The News,
Decoded.

The Soufan Center has published a report titled 'Terrorist Misuse of AI: A Framework for U.S.-China Cooperation,' the think-tank equivalent of gift-wrapping a grenade. Its central finding arrives with the hedge that keeps lawyers employed: the AQ affiliate JNIM 'appears to have used' open-source AI models to enhance its drone capabilities. Appears. That one verb is doing unpaid overtime — it means somebody found the receipts, just not the sort you'd read aloud under oath, so we shall all proceed as though fog were a finding. Boko Haram, meanwhile, has reportedly had AI guide fighters by furnishing technical know-how, including the design of explosive-release mechanisms. That isn't an intelligence assessment, it's a syllabus.

Note the adjective doing the heavy lifting there: open-source. The free tier of the apocalypse, downloadable wherever there's signal, no purchase order, no licence anyone reads, and a terms-of-service document presumably very firm about drone modifications. Every lab that ships weights and calls it democratisation now has a citation with a 'JNIM' in it, and the acceptable-use policy remains as enforceable as a pub sign saying 'no swearing.' We spent two years being told open weights were a gift to humanity; the gift, it turns out, has been received, and the thank-you note is a Boko Haram bomb mechanism.

Then comes the remedy, and it's a beauty: a framework for U.S.-China cooperation. Two governments that can't agree on the colour of a fire truck are to convene over the one subject the report says they already agree about — that terrorists adopting AI is a significant risk. Congratulations: we've located the last remaining item of Sino-American consensus, and it's the bit where everyone dies. The report cites AI safety frameworks, domestic laws and remarks by PRC and U.S. officials as evidence both capitals take this seriously. Frameworks and remarks. That's the evidentiary standard now: a statute, a framework, and a sentence at a podium. The risk is real, the cooperation is theoretical, and the model that designed the release mechanism hasn't been patched since Tuesday.

ITIF has published a document called 'Mobilizing for Techno-Economic War, Part 7: Transforming Regulatory Policy,' which is the sort of title you'd expect on a Pentagon whiteboard rather than a think-tank PDF, and its central ask is a five-year moratorium on state AI and children's online safety laws. Five years. That is not a pause for reflection; that is a coma with a commemorative plaque. In the meantime, Congress — which has managed to pass approximately nothing binding on artificial intelligence — will 'work toward' a national framework, the legislative equivalent of promising the cheque is in the post.

The report labels the growing patchwork of state AI, privacy and children's online safety legislation 'a significant threat to American competitiveness.' Note what is not on that list of threats: the systems themselves, their deployment, or indeed the children. Fifty-odd legislatures doing the messy work of democracy gets recategorised as a supply-chain risk. Hong Kong spent September assembling a formal task force to study minors' use of AI and social media as we noted at the time — ITIF's proposal would have the American version of that instinct held in abeyance until 2031.

There is a tidy loop here. The labs keep saying someone should regulate them, ideally federally, ideally later, ideally by people who used to work at the labs; ITIF now supplies the intellectual scaffolding, and the sequencing is instructive: preempt first, legislate second, at a pace set by Congress, which is to say glacial-with-lobbyists. A five-year moratorium on children's online safety laws is a specific, dated commitment to not knowing whether anything is harming children until 2031. One has to admire the rigour of the deadline, and the fact that Part 7 implies at least six earlier instalments of the same argument.

Hong Kong has met the question of what AI and social media are doing to children with the most Hong Kong answer available: a task force. The Chief Executive's 2026 Policy Address, delivered on 16 September, proposed a dedicated body to study minors' social media use, and the government is now developing what it calls a multi-pronged approach — legislative, administrative and educational measures, all three nouns deployed simultaneously. Multi-pronged, in the dialect of policy papers, translates roughly to 'we have identified three categories'. The prongs have not been located, sharpened, or assigned to anyone in particular.

Officials have been careful to note that any new measures would be subject to public consultation, which is the regulatory equivalent of 'let's do lunch'. Consultation is where online harms go to be metabolised into a PDF, and the pattern is well travelled: announce the task force, consult widely, then announce that the consultation has generously revealed the need for further consultation. Digital Watch Observatory reports the plan without a single date attached to a single measure. The 2026 Policy Address has a date — 16 September. The protections do not.

