Rep. Anna Paulina Luna's Office Reportedly Published Claude Transcript Residue on Accident in House Amendment Summary

A staffer in Rep. Anna Paulina Luna's office reportedly used Claude to prepare a summary for an amendment to the FY2027 National Defense Authorization Act and accidentally pasted chatbot transcript residue, including a timestamp and "Claude responded:" marker, into the public House Rules Committee record. The summary was reportedly later corrected. Luna confirmed that her staff used Claude for the summary, not to draft the amendment itself.

Risk classification

• Primary risk domain: 5 Human-Computer Interaction
• Primary risk subdomain: 5.1 Overreliance and unsafe use

The staffer over-relied on the AI system to draft the amendment summary and pasted the output directly into the public record without proper review, including the AI's metadata.

Additional risk subdomains

• 6.5 Governance failure: Congress's internal rules on AI use are poorly understood, unenforced, and lack centralized oversight, leading to a 'free-for-all' environment.

Causal factors

• Entity: Human
• Intent: Unintentional
• Timing: Post-deployment

The incident was caused by a human staffer's careless action of copying and pasting raw AI output into a public document, which was an unintentional oversight.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Limited Risk: The AI systems used are general-purpose chatbots (Claude, ChatGPT, Gemini, Copilot). According to the definitions, chatbots and AI-generated content fall under Risk Level 3, which requires transparency obligations so users know they are interacting with AI.

AI system and alleged parties

• AI system: Claude (Anthropic)
• AI purpose: Writing Assistant; Content Curation
• Behaviour type: Assistant
• Alleged developer: Large language model developers, Chatbot developers, Anthropic
• Alleged deployer: Office of Rep. Anna Paulina Luna, Congressional staffers
• Alleged harmed parties: General public of the United States, General public, Epistemic integrity, Congressional public records

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Negligible. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Negligible, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Negligible, indirect Negligible
• Psychological: direct Negligible, indirect Negligible
• Epistemic: direct Negligible, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

People affected

• Occurrences reported: 1
• People reportedly exposed: 1

Potential causes

Management

• Lack of Office Level Policies: Individual offices fail to implement and maintain written AI usage policies.
• Inadequate Staff Training: Management does not train staffers on safe and compliant AI integration.
• Prioritizing Speed Over Safety: Management encourages rapid AI use to save time without safety oversight.

Technology

• Chatbot Output Formatting: AI outputs include metadata and timestamps that can be copied accidentally.
• No Automated Submission Checks: Public record submission systems do not screen for AI-generated text markers.

Human Factors

• Negligent Copy-Pasting: Staffer copied chatbot text including 'Claude responded' into public record.
• Overreliance on AI Chatbots: Staffers trust AI outputs without conducting thorough manual proofreading.
• Ignorance of AI Guidelines: Staffers are unaware of the rules governing AI use on Capitol Hill.

Process and Methods

• Absence of Peer Review: No secondary review was performed on the summary before public submission.
• Informal Copy-Paste Workflows: Workflows rely on manual copy-pasting from external chatbot interfaces.

Regulatory Environment

• Unenforced AI Guidelines: Existing rules are poorly understood and there is no active enforcement.
• Absence of Standardized Mandates: No uniform, binding regulations exist across all congressional offices.

Information quality

• Classification confidence: High
• Reason for confidence: The reports provide clear, consistent, and detailed accounts of the specific copy-paste incident involving Rep. Luna's staff and Claude, as well as the broader context of AI adoption in Congress. The facts are well-documented with direct quotes from lawmakers and staffers.
• Alternative interpretations: The incident could be viewed purely as a minor human copy-paste error rather than an AI safety incident, but the systemic lack of AI governance in Congress makes it a relevant case study for AI safety and policy.

A US congressional staffer accidentally included Claude metadata in a public amendment summary for the National Defense Authorization Act. While the incident itself caused negligible direct harm, it highlights the broader, unregulated adoption of commercial AI tools by legislative staff, posing minor long-term risks to information security and government administrative governance.

• Overall national security impact: Minor
• Scope: Single nation
• Primary target: United States
• Alleged perpetrator: US congressional staffer

Threat characteristics

• Imminence: Long-term. The incident represents an ongoing strategic concern regarding unregulated AI use in government rather than an active, immediate crisis.
• Autonomy: Human-controlled. The AI system was used as a writing assistant, acting strictly under the manual control and direction of the congressional staffer.
• Novelty: Established threat. Using AI chatbots for drafting and making copy-paste errors is an established, common human error with no novel technical exploitation.

Impact by dimension

• Physical security: Negligible. No physical security threats, kinetic attacks, or critical infrastructure impacts were reported in connection with this copy-paste incident.
• Information security: Minor. While no classified intelligence was leaked in this specific copy-paste incident, the unregulated use of commercial AI models by congressional staff to process potentially sensitive data poses minor information security risks.
• Sovereignty: Minor. The incident occurred within the legislative branch during the drafting of a major defense bill, highlighting a lack of governance, but it did not disrupt or compromise core government operations.
• Economic security: Negligible. No economic warfare, financial system disruption, or strategic technological theft occurred as a result of this incident.
• Societal stability: Negligible. The incident did not result in societal instability, civil unrest, or human rights violations.