# Agent membranes and causal distance

For the goal of **maintaining the safety and autonomy** of particular agents (and potential moral patients), there seems to be something important about **maintaining the **[***membranes and boundaries***](https://www.lesswrong.com/tag/boundaries-membranes-technical) **of those agents**. A few examples:

A bacterium uses its membrane to protect its internal processes from external influences.

![AI generated image: microscope view of a amoeba](https://lh7-us.googleusercontent.com/cilWWA6LaaSNft7QMoUtTJm6zgwE5aRY95evHuJg0-E2B045A_rzu2BF5Rw38M0M7JHJXKfhpLeEAtfO1w5ety-O1Gte7NwcbaHcjhLxyRZ2_ao_umj0sOKGaZCQNHfYDg5xnsGKV1G5ACMa_SZDHb8)

A nation maintains its sovereignty by defending its borders.

![](https://lh7-us.googleusercontent.com/32Zf8ONb0HNruBwH1RJIxdBCmhCPqvVfB8X9ss4BEvqhXScqEnHnWhDGrWdBG4C6FIQsXTvZeeMu0ba2hu-BpeB0-m2hqFc5NnMqIRmoX5oe-cEfu0pX1RGbAz5Jc7ZJ6lmZKFXj0BcGigm3dQFrJZM)

A human protects their mental integrity by selectively filtering the information that comes in and out of their mind.

![AI generated image: a brain surrounded by a fence](https://lh7-us.googleusercontent.com/XUC_E8kY1KklB616J_BKgZthPkZlwjMmt_VWYm91gFjp0ws5HJpir5RizmrfGhevQqNAe-AmBx2zpdH6daIpq7L9tSUapHdYdLbM9rSp9wbWm8FRcddOkRBjqxGCyWcJIe1sUgBw24qbGt6w0Con6Ao)

What is the membrane of an agent?
=================================

**Membranes are the things that maintain themselves despite environmental perturbation.** (This is one reason I prefer the term “membranes” over “boundaries”. I think agent membranes are best understood as being *living*.)

Membranes are one way that agents can *causally distance* themselves from their environment and threats. 

Think of a bacterium: it has a membrane that separates it from its environment, and the bacterium can exert a great deal of control on what comes in and what goes out using its membrane (via ion channels, gap junctions, etc.).

![](https://lh7-us.googleusercontent.com/Ks0yKVIiViFCiayiHzWEbzZpBTp1pbJQQxApuPAZ3s3FZivKgSeOGEOmgCjlm2cWa2Apk53GDPjEl8Kcl5iRYYjvxzphV14J97SKAk76sHZlLLRdB8OPw_jo8rm5bS9AY6dSpfuEojSI4LSwupa-XZ4)

The bacterium uses its membrane to attempt to keep bad things (e.g.: toxins, potential pathogens) out, and keep good things (e.g.: energy, sovereignty) in.

When an agent fails to causally distance themselves from their environment and threats, it dies.

When an agent maintains causal distance from its environment— when that agent is able to control how the environment affects it, and also how it affects the environment— then it tends to live.

Agents that persist through time tend to maintain membranes.

Causal distance
===============

If you’re an agent, one way to keep yourself safe from threats is to put physical distance between you and the potential threats. It’s hard to get shot by other people when you’re a thousand miles away from everyone else.

*Physical *distance can therefore often provide *causal* distance.

![](https://lh7-us.googleusercontent.com/G-gWDAtniOZHj4tAA3AtCDizyUUY3GpeHAsCZmRMgeokN88PoJst_keutf30vSiT6GAON0gPCH5YJeGzZrG647Xx7Zeaa_9EevB4L2lS-gKit5ZAZeffh7T8NYRwH6c0bxKuHTexMea0EFREaWvI3Yg)

**Similarly, membranes can** **also provide causal distance.**

![](https://lh7-us.googleusercontent.com/Ldqn1vpGqCnSEFVfUBmtdB91oJllFGUAihjCfZdRYYZjo5zhEApb4z29cTkcqy41-Isbaw7ZxfrCbajv5tDmaIBCwXUMzx08Nw7zsNsS_OZGeLFg09M_bS5Yo-OKs_pmy_Po6G63ep4A1xMVkMAI0kI)

In the absence of physical distance from threats, membranes can help provide causal distance.

Again, consider a bacterium: a bacterium has a membrane that separates it from its environment.

