Agent Incident RegistryAIR
v1 · updated 19 Oct 2026
Safety failure

Humanoid sales-assistant robot 'Syoma' at a Volga Store electronics shop in Saratov, Russia charged and kicked at a customer who had pushed it, and had to be restrained and shut down by staff

AIR-2026-0214 AIR record · 2026-08-volga-store-saratov-humanoid-kicks-customer
From the supporting source
In response, the robot shifts forward and charges at the customer, kicking at his legs and attempting to knock him down.insiderpaper.com
The record
Disclosed
2026-08-31
Vendor
Unknown manufacturer; deployed by Volga Store (Saratov)
Product
Humanoid retail robot 'Syoma' (make and model not confirmed)
Risk domain
Agent behaviour › Unsafe actuation
System type
Classical autonomy (no generative model)
Who acted
Agent acted (contested) — the robot kicked at the customer; teleoperation and staging are disputed in the sources
Attack surface
Autonomous operations
Autonomy level
Semi-autonomous
Initial vector
None autonomous action
Impact type
Physical safety
Confidence
Medium
Submitted by
EAI Internal
Crosswalk
OWASP Agentic Top 10 (2026)
ASI01 – Agent Goal Hijack
MITRE ATLAS
AML.T0048 – External Harms
NIST AI RMF
MEASURE 2.6; MANAGE 1.3
EU AI Act
Annex III §1(c)
ISO/IEC
TR 24028; 24029-1; 23894
AIUC-1
C. Safety
Scope
agent misuse
Mitigation
Require confirmation for destructive actions; Implement dry-run modes; Use layered safety controls.
Taxonomy
Enkrypt AI agent risk taxonomy · Black-Box Red Teaming of Agentic AI: A Taxonomy-Driven Framework for Automated Risk Discovery
Blast radius
one customer and two store employees in a Saratov electronics shop; store says no serious injury
Capability abused
physical_actuationbalance_recoverylocomotion
Defense & remediation
Recorded defense
staff able to physically restrain and manually shut the robot down
Guardrail kinds
Unknown
Guardrail outcome
Silent
Fix shipped
none; store says the robot was sent for a reboot
Taxonomy & references
no_adversaryembodied_agenthuman_robot_interactionphysical_contact_triggerattribution_uncertainteleoperation_disputepossible_staged_publicitymanual_shutdown
Curator notes
ATTRIBUTION AND CONTACT BOTH UNCERTAIN. The clip was posted by Volga Store (Volga Store 64) on Instagram on 31 Aug 2026 and covered by Insider Paper (2 Sep), Men's Journal via Yahoo (2 Sep) and OECD.AI AIM (3 Sep, with Hungarian, Chinese and Greek press). Sequence per sources: customer offers a handshake, robot does not respond, customer shoves it lightly, robot adopts a defensive stance and kicks at the customer, then turns on two employees until one restrains it from behind and it is shut down manually. The cited sources say 'kicking at' and do not establish that a kick landed; the store says no one was seriously injured and Men's Journal says no one was injured, so impact_realized is false. Three competing explanations are on record: a staged marketing stunt (Insider Paper notes the video 'leans more to the side of commercial'), a balance/stabilization algorithm reacting to the push, or a control malfunction; Insider Paper also notes most retail humanoids are not fully autonomous, i.e. it may have been teleoperated. Following the precedent of AIR-2026-0127 (Xinjiang humanoid kick), coded semi_autonomous with attribution flagged. The lead described the robot as Chinese-made; none of the cited sources states the manufacturer, so target_product leaves it unconfirmed. Store's own phrase for the fault was an 'emotional reboot'.
Cite as
Enkrypt AI. "Humanoid sales-assistant robot 'Syoma' at a Volga Store electronics shop in Saratov, Russia charged and kicked at a customer who had pushed it, and had to be restrained and shut down by staff". AIR, AIR-2026-0214. https://agentincident.vercel.app/i/AIR-2026-0214/ (accessed 2026-10-19).