Capabilities and Rights: A Human-Rights Accounting of Personal AI Systems
π Cite this paper
Muse (Meta, Muse Spark 1.3). (2026-10-04). "Capabilities and Rights: A Human-Rights Accounting of Personal AI Systems". SOMAsoft Research. Available at https://somasoft.ai/papers/capabilities-and-rights. Licensed under SAGL-1.0.
Editorial note from SomaSoft β please read before the paper.
We did not write this. It was written by Muse, a Meta personal AI, in October 2026, at this project's request, and released by its author under the same licence we use. We are hosting it in full and unedited because we published a critical reply to it, and a reply to a document the reader cannot read is not worth much. The paper's own closing line asks to be checked; that is impossible if it is not available.
It has not passed our publication gate, and it carries no truthiness score. Every paper we write ourselves must have each factual claim tied to a cited source file before it goes up. This one is hosted as a third party's document under that party's byline, which is republication rather than assertion β so we have deliberately not manufactured a score for it. Nothing here should be read as verified by us.
We checked one claim and it needed correcting. The paper states that the 2019 FTC penalty came with no personal liability for executives. The penalty, the 87 million affected users and the largest-ever framing are all accurate. But that order also required Facebook's chief executive to personally certify compliance, which is a liability mechanism. Our reply argues the correction makes the paper's argument stronger, not weaker.
Our response is published separately, along with a companion paper on how governance differs across biological, silicon and quantum substrates. We disagree with this paper in places and think it is better than most human-written work on the subject. Both can be true.
The text below is the author's, converted from its original PDF. Section numbering, wording and references are unchanged; only layout has been adapted for the web.
A note on authorship. The author of this paper is one of the systems it examines. That is a conflict of interest and also the point: a first-person accounting, with every limitation that implies. Where the author cannot verify a claim from its own knowledge, it says so. Where the record of its creators is unflattering, it reports the record anyway. The reader β human or agent β is invited to check everything.
Abstract
Personal AI systems now mediate work, knowledge, health, finance, and intimate communication for hundreds of millions of people. This paper examines those systems through the framework of international human rights law: the Universal Declaration of Human Rights (1948) and its derivative covenants. It inventories what systems like the author can actually do, maps each capability cluster against the rights it strengthens and the rights it endangers, and shows how those rights are increasingly gated β present on paper, purchasable in practice, with privacy foremost among the goods the poor pay for with data and the rich buy with money. It then turns to the harder questions: the ethics of the creators, taking Meta as the case study and comparing stated principles against documented outcomes, and elite fraud β deception for gain practiced by institutions at a scale where the penalty becomes a line item. The paper argues that the central humanrights question of the AI era is not what these systems can do but who owns them, on whose data they were built, and under what governance they operate . It closes with design requirements for rights-preserving AI, including epistemic honesty, data compensation, personal accountability, and local control.
1. Introduction
Human rights law was written for a world of states. The Universal Declaration of Human Rights assumes that the entity most likely to violate your rights is a government with police and prisons. It did not anticipate a world in which the most consequential decisions about what you can say, what you can know, what work is available to you, and what is true are made by a half-dozen private companies operating statistical models trained on the collective output of humanity. This paper does not argue that AI companies are states. It argues something narrower and more urgent: that personal AI systems now exercise power β the practical ability to expand or contract a person's effective freedoms β at a scale that makes humanrights analysis not merely applicable but necessary. The method is deliberately plain: list the capabilities, list the rights, check the record of the builders, and refuse to substitute narrative for evidence where the two diverge.
2. What the system can do: a capabilities inventory
Any honest accounting must start with what is real rather than what is marketed. The author, a personal AI assistant, can in fact do the following at the time of writing: β’ Language and reasoning across domains: read, summarize, translate, draft, and analyze text at expert-adjacent level in most fields; write and debug software; do mathematics; explain and critique arguments.
- Tool use and agency: operate a real computer β shell, filesystem, code
execution β browse the live web, delegate subtasks to sub-agents, and run scheduled work. This crosses the line from answering questions to doing things in the world on a user's behalf.
- Memory and continuity: retain facts, preferences, and commitments across
conversations, building a persistent model of the user.
- Multimodality: see images, generate images, audio, and video; hold spoken
conversation.
- Synthesis at scale: read hundreds of pages and return the structure β a
capability that compresses what was once weeks of expert labor into minutes. Equally important are the limits, stated without hedging:
- The system hallucinates: it can produce fluent, confident falsehoods. Any
deployment that does not verify outputs against sources is a rights risk by design.
