LLM-Powered AI Agents with Autonomous Executive Capacity and the Limits of Liability Attribution in Continental Private Law
DOI:
https://doi.org/10.26422/RJA.2026.0701.zagKeywords:
large language models, non-contractual liability, prompt injection, legal attribution, non-deliberative executive agencyAbstract
Continental private law allocates liability on the basis of the distinction between persons and things. The emergence of large language model (LLM)-powered AI agents capable of autonomously performing actions in real-world digital environments, however, calls into question the adequacy of these traditional categories. This article examines whether classical doctrines of liability attribution remain conceptually adequate in light of the operational characteristics of such agents and evaluates the viability of a framework of limited technical subjectivity for allocating patrimonial losses arising from their conduct. Through a doctrinal and comparative analysis of continental liability regimes, the study finds that traditional forms of indirect liability face structural limitations stemming from the agent’s lack of deliberative capacity, the impracticability of continuous human oversight, and their susceptibility to external instructional manipulation. To address this functional gap, the article proposes a regime of limited technical subjectivity based on a segregated asset pool and a tiered liability structure. The findings suggest that existing liability doctrines are ill-equipped to address harms generated by autonomous AI agents and that the proposed framework provides a coherent mechanism for risk allocation while preserving the foundational architecture of private law.
Downloads
References
Ayres, I. y Balkin, J. M. (2024). The law of AI is the law of risky agents without intentions. University of Chicago Law Review Online. https://doi.org/10.2139/ssrn.4862025
Chacko, S. J., Biswas, S., Islam, C. M., Liza, F. T. y Liu, X. (2026). Adversarial attacks on large language models using regularized relaxation. Information Sciences, 736, 123112. https://doi.org/10.1016/j.ins.2026.123112
Díez-Picazo, L. (1999). Derecho de daños. Civitas.
Ferrag, M. A., Tihanyi, N., Hamouda, D., Maglaras, L., Lakas, A. y Debbah, M. (2026). From prompt injections to protocol exploits: Threats in LLM-powered AI agents workflows. ICT Express, 12(2), 353-383. https://doi.org/10.1016/j.icte.2025.12.001
Ferrara, F. (1929). Teoría de las personas jurídicas (Trad. E. Ovejero y Maury). Reus.
Geng, T., Xu, Z., Qu, Y. y Wong, W. E. (2026). Prompt injection attacks on large language models: A survey of attack methods, root causes, and defense strategies. Computers, Materials & Continua, 87(1). https://doi.org/10.32604/cmc.2025.074081
Gierke, O. von. (1895). Das deutsche Genossenschaftsrecht (Vol. 1). Weidmann.
Greshake, K., Abdelnabi, S., Mishra, S., Endres, C., Holz, T. y Fritz, M. (2023). Not what you’ve signed up for: Compromising real-world LLM-integrated applications with indirect prompt injections. En Proceedings of the 16th ACM Workshop on Artificial Intelligence and Security (AISec). ACM. https://doi.org/10.1145/3605764.3623985
Herbosch, M. (2025). Liability for AI agents. North Carolina Journal of Law & Technology, 26(3), 391-458. https://doi.org/10.2139/ssrn.5236649
Irti, N. (2001). Norma e luoghi: Problemi di geo-diritto. Laterza.
Kannegieter, T. (2026). Nondeterministic torts: A technical approach to AI liability. Yale Law Journal, 135. https://doi.org/10.2139/ssrn.5208155
Kelsen, H. (1960). Reine Rechtslehre (2a ed.). Franz Deuticke.
Kolt, N. (2025). Governing AI agents. Notre Dame Law Review, 101. https://doi.org/10.2139/ssrn.4772956
Lantyer, V. (2026). Prompt injection in court filings: Generative AI in the Brazilian judiciary, algorithmic procedural bad faith, and the limits of legal sanction. SSRN Electronic Journal. https://doi.org/10.2139/ssrn.6762100
Mirsky, R. (2025). Artificial intelligent disobedience: Rethinking the agency of our artificial teammates. AI Magazine, 46(1), e70011. https://doi.org/10.1002/aaai.70011
Pérez Escolar, M. (2025). Personalidad jurídica e inteligencia artificial: Fundamentos de asimilaciones imposibles. InDret, 3, 39-66. https://doi.org/10.31009/InDret.2025.i3.02
Savigny, F. C. von. (1840). System des heutigen Römischen Rechts (Vol. 2). Veit.
Shapira, N., Wendler, C., Yen, A., Sarti, G., Pal, K., Floody, O., Belfki, A Loftus, A., Ratan Jannali, A., Prakash, N., Cui, J., Rogers, G., Brinkmann, J., Rager, C., Zur, A., Ripa, M., Sankaranarayanan, A., Atkinson, D., Gandikota, R., … Bau, B. (2026). Agents of chaos (arXiv:2602.20021). arXiv. https://doi.org/10.48550/arXiv.2602.20021
Solum, L. B. (1992). Legal personhood for artificial intelligences. North Carolina Law Review, 70(4), 1231-1287. https://scholarship.law.unc.edu/nclr/vol70/iss4/4
Tassone, B. (2023). Riflessioni su intelligenza artificiale e soggettività giuridica. Diritto di Internet, 2, 1-20. https://hdl.handle.net/20.500.12606/5563
Teubner, G. (2006). Rights of non-humans? Electronic agents and animals as new actors in politics and law. Journal of Law and Society, 33(4), 497-521. https://doi.org/10.1111/j.1467-6478.2006.00368.x
Downloads
Published
Issue
Section
License
Copyright (c) 2026 Fernando A. Ramos-Zaga

This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.
License Creative Commons Atribución-NoComercial-SinDerivadas 4.0 Internacional (CC BY-NC-ND 4.0).
This license allows the copy, distribution, exhibition and representation of the work provided authorship is acknowledged and the work is properly quoted. Commercial use of the original work or the generation of derived works are not allowed.
The authors hereby guarantee the right to the first publication of the work to the Revista Jurídica Austral.










