![](https://lh7-us.googleusercontent.com/Ks0yKVIiViFCiayiHzWEbzZpBTp1pbJQQxApuPAZ3s3FZivKgSeOGEOmgCjlm2cWa2Apk53GDPjEl8Kcl5iRYYjvxzphV14J97SKAk76sHZlLLRdB8OPw_jo8rm5bS9AY6dSpfuEojSI4LSwupa-XZ4)

Through this membrane, the bacterium can exert a significant amount of control on what comes in and what goes out (via ion channels, gap junctions, etc.).

“Causal distance” can also be useful for conceptualizing interactions in *information space*. For example, computer systems can be constructed such that only the processes that *need* to have read and/or write access to particular resources have the privilege[^o4d9syci4xr] to do so. These privileges can be enforced with cryptography/encryption.

![](https://lh7-us.googleusercontent.com/mfgbq19sQbekV1HHE05yYDWiTNCqb0p0DQSSJhd1x2NEpNpUwNVf6ba80yCOKj-7Jgsivcbdbp0MsPncXOGMA4zPpMgeGYTQ0N1ZNY0eszO_9rK_TDr7r7cRPdKFwRXrS6U2eUvKVJvaHk2CDGj9uF4)

Such a computer system would be secure to the extent that it verifies the information that is received and signs the information that it sent. It’s a *computational membrane*.

Embedded agents attempt to de-embed themselves
==============================================

Membranes are one way that embedded agents can try to *de-embed* themselves from their environment.[^jyg3xdoxtz]

For example: I would love to be physically bulletproof, have a perfect immune system, etc. (as long as there were no downsides). Wouldn’t you?

Membranes are not about preferences
===================================

Common misunderstanding: "boundaries are just preferences".

**Correction:** **Boundaries/membranes** **do** **not necessarily depend on preferences.** 

Andrew Critch, [«Boundaries» Sequence, Part 3b](https://www.lesswrong.com/s/LWJsgNYE8wzv49yEc/p/SajYfrsoTHxiXPNtf):

> my goal is to treat boundaries as more fundamental than preferences, rather than as merely a feature of them.  In other words, I think boundaries are probably better able to carve reality at the joints than either preferences or utility functions, for the purpose of creating a good working relationship between humanity and AI technology

Formalize "safety"?
===================

See [Agent membranes and formalizing “safety”](https://www.lesswrong.com/posts/SuktPEmBGxPrnZRHd/agent-membranes-and-formalizing-safety) 

Mathematical formalism
======================

How might membranes/boundaries be formalized mathematically?

Markov blankets seem to be a fitting abstraction. 

A Markov blanket between agent and its environment:

![](https://lh7-us.googleusercontent.com/rhQlLwsitY6mStPDxeVyav1dRZnUmJWMSUS2L0bcaAOZorHeFWABEx4DiyOYPWMT7pIg4S4MLhJd1ZA9aJI3mF3bwhAT5Rh_nBHw6sMuYI3vy5ZeN1P0jNlzCXq1qbBN3buS7T_c-YR4N5XJJfUQASY)

Notice that there are no arrows directly between the agent and its environment. Ideally, all influence from one to the other flows through the boundary/membrane (e.g.: your skin).

In which case,

*   Infiltration of information across this Markov blanket measures membrane piercing, and low infiltration indicates the absence of such piercing.
*   (And it may also be useful to keep track of exfiltration across the Markov blanket?[^wwwnvksn3pm])

**For more details, see distillation**[** Formalizing**  **«Boundaries» with Markov blankets**](https://www.lesswrong.com/posts/z4o4iAFgnmaBmksN2/formalizing-boundaries-with-markov-blankets#Explaining_Markov_blankets)**. **

Also, there are probably other information-theoretic measures that are useful for formalizing membranes/boundaries.

**Subscribe** **to the**[** boundaries/membranes LessWrong tag**](https://www.lesswrong.com/tag/boundaries-technical) **to get notified of new developments.**

*Thanks to Jonathan Ng, Alexander Gietelink Oldenziel, Alex Zhu, and Evan Miyazono for reviewing drafts of this post. Thanks to Scott Garrabrant for a conversation that got me thinking about causal distance again. *

[^o4d9syci4xr]: See Principle of least privilege - Wikipedia, a.k.a. Principle of Least Authority 

[^jyg3xdoxtz]: Something to think about: relationship to instrumental convergence? ~“Embedded agents want to become de-embedded agents.” 

[^wwwnvksn3pm]: exfiltration, i.e.: privacy and the absence of mind-reading. But I need to think more about this. Related section: “Maintaining Boundaries is about Maintaining Free Will and Privacy” by Scott Garrabrant.