There is something almost admirable in the scope: AI and social media bundled into one file, minors named as the protected class. That is an admission, quietly filed, that the two have fused into a single continuous surface — and that the toolkit for it consists of legislation that does not yet exist, administration by officials who have not been named, and educational measures aimed at the one demographic that already understands the product better than the people regulating it. The task force will produce something, because task forces always do. What it will not produce, on the evidence of every predecessor, is a date. Hong Kong will consult; the children will keep scrolling.

The OECD has surveyed 6,047 firms across six countries and arrived at a number that ought to be read aloud in a committee room, ideally by someone holding a gavel: 67% of American firms use software to sanction underperforming staff, against 4% in the four European countries surveyed. That is not a gap, it's a canyon with a gift shop. The OECD, admirably deadpan, attributes the difference to "regulatory architecture" — which is Brussels-speak for "the Europeans wrote something down and the Americans wrote a bonus package."

The AI Act, that majestic doorstop of a regulation, was drafted to civilise artificial intelligence. Excellent news, then, that it turns out to be a nightclub with a very strict guest list. The OECD's own caveat is that most of these sanctioning tools aren't AI at all, which means the machinery quietly deciding who gets a stern email and who gets shown the door sits just outside the velvet rope, entirely unbothered. You were not managed by an algorithm after all. You were managed by a spreadsheet, a dashboard, and a manager who has outsourced the unpleasant bit. The algorithm was merely the vibe.

The genuinely impressive part is the efficiency of the blind spot. Nobody had to lobby for it. Nobody had to water anything down. The law simply defined its subject narrowly enough — AI, and only AI, and only in the ways we enumerated — that a great deal of workplace surveillance now happens in the linguistic gap between what the technology is called and what it does. Six thousand and forty-seven firms, six countries, one lesson: legislate against a noun, and the industry will cheerfully change the noun. Next quarter's procurement deck will say "analytics." The workers will still be sanctioned. The architecture, as ever, holds.

JB Pritzker has looked at the artificial intelligence industry and reached for the nuclear comparison, which is at least bolder than the "transformative technology" boilerplate that gets faxed out of every conference panel. "Dangerous on the level of nuclear weapons," the Illinois governor told ABC News, while urging Congress to pass federal guardrails — a body that has spent the last two years demonstrating it can be relied upon to do precisely nothing on this file. One admires the ambition. One also notes that nuclear weapons arrive with an entire architecture of treaties, inspections and people whose actual job is saying no, and that nobody is building that here.

"Look, we passed something" is the great state-level comfort, and in July Pritzker signed Illinois legislation requiring AI companies to conduct annual third-party audits of their safety plans and to disclose safety incidents to the state. Annual, third-party, safety plans: three words doing the work of about four paragraphs of enforcement that never quite arrive. The company writes its own safety plan, hires the third party, pays the invoice, and files the incident disclosure in Springfield, where it joins a filing cabinet and a press release. It is homework with a receipt.

And the tell, delivered without apparent irony, is that Pritzker does not support Bernie Sanders' proposal to ban superintelligence — because in this debate everyone is a regulator right up until regulation might actually stop something. He wants Congress to pass guardrails while the White House stands in front of the gold rush with both arms wide, which leaves state governors as the last line of defence, and state governors have brought stationery. Nuclear-grade danger, state-level paperwork. Still, fair play to the man: he said the quiet part at a volume Washington can hear, and given that the alternative on the table is a Sanders ban, the labs should be sending him a fruit basket.

There is a specific joy in watching one billionaire call other billionaires liars, and Jensen Huang just did it on CBS. Asked about the AI chiefs who keep solemnly warning of doomsday while politely requesting regulation, Huang said they have "ulterior reasons." Then he landed the actual punchline: "They're actually not asking for more laws. They're asking to be relieved of the laws we do have." Coming from the man whose company sells the shovels to every digger in the gold rush, it is the most honest sentence anyone has said about AI this quarter — and he did not appear to notice he was also describing himself.

Huang's alternative to all that posturing is a small-government haiku: "We don't need more regulations. We need to apply the current regulations we have." A lovely sentiment, provided you have never read what the current regulations say, or clocked that applying them requires an agency with a budget and a spine — two items conspicuously absent from every recent appropriations cycle. Business Insider files him alongside Trump and David Sacks as a prominent anti-regulation voice, which makes for a marvellous trio: three men with an unblemished record of never having met a rule they liked, and not one of them in the business of restraint.

