top of page
Search

Physical AI in 2026: Why AI Agents Need a New Operating Model

Philip Moses
Sep 10
9 min read

AI agents are moving beyond screens. They are beginning to interact with robots, laboratory equipment, manufacturing systems, sensors, and other physical machines.

That creates a major opportunity—but also a very different risk profile.


An AI agent writing a report can be corrected with a few keystrokes. An agent controlling a robotic arm, changing a laser setting, or operating laboratory equipment can affect people, materials, machines, and safety within seconds.


In this article, we’ll explore what Physical AI means in 2026, how common hardware interfaces could accelerate adoption, why physical actions require stronger controls, what early pilots are showing, and how businesses can build a safer operating model for AI agents.

What Is Physical AI?

Physical AI refers to AI systems that can perceive, reason about, and act in the physical world.

Instead of simply producing text or analyzing digital information, a Physical AI agent can potentially interact with:

  • Robotic arms

  • Microscopes

  • Liquid handlers

  • Laser systems

  • Manufacturing equipment

  • Sensors and laboratory instruments

  • Industrial control systems

This creates a new layer of AI automation.

However, connecting an AI agent to physical equipment isn't always straightforward. Most machines were designed with their own software, control protocols, interfaces, and data formats.


As a result, integrating several devices can require significant custom engineering.

The Hardware Interface Problem

In August 2026, Anthropic introduced the Model Hardware Standard (MHS) research preview, a proposed approach for connecting AI systems to programmable physical equipment.

The idea is relatively simple: instead of creating a completely different integration for every AI system and every machine, hardware can expose standardized interfaces that AI agents can discover and use.

MHS includes devices such as:


  • Microscopes

  • Liquid handlers

  • Robotic arms

  • Laser systems

The interfaces can work with technologies such as MCP, command-line tools, or APIs.

Anthropic says this approach could reduce some hardware integrations from weeks or months to hours or minutes. However, this is an early research-preview claim rather than an established industry benchmark.


The bigger idea is still important: standardized hardware interfaces could make physical automation easier to build and scale.

But there is an important distinction:

An interface can tell an AI how to perform an action. It does not automatically tell the AI whether it should perform that action.

That difference becomes critical when software decisions can produce physical consequences.

Why Physical AI Changes the Risk Model

AI agents already have familiar risks, including incorrect decisions, excessive permissions, poor audit trails, and unintended actions.

Physical environments introduce additional challenges.


Physical systems have state

A machine or material may not return to its original condition after something goes wrong.


AI cannot see everything

Sensors may not capture details that experienced operators recognize through sound, vibration, resistance, temperature, or other physical signals.


Retrying can make things worse

In software, retrying a failed API request is often harmless.

In the physical world, retrying the same command could increase the problem.

An example from an early Genentech pilot illustrates this.


Claude coordinated a liquid handler, robotic arm, and plate reader for a BCA assay. The system initially selected generic parameters that created bubbles in a viscous solution. When runtime errors appeared, its retry behavior agitated the liquid further, creating even more bubbles.

Human experts eventually identified the missing physical context and provided a better handling method.


The lesson is important:

AI agents need more than access to tools. They need boundaries, state awareness, recovery rules, and reliable ways to stop.

Safety Should Not Depend Only on the AI Model

Natural-language instructions can help an AI understand equipment limitations, but they should not be the only safety mechanism.

Critical controls should remain independent of the language model.

These can include:

  • Collision detection

  • Pressure limits

  • Emergency stops

  • Hardware interlocks

  • Safe operating modes

  • Temperature limits

  • Access restrictions

  • Machine-level safety controls

The AI can decide what it wants to accomplish, while deterministic systems should determine what the machine is physically allowed to do.

This separation becomes increasingly important as AI agents receive more physical authority.

What Early Physical AI Pilots Are Showing

Early experiments suggest that standardized interfaces could significantly reduce integration effort.

A Carnegie Mellon team reported developing a serial-dilution setup in approximately eight hours, compared with several weeks for a vendor-built approach, while experiments reportedly ran around three times faster.

A University of Washington laboratory connected six instruments in under a week, after previous integration attempts had required weeks of platform evaluation.

These examples are promising, but they should not be treated as universal ROI benchmarks. They are early demonstrations across specific environments and equipment.

One of the more interesting examples comes from a QuEra laser-recovery pilot.

According to Anthropic, an existing scripted recovery process took around 150 seconds and succeeded approximately 58% of the time during development.

