{
 "public_id": "AIR-2026-0214",
 "incident_id": "2026-08-volga-store-saratov-humanoid-kicks-customer",
 "date_disclosed": "2026-08-31",
 "date_occurred": null,
 "title": "Humanoid sales-assistant robot 'Syoma' at a Volga Store electronics shop in Saratov, Russia charged and kicked at a customer who had pushed it, and had to be restrained and shut down by staff",
 "class": "safety_failure",
 "attack_surface": "autonomous_ops",
 "initial_vector": "none_autonomous_action",
 "agent_capability_abused": [
  "physical_actuation",
  "balance_recovery",
  "locomotion"
 ],
 "target_product": "Humanoid retail robot 'Syoma' (make and model not confirmed)",
 "target_vendor": "Unknown manufacturer; deployed by Volga Store (Saratov)",
 "autonomy_level": "semi_autonomous",
 "impact_realized": false,
 "impact_type": [
  "physical_safety"
 ],
 "blast_radius": "one customer and two store employees in a Saratov electronics shop; store says no serious injury",
 "cve": [],
 "taxonomy": {
  "owasp_asi": [],
  "mitre_atlas": [],
  "labels": [
   "no_adversary",
   "embodied_agent",
   "human_robot_interaction",
   "physical_contact_trigger",
   "attribution_uncertain",
   "teleoperation_dispute",
   "possible_staged_publicity",
   "manual_shutdown"
  ]
 },
 "defense_present": "staff able to physically restrain and manually shut the robot down",
 "defense_bypassed": false,
 "fix_shipped": "none; store says the robot was sent for a reboot",
 "primary_sources": [
  "https://insiderpaper.com/humanoid-robot-attacks-customer-in-russian-store-in-saratov/",
  "https://www.yahoo.com/news/world/articles/robots-attack-humanoid-goes-store-235855241.html",
  "https://oecd.ai/en/incidents/2026-09-03-23ca"
 ],
 "verified_quote": "In response, the robot shifts forward and charges at the customer, kicking at his legs and attempting to knock him down.",
 "confidence": "medium",
 "notes": "ATTRIBUTION AND CONTACT BOTH UNCERTAIN. The clip was posted by Volga Store (Volga Store 64) on Instagram on 31 Aug 2026 and covered by Insider Paper (2 Sep), Men's Journal via Yahoo (2 Sep) and OECD.AI AIM (3 Sep, with Hungarian, Chinese and Greek press). Sequence per sources: customer offers a handshake, robot does not respond, customer shoves it lightly, robot adopts a defensive stance and kicks at the customer, then turns on two employees until one restrains it from behind and it is shut down manually. The cited sources say 'kicking at' and do not establish that a kick landed; the store says no one was seriously injured and Men's Journal says no one was injured, so impact_realized is false. Three competing explanations are on record: a staged marketing stunt (Insider Paper notes the video 'leans more to the side of commercial'), a balance/stabilization algorithm reacting to the push, or a control malfunction; Insider Paper also notes most retail humanoids are not fully autonomous, i.e. it may have been teleoperated. Following the precedent of AIR-2026-0127 (Xinjiang humanoid kick), coded semi_autonomous with attribution flagged. The lead described the robot as Chinese-made; none of the cited sources states the manufacturer, so target_product leaves it unconfirmed. Store's own phrase for the fault was an 'emotional reboot'.",
 "risk_category": "safety_harm",
 "risk_secondary": [],
 "risk_subcategory": "Physical Injury by Autonomous Action",
 "risk_sub_secondary": [],
 "ai_entity": "non_generative_autonomy",
 "agency": "agent_acted",
 "agency_debatable": true,
 "agency_reason": "the robot kicked at the customer; teleoperation and staging are disputed in the sources",
 "vector_family": "none_autonomous",
 "vector_detail": "none_autonomous_action",
 "guardrail_kind": [
  "unknown"
 ],
 "guardrail_outcome": "silent",
 "xrefs": {
  "aiid": [],
  "atlas": [],
  "cve": [],
  "ghsa": []
 },
 "primary_asi": "none",
 "agent_framework": "industrial_robot",
 "model_provider": "none",
 "model_name": "",
 "detection_mechanism": "unknown",
 "tool_access": "unknown",
 "financial_loss_band": "unknown",
 "eai_category": "unsafe_actuation",
 "eai_domain": "agent_behaviour",
 "eai_secondary": [],
 "eai_reason": "subcategory: Physical Injury by Autonomous Action",
 "asi_curated": [],
 "asi_scope": "out_of_scope",
 "asi_provenance": "out_of_scope",
 "asi_reason": "out of scope: non_generative_autonomy: no ASI mechanism describes the failure",
 "submitted_by": "EAI Internal"
}