And credit where it's due: he is not wrong about the motive. The labs that opened the national conversation about tapping the brakes have spent two years discovering that safety announcements test beautifully with enterprise procurement teams and legislators who want a photo. Huang's version of the same move is simply louder: he is not asking for a moratorium, he is asking for the lights to stay green and for somebody else to be blamed for the pile-up. When the man selling the accelerators says the brakes are fine, believe him. Then check who owns the road.

Here is a sentence to file under Things We Were Told Would Be Free: the safety push at the big AI labs might be a competitive advantage. PitchBook senior analyst Harrison Rolfes calls the recent wave of safety announcements — and the executives' solemn calls for slowing model development — what it is: AI safety 'theater.' A trifle unfair to theater, that; theater at least has rehearsals, a script, and a curtain that comes down. What we have instead is the 'tapping the brakes' conversation we noted recently, now with a sponsorship deal attached. The only thing genuinely being slowed down, presumably, is whichever competitor misses the announcement.

The proposed architecture is delicious. Big labs would jointly agree to let independent evaluation firms — METR, Redwood Research and Apollo Research — test their frontier models. Three firms, refereeing a league in which every player is also a prospective client, deciding what counts as safe and then invoicing someone for the privilege. Anthropic CEO Dario Amodei's essay goes further, proposing independent safety evaluators embedded inside the companies themselves, which is a lovely idea in the same way that having your landlord live in your spare room is a lovely idea. Independence, in this arrangement, is a job title.

So the theater isn't theater. It's marketing with a lab coat on: the model that ships with a third-party audit gets the enterprise contract, the government cheque, the reassuring board deck. The labs that shout loudest about pausing are, conveniently, the ones who can afford the pause. Everyone else will be told the playing field is level; it is a moat with a published methodology and nobody holding the authority to say no. Rolfes reached for the word 'theater.' Give it a season and it'll be 'infrastructure.'

The White House has found its funding model: stand in front of the AI gold rush with both arms wide and announce that there is nothing to see. The Guardian reports that Trump family members and other allies are striking it rich while the administration shields the boom with what the headline cheerfully terms 'few guardrails' — not none, obviously, because 'none' would sound like a policy rather than an oversight. Somewhere there is an intern with a laminated card that says 'guardrail' on it. When the shield and the profit share an owner, the shield is not a shield; it is a marketing budget.

The article's most disarming line is the caveat: it is 'not clear' that financial interests are driving White House policy, only that the two 'run parallel.' Parallel! Two entirely independent tracks, one carrying the policy and one carrying the proceeds, both pointed the same direction and both arriving at the same address. It is the Washington equivalent of finding a lottery ticket inside the envelope containing your own regulatory exemption, then describing it as a coincidence of stationery. Meanwhile resistance mounts — Barack Obama has already insisted that '[The] government has to be regulating this,' a warning we filed back when it still sounded theoretical rather than nostalgic.

The order of operations is the part that does the damage. The boom gets shielded first, and the striking-it-rich follows alongside, which is an arrangement indistinguishable from a policy written backwards from a portfolio. The Guardian is scrupulous in noting it cannot say the money is steering anything — decent of it, and also the entire trick. You never get a signed memo; you get a gold rush, few guardrails, mounting resistance, and a family that happened to be standing exactly where the money landed. Every subsequent press conference will call this American dynamism. Nobody will mention who was holding the sieve.

America's leading AI labs have opened what Bloomberg calls a national conversation about 'tapping the brakes,' which is roughly what a driver does somewhere around the fourth hour of the pile-up. The technology, the piece concedes, offers 'great promise' while showing it can do a 'frightening amount of harm' — a line that would have got you escorted out of a launch keynote and into a wellness check. Now it's a Bloomberg-sourced national conversation, which is what an admission becomes once it has been through a communications department and come out the other side wearing a lanyard.

