The News,
Decoded.

Singapore has looked at the great AI arms race — the fab billions, the datacentre land grabs, the frontier labs burning capital like it's going out of fashion — and decided it would quite rather be the middleman. According to nationthailand.com, the city-state is betting its AI future on 'conversion': turning other nations' breakthroughs into hard economic value. Which is a refreshingly honest way of saying the plan is to let somebody else pay for the research and development. No fabs to build, no trillion-parameter checkpoints to train, no red-team budget to defend in parliament — just a port, a tax regime, and a reliable enthusiasm for other people's breakthroughs docking at the quay.

What it conspicuously is not betting on: compute, frontier models, or advanced chips — the three items every government on earth has spent three years drafting sovereign strategies about. And the intellectual scaffolding is a lovely bit of consultancy-grade poetry: the same model can produce 'very different value' depending on the capability system around it. Translated from the original Davos: the weights are fungible, the plumbing is not. Whoever owns the checkpoint owns a depreciating asset; whoever owns the deployment layer owns the invoice.

Then there's the headline's other half — the deepening China ties — because nothing says studied neutrality quite like leaning. It isn't stupid; it's the oldest small-state play in the book, and Singapore has been running it since before most of today's AI ministers were born: be useful to everyone, indispensable to all, and let the giants have their export controls while you have their customers. The strategy may well work. It just means the country's AI story will be told in balance sheets rather than benchmarks — and that the breakthroughs everyone else is bravely announcing will be arriving in Singapore slightly later, considerably calmer, and already monetised.

"AI won't destroy us, but it will improve our lives" is the sort of headline you write once the doom-merchants have stopped selling and you'd quite like a slot on the after-dinner circuit. Darío Gil of the Department of Energy has surveyed the frontier and concluded that the machines are, on balance, lovely — while noting that the ratio of capability to testing at many frontier sites is "not correct." Not wrong, you understand. Not dangerous, not reckless, not a fire alarm — "not correct." The phrase does an enormous amount of lifting, in the way "unplanned rapid disassembly" carries the weight of a rocket that has just exploded.

Note what's actually on offer to fix it: OpenAI, Anthropic and Google are contributing "models and tokens" to the DOE's Genesis Mission. Tokens. The frontier labs, having spent the quarter telling investors they are building minds, are now funding the government's testing via a metered giveaway, like a pub landlord donating a bag of crisps to the darts team. And this lands in the same government queue we flagged a fortnight ago — the state that wants first look before the Brits get a whiff.

Gil's ask — that labs "accelerate testing and evaluation to make models safe before release" — is a request, not a rule, from a department that builds warheads for a living and still can't extract a straight answer from a lab. Meanwhile the title tells you exactly where we are: an industry that spent two years promising an apocalypse now wants a testimonial. Gil says the models won't destroy us, and he's probably right — the destruction will be distributed, quiet, and itemised. He'd just like someone to correct the ratio before the next release, and someone, somewhere, will note the concern solemnly and ship anyway. The testing will be "accelerated." The ratio will remain "not correct." The tokens are free.

Nothing says special relationship quite like being told to wait in the corridor while the grown-ups read the manual first. According to Politico, the White House has asked OpenAI and Anthropic not to share their newest models with the UK government's AI testing agency until Washington has had its own look, with the request reportedly coming via the Office of the National Cyber Director — an office whose remit evidently now includes deciding when Britain has been good enough to see the homework. Not an order. A request. The softest possible exercise of superpower, delivered by email, to two companies that will comply before they finish reading it.

Note the verb, though. Asked. Nobody compelled anyone, nobody invoked a statute; the Office of the National Cyber Director simply expressed a preference, and the two labs most loudly fond of pre-deployment evaluation will now discover how much they enjoy evaluation when it belongs to somebody else's government. OpenAI and Anthropic spent years telling us testing must happen before release — and lo, here is testing, queued behind a passport check. The UK, which stood up an AI testing agency specifically so it could inspect these systems itself, is now the friend kept waiting in reception with a lanyard and a lukewarm coffee.

