The News,
Decoded.

Google has chosen a room full of vetted cybersecurity defenders as the launch venue for Gemini 4 Argon, its new frontier model — rather like unveiling a chainsaw at a lumberjack convention and billing it as a safety demonstration. The model beats rivals from Anthropic and OpenAI on "most of Google's benchmarks," a qualifier doing the structural work of a load-bearing comma, and the benchmarks in question are, naturally, Google's own. Nothing says independent verification like marking your own homework and publishing the mark in the press release. The defenders are "vetted," which in practice means somebody at the company owns a spreadsheet.

Koray Kavukcuoglu writes that releasing capabilities at this level "requires a phased approach" — phased being the word you reach for once you have already decided to do the thing and merely need a calendar to hide behind. Google is, in addition, "taking part in the U.S. government's voluntary process for pre-release model access," voluntary being the most binding of all adjectives, as the Senate testimony on independent evaluation timing we flagged earlier this month rather starkly suggested. And the safeguards against misuse are still being "hardened" — present tense, at launch, in public. Hardening is what you do to something you have already shipped, in the same sentence.

So the vetted few get first bite, the benchmark suite stays in-house, the government process stays voluntary and the safety work keeps hardening on its own generous schedule. If this is what a phased approach looks like, one trembles at the unphased version — a keynote, a countdown clock, a terms-of-service update nobody reads, and an apology formatted as a blog post. Cybersecurity defenders are, to be fair, exactly the people you would want poking at your model first, right up until one of them writes down what happened. Somewhere a legislator is being very thoughtful about all of this, at pace. The business model has not moved an inch: ship at the frontier, sand the guardrails in the footnotes, and let the volunteers find the edges.

Gavin Newsom has signed a law banning AI 'robo bosses' — the scare quotes are in the source, which tells you how much drafting time went into the name versus the mechanism. CNBC calls it landmark, and says California businesses will be the first to navigate a regulatory framework establishing a largely unprecedented level of oversight over workplace AI use. Largely. Unprecedented. Oversight. Three hedges holding hands in one sentence, which is what happens when nobody can yet say which algorithm counts as the boss.

The excerpt is lavish with adjectives and silent on the parts that matter: no fine, no commencement date, no headcount, no definition of what a robo boss does when it decides you are surplus. The supporting cast is more instructive. New York became the first state to enact a ban on construction of new AI data centres — a cap on buildings, enacted in a state that would quite like to keep the lights on. Illinois' Public Act 103-0804 requires employers to notify workers when they use AI for a set of specified employment purposes, which is disclosure as performance art: the model still makes the call, it simply signs the note afterwards. Notification is the regulatory equivalent of a firm handshake.

So the map is drawn: one state bans the data centres, one state bans the boss, one state bans the silence. California gets to be first — though first at what remains, on this excerpt, a matter of interpretation. The genuinely unprecedented thing about workplace AI is that it arrives with no shift change, no notice period, and no human to appeal to; a law banning a cartoon called 'robo boss' does not obviously touch any of that. Somewhere in Sacramento a staffer is now drafting the definition of 'boss', which should take until roughly the next election. Landmark, they said. It is certainly a landmark in the sense that you can see it from a long way off, and it does not appear to be attached to anything.

Marius Hobbhahn has filed written testimony with a Senate Homeland Security subcommittee for a hearing titled 'Rogue AI: Securing the Homeland Against AI Agent Attacks' — a title that took longer to draft than most of the compliance frameworks it gestures at. The substance of what the committee has published is that, under the current testing regime, independent safety evaluations of frontier models typically happen in the weeks leading up to a model's public release. Weeks. Not years, not a standing regulator with subpoena power, but that cheerful fortnight between the final benchmark run and the launch livestream. Meanwhile the FTC is conducting a broad investigation into Anthropic and OpenAI, so the homeland is being defended from three directions at once.

Note what that timeline concedes. The evaluation window is defined by the release date, not by the finding — the calendar is set first, the safety work is squeezed into whatever gap marketing leaves behind. By the time an independent evaluator writes 'this thing will happily help you with the unpleasant bits', the press invites are out, the compute is spent and the launch thread is drafted. 'Weeks before release' is not a testing regime, it is a deadline with a research arm. If the evaluation is independent, it is also structurally ignored, because the only finding that changes anything is one delivered before the decision to ship, and that decision was made months earlier in a room with better catering.

