Signal Scanner · AI & AUTOMATION

The Underwriting Brake: How AI Exclusions Are Becoming the Real Constraint on Enterprise Automation

A weak signal in AI and automation: while boards focus on capability and compute, the commercial insurance market is quietly rewriting policy language to exclude AI losses, and only a thin affirmative-cover market is filling the gap. Decision-action posture: Prepare.

The consensus on enterprise AI in 2026 is acceleration. Beneath that, a quieter market is setting the terms on which deployments can actually go into production: US carriers and the standards body for commercial general liability are introducing AI exclusions across casualty, D&O, E&O and fiduciary lines, while a fragmented affirmative-cover market emerges. The non-obvious signal is that insurability, not capability, is becoming the binding constraint on agentic-AI scale-up across the 2026 to 2028 renewal cycles.

Signal Identification

The shift is in the paperwork. Underwriters are pricing AI loss with no loss history, no shared definitions and no model for correlated foundation-model failures, so they narrow default coverage and leave a separate affirmative market to price the exposure. That asymmetry is the signal.

Time horizon: 2026 to 2028 renewal cycles; structural reset visible by year-end 2027. Plausibility band: Medium-High. Geographic / Jurisdictional Scope: Primary: the United States. Spillover: the UK, London market and EU. Sectors exposed: enterprise AI buyers; D&O and E&O insureds; brokers; primary insurers and reinsurers; foundation-model providers.

What's Changing

Standardised exclusion language has arrived. The Insurance Services Office introduced three AI-related endorsements for commercial general liability (CG 40 47, CG 40 48 and CG 35 08), and carriers including Berkley are filing absolute AI exclusions in D&O, E&O and fiduciary liability barring claims "based upon, arising out of, or attributable to" any use, deployment or development of AI (Policyholder Pulse, April 2026). D&O carriers signal the same direction: Gallagher reports a wait-and-see posture but expects exclusions to follow the cyber playbook because "policies can't remain silent forever", with public-company D&O pricing up roughly 1 percent in Q1 2026 (Insurance Business, May 2026).

The affirmative market is thin and differentiated. A May 2026 coding of 55 AI threat classes against 26 insurance products maps a four-tier insurability frontier and finds carriers carving distinct niches: Munich Re on drift, Armilla and Lloyd's on hallucination, Tokio Marine Kiln and CFC on IP and E&O, Coalition on deepfake, with "foundation model concentration is the clearest genuinely novel insurability frontier" (arXiv, May 2026). The biggest AI buyers cannot buy the limits they want and some weigh self-insurance, after Anthropic agreed a USD 1.5 billion copyright settlement in 2025 and a Florida jury found Tesla partially liable for an Autopilot crash above USD 240 million (Tufts Now, May 2026).

State regulators are not standing back. The NAIC's March 2026 issue brief confirms that "It does not alter insurers’ legal obligations" under existing law (NAIC, March 2026), and its Big Data and AI (H) Working Group records the AI Systems Evaluation Tool piloting in 11 states with finalisation targeted at the Fall National Meeting, alongside guidance on risk taxonomy, model cards, drift validation and bias testing (NAIC, March 2026).

The AI insurability frontier, mid-2026

FOUR TIERS OF AI INSURABILITY, US COMMERCIAL MARKET Indicative shares; analyst composite based on the cited sources Affirmative cover narrow, carrier-specific ~20% Silent AI exposure legacy lines, disputed ~30% Active exclusions ISO and carrier endorsements ~35% Outside private cover correlated model failure ~15%

Source basis: arXiv May 2026 four-tier coding study; Policyholder Pulse on ISO endorsements and absolute carrier exclusions; NAIC March 2026 brief. Shares are indicative.

Disruption Pathway

The pathway runs in three stages. First, exclusion: ISO endorsements and carrier "absolute" AI exclusions enter standard renewals across casualty, D&O, E&O and fiduciary lines, narrowing default cover and shifting proof onto the insured. Second, fragmentation: affirmative AI cover emerges in narrow carrier-specific products with bespoke definitions and sublimits, leaving buyers to stitch coverage across multiple paper. Third, litigation: claims land not as breaches but as ordinary chatbot, call-analytics and consultation interactions across cyber, E&O, privacy, media, professional liability and management liability, with early cases like Valencia v. Invoca under California's CIPA "mere capability" standard showing that "The claim simply arrives looking for a home" (Insurance Journal, May 2026).