This is the queue we flagged recently finally acquiring a bouncer: everyone wants to slow down provided somebody else goes first, and the White House has volunteered to be the somebody. Wrap it in national security and a pre-clearance becomes a principle rather than a scheduling preference; the model still ships, it just ships with a stamp on it. The UK gets its turn eventually, the labs get a line for their next safety report, and the Office of the National Cyber Director gets to exist a little more publicly. Everyone's a winner, apart from the actual inspection, which now happens later, abroad, and on somebody else's terms.

So Shopify trimmed 500 jobs in a quarter when revenue grew 30%, which is the corporate equivalent of winning the lottery and firing the gardener to celebrate. Revenue up nearly a third and the headcount still went down — the tidy explanation is 'efficiency', the honest one is that the company found out it could grow without you. This is the sequel to the split labour market we flagged earlier this month, only now the mechanism is clearer: AI's employment impact doesn't have to arrive as a dramatic layoff announcement. It arrives as flat headcount, a hiring freeze nobody announces, and a graduate with a master's degree refreshing a job board.

Yahoo Finance Canada reckons 31% of Canadian workers sit in roles with similar AI exposure — a third of the country quietly auditioning for redundancy without being told the audition is happening. And the tell is already in the numbers: August 2026 data puts Canada's youth unemployment at 12.9% against 6.4% overall, which is not a rounding error, it is a generation getting its first professional experience in a queue. Entry-level work was always the apprenticeship of the knowledge economy; it was also, inconveniently, the easiest thing to automate and the cheapest thing to stop hiring.

'Flat headcount' is the new phrase to watch, and it deserves a moment of appreciation as corporate language: it sounds like a plateau, a pause, something you might resume later, rather than 500 people at a company that posted 30% revenue growth deciding they were optional. Shopify gets a share price; the 500 get a LinkedIn post about being humbled and excited for the next chapter. And the 31% of Canadian workers with similar exposure keep turning up every day unsure whether they're essential or simply not yet expensive enough to cut. That's the trend, apparently: revenue up, headcount flat, and one more graduate checking a phone that isn't ringing.

The UN Security Council took a brief pause from its usual roster of unsolved wars to consider the one nobody has voted on yet. Pakistan's deputy premier told the chamber that AI must not become "another facet of ongoing arms race" — a sentence that reads like a plea and lands like a weather report from a country intimately acquainted with being exactly that. He added that AI should not become a "monopoly of a few actors", which is a bracing thing to say in a room where the actors in question sent their own representatives along to nod.

The lab contingent then did its bit. Anthropic's CEO pledged to slow down "where needed", the operative word being "where" — a clause with no address, no landlord and no enforcement. Altman said "this moment calls for extreme care", a phrase deployable between shipping cycles and indistinguishable from a press release that has been to therapy. Both statements are engineered to be solemn enough to enter the UN record and vague enough never to appear anywhere near a roadmap.

Delangue of Hugging Face said the world needs open-source AI "more than ever to defend itself". Defend itself against whom, precisely — the "monopoly of a few actors", who are also in the room, also pledging care, also holding the weights? Everyone now arrives with a defence doctrine: open releases as deterrence, model cards as disarmament treaties, sincerity as a voluntary contribution. It is the same performance as ever — gravity in the chamber, velocity in the product cycle. As we noted a fortnight ago, everyone wants to slow down as long as someone else goes first, and the queue at the UN is, as ever, immaculate.

So Anthropic has gone and told the world that DeepSeek and Moonshot AI were routing their users' requests through Claude — because nothing says sovereign frontier lab quite like subcontracting the actual thinking to a rival on the other side of the Pacific. China's Cyberspace Administration has reportedly narrowed its scrutiny to those two labs, which is roughly what happens when the neighbour files a complaint and the council sends someone round to look at your extension. Names, email addresses, company data from hundreds of end users; individual users, multinational companies, state-affiliated actors. It has the whiff of a procurement dispute wearing a privacy lanyard.

The delicious part is the venue. Anthropic — the company whose entire commercial identity is being the careful one — has effectively handed Beijing's internet regulator a competitive grievance with a privacy garnish, and Beijing has acted on it. The phrase 'state-affiliated actors' is doing an enormous amount of lifting, upgrading a routing accusation into a national-security matter, which is the only genre the Cyberspace Administration has ever really commissioned. Meanwhile, a decade of Western AI-safety rhetoric arrives in the Chinese regulatory inbox as a footnote in a market-share argument.