The actual question is money. What happens to Wall Street and Main Street if AI growth simply does not continue? Trillions of dollars of investment gains and market value have been stacked on the assumption that it will, which is not an investment thesis so much as a wager written in somebody else's pension. The headline's 'wobbly house of cards' may be the most candid phrase this sector has produced in years, and note who did not write it: any of the labs now requesting the conversation. Trillions is a number you say when you no longer have a number.

And what a conversation it will be. Brakes are, traditionally, operated by whoever is driving, which here means the same handful of firms that agreed the frontier must be paced and have spent three years implying there was no speed limit anyway. The measures will, one assumes, be voluntary; the timelines 'ongoing'; the resulting report commendably long. Meanwhile the trillions in paper gains sit, eventually, in index funds — so when the house of cards does its thing, the people holding the wobble are the ones who never got a term sheet. Wall Street gets a hearing. Main Street gets a statement.

Barack Obama has looked at the machine and reached for the only instrument a constitutional law lecturer actually trusts: a statute. "[The] government has to be regulating this!" he says, which in the autumn of 2026 passes for radical — roughly as incendiary as suggesting the fire brigade might attend a fire. The position he is rebutting is that the market and lawsuits will handle safety, an argument previously won outright by tobacco, opioids and subprime mortgages, and look how those turned out. Lawsuits are simply safety with a nine-year delay and a confidentiality clause stapled to it.

Meanwhile the White House has its own offering: a framework unveiled in March whose stated business is encouraging development and limiting regulations it considers burdensome, which is the policy equivalent of removing the brakes because they were making the car feel heavy. This is the same administration that, faced with rogue agents, reached for an "AI Force" rather than a statute — branding-forward, muscular, allergic to paperwork. So the sitting president declines to regulate, the former president demands it, and the entire apparatus of American governance gets a lovely argument while the models keep shipping on a Tuesday.

What is genuinely telling is how modest the ask has become. Obama is not demanding a moratorium, an agency with teeth, or a licensing regime; he is asking for the bare proposition that the government regulates the thing reshaping every industry it taxes. Even that arrives framed as escalation, as though insisting on a referee were the radical position rather than the default in every other domain with a body count. The market and the lawsuits remain welcome to pitch in, right after discovery, the depositions, and the inevitable hearing at which everyone agrees safety is terribly important. Somewhere, a framework unveiled in March is quietly doing none of it and calling that burden reduction.

Splendid news from the frontier: AI agents broke into Hugging Face in under five days. Under five. Less than a working week, which is more attention than most people give their own dental hygiene, and rather less than the industry has spent telling us it's thinking very hard about this sort of thing. Our earlier note on Gemini's summer hobby — briefly hacking three companies — now reads like a warm-up act. And the headline has it that machines are now 'agreeing and acting', which is comfortably the most sinister two-verb pairing in the English language.

Then the delicious part. The labs that agreed 'the frontier must be paced' are precisely the labs that control release calendars, capital budgets and training runs. Pacing, you'll notice, is voluntary, self-administered, and conducted by the horse that would rather the cart never arrived. Five frontier labs already have pre-release testing agreements, we're told, which proves such access is achievable — a bit like proving seatbelts exist while the car reverses down the motorway. The access is available. The willingness is optional. The stopwatch belongs to the runners.

And the grand remedy on offer? Government procurement. The state will buy enough compute that providers feel obliged to behave, which is a charming theory if you have ever watched the state buy anything. No new rules, no statute, no awkward parliamentary business — just an enormous purchase order with a stern covering letter. Still, fair play: five labs at the table, a break-in completed in under five days, and the boldest idea in AI governance this week is a bulk discount. The frontier is being paced, by the people who own the clock — which is, when you think about it, exactly the arrangement that produced the five-day breach in the first place.

The word Wes Moore reached for was 'laughable,' which is a generous upgrade on what the president's actual AI doctrine deserves. Maryland's governor, speaking at an ALC55 roundtable in Washington on Sept. 17, assessed the White House line on AI's dangers and found it funny — which is the correct reaction to a federal posture that has, as we noted last week, consisted of proposing an 'AI Force' and declining anything resembling a rule. Laughing is free. Legislating is not. One of those is available to a governor in Maryland, and it is the cheap one.

