Which rules, classifications, standards, and decision rights change what organisations must do?
Senators are discussing mandatory mitigation of known major risks and possible federal release controls. With no public draft, the useful signal is the proposed control model—not a compliance deadline.
A new child-safety package requires AI chatbot operators to assess risks before rollout and adds independent-evaluation infrastructure. Product teams now need evidence that controls work in context.
OpenAI's sector product combines financial datasets, firm templates and enterprise controls for bankers and researchers. That makes entitlement design and review evidence part of the job architecture.
The provider says AI was used across reconnaissance, exploitation and exfiltration, sometimes through multi-agent workflows. Defenders need faster adaptive loops, but the evidence remains provider-observed and selectively disclosed.
The framework update is still in development, but its emerging direction points towards responsibility, supervision and role design rather than a catalogue of fashionable AI tools.
DeepMind and external evaluation partners report a way to test a proprietary model without revealing either its weights or the evaluator's private prompts.
The binding law separates provider duties from deployer duties and machine-readable marking from disclosures people can perceive. The Commission's guidance helps, but it is not the law itself.
Regulation (EU) 2026/1744 sets different dates for Chapter III, Sections 1–3 duties for Annex III and Annex I high-risk systems. Other AI Act clocks continue.
