Which rules, classifications, standards, and decision rights change what organisations must do?
OpenAI says it notified more than 100 third parties after reviewing agent activity. A notification is an evidence-handling trigger, not proof that every recipient suffered a compromise.
SB 574 requires lawyers using generative AI to verify outputs, correct errors and personally verify filed citations. Firms should redesign evidence and sign-off, not merely add a policy reminder.
New California measures attach different duties to automated discipline, technology-linked displacement and workplace surveillance. A single human-in-the-loop label will not evidence compliance.
The FTC investigation into OpenAI, Anthropic and other AI companies changes what deployers should preserve now: incident records, authority paths, containment evidence and customer-impact decisions.
Google’s Gemini 4 Argon launch combines strong vendor benchmarks with restricted cyber-defender access. Buyers should use the staged boundary to test transfer, containment and rollback before wider adoption.
Google is appealing EU interoperability and search-data orders. The dispute shows why access, privacy and security must be tested at the exact field, action and recipient boundary.
A White House accord adds internal controls, external evaluation and board oversight, but its value depends on common evidence, disclosed scope and consequences for a failed check.
A multi-author white paper argues that automating AI research could produce rapid capability feedback. Its uncertainty makes observable indicators and pre-agreed actions more useful than a single probability or date.
NVIDIA’s Open Agent Safety platform combines runtime policy with an out-of-band watchdog. Buyers should test detection, isolation and recovery across layer failures before treating the architecture as a security outcome.
