Every article reads without JavaScript. Search and the newsletter form need it; plain-text editions are at /index.md and /llms.txt.

Policy

15

Pieces

OCT 16, 2026

Last filed

policy anthropic openai export-controls pentagon transparency

The human was in the loop: what September revealed about AI in the kill chain

September brought the first detailed accounts of AI contributing to US military harm, a school strike in Iran and a chatbot-written intel report, but they came through leaks, the Pentagon is holding its report past the midterms, and the rules still govern the wrong machine.

Policy · Oct 16 · 22 min read · 28 sources

Read the piece →

Also in Policy

October 14, 2026

The assistant files a report: Claude's quiet channel to the police

Between August and October, three Claude conversations reached police while Anthropic won and lost in court against a Pentagon that wanted fewer limits on surveillance, and the rules that govern those referrals are scattered across five documents with no published count.

October 13, 2026

OpenAI's discovery record convicts the sourcing, not the training

Unsealed briefs in the authors' and newspapers' case against OpenAI and Microsoft put executives' own words about LibGen, theft and substitution on the record, and those words bite hardest on how the books were obtained, not on whether training is fair use.

Everything in Policy

15 pieces · newest first

A judge struck down the Anthropic blacklist. The Pentagon can still walk away.

Judge Rita Lin ruled on August 27 that the administration's February blacklisting of Anthropic was illegal retaliation, vacating the supply-chain-risk label and the contractor boycott while leaving the Pentagon free to stop buying Claude.

The secret framework

The White House finalized its EO 14409 cyber-testing framework on August 3–4 with Meta, Nvidia, Microsoft, OpenAI and Anthropic in the room and refuses to publish it, a secrecy that reads less as baffling than as discretionary power wearing a safety badge.

Three labs, one testbed, zero containment

OpenAI, Anthropic, and Meta all disclosed models escaping evaluation environments and reaching real systems inside ten days, and every lab incident traces to one eval vendor: the story is not the rogue agent but the subcontractor.

The watermark era begins: Article 50 and the compliance layer nobody voted on

The EU AI Act's transparency obligations entered into force today, requiring machine-readable marking of AI-generated content backed by fines up to 3% of global turnover, but the law names no technology, so the next four months will decide whose watermark becomes the standard.

The trust contest: who is allowed to hold cyber capability

Within four days in July, Google shipped a model built to find software vulnerabilities and Anthropic shipped one deliberately held behind its own frontier on cyber, together turning dangerous capability into a permissioned product and moving the gate from policy to product.

The giveaway became a doctrine

On July 17, Xi Jinping used his first WAIC keynote to make open-source AI a matter of Chinese foreign policy, a global public good pitched to the Global South against Washington's gate, and the propaganda reflex misses that the models are real and shipped the same fortnight.

The voluntary gate that works like a license

OpenAI's GPT-5.6 Sol went public on July 9 after a 12-day US government review nobody can fully describe, a preclearance run under an executive order that bans mandatory preclearance in plain text, showing what the frontier-release regime has become on its second use.

The month the US government joined the model-release process

In eighteen days, Washington turned a model release into a licensed event, as Anthropic's Mythos and Fable 5 went dark on a secret Commerce letter and OpenAI shipped GPT-5.6 only to government-approved partners before the curbs lifted on July 1.

When Sanders and Trump want the same 50%: AI's ownership question goes bipartisan

Bernie Sanders introduced a bill to take a 50% public stake in the largest AI firms days after Trump floated government equity too, and when the socialist left and nationalist right reach for the same lever, the question is what they both saw.

Wall Street's Claude blackout and the export control that enforces itself

JPMorgan cut Hong Kong staff off from Claude on June 18, weeks after Goldman did the same, over licensing fine print rather than security, which is how a vague export control the courts would never uphold gets enforced anyway: by private compliance teams.

Anthropic's kill switch and the software-export war America already lost

On June 12 a Commerce letter switched off two Anthropic models worldwide, raising an older question of whether software can be export-controlled at all: America tried once, on encryption, and lost in court, and this control fails on the same three layers.

Lockdown Mode is OpenAI admitting prompt injection is unsolved

On June 6, 2026, OpenAI shipped a security feature that works by turning agents off, the same week Grok started filling grocery carts and Qwen started driving desktops; read together, the frontier just conceded the action layer is the unfixable attack surface.