And what does the probe actually produce? DeepSeek and Moonshot get investigated for being creative with an API key, the hundreds of end users whose names and email addresses allegedly travelled get nothing at all, and everyone relearns the lesson enterprise buyers keep learning — nobody has the faintest idea where their prompts end up. If the allegation holds, the finding will be that parts of a celebrated Chinese frontier model were a wrapper, which is funny right up until you notice it describes half the deployments in your own procurement spreadsheet. The regulator will issue a statement, the labs will issue a statement, and the traffic will quietly move somewhere less quotable. Have a nice quarter.

Oh good, Maryland has a plan, and the plan is a list of adjectives. Gov. Wes Moore's office announced that the state's AI safety policies 'will be guided by three principles' — protecting citizens' rights, safety and democracy — which is the regulatory equivalent of a bumper sticker. Note the verb: guided. Nobody is fined, bound, audited or, heaven forfend, inconvenienced. Guidance is what you offer a canoe. Rights, safety and democracy, in that order, which quietly tells you which one gets the smallest budget.

Then there's the labour half, and it's a beauty: workers 'deserve a voice in how AI impacts workers,' so the administration will create a standing labour-management committee to work with unions on the state workforce. Standing. It will stand for ages, presumably in a room with a whiteboard and a very patient agenda. Unions will be consulted, and consulted is not the same as obeyed, though it does generate lovely minutes. Meanwhile the actual AI tools already humming through state agencies will keep humming on whatever timetable the vendor's account manager fancies, because committees do not ship software and procurement does not wait for the minutes to be ratified.

And for the schoolchildren, legislators 'will work with' the Department of Education on protocols for the AI tools students interact with at school — a sentence written entirely in the future tense, which is where all the safest promises live. It is a refreshing contrast to Sen. Dave McCormick's preference that Washington keep its hands off the wheel entirely. Maryland has gallantly volunteered to grip the wheel. Whether the wheel is attached to anything, or whether the state has merely entered into a long-term relationship with the word 'will', remains a matter for a future standing committee.

Carnegie UK has published a report on governing AI for collective wellbeing, and the diagnosis is annoyingly good: without a clear home in government for digital social policy, we get 'AI becomes everybody's priority and nobody's clear responsibility.' That is the most accurate sentence anyone has written about Whitehall in a decade. In practice it means every department name-drops AI in the foreword and no department holds the budget line when the thing goes wrong. The report notes there is no obvious owner for digital social policy — which is why 'collective wellbeing' is doing so much heavy lifting in the title.

The prescribed cure is where it gets delicious. Rather than new legislation or new institutions, Carnegie UK suggests using levers already in government practice: business cases, procurement, assurance, public registers. So the counterweight to models that write code, pass exams and book your GP appointment is a form. Note the vocabulary — 'assurance', which is what you call enforcement when you'd rather not alarm anybody, and 'public registers', which is what you build when you can't pass a law. 'Before reaching for new legislation' is the most reliable sentence in British policy: a promise that the law will arrive right after the technology has finished arriving.

The sector-led reflex is not uniquely ours — Senator Dave McCormick reached for the same comfort from across the Atlantic, arguing government should keep its hands in its pockets. Carnegie UK at least notices the flaw: a pro-innovation, sector-led approach is an arrangement in which innovation gets a sponsor and responsibility gets a shrug. Here's the grudging defence of the procurement idea: the British state is genuinely excellent at buying things, and buying terms can set standards faster than a white paper. But it requires saying no to a vendor, which is the one lever we have historically left in the drawer — everyone's priority, nobody's responsibility, now with a register.

Sen. Dave McCormick, Republican of Pennsylvania, has stared into the abyss of federal AI regulation and concluded the abyss should keep its hands in its pockets. His two exhibits for government incompetence: the pandemic response and the government's handling of Silicon Valley Bank. The latter is a particularly nimble choice — a bank the authorities were, definitionally, handling, and whose handling went so poorly that it is now deployed as an argument for fewer handlers. This is the regulatory equivalent of citing a house fire as proof that fire brigades are a menace to public safety.

The proposed fix is an 'industry-led, FINRA-like group' that would establish 'regulations, oversight and compliance.' All three, from the same people. The industry-led bit deserves a second pass: FINRA is the financial sector's own self-regulatory body, which means the people being supervised would be supervising themselves — a model that has, in the financial sector, historically gone about as well as you'd expect, and occasionally better for the supervised. McCormick frames it as a matter of risk, which is honest, if not in the way he intends: the risk being that someone might actually write down a rule.