An AI agent explored a more adaptive recovery strategy. That approach was eventually converted into a deterministic and inspectable script.

In a later blind test, the resulting script succeeded 695 out of 700 times, or approximately 99.3%, with recovery times ranging from 0.9 to 14 seconds, depending on the disturbance.

The important lesson isn't simply the 99.3% number.

It is the architecture behind it:

Use AI for exploration and optimization, then convert reliable behavior into deterministic control wherever possible.
From AI Exploration to Deterministic Control

This could become one of the most practical patterns for Physical AI.

An AI agent can explore a large number of possibilities and identify a better approach.

Once that approach has been validated, it can be converted into a predictable control process.

This creates a division of responsibility:

AI agent

→ Explore→ Analyze→ Optimize→ Recommend


Deterministic controller

→ Validate→ Enforce limits→ Execute→ Recover

This approach can provide some of the adaptability of AI without requiring a model to make a fresh safety-critical decision every time a machine moves.

Physical AI Needs an Authority Ladder

One of the biggest mistakes organizations could make is treating AI permission as a simple yes-or-no decision.

Physical authority should increase gradually.

A practical five-level model is:

1. Observe

The AI can read machine state, telemetry, documentation, and historical information.

It cannot initiate actions.

2. Recommend

The AI can suggest settings, procedures, or maintenance actions.

A qualified human reviews them before execution.

3. Simulate

The proposed action is tested in a digital twin, sandbox, or shadow environment before being applied to physical equipment.

4. Perform Reversible Actions

The AI can execute narrowly defined, low-risk actions when the system can reliably return to a safe state.

5. Perform Irreversible or Safety-Critical Actions

These actions should require explicit authorization, extensive validation, independent safety controls, and clearly assigned accountability.

The basic rule is:


The greater the physical consequence, the narrower the AI's authority should be.

An AI might be allowed to inspect an entire manufacturing line while only being permitted to modify one low-risk parameter within a tightly controlled range.

Human Approval Is Not Enough

Human oversight remains important, but it cannot be the only safety mechanism.

A person may not react quickly enough to:

  • A robotic collision

  • A pressure spike

  • An overheating system

  • An unstable process

  • A rapidly changing physical environment

For fast-moving physical failures, safety mechanisms need to operate without waiting for the AI or a human operator.

That means businesses should combine:

AI reasoning + deterministic policies + machine safety systems + human oversight.

Each layer should have a clearly defined role.

Building Safety Outside the Model

A reliable Physical AI architecture should separate flexible AI reasoning from non-negotiable safety controls.

The AI model can:

  • Interpret goals

  • Analyze information

  • Diagnose problems

  • Propose actions

  • Plan workflows


A separate policy layer should verify:

  • Who is requesting the action

  • Which device is involved

  • What operating mode the machine is in

  • Whether the requested action is permitted

  • Whether the requested parameters are within approved limits


Existing machine controllers and safety systems should enforce the hard physical boundaries.

Keep a Complete Audit Trail

When AI interacts with physical systems, a normal chat transcript isn't enough.

Organizations need to be able to reconstruct what happened.

For important actions, the system should capture:

  • Equipment state

  • Relevant sensor data

  • Requested commands

  • Executed commands

  • Model version

  • Prompt and policy versions

  • Hardware-driver versions

  • Human approvals and overrides

  • Safety-system responses

  • Physical outcomes

  • Recovery actions

  • Final system state

This information becomes valuable for incident investigation, quality assurance, compliance, security, and regression testing.

It also becomes particularly important when AI models, hardware drivers, or policies are updated.

Physical AI Requires Cross-Functional Ownership

No single team can manage the entire risk of Physical AI.

Different teams understand different parts of the system.

IT manages AI systems and identity.

OT teams understand industrial networks and machine controllers.

Safety engineers understand hazards and operating limits.

Security teams evaluate access and attack surfaces.

Quality teams determine acceptable outcomes.

Frontline operators understand physical exceptions that may never appear in technical documentation.

A successful Physical AI operating model therefore needs clearly assigned ownership for:

  • Authorization

  • Validation

  • Safety

  • Security

  • Incident response

  • Maintenance

  • Recovery

Questions to Ask Before Buying Physical AI Systems

Physical AI should be treated as a systems and operations decision, not simply an AI software purchase.