Stress concentrates at three points. Foundation-model concentration creates a correlated-loss problem the private market cannot easily absorb. Definitional breadth in absolute exclusions risks "swallowing" coverage, and courts construe exclusions narrowly against the insurer, so a single appellate decision could reset the market. Liability and insurability are structurally interdependent: expanding liability without accounting for insurance economics raises total cost and can disadvantage the right-holders the rule was meant to protect (Connecticut Insurance Law Journal, May 2026). Adaptations follow at three levels: operational (model cards, drift testing, NAIC-aligned taxonomies), contractual (manuscript endorsements and warranty pull-throughs), and capital (captives, sidecars and self-insurance).

Why This Matters

For boards, CFOs, general counsel and risk officers deploying agentic AI at scale, the assumption to revise is that insurance is a back-office line item that follows technology decisions. The 2026 to 2028 renewals will set the perimeter of what enterprises can actually deploy. Buyers that map exposure to the four-tier frontier, secure affirmative cover, and document governance to the NAIC's emerging taxonomy retain flexibility; buyers that wait will find their D&O, E&O and casualty paper quietly rewritten. For carriers, the prize is the affirmative-cover market; the loss is unrepriced silent AI exposure on legacy paper.

Decision-action posture for this signal: Prepare , the exclusion architecture is now being filed and renewals over the next two cycles will lock in the new perimeter, so the work to do is exposure mapping, governance evidence and affirmative-cover negotiation before the buying window closes.

Counter-Argument

The strongest objection is the cyber-playbook reading: insurers will work through the definitional fog, capacity will follow, and within two cycles AI cover will look like cyber cover did by 2018. Tufts Now notes many existing cyber and CGL policies already cover AI-related risks, and courts read absolute exclusions narrowly and may strike language that "swallows" the coverage (Tufts Now, May 2026; Policyholder Pulse, April 2026). On that reading, the brake is friction, not a structural constraint.

The cyber-parallel reads against the underlying claims geometry. AI claims arrive across the whole casualty tower, foundation-model concentration is a different correlated-loss problem than cyber's distributed pattern, and the absolute-exclusion language now being filed is broader and earlier than its cyber predecessor. Convergence on the cyber template is possible, but the 2026 to 2028 renewals are where the perimeter is being set, and deployment decisions made inside that window are not undone if courts later narrow the exclusions.

Implications

Read structurally, the inputs to enterprise AI deployment are shifting from a capability-and-compute frame to a capability-compute-and-insurability frame. The arXiv four-tier frontier maps where private capital will and will not absorb AI loss, and the NAIC tooling pathway shows regulators pressing operational discipline onto insurers and, through them, onto insureds. The Connecticut Insurance Law Journal framing makes the larger point: the policy debate on AI liability and the market debate on AI cover are the same debate. The next two renewal cycles set which deployments are commercially viable.

Early Indicators to Monitor

Disconfirming Signals

Strategic Questions

Keywords

AI insurance; AI exclusions; ISO endorsements; D&O liability; E&O coverage; NAIC AI Model Bulletin; affirmative AI cover; foundation-model concentration; silent AI exposure; agentic AI risk; commercial general liability; insurability frontier

Bibliography

Source tiers: Tier 1, governments, regulators and intergovernmental bodies. Tier 2, think-tanks, academic institutes, major consultancies and quality data providers. Tier 3, quality journalism and specialist trade press. Tier 4, vendor, company and practitioner sources, used only as directional corroboration.

This Signal Scan is one component of a Shaping Tomorrow intelligence cycle on Artificial Intelligence & Automation. Every monitored topic also includes monthly Change Trackers that assess what is materially shifting in momentum, and a quarterly Decision Intelligence briefing that converts the cycle into board-level strategic implications. Cycles may also close with Action Triggers, an end-of-cycle synthesis that reads across the three formats and surfaces patterns no single deliverable carries on its own. Continuous intelligence on this topic is available as a Single-Topic or Multi-Topic programme.

Discuss a Tailored Programme

Prepared by Shaping Tomorrow: 23 May 2026