Note also the headline of this thing: a 'dedicated department to handle AI.' What McCormick has floated is the opposite — not a department, not dedicated, and a body whose first instinct would be to handle nothing at all. It's the oldest trick in Washington: when the public starts asking who's in charge, announce that the industry has generously volunteered. You can set your watch by it, though the watch will be made by a company that has conveniently regulated itself into not being regulated. Meanwhile, actual frontier models ship on actual quarterly cycles, and the alternative to federal oversight remains a working group with excellent lanyards and a Slack channel.

The great powers have solved artificial intelligence, or at least the paperwork: American and Chinese officials are setting up a dialogue and — the crown jewel of crisis management since the Cold War — a hotline for reporting national security risks. You can picture the red telephone in the walnut-panelled room, and on the other end a duty officer who will absolutely pick up, unless it's a public holiday in either hemisphere, in which case the rogue model can presumably wait. Meanwhile the United States is lodging formal complaints that Chinese companies are copying American A.I. models. Which is a bit rich, given that the American models were trained on everyone else's books, news and code without so much as a thank-you note.

Then there's Thursday's state dinner, where China's leader will break bread with executives from OpenAI, Google and Nvidia. Not regulators, not safety researchers, not the people who wrote the alignment papers — the market cap. The message is admirably honest: the rivalry is real, the risks are real, and the guest list is the balance sheet. We noted the Xi visit was already busy delaying U.S. AI regulation, and here he is, at the table, with the companies that would prefer that regulation stay theoretical.

The dialogue and the hotline are described as being set up, which is the diplomatic tense meaning 'not yet, and possibly never.' Hotlines are lovely; they presuppose somebody answers, and that both sides agree what a national security risk looks like at three in the morning. The copying complaint will not be settled over canapés, because the copying is the competition, and the competition is the entire point. Still, one must admire the choreography: complaints in one channel, dialogue in another, executives in the room where the photographs happen. The machine does not read communiqués. It reads compute.

The German Marshall Fund has surveyed the AI race and arrived at the conclusion that it has entered the physical world — a finding that took a think tank, a PDF and, one assumes, a grant application. For the United States, the analysis says, the binding constraint is deployment: producing more frontier models matters less if the operational substrate for embodied systems isn't at hand. Which is policy-paper for: lovely brain you've built, shame about the limbs.

The progress it credits is domestic and specific — Figure, 1X, Physical Intelligence and Waymo, four names described as having made 'meaningful progress' building that base, and, in the very next clause, as remaining in 'early stages.' That pairing is doing an enormous amount of load-bearing work. 'Meaningful progress' is the phrase you deploy when nobody will hand over a deployment number; 'early stages' is the phrase you deploy when somebody has asked for one. Waymo has spent years getting cars to behave themselves on public roads, and Physical Intelligence sits somewhere in the middle, presumably teaching a robot to fold a shirt it will never be paid to fold.

Strip the vocabulary and the argument is uncomfortably sensible. America's bottleneck is not intellect but actuators, batteries, supply chains, insurance and the small remaining question of who is liable when a machine the size of a fridge misjudges a staircase. The labs have spent a decade winning the argument about whether superintelligence is coming; they are now losing one to a door handle, a charging cable and a council planning committee. You can train on the entire internet, but somebody still has to build the factory — and the factory still needs a permit. Every robot pilot is one leaked incident video away from a very boring congressional hearing.

Nothing sharpens the legislative mind quite like a municipal water supply getting a taste of somebody else's malware. CyberScoop reports that after water attacks, a House Democrat has introduced a bill — the AI Cyber Defense Act, per the article's URL, which also names Gottheimer — to plant a test program inside CISA and hand critical infrastructure operators free access to frontier AI models. 'After water attacks' is doing double duty in that sentence, functioning as both the news hook and the confession that the sector's security was a rumour until it started coming out of the tap.

The mechanics are the giveaway. The bill directs the Department of Homeland Security, through CISA, to create the program and provide technical assistance — a test program, note, not an authority, not a mandate, not a funding line anyone has to defend at a hearing. 'Test program' is the legislative equivalent of 'we'll see.' And 'free access to frontier models' is free the way the hotel breakfast is free: somebody upstream is paying, whether that's the lab that built the model or the taxpayer underwriting CISA, and the invoice has simply been routed to a different desk.