Before deploying an AI agent onto physical equipment, organizations should ask:

  • Which hardware functions can the AI access?

  • Can permissions be restricted by action, location, operating mode, and parameter range?

  • Are safety limits independently enforced?

  • Can every action be audited and replayed?

  • How are hardware drivers tested and updated?

  • What happens if sensors disagree?

  • What happens if the network fails?

  • What happens if the AI model becomes unavailable?

  • Can credentials be limited to a specific workflow?

  • How does the system integrate with existing safety infrastructure?

  • Which tasks actually require continuous AI reasoning?

  • Which workflows can eventually become deterministic?

These questions can reveal whether a Physical AI system is genuinely production-ready—or simply an impressive demonstration.

How to Run a 90-Day Physical AI Pilot

Organizations should avoid starting with their most dangerous or complicated process.

A better approach is to select one bounded workflow with clear outcomes, experienced operators, and existing safety controls.


Days 1–30: Observe

Start with read-only access.

Understand the equipment, workflow, hazards, data, and existing controls.

Days 30–45: Recommend

Allow the AI to analyze the process and recommend actions, while humans continue making the final decisions.

Days 45–60: Simulate

Test proposed actions using simulation, digital twins, or shadow-mode environments.

Include failure scenarios and unsafe requests.

Days 60–75: Controlled Execution

Allow the AI to perform narrowly scoped and reversible actions under deterministic limits.

Days 75–90: Validate and Decide

Test emergency stops, credential revocation, network failures, recovery procedures, and safe modes.

Only expand authority if predefined safety and performance thresholds are consistently met.

Measure the Right Things

A Physical AI pilot should not be judged only by model accuracy or token usage.

The more important metrics are physical and operational.

Track:

  • Integration time

  • Successful runs

  • Human intervention rate

  • False stops

  • Recovery time

  • Product quality

  • Yield

  • Downtime

  • Near misses

  • Cost per successful physical outcome

The ultimate question isn't:

"How intelligent is the AI?"

It is:

"Can the AI improve the physical process while remaining predictable, controllable, and safe?"

Physical AI Standards Are Also Evolving

The industry is beginning to develop frameworks around Physical AI.

The IEEE P4501 project, approved in May 2026, is developing a framework for Physical AI in manufacturing, covering areas such as reliability, precision, secure data governance, human-system interaction, and lifecycle requirements.

NIST's 2026 manufacturing AI workshop also highlighted challenges including:

  • Reliability

  • Safety

  • Fragmented standards

  • Lack of consistent performance metrics

These initiatives are still developing. They are not yet a replacement for an organization's own engineering and safety requirements.


But they show that Physical AI is moving from an experimental concept toward a broader industrial technology and governance problem.

The Future of Physical AI

Physical AI could fundamentally change how laboratories, factories, and other physical environments are automated.

Standardized interfaces could reduce the amount of custom integration required. AI agents could make complex equipment easier to operate. Research and manufacturing workflows could become more adaptive.


But giving an AI agent access to a machine is fundamentally different from giving it access to a database.

A wrong digital response can often be corrected.

A wrong physical action may not be reversible.


That is why the future of Physical AI should not be based on maximum autonomy.

It should be based on controlled autonomy.The Future of Physical AI

Physical AI could fundamentally change how laboratories, factories, and other physical environments are automated.


Standardized interfaces could reduce the amount of custom integration required. AI agents could make complex equipment easier to operate. Research and manufacturing workflows could become more adaptive.

But giving an AI agent access to a machine is fundamentally different from giving it access to a database.


A wrong digital response can often be corrected.

A wrong physical action may not be reversible.

That is why the future of Physical AI should not be based on maximum autonomy.

It should be based on controlled autonomy.

Conclusion

Physical AI is moving AI from digital screens into laboratories, factories, and real-world environments.

Standardized hardware interfaces can make this transition easier, but greater access must come with greater control.

Businesses should start with limited workflows, increase AI authority gradually, keep critical safety controls outside the model, and use deterministic systems wherever possible.

The goal is not to give AI unlimited physical authority. It is to build systems where AI can act intelligently while remaining safe, controlled, and accountable.

 
 
 

Recent Posts

See All
Data Agents in 2026: Why the Semantic Layer Matters

AI data agents are changing how businesses work with analytics. Instead of waiting for reports, employees can ask questions in natural language and receive insights, charts, and recommendations. But t

 
 
 

Comments


Curious about AI Agent?
bottom of page