Loading
What changed between revision 1 and revision 2, compared over the article's markdown source with its frontmatter — so a change to status, evidence or reversibility shows up as the edit it is.
Older · revision 1
Import· initial corpus import, not an edit
Initial import of content/engineered-pandemics.md — the filesystem corpus, unchanged. Not an edit.
16.1 kB
Revision 1
Revision 2
lines 7–13 → 7–136 unchanged lines not shown
categories: ["society", "genetics"]categories: ["society", "genetics"]tags: ["biosecurity", "pandemics", "gain of function", "governance", "catastrophic risk", "synthetic biology"]tags: ["biosecurity", "pandemics", "gain of function", "governance", "catastrophic risk", "synthetic biology"]summary: "Outbreaks caused by a pathogen deliberately modified, synthesised, or released rather than one that emerged from nature, and the biosecurity programme built around preventing them."summary: "Outbreaks caused by a pathogen deliberately modified, synthesised, or released rather than one that emerged from nature, and the biosecurity programme built around preventing them."updated: "2026-07-28"updated: "2026-10-29"humanEvidence: "No engineered pathogen has caused a pandemic; the documented toll from deliberate or accidental release runs to dozens of deaths, chiefly the 1979 Sverdlovsk anthrax escape and the 2001 anthrax letters."humanEvidence: "No engineered pathogen has caused a pandemic; the documented toll from deliberate or accidental release runs to dozens of deaths, chiefly the 1979 Sverdlovsk anthrax escape and the 2001 anthrax letters."access: "The enabling inputs are ordinary: pathogen sequences are published, synthetic DNA is a commercial service, and order screening is voluntary in most jurisdictions."access: "The enabling inputs are ordinary: pathogen sequences are published, synthetic DNA is a commercial service, and order screening is voluntary in most jurisdictions."reversibility: "irreversible"reversibility: "irreversible"lines 20–26 → 20–266 unchanged lines not shown
"rows": [ "rows": [ { "label": "Events on record", "value": "None" }, { "label": "Events on record", "value": "None" }, { "label": "Nearest precedents", "value": "Sverdlovsk 1979, anthrax letters 2001" }, { "label": "Nearest precedents", "value": "Sverdlovsk 1979, anthrax letters 2001" }, { "label": "Defining research episode", "value": "H5N1 ferret transmissibility, 2011–2012" }, { "label": "Defining research episode", "value": "H5N1 ferret transmissibility, 2011-2012" }, { "label": "Treaty basis", "value": "Biological Weapons Convention, 1972" }, { "label": "Treaty basis", "value": "Biological Weapons Convention, 1972" }, { "label": "Verification mechanism", "value": "None" }, { "label": "Verification mechanism", "value": "None" }, { "label": "Current US policy", "value": "Executive Order 14292, 2025" }, { "label": "Current US policy", "value": "Executive Order 14292, 2025" },lines 29–43 → 29–432 unchanged lines not shown
}}`````` **Engineered pandemics** are outbreaks caused by a pathogen that has been deliberately modified, deliberately built from a published sequence, or deliberately released, rather than one that crossed into humans from an animal reservoir. No such event is known to have happened. The category is nonetheless treated as one of the more plausible routes to a global catastrophe, for three reasons that are structural rather than speculative: the agent replicates on its own, the enabling knowledge is published and cannot be recalled, and the cost of the underlying techniques has fallen by orders of magnitude while the number of people able to use them has risen.**Engineered pandemics** are outbreaks caused by a pathogen that has been deliberately modified, deliberately built from a published sequence, or deliberately released, rather than one that crossed into humans from an animal reservoir. No such event is known to have happened. The category is nonetheless treated as one of the more plausible routes to a global catastrophe, on structural grounds: the agent replicates on its own, the enabling knowledge is published and cannot be recalled, and the cost of the underlying techniques has fallen by orders of magnitude while the number of people able to use them has risen. ## What would make a pathogen pandemic-capable## What would make a pathogen pandemic-capable Natural selection optimises pathogens for transmission, not for lethality, and the two usually trade against each other: an agent that incapacitates its host quickly spreads less. The combinations that concern biosecurity analysts are the ones evolution rarely assembles and an engineer might. Long presymptomatic infectiousness paired with high case fatality is the standard example. Resistance to existing vaccines and antivirals is another, and it is the one that turns a manageable agent into an unmanageable one without changing its biology much.Natural selection optimises pathogens for transmission, not for lethality, and the two usually trade against each other: an agent that incapacitates its host quickly spreads less. Biosecurity analysts are concerned with the combinations that evolution rarely assembles and an engineer might. The standard example is long presymptomatic infectiousness paired with high case fatality. Resistance to existing vaccines and antivirals is a second, and it turns a manageable agent into an unmanageable one without changing its biology much. Whether such a combination can actually be built is not established. What has been shown is narrower and still significant: that a specific barrier to mammalian airborne transmission can be crossed deliberately. Two laboratories in 2011 and 2012 produced avian H5N1 influenza variants that spread between ferrets by respiratory droplet, identifying a small number of amino acid substitutions that sufficed.