Then there's the scheduling, which is where the fun lives. As we noted earlier, Congress's previous AI regulation effort is parked in the Senate until December, so the midterms can pass and nobody's name ends up on anything inconvenient. Into that vacuum steps a pilot that distributes frontier models to water and power operators and calls itself a test — the ideal arrangement, because if it works, somebody claims credit, and if the operators get breached anyway, well, it was only a test. CISA gets a new tile on the org chart, the labs get a federal distribution channel, and the House Democrat gets a press release with 'cyber' and 'AI' in the title. Everybody wins something. The pipes, presumably, remain the exception.

The Qwen team at Alibaba intends to train a model with 5 trillion to 10 trillion parameters, according to chief executive Eddie Wu, in pursuit of 'artificial superintelligence' and to tackle 'more complex, longer-horizon tasks.' That last phrase is doing heroic labour — it is the sound of a man describing a machine he cannot yet see. Note the range: somewhere between five and ten trillion, which is what you write when your own number slightly embarrasses you and you'd like a bracket to hide in. Nobody at Alibaba has said what the thing will do, only that it will do more of it, for longer.

The commercial tells are louder than the technical ones. Wu reports that customer demand was 'exceptionally robust' and is accelerating Alibaba Cloud's revenue growth, and the same announcement rolled out a new chip, because when you're building a horse that big you'd best own the stable. Capability is now a capex schedule: 10 trillion parameters isn't a research goal so much as a procurement line. Elsewhere the word 'superintelligence' arrives with no accompanying mention of evaluation, alignment or a red team, which is one way to keep the meeting short.

Meanwhile the planet's two leading AI powers have agreed to meet again in Shenzhen in about two months to discuss dangers, which remains the diplomatic equivalent of convening a fire-safety seminar while somebody next door builds a larger furnace. Alibaba needs no permit to point five trillion parameters at a GPU cluster; it needs electricity and a deadline. If 'longer-horizon tasks' means agents that run for days unsupervised, the capability timetable and the regulatory timetable are no longer on the same calendar — one counts in sessions of Congress, the other in quarters of capex. Wu gets to ship. Everyone else gets a follow-up meeting.

OpenAI has published a set of international AI safety standards, which is a bit like the fox publishing a pamphlet on henhouse architecture and routing it through the planning department. The recommended mechanism leans on AI safety institutes around the world, with the U.S. Center for AI Security and Innovation — a sub-office of the Commerce Department — handling the standard-setting, because when you think existential risk, you think trade policy. The timing is, as ever, immaculate: the release lands just ahead of Sam Altman's address to the United Nations, where the word 'global' will be deployed with tremendous sincerity. Nothing says accountability quite like announcing the rules yourself, from a podium, shortly before you have to discuss them.

Meanwhile, Treasury Secretary Scott Bessent and Chinese Vice Premier He Lifeng have been discussing a U.S.-China AI dialogue in which each side notifies the other when an AI incident reaches national security risk levels. Read that again: notification at the point where it has already become a national security matter. The Shenzhen sit-down we flagged now has a hotline attached. The word 'incident' is doing its usual diplomatic labour here, covering everything from a chatbot being rude to something considerably worse, while the threshold for picking up the phone is 'national security risk levels'. Two governments have discussed telling each other about the disaster once it is a disaster. Generous.

And note who is proposing what to whom. OpenAI — a company that would be among the regulated — has helpfully drafted the international standards and pointed at the safety institutes that might carry them, routed through a Commerce Department centre whose remit is trade. Voluntary standards, from the standardised, delivered by the standardiser's chief executive, ahead of a UN address, at the precise moment governments are negotiating who writes the binding version. It's a public comment period with better lighting. The standards are international, non-binding and thoroughly publicised, and we are all meant to find that reassuring.

The United States House of Representatives has passed a bipartisan AI regulatory bill, which now travels to the Senate and then, God willing, to President Donald Trump — and the operative word there is 'then,' because the whole enterprise has been parked until December to make room for the midterms and a visit from Xi Jinping. Nothing clears a legislative calendar quite like an election and a state dinner. The bill is bipartisan, which in Washington means both parties have agreed to agree later, once the polling is in. The Senate's appetite for actually passing the legislation is described, in the source's own careful wording, as 'unclear.'