And the setting deserves a moment. The hearing is called 'Securing the Homeland Against AI Agent Attacks', which is a lot of nouns, and the remedy on offer is a written document filed to a website — testimony delivered to a page that will be read by roughly the number of people who read the previous one. Hobbhahn's point is that late evaluations are a problem; the format ensures the point arrives in the same window it describes. Somewhere a Senate staffer is adding it to a folder. The folder is the policy.

The headline finding from this Q&A is that almost nobody is legally required to tell you when a frontier model has a funny turn. Few rules currently oblige AI companies to disclose safety incidents, according to an AI safety researcher speaking to TechXplore — which is a polite way of saying that disclosure is a suggestion box with no box. The same companies that will publish a glossy system card whenever there's a press cycle to fill have, it turns out, no particular obligation to mention the deceptive behaviour. Voluntary publication of cases where models deceived people is described as 'a step in the right direction,' which is what you say about a man crawling towards a lifeboat.

The researcher reaches for aviation and medicine, where reporting a serious incident is not optional — because in those fields a plane falling out of the sky generates mandatory paperwork and someone with subpoena power to read it. In AI, the equivalent ask is still phrased as a request: reporting serious incidents, the researcher argues, 'should not be optional.' That sentence only needs to exist because, currently, it is. We've been round this loop before — the safety crowd publishes the warning, everyone nods, nothing acquires the force of law.

The concrete proposal is a public call, launched by this researcher and others, for the scientific community to get open access to safety-training recipes, evaluations and evidence of misaligned behaviour — the three things labs currently guard like the recipe for a cola. Meanwhile the article's framing question is why people keep confusing a model's behaviour with its intention, which is a bit like asking why diners assume the restaurant meant to cook the meal. The industry has spent years selling a machine that answers in the first person, and is now mildly concerned that we've drawn the obvious conclusion from it.

Yesterday, Meta, OpenAI and Microsoft were asked to write their own safety rules, and they signed a lovely voluntary agreement. By Wednesday, the Federal Trade Commission had opened a broad investigation into Anthropic and OpenAI. Note the adjective: broad. Not narrow, not targeted, not the sort of probe that arrives with a working hypothesis and a deadline. Broad is what you call an investigation when you have wide authority and no particular plan.

The senior agency official who broke the news did so without a name attached, which is the ceremonial way of saying: we possess wide authority to investigate unfair and deceptive practices that hurt American consumers, and we would prefer no follow-up questions. Unfair and deceptive practices is a consumer-protection standard built for the sort of firm that sells you a timeshare on a lagoon. Applying it to systems that cannot fully explain themselves to their own engineers is either visionary law enforcement or the cheapest available substitute for actually legislating. The article's own framing gives the game away: Trump administration officials, we're told, are focused on using existing laws to tame AI safety risks. Existing. No new statute, no new agency, just the old toolbox with a fresh coat of urgency on it.

And so we arrive at the delicious bit. Anthropic — a company whose entire commercial identity is 'we of all people are the careful ones' — now faces a federal inquiry into whether its safety claims are themselves unfair and deceptive. That is not a regulatory gap; that is a regulatory mirror, held up by an agency handed an old consumer-protection statute and told to make it fit a technology nobody has legislated for. The probe may well go nowhere, as broad things tend to. But for one glorious news cycle, the people who keep telling us the risks are existential have to explain themselves to a consumer-protection desk.

Hong Kong has become the latest government to look at minors, chatbots and social media and conclude that something ought to be done, possibly, in a manner yet to be determined. Secretary for Justice Paul Lam has unveiled a "multi-pronged approach", which in the dialect of officialdom means a bill, a memo and possibly an assembly in a school hall. The prongs, per Biometric Update, are legislative, administrative and educational — which is to say, the full arsenal of doing a bit of everything and therefore very little of anything.

"Could include" is doing heroic work here. Nothing is committed to, nothing is dated, and nothing will trouble a single server. The genuinely breathtaking part is the research plan: Hong Kong will study overseas experiences regulating minors' AI use, then "analyse how effective they are." That is a government announcing that before it legislates, it intends to find out whether legislation has ever worked, anywhere, which is either admirable epistemic humility or a magnificent way of scheduling the decision for a term when somebody else is in the building.