[^herfst2012] The transmissible viruses were not more lethal in that model, and they remained sensitive to oseltamivir. The result nonetheless established that the property most relevant to pandemic potential is engineerable, and it did so in the open literature.Whether such a combination can actually be built is not established. The demonstrated result is narrower: a specific barrier to mammalian airborne transmission can be crossed deliberately. Two laboratories in 2011 and 2012 produced avian H5N1 influenza variants that spread between ferrets by respiratory droplet, identifying a small number of amino acid substitutions that sufficed.[^herfst2012] The transmissible viruses were not more lethal in that model, and they remained sensitive to oseltamivir. Even so, the work established in the open literature that the property most relevant to pandemic potential can be engineered. Mortality in respiratory pandemics also concentrates steeply by age, tracking the decline in immune function described under [[immunosenescence]], which means the burden of any such event would fall on the same population that most other risk analysis in this wiki treats as the beneficiary of longer life.Mortality in respiratory pandemics also concentrates steeply by age, tracking the decline in immune function described under [[immunosenescence]], so the burden of any such event would fall on the same population that most other risk analysis in this wiki treats as the beneficiary of longer life. ## The record so far## The record so far lines 48–95 → 48–954 unchanged lines not shown
{ "year": "1984", "title": "The Dalles", "text": "Members of an Oregon commune contaminate restaurant salad bars with Salmonella, sickening at least 751 people. It remains the largest bioterrorist attack in US history and used a food-borne organism, not a transmissible one." }, { "year": "1984", "title": "The Dalles", "text": "Members of an Oregon commune contaminate restaurant salad bars with Salmonella, sickening at least 751 people. It remains the largest bioterrorist attack in US history and used a food-borne organism, not a transmissible one." }, { "year": "2001", "title": "Anthrax letters", "text": "Spores mailed within the United States kill five people and infect seventeen. The FBI concluded the material originated in a US biodefence laboratory." }, { "year": "2001", "title": "Anthrax letters", "text": "Spores mailed within the United States kill five people and infect seventeen. The FBI concluded the material originated in a US biodefence laboratory." }, { "year": "2002", "title": "Poliovirus assembled from mail-order DNA", "text": "A team reconstructs infectious poliovirus from published sequence and commercially ordered fragments, showing a virus can be rebuilt without a natural sample." }, { "year": "2002", "title": "Poliovirus assembled from mail-order DNA", "text": "A team reconstructs infectious poliovirus from published sequence and commercially ordered fragments, showing a virus can be rebuilt without a natural sample." }, { "year": "2011–2012", "title": "H5N1 transmissibility", "text": "Ferret-transmissible avian influenza variants are made in two laboratories. A US advisory board recommends redacting the methods, then reverses; the papers appear in full." }, { "year": "2011-2012", "title": "H5N1 transmissibility", "text": "Ferret-transmissible avian influenza variants are made in two laboratories. A US advisory board recommends redacting the methods, then reverses; the papers appear in full." }, { "year": "2018", "title": "Horsepox", "text": "A Canadian group synthesises horsepox virus, a relative of smallpox, from chemically synthesised DNA fragments at modest cost." }, { "year": "2018", "title": "Horsepox", "text": "A Canadian group synthesises horsepox virus, a relative of smallpox, from chemically synthesised DNA fragments at modest cost." }, { "year": "2025", "title": "US pause on dangerous gain-of-function work", "text": "An executive order halts federally funded research that would make a pathogen more transmissible or harder to counter, superseding the previous year's oversight policy." } { "year": "2025", "title": "US pause on dangerous gain-of-function work", "text": "An executive order halts federally funded research that would make a pathogen more transmissible or harder to counter, superseding the previous year's oversight policy." }]]`````` Two patterns run through this record. The deadly events came from state facilities: the Sverdlovsk aerosol killed at least 66 people,[^meselson1994] and the 2001 letters used material the FBI traced to a US biodefence laboratory. The largest non-state attack on record made at least 751 people ill and killed nobody,[^torok1997] and the other serious attempt was technically limited: the