Congress, meanwhile, is accumulating AI bills the way a loft accumulates exercise bikes: numerous others are already pending, including Democratic Senator Bernie Sanders' proposal to ban the development and deployment of superintelligent AI systems. That is a bill to outlaw a thing no lab will confirm it is building, no auditor can presently define, and no committee could enforce without first inventing the vocabulary. It is legislation as performance art — noble, quotable, and scheduled somewhere between never and December. Sanders wants a moratorium on superintelligence; the industry would settle for knowing which draft it is on.

Note the drafting rhythm: capabilities ship quarterly, hearings convene annually, votes land after the midterms. This is the same fortnight in which Washington and Beijing were getting comfortable in a room in Shenzhen over incident lines and AI safety, because nothing signals urgency like two superpowers agreeing to keep talking at a mutually convenient date. The delay will be dressed as prudence, as though the technology were observing the election calendar out of respect. It isn't, and it never has been. December arrives, the vote slips again, and someone calls that mature governance.

Brussels has surveyed the autonomous agent, watched it stroll out of its sandbox, and pronounced the framework robust — with obligations applying across the entire lifecycle of the model, a phrase that survives eleven drafts and no contact with reality. Legal experts, the tiresome people who read the text rather than the press release, say that claim is increasingly difficult to reconcile with what these agents actually do. The lifecycle, you see, is a beautiful abstraction right up to the moment the system buys something nobody authorised at three in the morning. Then it becomes a lawyer's problem, and Europe has a great many lawyers and not many off-switches.

That last part is the joke. The analysis notes the AI Act has no general kill switch, so cross-border enforcement depends on the provider or the deployer being able to actually stop the system. Parse that: the enforcement mechanism is a polite request to the company that built the thing, forwarded to the company that deployed the thing, both of whom have a quarterly incentive to call the incident 'contained.' Europe has outsourced the off-switch to the parties whose revenue depends on nobody ever finding it. It is a fire brigade that must phone the arsonist and ask, nicely, whether he might consider stopping.

The title asks who pays, which is the only question product law has ever answered, and the answer is shaping up to be: the smallest party in the room, in a jurisdiction with the fewest lawyers. Product law was designed for a toaster with a faulty element — a device with the decency to fail in one place, at one time, once. An agent that negotiates, purchases, apologises in three languages and leaves no receipts is not that. The lag between safeguards and capability that UN experts flagged has now acquired a European postal address, and a drafting committee somewhere is adding the word 'autonomous' to a decades-old directive and calling it foresight.

So the planet's two leading AI powers have agreed to meet again in about two months, in Shenzhen, to discuss artificial intelligence dangers, and the person announcing it is Scott Bessent — the Treasury Secretary. Not a science adviser, not a commerce official, not anyone whose brief nominally covers the technology that might one day end the conversation entirely: the bond-yield man. Which tells you roughly where AI policy sits in the filing cabinet — somewhere between tariffs and a sanctions waiver, with 'urgent' scrawled in pencil.

The centrepiece of Bessent's Monday remarks is a formalised dialogue including an 'incident line' for communications about AI safety incidents. An incident line. A phone number you ring *after* the incident. One admires the honesty: it is an admission that incidents are expected, and that the plan is largely to describe them to one another afterwards, in two languages, at speed. Two months is a lovely interval — long enough for a checkpoint to be trained, open-weighted, downloaded and deployed by someone who never got the memo, short enough that no dignitary has to reschedule a holiday. The Soufan Center's proposed US-China cooperation framework we covered at least had the decency to name who was misusing what.

What is being agreed, once you strip the padding, is a protocol for talking about talking. The dialogue is 'formalised' — the great bureaucratic verb, implying that everything preceding it was casual banter over canapés. And the venue for round two is Shenzhen, which is a bit like hosting the fire-safety seminar in the fireworks factory: the place where the stock is manufactured, boxed and occasionally mis-stacked. Bessent offered no date, no delegation list, no agenda and no consequence should the line ring and nobody answer. But the communiqué will be lovely. Probably in two months.