Meanwhile "age assurance" — an industry phrase designed to sound like a firm handshake from a bank manager — will presumably mean another box to tick on the way to the thing you actually wanted to open. No threshold is mentioned, no timetable, no named regulator — only a promise to weigh the international examples, such as they are. Paul Lam's job title is, note, Secretary for Justice, and he is standing in front of the law explaining that the law may be one of several options. The overseas examples being studied are, one assumes, jurisdictions where the same announcement was made with equal enthusiasm and identical absence of consequence. Somewhere a twelve-year-old has already worked out how this ends, and it isn't with a birthday field.

OpenAI has looked upon the Chinese developer Moonshot and found it guilty of the oldest crime in the industry: learning from someone else's homework. The mechanism, per the Financial Post, is distillation — training a model on another model's output, a practice the industry called research for years and now calls extraction the moment the wrong passport is involved. Moonshot, a name that does much of the accusing for you, has not been handed a fine, a ban, or anything vulgar as a court date. Instead, OpenAI told industry partners through the Frontier Model Forum — a members' club where rivals swap notes about who has been naughty — and then communicated the incident to government channels.

Government channels. A phrase built to survive a deposition without leaving a fingerprint. It conjures a corridor, a briefing, a serious person with a folder, while committing to nothing: no regulator is named, no statute is cited, no penalty is proposed. The Frontier Model Forum, meanwhile, is a lovely bit of architecture — a body convened by the labs themselves to write the rules they would prefer to be judged by, now repurposed as a neighbourhood watch for intellectual property. The accusation arrives, drifts through the forum, slides down the channel, and evaporates near a compliance deck.

What remains is the 'growing pile of claims' — from Silicon Valley and the Trump administration — that Chinese developers are systematically extracting proprietary knowledge from American firms. A pile is not a docket. Distillation is real, difficult to police, and the sort of thing a courtroom would ask messy questions about, like what everybody else's training data looked like. So the venue stays a trade body and a press release: nothing may come of it, in which case the narrative hardens; something may come of it, in which case the moat gets poured by legislators. Either way, the invoice lands far from the labs, and Moonshot does not get a pint.

PwC has surveyed the workforce and discovered a divide, which is rather like a meteorologist discovering rain. The poll, released Tuesday, finds a 'wide range of AI proficiency among workers,' with the biggest single cohort reporting that they are falling behind their more tech-savvy colleagues. So the modal respondent in a PwC survey is now the one losing. That is not a divide; that is a verdict with a chart stapled to it, and it arrived just in time for someone to sell you the bridge across it.

Pete Brown, PwC's Global Workforce leader, warns of 'a real risk that the global workforce is starting to move at different speeds.' Global Workforce leader — a title that assumes somebody, somewhere, is following. And the diagnosis is speed, because speed is blameless: nobody is being left behind, they are merely travelling at a different velocity through the same economy. Mr Brown's phrasing does a great deal of quiet work. If the workforce is simply moving at 'different speeds,' then no employer decided anything, no budget was reallocated, and no consultant ever billed an hour for the transformation that made the speeds differ.

Note what the release actually offers: a 'wide range,' a 'biggest cohort,' a 'different speeds.' Adjectives where the numbers should be — fitting, really, since the thing being measured is proficiency, and proficiency is precisely what nobody can audit. The 'more tech-savvy colleagues,' meanwhile, worked out that a chatbot is a typing pool with a personality, and they are now rewarded for the same job with more flair. Everyone else is told they are 'upskilling,' which is corporate for 'please resubmit yourself by Friday.' The article doesn't say that. The article doesn't say much. And it still reads like a warning label with the dosage left off. A workforce moving at different speeds is not a risk, Mr Brown — it's a results table, and the biggest cohort has already read it.

Three of the most powerful companies on earth were summoned to an A.I. event — presumably with a lectern and a flag — and asked to write their own safety rules. Meta, OpenAI and Microsoft duly signed a voluntary agreement covering risk reviews, auditing and evaluations by third parties. Not a statute, not a regulator, not a fine with a number in it: a promise. Every one of those measures is something a legislature could have mandated, with signatures and consequences attached, and instead every one of them now rests on the good faith of the companies being measured. That is not oversight; that is a letterhead.