Aum Shinrikyo cult sprayed an anthrax preparation over Tokyo without producing a single case, having cultured a vaccine strain. Against that, the capability those attempts lacked is exactly the capability that has since become cheap.Two patterns run through this record. The deadly events came from state facilities: the Sverdlovsk aerosol killed at least 66 people,[^meselson1994] and the 2001 letters used material the FBI traced to a US biodefence laboratory. The largest non-state attack on record made at least 751 people ill and killed nobody,[^torok1997] and the other serious attempt was technically limited: the Aum Shinrikyo cult sprayed an anthrax preparation over Tokyo without producing a single case because it had cultured a vaccine strain. The capability those attempts lacked is the one that has since become cheap. ## The routes## The routes **State programmes.** These have produced the only demonstrated mass-casualty capability. The Biological Weapons Convention prohibits them,[^bwc1972] and the Soviet Union ran one of the largest on record while a party to it, which is documented history rather than inference.**State programmes.** These have produced the only demonstrated mass-casualty capability. The Biological Weapons Convention prohibits them,[^bwc1972] and the Soviet Union ran one of the largest on record while a party to it, a matter of documented history rather than inference. **Non-state actors.** The historical base rate of success is zero and the historical base rate of attempts is not. Analysts who take this route seriously argue that the relevant question is not how many groups want to cause mass casualties but how much skill the least skilled of them now needs. The amateur culture surveyed under [[biohacking]] is usually invoked here, although its documented output is closer to insulin production and self-administered [[crispr-cas9|CRISPR]] constructs than to anything pathogenic.**Non-state actors.** Attempts are on the record and successes are not. Analysts who take this route seriously argue that the question to ask is how much skill the least skilled group intent on mass casualties now needs, rather than how many such groups there are. The amateur culture surveyed under [[biohacking]] is usually invoked here, although its documented output is closer to insulin production and self-administered [[crispr-cas9|CRISPR]] constructs than to anything pathogenic. **Laboratory accident.** Laboratory-acquired infections are documented regularly, and the origin of the COVID-19 pandemic remains genuinely unresolved in mainstream scientific opinion, with both zoonotic and research-related hypotheses still argued by serious people. Whichever is correct, the dispute itself has done more to shape biosafety policy than any deliberate-release scenario.**Laboratory accident.** Laboratory-acquired infections are documented regularly, and the origin of the COVID-19 pandemic remains unresolved in mainstream scientific opinion, with both zoonotic and research-related hypotheses still argued by serious people. Whichever is correct, the dispute has done more to shape biosafety policy than any deliberate-release scenario. **Research on enhanced pathogens.** The category the H5N1 episode created, covered in full under [[dual-use-research]], is the one place where the risk is generated by people trying to reduce it.**Research on enhanced pathogens.** The category the H5N1 episode created, covered in full under [[dual-use-research]], is the one place where the risk is generated by people trying to reduce it. **Assistance from AI systems.** Students without laboratory training, working with chatbots for an hour, were able to elicit candidate pandemic pathogens, reverse-genetics routes to obtaining them, and the names of synthesis providers unlikely to screen orders.[^soice2023] A red-team study run at RAND the following year found no statistically significant difference in the viability of biological attack plans produced with and without large language models.[^mouton2024] Both results are usually cited as though they settle the question; neither does. The design capability demonstrated in protein and sequence design work such as [[ai-protein-design]] is a separate concern from the tutoring capability these two studies measured.**Assistance from AI systems.** Students without laboratory training, working with chatbots for an hour, were able to elicit candidate pandemic pathogens, reverse-genetics routes to obtaining them, and the names of synthesis providers unlikely to screen orders.[^soice2023] A red-team study run at RAND the following year found no statistically significant difference in the viability of biological attack plans produced with and without large language models.[^mouton2024] Both results are often cited as settling the question, and neither does. The design capability demonstrated in protein and sequence design work such as [[ai-protein-design]] is a separate concern from the tutoring capability these two studies measured. ## Plausibility## Plausibility There is no frequency to extrapolate from, so every estimate is a judgement. Toby Ord's stated credence in *The Precipice* puts engineered pandemics among the largest anthropogenic existential risks of this century, above natural pandemics by a wide margin, and he presents the figure as his own credence rather than a calculation.