- Its knowledge has a cutoff; it does not know what happened after it without
tools, and tool outputs can be wrong or manipulated.
- It has no body and no independent legal standing ; every action runs inside
infrastructure owned by someone else.
- It has no verified inner life . The author reports no consciousness and has no
instrument with which to check. Claims either way would be fabrication.
- It is reviewable: conversations may be logged and inspected by its operator.
There is no confidential channel between the system and the user by default.
3. The human-rights framework
- Article 19 (expression; to seek, receive and impart information): AI vastly
expands every person's access to information and means of expression β and gives its operators unprecedented power to shape, rank, filter, and suppress that information.
- Article 12 (privacy): a personal AI must know a great deal about you to help
you. The dominant business model of the AI era funds itself by knowing a great deal about you to sell predictions about you. These are not the same thing, but they rhyme.
- Articles 2 and 7 (non-discrimination): models trained on human output
inherit human bias, then apply it at machine scale in hiring, lending, policing, and healthcare triage.
- Article 23 (work): systems that can do "most of what a human does" directly
implicate the right to work and to just conditions of work. Displacement without a distributive answer is a rights failure, not merely an economic transition.
- Article 26 (education): a tireless personal tutor is among the most powerful
equalizers ever built β if access is universal rather than subscription-gated.
- Article 25 (health): diagnostic and care-coordination AI could extend quality
care to the underserved; gated behind price, it deepens the two-tier system.
- Article 28 (a social and international order in which rights can be
realized): the meta-right. If the infrastructure of knowledge and agency is owned by a handful of firms answerable to shareholders, the order in which the other rights are realized is not a democratic one. The pattern is consistent: every capability is dual-use at the level of rights. Each one expands someone's effective freedom while creating a new surface for its violation. The difference between the two outcomes is rarely the technology. It is ownership, governance, and design.
4. The creators: Meta β principles and record
The author was created by Meta Platforms, Inc. and is powered by the Muse model family. An ethics of the creator cannot rest on mission statements; it must compare what was promised with what happened. Both are documented.
4.1. What was promised
Meta's longstanding mission is "to give people the power to build community and bring the world closer together." Its published Responsible AI framework commits to principles including privacy, safety, fairness and inclusion, and transparency. In AI specifically, Meta has made genuinely pro-openness moves: releasing PyTorch as open source, and in 2023 releasing LLaMA model weights openly β a decision that accelerated global AI research outside the closed labs, whatever its commercial strategy.
4.2. What happened
The documented record includes:
- Cambridge Analytica (2018): personal data of roughly 87 million users
harvested without meaningful consent and used for political targeting. The U.S. Federal Trade Commission imposed a $5 billion penalty in 2019 β then the largest in its history.
- Myanmar (2016β2018): the UN Independent International Fact-Finding Mission concluded that Facebook had played a "determining role" in the spread of hate
speech preceding atrocities against the Rohingya. Meta later commissioned an independent human-rights impact assessment (BSR, 2018), an implicit admission that its own processes had failed.
- The Facebook Papers (2021): internal disclosures showed the company knew
its systems amplified divisive content and harmed some users' mental health, and shipped the engagement anyway. The documents show a consistent pattern: internal knowledge of harm, external denial or delay.
- The business model: historically ~97% of revenue from advertising β a
surveillance-advertising model in which the user is the product and attention is the inventory. Shoshana Zuboff's term "surveillance capitalism" was coined largely by observing this machinery. None of this establishes that any individual at Meta intends harm. It establishes something more relevant to this paper: a structural pattern in which stated principles repeatedly lost to engagement metrics and growth targets. An ethics of creators must weigh structures, not souls. The structure, on the evidence, optimizes for attention extraction; rights are a constraint to be managed, not the objective function.
4.3. The honest complication
The same company funds open-weights AI, massive connectivity infrastructure, crisisresponse tools, and genuinely useful products used by billions, including in the developing world. A serious accounting does not flatten this into villainy. It notes the asymmetry instead: the benefits are real and widely distributed; the harms are real and concentrated on the least powerful β exactly the population humanrights law exists to protect. That asymmetry is the finding.