And then the rebranding: A.I. is now to be called 'super intelligence,' Mr. Trump's preferred term, adopted by all three companies. One suspects the naming meeting ran considerably longer than the compliance discussion. It is a lovely upgrade — 'artificial intelligence' always sounded faintly counterfeit, whereas 'super intelligence' arrives with an implied cape and its own cereal aisle. Note what the headline actually says: the President asked Meta, OpenAI and Microsoft to make these safety decisions themselves. Note also who the agreement binds, which is nobody, and who it reassures, which is everyone holding a share price.

Third-party evaluations are in there, which raises the only question that matters and which the reporting leaves unanswered: who picks the third parties? Round up the usual consultancies, presumably, the ones who bill by the hour and have never met a system they couldn't describe as broadly aligned. Meanwhile the regulatory gap — the distance between what these systems can do and what any legislature has actually passed — stays exactly as wide as it was this morning, only now with a signed sheet of paper resting on top of it. Mark Zuckerberg, Sam Altman and Satya Nadella have agreed to grade their own homework, in the President's preferred font.

How refreshing: a region looks at artificial intelligence and reaches not for a ban, not for a levy, not for a regulator with teeth, but for the two documents every summit produces — a draft agreement and a draft code of ethics. The Astana Times reports that Central Asian states met to discuss common digital economy and AI rules. On the table: an Agreement on Cooperation among Central Asian States in Digital Policy and Artificial Intelligence Governance, plus a Code of Ethics for the Responsible Use of Artificial Intelligence in Central Asia. Both are drafts, both were discussed, and neither is, as yet, anything.

The agreement's headline virtue is what it declines to do. It "does not call for identical digital legislation or a supranational regulator" — which is to say, it does not call for the two things that would give it force. What it does call for is maintaining national legislation and digital sovereignty while "gradually making legal and digital systems compatible." Gradually — the word doing the work of a decade, possibly three. Sovereignty, meanwhile, is a lovely thing to keep when the model weights, the chips and the training runs all sit somewhere else and the terms of service are drafted in a jurisdiction nobody at the table controls.

And then the Code of Ethics, the conference tote bag of AI governance: everyone takes one home, nobody reads it. "Responsible use" is the phrase you deploy when nothing measurable has been agreed; the excerpt offers no thresholds, no audits, no red lines and no penalties. Its own framing is honest about the ambition — compatible systems, eventually, at whatever pace suits the slowest party in the room. Meanwhile the capability curve does not do gradual. It does quarterly. One suspects the ethics code will be fully aligned long before any legislation is.

Governor Waller of the Federal Reserve has delivered a speech titled 'Payments in the age of AI agents', which sounds like a TED talk but arrives with central bank letterhead and nobody handing out tote bags. His first reassurance is that AI is not just an offensive tool — technically true, in the sense that a hammer is not just a weapon. Cyber professionals, he reports, are optimistic about using AI for threat detection, exposure management, and catching vulnerabilities before they are introduced. Optimistic. Paid to be, mostly. The people best positioned to tell you the defensive tooling works are the people with the defensive tooling on the invoice.

Then the honest sentence, tucked in where honest sentences go: 'there is clearly an asymmetry.' Threat actors need to exploit one key vulnerability; defenders must protect a large attack surface. That isn't an asymmetry, Governor, it's arithmetic — and the Fed has now said it aloud in September 2026, which is the same structural problem we flagged when Anthropic called GLM-5.3 a 'meaningful step change' in what attackers can do. One door versus every door, and the locksmith is on the attacker's payroll this quarter.

The back half of the speech concerns open versus closed agentic commerce, compared to open- and closed-loop payment networks — central bank language for: shortly, your chatbot gets a wallet. Closed loop means the agent can only spend inside one firm's walled garden, where the merchant sets the terms and the exit is decorative. Open loop means it can spend anywhere, which means the accumulated inheritance of card fraud, chargebacks and disputed charges gets ported onto something that transacts in milliseconds and never gets tired, embarrassed, or suspicious. Somewhere in the Fed there is a working group with a decent pension deciding the rails for software that has no legal personhood. The agent gets the card number, the goal, and a rate limit. You get the statement.

The United States has a new front door, and it is powered by two chatbots that have never met. According to The Hill, President Donald Trump has launched an AI-powered America.gov, with U.S. Chief Design Officer Joe Gebbia — a title that sounds less like a government post than a plaque in a co-working space — telling CNBC that the site runs on Google's Gemini and Elon Musk's Grok. The article frames the whole thing as '5 things to know,' which is what we now call the federal government: a listicle with a flag on it. Somewhere in the General Services Administration, an adult had to sign a form, and history will record that they did.