[^ord2020] Kevin Esvelt has argued that within about a decade tens of thousands of people will have the knowledge to cause a pandemic single-handedly, which is a claim about the diffusion of capability rather than about intent.[^esvelt2022] Neither figure is a measurement, and the wider field of [[existential-risk]] analysis contains no agreed method for producing one. What can be said without a number is that the risk sits in the same structural class as the self-spreading constructs of [[gene-drive|gene drives]] and the hypothetical organisms of [[mirror-life]], and that it is the closest real analogue to the hypothetical [[nick-bostrom|Bostrom]] uses in the vulnerable world hypothesis, a technology cheap enough to be widely available and destructive enough that a single user matters.There is no frequency to extrapolate from, so every estimate is a judgement. Toby Ord's stated credence in *The Precipice* puts engineered pandemics among the largest anthropogenic existential risks of this century, above natural pandemics by a wide margin, and he presents the figure as his own credence rather than a calculation.[^ord2020] Kevin Esvelt has argued that within about a decade tens of thousands of people will have the knowledge to cause a pandemic single-handedly, which is a claim about the diffusion of capability rather than about intent.[^esvelt2022] Neither figure is a measurement, and the wider field of [[existential-risk]] analysis contains no agreed method for producing one. Without a number, the risk can still be placed in the same structural class as the self-spreading constructs of [[gene-drive|gene drives]] and the hypothetical organisms of [[mirror-life]], and that it is the closest real analogue to the hypothetical [[nick-bostrom|Bostrom]] uses in the vulnerable world hypothesis, a technology cheap enough to be widely available and destructive enough that a single user matters. > [!debate] Is capability the binding constraint?> [!debate] Is capability the binding constraint?> One camp holds that tacit laboratory skill, working materials, and the difficulty of aerosolisation remain formidable, and points to the RAND null result and to the consistent failure of non-state attempts. The other holds that these barriers are exactly the ones automation, protocol publication, and contract research organisations are dismantling, and that a red-team exercise with a fixed scenario cannot measure a capability that has not been reached yet. The disagreement is about the shape of a trend, not about any observed event, and it is unlikely to be resolved by evidence before the fact.> One camp holds that tacit laboratory skill, working materials, and the difficulty of aerosolisation remain formidable, and points to the RAND null result and to the consistent failure of non-state attempts. The other holds that these barriers are exactly the ones automation, protocol publication, and contract research organisations are dismantling, and that a red-team exercise with a fixed scenario cannot measure a capability that has not been reached yet. The disagreement concerns the shape of a trend rather than any observed event, and evidence is unlikely to settle it before the fact. ## Mitigation## Mitigation The standard framing separates three lines of defence. **Delay** covers everything that slows the spread of capability: screening synthetic DNA orders against hazardous sequences, which is voluntary in most jurisdictions and performed by a subset of providers; withholding methods that would enhance transmissibility; and export controls. **Detect** covers surveillance designed to identify an unknown agent rather than a known one, principally metagenomic sequencing of wastewater and travel hubs, on the reasoning that a stealth pathogen would be recognised too late by clinical reporting. **Defend** covers stockpiled protective equipment, air treatment, and rapid countermeasure platforms.[^esvelt2022]The standard framing separates three lines of defence. **Delay** covers everything that slows the spread of capability: screening synthetic DNA orders against hazardous sequences, which is voluntary in most jurisdictions and performed by a subset of providers; withholding methods that would enhance transmissibility; and export controls. **Detect** covers surveillance designed to identify an unknown agent rather than a known one, principally metagenomic sequencing of wastewater and travel hubs, on the reasoning that a stealth pathogen would be recognised too late by clinical reporting. **Defend** covers stockpiled protective equipment, air treatment, and rapid countermeasure platforms.