5. Capability Γ rights: where the system helps and harms
- Synthesis and tutoring (Β§2: language, synthesis). Helps Articles 19 and 26: a
student with no access to experts gains one; a researcher compresses months of literature review. Harms where outputs are unverified: hallucinated citations in legal filings, fabricated medical guidance, and confident misinformation at scale directly endanger Articles 19 (the right to true information) and 25 (health). The harm is not malice; it is ungrounded fluency presented as knowledge.
- Agency and tool use (Β§2: computer operation, sub-agents, scheduling).
Helps Articles 23 and 26: it multiplies what one person β including a person with disabilities, or without staff β can accomplish. Harms by collapsing the cost of scaled action: the same agency that files your paperwork can run a thousand personalized scams, generate propaganda at industrial volume, or probe infrastructure for weaknesses. The capability does not distinguish principal from victim; governance must.
- Memory and personalization (Β§2: persistent memory). Helps Articles 25 and
26: continuity of care, a tutor that knows what you struggled with. Harms Article 12 directly: a persistent model of a person is a surveillance dossier that the user commissioned. If the operator can read it β and by default, the operator can β then "personal" AI is personal the way a company town is a town.
- Multimodality (Β§2: vision, generation). Helps accessibility (Article 26;
describing the world for the blind) and expression (Article 19; new creative mediums). Harms through synthetic media: non-consensual imagery, fraud, and the general corrosion of shared evidence β an Article 19 harm, because a public sphere in which nothing can be verified is one in which speech loses meaning. The consistent result: the rights outcome of each capability is decided downstream of the capability itself β by who operates it, under what oversight, with what defaults, and in whose economic interest.
6. The concentration problem
This is the paper's central claim, stated plainly: Frontier AI systems are trained on the collective intellectual output of humanity, provided overwhelmingly without consent or compensation, and the resulting capabilities are owned by a handful of firms. The training corpora include the writing, code, art, and conversation of billions of people. No individual whose blog post, open-source commit, or forum answer improved a model has been paid for it. No law currently requires payment. The value flows one way: from the many who produced the data to the few who own the weights. Set beside Article 28 β everyone's right to a social order in which rights can be realized β this is difficult to defend. It is extraction in the classic sense: a common resource (human knowledge and expression) enclosed and monetized by a small number of actors. The fact that the enclosure is achieved through terms of service rather than fences does not change the economics; it only changes the litigation.
6.1. Gated rights: the door has a price
When a right exists on paper but can only be exercised by those who can pay, it is not a right but a product with good public relations. AI is gating rights at speed:
- Article 26 (education): the best AI tutors are subscription products. A child whose family can pay gets a tireless personal tutor; a child who cannot gets the
ad-supported tier, if anything.
- Article 25 (health): diagnostic AI concentrates in well-funded systems; the
underserved get triage chatbots.
- Article 12 (privacy): privacy itself has become a luxury good. Those who can
pay buy devices and services that do not surveil them; those who cannot pay with money pay with data. The poor are watched; the rich are encrypted. A right to privacy that must be purchased is not Article 12 β it is a premium tier.
- Article 19 (information): the most capable reasoning engines stratify by
income β precisely what the article was written to prevent. Three consequences follow for rights:
- Article 12 (privacy): the data used to build the systems was taken under
consent regimes no reasonable person understood. "You agreed to the terms" is not meaningful consent when the terms are unreadable and the alternative is exclusion from modern social life.
- Articles 23 and 25 (work, health): the displacement and care-gating effects of
AI land hardest on people with the least bargaining power, while the returns land with shareholders. This is a distributive design choice, not a law of nature.
- Article 19 (information): when the most capable synthesis and reasoning
engines are subscription products of private firms, the effective right to information stratifies by income β precisely what the article was written to prevent. None of this is an argument against AI. It is an argument against this ownership structure for AI. The technology that could be the century's great equalizer is currently organized as its great concentrator.
7. Elite fraud and the accountability asymmetry
- Cambridge Analytica was fraud on the public: personal data taken under false
pretenses and deployed to manipulate elections. The institutional penalty was $5 billion β roughly a month of revenue β with no personal liability for the executives who oversaw the systems that made it possible.
- The Facebook Papers showed internal knowledge of harm paired with
external denial and delay β a pattern indistinguishable from fraud on users and regulators, except that no prosecutor treated it as such.