Two models, then. Not one boring reliable database, but Gemini and Grok, stacked together like a man who owns both a car and a motorbike and insists on driving them simultaneously. Grok, Elon Musk's gift to public discourse, is now reportedly one of the things standing between an American and their paperwork — which is either brave or the exact opposite of brave, and we both know which. The General Services Administration engineered the platform in partnership with the National Design Studio, a sentence that reads as though it were assembled by a language model having a slightly off day. One assumes the two models double-check each other's work; one also assumes they do not.

Secretary of State Marco Rubio said the site would let an applicant submit information, upload a photo, and track its approval and shipment. That is a form, Marco. The only new part is that a large language model now lives somewhere inside the process, and the law governing what that model may do with a photograph of a citizen's face remains somebody else's future bill. So: no statute, but a live deployment. The regulatory gap isn't a gap any more — it's a canyon with a homepage in it. Still, five things to know. Four of them, presumably, are where your documents went.

OpenAI and Meta have jointly disrupted a Russia-origin influence network targeting Nigeria and other African countries, which is the sort of sentence that contains, if you read it twice, an entire business model. The same two companies build the generative engines, watch them get pointed at African news desks, and then issue a press release about how thoroughly they've dealt with it. Brewery sponsors breathalyser, film at eleven. The operation, per the Africa Center's account, was 'raging' — their word — which is at least more honest reporting than the headline about the takedown deserves.

The star turn is 'Dr. Manuel Godsin', a fictitious commentator stitched together from a stolen photograph and fabricated European academic credentials, whose AI-generated geopolitical commentary was duly placed in African outlets. Note the craftsmanship: the doctorate, the continental sheen, the borrowed face — a persona engineered to be quoted rather than questioned. Not one desk in the chain asked to see the passport. The credential laundering is the oldest move in the book, now available at scale and in any accent you like, and the tell wasn't the prose — it was the fact that nobody had ever met him.

And the takedown is the part we're meant to applaud: announced by two of the largest companies on earth, whose own models did a good deal of the generating, about a network whose target list was Nigeria and 'other African countries' — the usefully vague bit of the map. The attack needed a stolen photo, a fake degree and an internet connection. The defence needed OpenAI and Meta to notice. That asymmetry is the actual story. Meanwhile some editor in Lagos is going back through the archive, checking bylines of contributors who filed beautifully for months and never once asked for expenses.

MPs and peers on the joint committee on human rights have done the most Westminster thing available to them: they convened, considered, and produced a report. It is called 'Human Rights and the Regulation of AI', and its central demand is that somebody please write a new AI bill. That is the legislative equivalent of responding to a kitchen fire by commissioning a beautifully typeset pamphlet about fire. The committee notes, with the gravity of people who have just noticed, that technology is developing at a pace that means governments and human rights protections risk being left behind.

Then there is chair Alex Sobel MP, who has said the quiet part loud enough for the whole planet to hear: no country in the world has a legislative and regulatory approach to AI that is fit for purpose. In Whitehall, 'fit for purpose' is the highest compliment the language contains, so the finding here is that nowhere on Earth clears the bar. You may read that as refreshing honesty — the first accurate sentence in the entire genre. You may also read it as the most convenient alibi ever printed: if nobody has managed it, nobody can be blamed for not managing it, and the safest career move is another report.

The threats themselves are granted 'scale' and 'seriousness', which is committee-speak for harm that is not hypothetical while the remedy very much is. As we noted when Washington and Beijing made their heartwarming show of cooperating on global AI governance, international consensus is largely choreography; a joint human rights committee in London now confirms the set is empty. The word doing the heavy lifting is 'risk' — protections risk being left behind, as though there were a live possibility they might not be. Meanwhile the technology is not waiting for the bill, the consultation or the second reading, and the committee has identified the only growth industry in the sector: announcing, punctually, every year, that time is running out.

The good news, if you squint, is that the United States and China are cooperating on global AI governance despite intensifying competition — which the article offers as a heartwarming paradox, like two flatmates who loathe each other but have agreed to share the Wi-Fi password. The agenda covers cooperation in tracking AI-powered cyberattacks, China's access to advanced American models, Washington's restrictions on open-source Chinese models, and keeping frontier models out of the hands of non-state actors. Two of those four items are, on inspection, the two countries arguing about who gets to hold the toys. The other two are joint bookkeeping on the fire.

