Requires a report on AI regulation in finance, establishes AI bug bounty programs, mandates vulnerability analysis for military AI, requires a report on data sharing, and for other purposes.
Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.
Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.
All other risk subdomains had no coverage in this document.
Risk Coverage Summary
The document has good coverage of approximately 6-8 subdomains, with strong focus on AI system security (2.2), malicious actors and cyberattacks (4.2), competitive dynamics (6.4), governance failure (6.5), and AI safety failures including dangerous capabilities (7.2) and lack of robustness (7.3). Coverage is concentrated in security, vulnerability assessment, and governance domains.
Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.
Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.
All other sectors had no coverage in this document.
Sectors Summary
The document primarily governs two sectors: Finance and Insurance (through comprehensive reporting requirements for financial regulatory agencies) and National Security (through extensive requirements for DoD AI vulnerability analysis, bug bounty programs, and data sharing). Both sectors receive detailed governance measures with specific compliance timelines.
Hard Law
Legislative Status Summary
This is a binding legislative act introduced in the U.S. Senate with mandatory requirements for federal agencies and the Department of Defense, using mandatory language throughout and establishing specific reporting deadlines and compliance obligations.
Proposer
Target
Enforcer
Monitor
Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems
AI Lifecycle Summary
The document primarily addresses the Deploy and Operate and Monitor stages through bug bounty programs and ongoing vulnerability analysis. It also covers Verify and Validate through required studies on testing, training, and auditing of AI models. There is some coverage of Build and Use Model through references to foundational AI model development and integration.
Terms relating to technical scope that are mentioned or implicitly referenced in the document
Technical Scope Summary
The document explicitly mentions foundational AI models (defined as adaptive generative models) and AI-enabled military applications. It does not explicitly mention frontier AI, general purpose AI, task-specific AI, or compute thresholds. There is no explicit mention of open-weight or open-source models.
Document data from AGORA, CSET Emerging Technology Observatory.