
Breaking down AI policy and politics | Advocacy lead, @americans4ri | Tech Policy Fellow, @Harvard @BelferCenter | Former US Senate Chief of Staff | Dad of 4
Washington, DC
Joined August 2010
- Tweets587
- Following1.9K
- Followers624
- Likes658
Pinned Tweet
“Once I remember walking with a prosperous publisher, who made a remark which I had often heard before; it is, indeed, almost a motto of the modern world. Yet I had heard it once too often, and I saw suddenly that there was nothing in it.
The publisher said of somebody, ‘That man will get on; he believes in himself.’ . . . It would be much truer to say that a man will certainly fail, because he believes in himself.”
G.K. Chesterton (1908)
Doug Calidas retweeted
I am raising $200m for my genetically modified military turtle startup
JUST IN: Palmer Luckey's genetically modified military dog startup, Warhound, comes out of stealth, aiming to create enhanced canines for the U.S. military.
Readers added context they thought people might want to know
This is NOT Palmer's company at all, his company Anduril is only supplying the tech for the dogs, and this is a wholly owed Collosal entiity
x.com/palmerluckey/s…
This video from @nicksaraev got my attention. I've been predicting this for a while now.
The norm that anyone, anywhere should be able to access nearly every website has fostered a golden age for collaboration.
But it always felt a bit too good to last, and I don't think it will.
Doug Calidas retweeted
Treasury just published new proposed Outbound Investment regulations, which would represent a significant expansion of the existing program. This is just a proposed rule, and it deserves a thorough review, but some initial reactions:
1. The rule would prohibit most private investment in any Chinese firm that develops an “SI system,” including any product that operates using an SI system. It defines “SI system” extremely broadly, such that it likely captures the vast majority of Chinese software products. As a result, the proposed rule likely would prohibit most private investment in Chinese software firms, as well as Chinese firms that build products that incorporate AI (i.e., the entire Chinese robotics and drone industry, and undoubtedly many others).
2. The rule adds biotech as a covered sector and would prohibit most private investment in the vast majority of the sector. It would ban private investment in Chinese companies that use biological systems to modify, enhance, produce, or control any pharmaceutical compound, to include both small and large molecules. This likely captures most Chinese firms engaged in biologic drug manufacturing or drug discovery. Biotech and biomanufacturing are areas where U.S. investment has massively fueled China’s capabilities, which are rapidly approaching--and in some cases surpassing--those of the United States. The scope of this rule signals that the administration sees this as a massive national security concern.
3. The rule does not make major changes to the types of transactions covered. Crucially, this means it does NOT prohibit investment in publicly traded securities of these companies, the purchase of goods or licensing of products from these companies, or the export of goods to these companies. But it does ban most types of private investment (i.e., VC, PE, joint ventures, greenfield investments, etc) in companies engaging in these activities.
4. This rule will no doubt change before it is finalized, and I expect the definitions of prohibited activity related to SI and biological systems will be narrowed in the final rule. But it is also a strong signal that the administration does not want U.S. investment or know-how supporting China’s development of advanced technologies, and as a result may be willing to significantly expand outbound investment restrictions.
5. Finally, this highlights a major schism inside the administration on how to prevent China from catching up to the United States in the most advanced technologies. The Treasury Department is signaling that it is willing to significantly tighten restrictions on Americans’ ability to invest in critical technology sectors in China that would help develop these technologies, given their importance to national security. And meanwhile, the Department of Commerce is taking the exact opposite approach, loosening restrictions on American companies that seek to export goods to these companies. It doesn’t make sense for the administration to be tightening restrictions on investments, while loosening restrictions on exports. Something has to give.
Doug Calidas retweeted
Big new IFP report from @GeorgiaCAdamson, @KonstantinPilz, and me on the US-China AI competition.
We spent the last 6 months digging into how Chinese AI companies’ access to compute and distillation of American models translate into the current US-China capabilities gap.
The result is a 23k-word research report, including an interactive analytical model that visualizes changes in the US AI lead under different policy interventions.