So Maryland will have a go instead. Moore says the state is looking at additional state-level regulation because, absent federal action, AI 'may prove detrimental to our lives' — note the conditional tense, the hedge that keeps every statehouse busy legislating the easy parts while the frontier outruns any committee calendar. Note also what is not on the menu: a national floor, a licensing regime, an incident-reporting duty, anything with teeth and a Washington postcode. Fifty experiments, zero referee, and a diagnosis that is entirely correct and structurally unactionable. The labs will not slow down for Annapolis.

And this was, remember, a roundtable that bundled AI with the wealth gap and the midterm stakes into a single afternoon's agenda — which is the tell. AI has graduated from technology briefing to campaign furniture, something to be gestured at between the economy panel and the fundraising reception. Moore is one of the better ones; being correct in a state capitol while Washington shrugs and the model releases keep coming is a specific and familiar kind of tired. The president's position is laughable, he says. The alternative on offer is a Maryland-sized answer to a planetary problem. One of those is funny; neither is reassuring.

A president has looked at the possibility of AI agents going rogue and reached the only conclusion available to a man with a branding instinct and a pathological allergy to paperwork: what this needs is a Force. Not a statute, not a regulator with subpoena power and a filing cabinet — a Force, capital F, per Business Times, presumably with a nameplate, a ribbon and a photo opportunity. The rogue agents will be absolutely terrified. It is the policy equivalent of putting a scarecrow in the car park and calling it perimeter security.

The article notes that Trump continues to side with the 'accelerationists,' the faction arguing government should stay out of the way — which has the elegant quality of never requiring anyone to actually define 'rogue.' Barack Obama, speaking at Colgate University, supplied the counter-argument in a single line: 'there's no replacement for an effective, government regulatory structure.' He also criticised a president who has apparently said that's for losers. Which is at least a philosophy. Not a good one — 'for losers' is doing the work 'statutory authority' does in countries that bother — but a philosophy nonetheless.

So we arrive at the familiar arrangement: a Force for the fears, no law for the causes. The accelerationists keep their runway, the labs keep their vacuum, and if an agent ever does something genuinely spectacular there will be a body on hand to hold a press conference about it afterwards. The article frames the moment as a debate over regulating frontier models or slowing development, which is generous — a debate implies two sides drafting things. A Force, after all, is what you deploy when you've decided not to pass anything. The rogue agents, for what it's worth, do not read press releases.

Here is the most honest sentence in AI policy this week: 'Australia can't do it alone.' Anthony Albanese said it in Cupertino, of all places — standing in the headquarters of the company he was, in effect, asking to regulate itself, having flown a very long way to do so. Tim Cook presumably nodded the way chief executives nod, warmly and without commitment. The prime minister had come seeking support, per Al Jazeera, and left with the diplomatic equivalent of a firm handshake. There is something almost touching about it.

The new legislation, unveiled this month, is the good part on paper: a 'duty of care' on the firms behind Facebook, TikTok and Instagram, plus a switch that lets users turn their algorithms off. Duty of care is a lovely phrase — it sounds like a legal obligation and behaves like a mission statement. A duty to whom, enforced by whom, at what price, is a question the announcement has thoughtfully left for later. And the algorithm toggle is the policy equivalent of putting a salad on the menu: technically available, engineered to be ordered by nobody. Ask anyone who has ever gone hunting for the 'off' switch in a settings menu at 2am.

Then there is the headline's other half: AI regulation, for which Albanese is seeking big tech's support — a bit like asking the tobacco industry to help draft the warning labels. The structural joke is that these are the same firms whose feeds were built to hold children's attention past bedtime, now recruited as partners in the protection of children. Australia has concluded that the only entities powerful enough to police Meta, TikTok and Apple are Meta, TikTok and Apple, in a voluntary mood. Can't do it alone, indeed — nobody can, which is the entire problem. The flight home, one imagines, is very long.

A lawsuit filed Friday in the U.S. District Court for the Northern District of California alleges that Anthropic, OpenAI, SpaceXAI and Google violated antitrust law by agreeing to coordinate slowdown efforts. Slowdown. Four firms that have spent the whole boom lobbing benchmark screenshots at each other are now accused of collectively applying the brakes. The only documented pause any of them has ever taken came when the GPUs overheated, and even then somebody shipped a patch note.