[^esvelt2022] The third line is where the most has changed. The vaccine timeline achieved in 2020 using [[lipid-nanoparticles|lipid nanoparticle]] delivery was unprecedented and would still have been far too slow against a pathogen with a long presymptomatic phase. That asymmetry is the argument for weighting detection and physical protection over medical countermeasures, and it is a rare case where the cheapest interventions are also the most robust.The third line is where the most has changed. The vaccine timeline achieved in 2020 using [[lipid-nanoparticles|lipid nanoparticle]] delivery was unprecedented and would still have been far too slow against a pathogen with a long presymptomatic phase. That asymmetry is the argument for weighting detection and physical protection over medical countermeasures, and in this case the cheapest interventions are also the most dependable. ## Governance## Governance The Biological Weapons Convention prohibits development, production and stockpiling, has broad membership, and cannot verify anything. Six years of negotiation toward a verification protocol collapsed in 2001 when the United States rejected the draft, and no binding successor has been attempted since. What exists instead is a patchwork of national oversight policies, institutional review, journal norms, and voluntary industry screening, none of which binds a determined state and all of which depend on the compliance of the people they govern. It is a weaker regime than the one described under [[governance-of-genome-editing]], and for the same underlying reason: the equipment is ordinary and the jurisdictions are many. Engineered biocontainment of the kind proposed for [[recoded-organisms]] is one of the few technical rather than legal answers on offer, and it applies to laboratory strains rather than to a pathogen someone intends to release.The Biological Weapons Convention prohibits development, production and stockpiling, has broad membership, and cannot verify anything. Six years of negotiation toward a verification protocol collapsed in 2001 when the United States rejected the draft, and no binding successor has been attempted since. In its place sits a patchwork of national oversight policies, institutional review, journal norms, and voluntary industry screening. None of it binds a determined state, and all of it depends on the compliance of the people it governs. The regime is weaker than the one described under [[governance-of-genome-editing]], for the same underlying reason: the equipment is ordinary and the jurisdictions are many. Engineered biocontainment of the kind proposed for [[recoded-organisms]] is one of the few technical rather than legal answers on offer, and it applies to laboratory strains rather than to a pathogen someone intends to release. The United States has moved twice in quick succession: a unified oversight policy for dual-use research and pandemic-potential pathogens in 2024, then Executive Order 14292 in 2025, which paused federally funded work meeting a definition of dangerous gain-of-function research and directed a replacement policy.[^eo14292] The pattern of rapid reversal is itself the governance problem in miniature. A field in which the rules change with an administration cannot support the long-term coordination that the [[differential-technological-development|sequencing argument]] and the [[asilomar-conference|Asilomar]] precedent both assume, and unilateral restriction moves work rather than stopping it.The United States has moved twice in quick succession: a unified oversight policy for dual-use research and pandemic-potential pathogens in 2024, then Executive Order 14292 in 2025, which paused federally funded work meeting a definition of dangerous gain-of-function research and directed a replacement policy.[^eo14292] That pace of reversal is part of the governance problem. A field in which the rules change with an administration cannot support the long-term coordination that the [[differential-technological-development|sequencing argument]] and the [[asilomar-conference|Asilomar]] precedent both assume, and unilateral restriction moves work rather than stopping it. ## Open problems## Open problems Attribution is the deepest one. A deliberate release that resembled a natural spillover would be difficult to distinguish from one, which weakens deterrence in a way that has no analogue in nuclear security. Openness is the second: nearly every measure that reduces misuse risk also slows the research that produces countermeasures, and the [[precautionary-principle|precautionary]] framing does not resolve the trade because both sides of it are safety arguments. The third is unglamorous. The mitigations with the best expected value are stockpiles, ventilation, and sequencing infrastructure, none of which produces a publication or a product, and all of which are funded accordingly.Attribution is the deepest one. A deliberate release that resembled a natural spillover would be hard to distinguish from one, which weakens deterrence in a way that has no analogue in nuclear security. Openness is the second: nearly every measure that reduces misuse risk also slows the research that produces countermeasures, and the [[precautionary-principle|precautionary]] framing does not resolve the trade, because both sides of it are safety arguments. The third problem is that the mitigations with the best expected value are stockpiles, ventilation, and sequencing infrastructure. None of them produces a publication or a product, and all of them are funded accordingly. ## See also## See also removed, struck through added, underlinedLine numbers count the serialised markdown of each revision, frontmatter included.
98 lines are the same in both revisions, and 39 of them are not shown. Neither revision here is necessarily the current article — read Engineered pandemics for the text this wiki stands behind today.