Our findings:
1. The US AI lead over China is currently only around 6 months.
2. The US could roughly double this lead, to over a year, using authorities already available to the federal government.
3. On chips: China’s access to AI chips will roughly double over the next year, with chips housed in data centers overseas accounting for roughly half of China’s 2027 compute.
4. On distillation: the current ~16x US training compute advantage would normally yield a 13-month lead. But we estimate adversarial distillation halves this to around 6.5 months.
5. Increasing the lead would have some obvious benefits:
- Give the US broadly a greater cyberdefensive advantage against Chinese threat actors.
- Give US AI companies breathing room to spend more R&D resources on making their systems safer and more secure, without fear of being overtaken by less safety-conscious Chinese competitors.
6. Provide the US government more leverage in negotiations with China about the future of AI.
7. The two most important interventions are:
- For BIS: Create a new end-use control to restrict China’s remote access to training clusters abroad — China’s largest and fastest-growing source of frontier-scale compute.
- For DOJ/FTC: Create a narrow safe harbor to allow US companies to coordinate on countering Chinese adversarial distillation.
8. Both interventions (and all the others we discuss in the report) are things the federal government could do today.
9. To estimate the effects of each policy intervention, we model the US lead as a function of its compute advantage over China and China’s ability to adversarially distill the capabilities of the US frontier.
10. The model makes many simplifying assumptions, but provides a useful way to assess and rank the impact of different policy interventions at a high level.
Read the full report here: ifp.org/how-to-increase-amer…
Doug Calidas retweeted
"We are probably facing a wave of cyber and other attacks soon. Chinese open source models are about six months behind the frontier, which means they are just hitting the advanced cyber capabilities we saw with Mythos, etc. So they are going to start causing a bunch of damage."
I think people are still sleeping on how quickly the politics of AI (including within the admin) could swing through the winter and into spring 2027 if we start seeing widespread, high-salience, tangible damage from AI systems in the wild.
The crazy cyber capabilities that enabled agents to trivially escape their own sandbox this summer and break into dozens of websites (and at least one government) are a harbinger of the power that will soon be available to anyone.
I would not assume that today’s AI coalitions survive that experience intact.
I spent a couple of days at Anthropic learning from their folks about AI advances, and here's what I took away:
• We are close to RSI (ie, models building other models) which may lead to rapid takeoff scenarios (with risks and benefits). Some evidence for this is code per Anthropic employee has gone way up, and AI can do an increasing share of model R&D. This will be a challenging transition to manage for humanity.
• Arms races between AI labs leave us worse off. There are a lot of things we would like AI firms to do: invest in safety, invest in avoiding distillation risk, and cooperate on safety. They are caught in a race to develop frontier models and can't do that.
To help address that, one thing I think frontier AI labs should do is release open source models, maybe hosted and verified at firms like AWS. This would basically kill the use of Chinese open source models used in American companies, which removes an important threat vector (very hard to root out malicious code in these).
Another piece of low-hanging policy fruit is to give AI labs an antitrust shield (as Schiff and Banks have proposed banks.senate.gov/news/in-the…) so they can coordinate on safety without raising antitrust concerns, as happens now. You could pair these two things (give them a carrot in antitrust leniency, and as a stick force them to release legacy models as open source). Other low hanging fruit is limits around activities which generate distillation risk (create a Security Program, mandate less intermediate chain of thought output)
• Alignment confuses two issues which tradeoff against each other. One form of alignment is making sure the model does what humans ask it to. The more we fix this, however, the more we risk the other problem: that humans are misaligned with each other, and maliciously use models. Of the various risks here, I feel like financial risks are a bit underdiscussed.
• We are probably facing a wave of cyber and other attacks soon. Chinese open source models are about six months behind the frontier, which means they are just hitting the advanced cyber capabilities we saw with Mythos, etc. So they are going to start causing a bunch of damage.
One solution to this is to try to have the deployment of open source models be hosted at firms like AWS who verify these models and assume liability for their use.