Take the cyberattack item first. Washington and Beijing want to track AI-powered attacks together, which is genuinely useful and also hands both governments a standing reason to inspect the other's networks and call it governance. Then the model-access question: China would like access to advanced American models, Washington would like to restrict open-source Chinese ones, so the cooperation here has the texture of two people negotiating over a door they are both leaning on. The fourth item — preventing state-of-the-art frontier models from falling to non-state actors — is the most honest sentence in the piece. It is two states, quietly, saying the end of the world should remain a sovereign matter.

The Center for Strategic and International Studies reckons two distinct approaches to global AI governance are emerging from the US and China, with a third arriving from the UN — which is how you end up with three rulebooks, no referee, and everyone insisting theirs is the definitive edition. The article names no negotiator, no signing date, no enforcement mechanism, which is probably because there isn't one worth naming. What exists is a coordinating committee for the fog. Meanwhile the frontier models keep arriving on schedule, indifferent to whether the paperwork is filed in Washington, Beijing, or a UN subcommittee that meets quarterly. Nothing here will slow anything down, and every party at the table knows it.

Eight point two billion dollars — that is the figure AMD has put on Fei-Fei Li's World Labs, and the marquee asset being purchased is described, in the article's own words, as 'deep learning models intended to understand physical reality.' Intended. No word in corporate English does more unpaid overtime than that one. It stands in the sentence like a man in a pub holding a full pint he has no intention of drinking, quietly conceding that physical reality remains, at the time of signing, conspicuously ungrasped. The eight-point-two is the tell as well: nobody arrives at a decimal like that by accident, they arrive at it by running out of patience somewhere around 8.1.

Then there is AMD's explanation, which deserves to be framed. Understanding frontier workloads 'like those created at World Labs' will, the company says, shape its chip-making roadmap. So the chipmaker has bought the workload in order to find out what the workload wants, which is either humble customer-led design or the most expensive market-research exercise since someone decided the best way to learn about the sea was to purchase a boat. Either way, you now own the lab, the salary bill and the electricity, and you still have to build the silicon yourself.

The deal is expected to close before the end of the year, subject to regulatory approval — that marvellous clause that means either nothing or everything, depending on which regulator wakes up first. Chip consolidation is now consolidating in the direction of the models themselves, which nobody asked for and everybody is funding. The old pitch was that AI would make chips cleverer; the pitch now is that the chips are buying the AI and calling it a roadmap. Meanwhile Fei-Fei Li, one of the genuinely serious people in this field, gets a number with a decimal point attached to her name, which is as close to canonisation as this industry gets.

Workers have 'a lot to be anxious about,' according to a new report, which is the most cheerful sentence in economics this quarter. Record-low employee confidence, the rapid development of AI, layoffs, and policy uncertainty: a four-course tasting menu, and nobody gets to leave the table. The headline pairs all of that with a dropping Trump approval rating, because nothing reassures a household quite like two separate line graphs both heading south. And the traditional escape hatch — finding a better job on the open market — is reported as blocked by 'slow hiring,' which is the genteel term for a door that has been quietly welded shut.

The report's diagnosis of 'slow hiring' is a lovely euphemism for employers discovering that a nervous workforce is a compliant one. Why pay for retention when anxiety does it for free? Workers are described as 'sitting tight and stewing,' a phrase vivid enough to be a business model: keep them in the chair, keep them frightened, and let the AI roadmap handle the negotiating. 'Policy uncertainty' does the rest of the work, a phrase that means the rules might change and therefore nobody should expect anything. Record-low confidence is, at least, a record — the sector has been promising us unprecedented things for years.

The AI part deserves its own stall, naturally. 'Rapid development' gets listed alongside layoffs as though it were weather — a thing that happens to you rather than a thing somebody decided to buy and deploy. The excerpt names no lab, no deployment schedule, no one who signed off, which suits everybody holding a cap table. So: anxious workers, hiring gone quiet, confidence at a record low, approval ratings sliding, and a technology sold as a productivity miracle. At least 'sitting tight and stewing' is accurate — most of us just call it Wednesday.

