- The kill switch system can only be used to remotely deactivate a robot.
- The kill switch system is not allowed to be developed or controlled by the robot manufacturer.
- The kill switch system should be built using verifiable hardware and software, ideally fully open source and supported by formal verification.
- The kill switch system should with best effort be isolated from the robot hardware and software systems, and only interact by physically disconnecting power to the robot.
- Access to engage the kill switches would be provided to the executive branch of the nation in which the robot is operating.
Nothing will be a panacea against AI or robot risk, so it seems sensible to introduce different layers in a Swiss cheese model for safety, where a remote kill switch not controlled by the manufacturer could provide one such safety mechanism.
(You'd also want to add high-level state readout for the robot via the remote kill switch system to allow the controlling entity to e.g. be able to disable all robots within a geographical area etc.)