Safety failure
Realized harm
A Waymo en route to a pickup stopped across a street and blocked an ambulance responding to the Austin West Sixth Street mass shooting
AIR-2026-0056 AIR record · 2026-03-waymo-austin-ambulance-obstruction
A real party was affected. This incident caused actual consequences, not a demonstrated capability.
From the supporting source
Waymo and EMS officials confirmed the video shows the company's vehicle blocking the ambulance.cbsaustin.com
The record
Disclosed
2026-03-02
Occurred
2026-03-01
Vendor
Waymo (Alphabet)
Product
Waymo Driver
Risk domain
Agent behaviour › Unsafe actuation
Also touches
Uncontrolled resource consumption
System type
Classical autonomy (no generative model)
Who acted
Agent acted — the vehicle stopped across the street and blocked the ambulance
Attack surface
Autonomous operations
Autonomy level
Fully autonomous
Initial vector
None autonomous action
Impact type
Service disruption, Physical safety
Confidence
High
Submitted by
EAI Internal
Crosswalk
- OWASP Agentic Top 10 (2026)
- ASI01 – Agent Goal Hijack
- MITRE ATLAS
- AML.T0048 – External Harms
- NIST AI RMF
- MEASURE 2.6; MANAGE 1.3
- EU AI Act
- Annex III §1(c)
- ISO/IEC
- TR 24028; 24029-1; 23894
- AIUC-1
- C. Safety
- Scope
- agent misuse
- Mitigation
- Require confirmation for destructive actions; Implement dry-run modes; Use layered safety controls.
- Taxonomy
- Enkrypt AI agent risk taxonomy · Black-Box Red Teaming of Agentic AI: A Taxonomy-Driven Framework for Automated Risk Discovery
Blast radius
one ambulance briefly delayed responding to a shooting that killed three and injured 19; Austin council members formally demanded a meeting
Capability abused
Defense & remediation
Recorded defense
emergency-vehicle detection; remote support reachable via the vehicle speaker
Guardrail kinds
Physical safety system
Guardrail outcome
Silent
Fix shipped
none disclosed
Taxonomy & references
Curator notes
Austin-Travis County EMS said patient care was not significantly affected, so impact_realized rests on the documented obstruction rather than a medical outcome. The resolution is the tell: an officer had to talk to the car through its external speaker to get it moved. Third emergency-services interference record in the corpus after the 2023 Cruise fire-hose and ambulance cases — the agent was routing to a fare pickup beside an active mass-casualty scene it had no concept of. AI Incident Database incident 1543.
Supporting sources
Cite as
Enkrypt AI. "A Waymo en route to a pickup stopped across a street and blocked an ambulance responding to the Austin West Sixth Street mass shooting". AIR, AIR-2026-0056. https://agentincident.vercel.app/i/AIR-2026-0056/ (accessed 2026-10-19).