Satya Nadella’s position has shifted: more capable AI does not necessarily mean more aligned AI. In his October 26, 2026, 20VC interview and October 19 remarks, he described alignment as a problem that scaling alone may not solve—and argued for combining work inside the model with safeguards around it.
5
11
Scaling is not a safety guarantee
Nadella previously expected alignment—AI behaving in line with human goals—to follow as models became more capable. He now says the two do not automatically rise together. An October 19 interview transcript excerpt captures the point directly: alignment “doesn't fall out as a capability with scaling.”
5
11
He also cautioned that mechanistic understanding may remain elusive even as scaling continues to work. That matters because capability gains alone cannot show whether a system’s behavior is reliably aligned or explain why it produces a particular action.
5
Nadella’s proposed response is not to abandon training-based alignment. The available summaries of his 20VC comments say alignment should be built into training, potentially as early as pre-training, rather than expected to appear automatically later. The same summaries report his skepticism that reinforcement learning alone can produce alignment.
2
8
Alignment and containment do different jobs
Training aims to shape how a model behaves. Containment addresses what the model can do when deployed. Nadella’s argument is that the second problem cannot depend on the first being solved: organizations need controls outside the model, even while alignment work continues.
2
5
That distinction informs Microsoft’s October 19 expansion of Project Perception. Nadella said the effort would add capabilities to assess agent risk, adapt permissions and contain threats. The approach treats AI systems as potential insider risks—not necessarily because they are malicious, but because their actions should not be trusted without independent controls.
1
14
The practical principle is to separate a model’s ability to recommend or initiate an action from the authority to carry it out. External permissions and containment measures can limit an agent’s reach if its behavior is unexpected. In an October 10 essay, Nadella also called for assuming a model could be compromised and giving an authorized person the ability to pause or shut it down mid-task.
18
22
Why the change matters
Nadella’s revised view separates capability from safety. If alignment does not reliably follow from scaling, then a more capable model should not be treated as safer simply because it performs better. The approach he describes is two-track: work on alignment during training, and build deployment systems that can constrain models independently.
2
5
That is also the point of his trust principle: the most trustworthy system is one that does not require people to trust the model blindly. Coverage of his essay quotes him describing it as “the one that enables us to trust the model the least.”
9
The evidence supports this shift in emphasis, but not every detailed safeguard sometimes associated with it. The central claim is narrower: scaling is not a guarantee of alignment, so training efforts need to be paired with external controls and human oversight.
1
5
18