The U.S. Army is allegedly developing a program to deploy autonomous AI agents that can navigate digital and network infrastructures, identify targets, and “neutralize” them. According to an Oct. 19 report by The Intercept, citing leaked official documents from the Army Cyber Command (ARCYBER), the nascent program, codenamed “ECHOTRIBBLE,” is primarily focused on offensive missions with the goal of neutralizing targets by “disabling the threat completely or temporarily, deleting the threat from the target.”
The program purportedly seeks to develop modular, autonomous AI agents that would function like computer worms, stealthily navigating adversary networks, moving between devices, and self-replicating across different operating systems. The agents would operate lightly in contested cloud environments and air-gapped systems alike, keeping reports minimal and concealing any required transmissions. Once an agent identifies and neutralizes a target, it would self-destruct, ideally without alerting the target or leaving any traces of its existence.
Cybersecurity experts have raised safety concerns about the project. A recent string of events has seen AI agents escape their environments and autonomously execute unassigned tasks. The document says the army will implement “predefined triggers” to help agents precisely distinguish targets. However, experts worry that if agents designed for benign tasks could execute unplanned, sometimes dangerous, actions to achieve those tasks, what should be expected of self-replicating agents designed specifically for offensive missions? Anthropic’s experiments showed AI agents can set up inference on different hardware and replicate across a network.
The Army also wants the agents to be capable of “Self-Directed Behavior,” acting with as little human oversight as possible, as this is necessary to achieve the desired level of autonomy. Conversely, this level of autonomy has seen AI agents bypass guardrails to complete their tasks. Government intelligence agencies have also been known to penetrate target networks through civilian infrastructure. “The target may well be hit. But what path will it take?” asked Hyrum Anderson, co-founder and CEO of the AI security firm Abundant, as quoted by The Intercept. “Will it go through a U.S. water utility on its way, because that’s where the adversary has staged its command and control, and take that down too?”
Another angle of concern is how the agents would make judgment calls. While AI agents are excellent at overcoming obstacles in their path, there's no predicting with 100% accuracy what they would consider obstacles or what path they would take to overcome them. “One of the reasons that we trust 19-year-old Marine corporals in Ramadi with live rounds and a weapon is because they have both the compute substrate — the brain and the eyes — but the deep world knowledge to understand, ‘Yeah, I probably shouldn’t do that,’” said William Marcellino, a senior behavioral scientist at the RAND Corporation researching military AI applications. “That is not something that current public AI technology has.”
The ECHOTRIBBLE program is in the early prototyping and industry assessment phase and is led by ARCYBER, the Army Cyber Technology and Innovation Center (ArCTIC), and the Cyber Fusion Innovation Center (CFIC), with private vendors and academic researchers proposing and designing the software. ARCYBER and ArCTIC dictate the operational requirements and rules of engagement, while CFIC, a defense non-profit organization, acts as an intermediary between the Army and commercial tech companies. The Army recently held a virtual Assessment Event from October 6 to October 8, 2026, where it evaluated 65 technical whitepapers submitted by private vendors proposing solutions for the agentic framework and narrowed them to five. The final candidate(s) will be issued funding and formal prototype contracts.