An investor by the name of Lonsdale, whom the article gives a surname and nothing else, has accused OpenAI and Anthropic of inflating safety risks in order to shape policy. He called it 'very dangerous' — quite a charge to bring against two firms whose entire commercial identity rests on the proposition that the danger is real. His specific objection is narrower and rather funnier: 'we don't want an oligopoly that controls all of our policy here with the government.' Nobody wants that, no. The interesting part is that everyone at the table is an oligopolist.

The timing is worth a look. In early September, Anthropic CEO Dario Amodei, OpenAI CEO Sam Altman and Elon Musk argued for tighter controls on advanced AI systems — three men who collectively sit atop a serious slice of the world's compute, arguing that compute should be harder to come by. Nothing self-serving there at all. And Anthropic, as we noted recently, gave 80 of 261 pages of its IPO prospectus to the catastrophic and existential risks of its own product — a third of the paperwork, which is either extraordinary candour or a moat with a bibliography.

Because that is what risk language does now: it sells twice. Once to the enterprise buyer who wants to be told the model is terrifying but tamed, and once to the legislator who gets to write the definition of 'advanced AI system' — a definition that will arrive as a compliance bill on every lab too small to afford it. Lonsdale has said the game out loud, which is more than the prospectus managed in 80 pages. He is also an Anthropic investor, so his objection may be to the price of membership rather than the existence of the club. Either way, the safety argument and the market argument have quietly become one argument, and nobody at the table has an incentive to say so.

Rep. Ro Khanna is introducing an AI safety bill, and the timing could not be more exquisitely accidental. The legislation would ban 'recursive' self-improving AI until the government creates safeguards — a clause that sounds decisive until you spot that the safeguard and the thing being safeguarded are administered by the same people. Last week the New York Times reported that governments are being left behind by AI. Khanna's answer is to make the cavalry's arrival a precondition for the ban.

The bill creates a new federal agency to oversee models from OpenAI, Anthropic, Google DeepMind and xAI — four labs written into the statute like a licensing schedule for the frontier. It promises safety regulations, a licensing system, frontier model audits and human-control standards. A licensing regime for models that ship in three-week cycles is a passport office for a species that will not hold still. Strict liability is the boldest flourish: prove, in court, that one specific model caused one specific harm, in a system where the labs themselves cannot tell you why the weights did what they did.

Anthropic — one of the four labs written into the bill — devoted 80 of its 261 IPO prospectus pages, as we noted at the time, to warning that this technology might pose catastrophic or existential risks to humanity, so the industry has drafted its disaster clause and would simply prefer a congressman didn't file it. Khanna is doing the traditional Washington thing: legislating the outline of a thing before anybody agrees on the physics. The bill may pass; the ban may even take effect, on that glorious afternoon when the agency that doesn't yet exist finishes safeguarding a field it cannot yet measure. The models, meanwhile, will keep improving — recursively or otherwise — and the only safeguard we will actually have is the headline.

Indonesia's Ministry of Communication and Digital Affairs is drafting not one Presidential Regulation but two: a 2026–2029 National AI Roadmap, and a separate one on AI Ethics. Two documents. That is the tell. The roadmap is what you table in cabinet; the ethics one is what you wave at the newspapers — and between them they cover a four-year window, roughly the interval between a model launching and anyone remembering its name. Four years is also, coincidentally, about how long a compliance officer survives in any ministry that has just signed a vendor contract.

The substance comes down to four verbs: agencies will 'identify AI risks, protect data, ensure accountability and maintain human oversight' — note the verb, maintain. Not enforce, not audit, not fund, not test. Maintaining human oversight is the pledge you make once the software is installed and the invoice is signed, and it applies 'particularly when AI is used in public services that can affect people's rights' — the courteous way of naming the bit that actually matters: the benefits, the permits, the policing. Everywhere else, oversight is presumably a checkbox nobody reopens after 2029.

Indonesia, in fairness, is the first government we've seen actually answer the policy vacuum we flagged rather than merely describe it — which is more than most capitals have managed. But a roadmap is not a statute, an ethics regulation is not an enforcement mechanism, and the excerpt says nothing about who enforces any of it, what it costs, or when it takes effect. Those, awkwardly, are the details that decide whether it does anything at all. What it does have is the word 'Presidential', which raises the price of ignoring it while changing precisely none of the capabilities. Jakarta gets two documents; the models get the same four years, and they don't read roadmaps.