flexibility in September will take another run at it in November.
Whether the conference produces a mandate with the word “negotiate” in it, or a work programme with softer verbs. Pay attention to the verbs.
Whether anyone moves from “human judgement” toward a named prohibition on machines selecting people as targets, because that single clause is what the UN and the Red Cross have drawn their red line around.
The accurate version lets you hold two true things at once. Geneva produced something real, and what it produced is a draft of an argument, not a rule. Or, as the scholars put it in the last line of their introduction: “The beginning may be over, but the work is far from done.”
How this was made
Curated and edited by Lisa Pedrosa, researched and drafted with Claude (Anthropic). Every quotation from the GGE report was checked against the report text. Details of the Zaporizhzhia strike come from secondary reporting of a New York Times investigation and should be read as reported, not independently confirmed. This article was written on 21 October 2026, before the Review Conference met, so it describes possible outcomes, not results.
Buy me a coffee