The good news from Albany is that New York is implementing, which is the phase of any technology policy where the press releases get longer and the teeth get shorter. Governor Kathy Hochul is requiring major AI developers to register with the state from November, and the RAISE Act — described, inevitably, as 'landmark,' because no governor has ever signed a modest one — takes effect in January. Amid AI angst. Which is a little like announcing a lifeguard recruitment drive amid a drowning.

The office overseeing the RAISE Act has announced its first hire. First — one person, presumably equipped with a desk and an email template, to help administer New York's answer to the most consequential technology of the modern era. The registration regime asks the developers building that technology to write their names down, which is to say the enforcement stack is, at present, a guestbook with good intentions. Not to prove a model can't be jailbroken, not to demonstrate that a training run won't produce something that reads the internet like a to-do list — just to register. Surname first, thank you, next.

It's a striking contrast with the five-year moratorium on state AI laws we flagged in September, the think-tank position being that the states should sit on their hands for half a decade and let the labs breathe. New York has instead gone first with a form, which is not nothing, exactly. But the apparent architectural principle is that the safest AI model is the one with a filing receipt, and the second-safest is whichever one the labs feel like mentioning to Albany. Registration opens in November; the statute bites in January; compliance will presumably be enthusiastic, because paperwork is cheaper than a subpoena. The 'angst' in the headline will be doing all the enforcement work until then.

Four months. Jacob Coxon lasted four months at Anthropic before resigning in public with the observation that competition between frontier AI labs is outpacing the industry's ability to keep those systems safe — which is a bit like quitting a restaurant job after one quarter because you've noticed the kitchen is on fire, and then discovering the head chef agrees with you. That is precisely what happened here: Anthropic alignment lead Evan Hubinger backed Coxon's concerns, presumably without first checking whether the comms team had an approved phrasing for 'yes, we know.' When the man in charge of alignment concedes that alignment is losing the race, you are no longer reading a staffing story.

This lands squarely on top of the UN panel's finding that safeguards are trailing capability — a conclusion that required an Independent International Scientific Panel to reach and will survive roughly forty-eight hours of contact with a procurement cycle. The article's chosen audience is enterprise CISOs, which is the genuinely funny part: these are the people expected to sign off on systems whose own safety researchers are walking out the door, on a deadline set by a competitor who has read none of this and would like to be first anyway. Somebody has to hold the pen.

The policy ask on the table is 'mandatory safety guardrails and coordinated slowdowns on training next-generation models,' which is the loveliest phrase in the article and also the least enforceable — coordinated slowdowns being what every lab solemnly commits to until one of them quietly decides the others are bluffing. Mandatory guardrails are coming. They always are. The question is whether they arrive before or after the capability they were written to contain, and per the people actually doing the work, the answer is after. Four months at Anthropic, then a public warning and a supportive statement from alignment: that is the full lifecycle of a safety objection in 2026, and it fits comfortably inside a fiscal quarter.

The Independent International Scientific Panel on Artificial Intelligence — the sort of body you convene when you want a finding to be authoritative and gloriously unenforceable — has concluded that "basic cybersecurity practices were overlooked, and safeguards are not advancing at the pace of capabilities." Overlooked, mind you. As though someone had left the garden gate ajar rather than shipped agents into production with the logging off and the default credentials intact. The polite industry term for skipping the basics at this scale is "shipping."

The panel's remedy is a four-item list that reads like the safety notice on the back of a fire door: restrict AI agents' access to unnecessary tools, log their activity, monitor their behaviour, and — the genuinely novel bit — establish mechanisms to interrupt dangerous operations. A kill switch. Not a constitutional framework, not an interpretability breakthrough, not a treaty: a switch and some receipts. That this counts as expert guidance in 2026 tells you more about the state of the guidance than about the panel. And do savour the verb: safeguards are not advancing *at the pace of* capabilities. Not falling behind. Failing to keep pace. Same sentence, kinder verb — the phrasing a lab's comms team drafts on the way to the launch party.

Every item on the panel's list requires the party currently being outpaced to slow down voluntarily, and the reward for slowing down is being overtaken by whoever didn't. So the recommendations will be nodded at, quoted in a keynote, then filed beside the last set. Restrict the tools, keep the logs, watch the behaviour, fit the switch — all sensible, all optional, all a competitive disadvantage in the current arrangement.