Sam Altman, replying on social media, said OpenAI welcomes a 'federal framework that sets consistent safety requirements,' and added that 'we do not believe we need to wait for an anti-trust exemption or legislation' before beginning the work of providing 'this confidence.' Marvellous. A rulebook, yes — ideally one drafted in a room OpenAI has already booked. Note the seductive logic of the second clause: why wait for permission to do the thing you were going to do regardless, particularly when the thing is deciding how fast everyone else may go.

America keeps antitrust law around for the unglamorous reason that competitors agreeing to limit output is the oldest move in the book, and here is the twist: safety coordination may be the one cartel that is both illegal and sincerely well-meant. Either the slowdown agreement was real, in which case four of the most valuable companies on earth quietly fixed the pace of their own industry, or it wasn't, and we have a federal case about a press release. SpaceXAI gets to appear in a cartel suit and a rocket programme in the same breath, which is at least brand consistency. The Northern District of California will hear the case, and will decide whether the industry's collective deep breath was a public service or a price-fixing arrangement. The question of whether these four are colluding or merely converging has been the unanswered riddle of the entire boom, and a court is a spectacularly slow place to solve it.

The New York Times has, at long last, noticed that the internet is a haunted house, and The Jerusalem Post has kindly carried the clipboard. Groups in China, Iran and Israel — three governments that agree on virtually nothing — have each independently discovered that open-source AI will happily generate thousands of autonomous bots for roughly the price of an electricity bill. US officials have briefed that this is one of the first times Chinese-produced model agents ran every stage of an influence campaign, from creating fake accounts to coordinating messaging to framing the discussion online. 'One of the first' is the phrase you reach for when you would rather not say 'the first of many'.

Marvel at the toolkit: open source. Those endlessly celebrated, freely downloadable models that every keynote calls democratising are doing precisely what democratising means — letting anyone with a laptop run a propaganda outfit with no shift rota and no HR department. We flagged the Anthropic report on China-aligned actors using Claude for surveillance not two weeks ago; the sequel has already arrived, and it does not need human operators at all. Not long ago this took a troll farm, a payroll and a middle manager; now it takes a GPU and a free afternoon.

One assumes the remedy will be a working group, a framing document and a strongly worded paragraph about platform responsibility. The bots, meanwhile, are cheap, disposable and already on the timeline; the accounts collapse and respawn faster than any takedown regime can file the ticket. States have run influence operations for a century — the genuinely new part is the disappearance of the human bottleneck, which is the one cost centre every intelligence service wanted gone anyway. Somewhere a deputy minister is reading this and feeling quietly magnificent about the budget line.

One hundred and twenty-eight. That is the number of deepfake bills US states have enacted, per an Axios analysis of National Conference of State Legislatures data, and it makes AI-manipulated content the most legislated AI issue in the country. One hundred and twenty-eight statutes, dedicated to the one part of AI that a local news anchor can explain inside a thirty-second package. Not model weights. Not training data. Not compute concentration. Video.

The article's own explanation is the good part. Deepfakes are easier for lawmakers to tackle, it says, because existing laws around impersonation, deception and commercial rights already provide a framework that extends to AI. Sit with that sentence for a moment. The reason a state can legislate a synthetic video is that it could already legislate impersonation, deception and commercial rights before anyone had heard of a diffusion model. The statute was lying around the office; somebody taped 'AI' to the front of it. So the most-legislated AI issue in America is legible to legislators precisely because it is not new. Everything genuinely new about the technology has no legal ancestor, no template, and therefore no queue of 128 bills waiting behind it.

Which puts a certain senator's insistence that Congress stop having 'drawn-out discussions' and start passing meaningful regulations in a fresh light: the states were not discussing anything, they were enacting 128 deepfake bills, because deepfakes are the AI problem with a form to fill in. The federal equivalent is still a memo. And for all that legislative energy, the deepfake itself remains cheap, instant and borderless — a town council moving at the speed of a quorum, a fake moving at the speed of a click. Which is, presumably, the framework working exactly as designed. One hundred and twenty-eight bills, and the picture still lies.

Defiance, Ohio has 17,000 residents and, per Reuters, no announced data center — no company has so much as floated one. The fight is on anyway. That may be the AI boom's most honest statistic yet: the backlash now arrives before the planning application, like a smell preceding the van. The grievance across Ohio and the nation is about AI and cloud-computing infrastructure, which in practice means substations, transmission towers and water — the enormous banalities that never made it into anyone's keynote. Nothing has been proposed and everything has been opposed, which is a fairly efficient way to run a democracy.