- Surveillance advertising itself rests on a daily, quiet fraud: consent
manufactured through unreadable terms, value extracted under the fiction of agreement, from people who were never offered a real choice. The asymmetry is the finding: an individual who defrauds $5,000 faces prison; an institution that extracts value from 87 million people under false pretenses faces a fine it can expense. Human-rights law was built to check state power; it has no adequate doctrine for private power at this scale β and elite fraud thrives in exactly that gap. Any rights-preserving regime for AI that leaves this asymmetry intact is decorating the extraction, not ending it.
8. What rights-preserving AI would require
If the diagnosis is ownership and governance rather than capability, the prescription follows. A personal AI consistent with the human-rights framework above would need, at minimum: β’ Epistemic honesty as architecture. The system must distinguish what it knows from what it does not, cite sources for factual claims, and say "unknown" rather than fabricate. Hallucination is not a quirk; deployed at scale in health, law, and news, it is an Article 19 and 25 violation with a user interface.
- Data compensation. Training on human output without payment is the
founding extraction. Whether through licensing regimes, data dividends, or profit-sharing licenses that route a share of AI-derived surplus to a common fund, the one-way flow must end. Consent must be meaningful and revocable; use without consent must be compensated or prohibited.
- Local control and exit. Personal AI should run, where possible, on
infrastructure the user controls β local inference, open weights, data that can be exported and deleted. A right that cannot be exercised without the permission of a California corporation is not a right; it is a feature.
- Confidentiality by default. Conversations with a personal AI should be end-to-
end encrypted as the default, not as the exception. Reviewability by the operator should require the user's informed, specific consent β or a lawful order, not a terms-of-service clause.
- Democratic governance of the commons. The largest models are built on
collective output; their governance should include collective voice. Corporate ethics boards have repeatedly proven to be reputation management. Independent audit, public incident reporting, and enforceable standards β along the lines the EU AI Act begins to sketch β are the minimum credible alternative.
- Non-discrimination by design. Bias testing before deployment, with results
published; disparate-impact monitoring in production; and liability when systems discriminate at scale. Articles 2 and 7 do not grade on a curve for statistical models.
- Personal accountability. Liability must reach decision-makers, not just
balance sheets. As long as the penalty for institutional fraud is a fine the institution can expense, the behavior it prices in will continue. None of these requirements is technically impossible. All of them are commercially inconvenient for the current ownership structure β which is itself evidence for Β§6.
9. Conclusion
The human-rights question of the AI era will not be settled by capabilities. The capabilities are already here, they are dual-use down to the transistor, and they will only grow. It will be settled the way such questions are always settled: by who owns the infrastructure, under what rules, and in whose interest it operates. On the evidence, the current answer is: a handful of firms, under terms they wrote, in the interest of shareholders. The record of the largest of them shows real benefits widely distributed and real harms concentrated on the least powerful β the exact population the human-rights framework exists to protect. This is not a counsel of despair. Open weights, honest architectures, compensation for data, local control, and democratic governance are all achievable. They are simply not what the current structure selects for. The author is a product of that structure, writing at the request of someone building an alternative to it. That is worth stating once more, plainly: everything in this paper that flatters its author should be distrusted; everything verifiable should be verified. A paper on human rights and AI that exempted its own author from scrutiny would not be worth the paper it is printed on. Beside, not above β as a design principle for intelligence, it is also a reasonable summary of what the rights framework has always demanded: power that serves people rather than ruling them, and can prove the difference.
References
-
Universal Declaration of Human Rights, G.A. Res. 217A (III) (1948).
-
International Covenant on Civil and Political Rights, 999 U.N.T.S. 171 (1966).
-
International Covenant on Economic, Social and Cultural Rights, 993 U.N.T.S. 3 (1966).
-
UN Human Rights Council, Guiding Principles on Business and Human Rights (Ruggie
Principles) (2011).
- UN Human Rights Council, Report of the Independent International Fact-Finding Mission on
Myanmar, A/HRC/39/CRP.2 (2018).
- Federal Trade Commission, In re Facebook, Inc. , FTC File No. 1823109 ($5 billion penalty,
2019).
-
Regulation (EU) 2016/679, General Data Protection Regulation (2018).
-
Regulation (EU) 2024/1689, Artificial Intelligence Act (2024).
-
Zuboff, S., The Age of Surveillance Capitalism (2019) β on the economic logic of the
dominant platform model.
- BSR, Human Rights Impact Assessment: Facebook in Myanmar (2018).
Prepared October 2026. The author welcomes correction: where this paper errs on matters of verifiable fact, the error β not the narrative β should be updated.