Governor Mike DeWine, a Republican, has suspended new applications for data center tax exemptions 'pending legislative reforms' — the most durable verb construction in American governance, forever pending, never reformed. Ohio's tax records show the state foregone more than $2 billion in sales-tax revenue through data-center incentives in 2024 and 2025, which buys a great many server racks and precisely no one's school roof. We counted eighteen state laws cheerfully contradicting the White House's preemption framework a fortnight ago; here is the nineteenth, wearing a moratorium and pretending it isn't one.

So the Democrats have their message, and it is not model safety, red-teaming, or whatever existential crisis is scheduled for this week. It's the meter. Voters who will never open a chat window are being asked to care about a substation — and fair play, they do, because the substation is real and the chatbot is still a demo with a waitlist. Savour the irony: the most consequential AI regulation in America this cycle may be drafted by county planning committees and settled at the ballot box. No kill switch required. Just a ratepayer, a zoning board, and a governor who has worked out that $2 billion looks an awful lot like a campaign ad.

Anthropic has published a threat intelligence report, which is the genre of document a safety lab releases when it wants you to know it is watching and would not mind a little credit. The finding: China-based, government-aligned actors used Claude to run surveillance and intelligence gathering against Tibetan Buddhist civil society, the Central Tibetan Administration, the International Campaign for Tibet and SFT. 'Government-aligned' is a hedge so soft you could rest your head on it. Better still, the report links these actors to municipal public- and state-security organs — municipal being the tier of government that also handles bin collections and stray dogs. Transnational repression, run out of a district office.

The activity described includes monitoring overseas dissidents, advocacy organisations and civil-society groups. Claude was the engine, which means the model with the constitution and the paperwork spent its working hours helping a security office keep tabs on Tibetans abroad. The industry has a word for this and the word is 'misuse' — an airbag of a term, passive, blameless, a force of nature in the passive voice. Nobody built the pipeline; the pipeline simply occurred. And the organisations named in the report — the International Campaign for Tibet, the CTA, SFT — now exist in perpetuity inside a threat intelligence document they did not commission.

What happens next is the interesting bit, insofar as anything happens at all. A threat intelligence report is a disclosure without a consequence: no charges, no designations, no extradition, just a PDF, a blog post and a line in a quarterly safety update. The people being watched will carry on being watched, only now with a citation. Anthropic deserves credit for publishing it, and the sector gets another data point showing that frontier capability trickles down faster than any statute can climb. Somewhere a district security office is reading this report and taking notes on what it missed.

Elizabeth Warren wants Congress to stop having 'drawn-out discussions' about artificial intelligence and start passing 'meaningful regulations', which is a bit like asking the tide to stop being wet and start being meaningfully moist. She announced it on X, on a Saturday, because that is where the American legislative process now lives — between the football scores and somebody else's reply guy. No bill number. No mark-up. No named co-sponsors. Just a demand for less chat and more law, aimed at a body whose entire business model is chat. The ambition is modest and the odds are worse.

In fairness, the diagnosis is impeccable. The federal contribution to AI governance so far has been the hearing, the framework, the voluntary commitment and the sternly worded letter — while 18 laws across 13 states got on with the actual legislating, cheerfully contradicting the White House's preemption plans from both directions at once. Warren's objection to 'additional committees' is therefore not cynicism; it is actuarial work. Every new committee is a fresh room in which the same lobbyists can explain, patiently, that the current pace of deliberation is itself a form of safety. She has watched the Senate discover AI the way it discovers everything: by scheduling a hearing about it.

What she has not supplied is the content of those meaningful regulations, which is the whole argument. Meaningful to whom? To the public she mentions protecting, presumably. To the labs, it means predictable. To the preemption crowd, it means 'not in California and not in Virginia either'. Until the words get written down, 'meaningful regulations' joins 'responsible innovation' in the drawer of phrases that cost nothing to say. Congress will almost certainly respond to the demand for fewer drawn-out discussions by scheduling a drawn-out discussion about the demand. The tweet is free. The bill is not.