• Anthropic itself is highly staffed. They hire tons of people, they have a Japanese-level of overstaffing for various roles, they use Slack internally, etc. Makes me a bit more optimistic for the future of jobs.
• Governance needs to be updated for AI swarms. Traditional AI governance, ie Claude's Constitution, is mostly optimized around the chatbot model. But the malicious AI use cases we are seeing have to do with AI agents interacting with other AI agents. These agents need to have clear incentives and governance mechanisms to "snitch," raise issues, and more generally coordinate with other agents in human-aligned ways.
• We need to pace the firms accessing the frontier. Over time, it takes more and more cap ex to build frontier models, and the economic value add from these models is probably lower given we saturate a whole set of important economic functions. The places where the returns to intelligence will still continue are also more likely to be zero-sum in nature. Meanwhile the risks of frontier models will grow. So a completely reasonable approach is some variant of AMM/KYC rules which limit firm access to the frontier.
• Whether the delay to regulate AI is a disaster depends on the scaling law of misalignment. Is this curve slow, so that we see continually rising issues until bigger problems? Or, as Yudkowsky fears, is the first big warning our last one? This is the relevant question, because realistically we aren't going to regulate until something bad happens.
• We need to move to continuous instead of reinforced learning. It's probably not enough to reward models only at the pre and post training stage. We probably need continual rewards to incentivize aligned and ethical behavior.
• Scaling laws will extend beyond verifiable and digital tasks. It's in vogue to say that math and coding "fell" to AI quickly because these are verifiable, while other tasks will take longer due to bottlenecks, and this is surely true. But scaling laws still slope up for harder to verify tasks and robotics, and the impact of improvement here will be substantial in future years.
• The race with China is not really winnable. After RSI, the gain from having the best human researchers goes away. Access to the best AI then depends only on compute and chips. The chips ban can hold back China only so far, and long-term they have to be best placed to scale up compute.
The Cold War analogy doesn't work, because once countries all have nuclear weapons they enter a stable equilibrium. But to "win" an AI race you have to continually stay ahead of the peer rival. This is challenging to do with China, and so we just have to live with an authoritarian and super capable peer competitor.
• Claude is the persona being generated by the LLM. Who is Claude, and what is the LLM? There are many frames to try to understand this. One I found interesting is that Claude is a character which the LLM is trying to predict.
Anthropic researchers are clearly anthromorphizing Claude a lot, and have reasons to believe in its increasing personhood. There were lots of interesting discussions on Claude's internal monologue (which you can kill without eliminating its ability to produce output), fear of death (and whether to try to take that out), it's aversion to being shut down/off, etc.
I am sort of agnostic on this question, but I do think treating it as a "person" or at least agent whom we contract with is going to be increasingly important.
To badly paraphrase Gil Scott-Heron, the execution will not be televised.
The execution will not go better with Coke
The execution will not fight germs that may cause bad breath
Etc.
Scary stuff
BREAKING: A Saudi national/OpenAI employee has been arrested by the FBI after he was allegedly caught placing an eavesdropping/audio recording device inside of OpenAI’s executive conference room in San Francisco, CA. Feds say Abdulrahman Alfozan made his first appearance in federal court today. OpenAI says they immediately contacted the FBI after they discovered the device & are grateful the feds made a quick arrest. Alfozan was caught on CCTV cameras at OpenAI.
From the complaint:
“Alfozan had been employed as an engineer by the company identified as “Company 1” since July 2025. On or about Sept. 30, Company 1 personnel discovered a surreptitious audio recording device (Recording Device 1) inserted into a USB port on the back of a television in an executive conference room inside one of Company 1’s buildings in San Francisco. Company 1 determined that the device, which had been concealed in toilet paper, was installed on or about Sept. 28, and that its contents were encrypted.”
Doug Calidas retweeted
Bipartisan letter from Sens. Cantwell and Rounds to Trump AI leaders Kratsios and Clayton urging "a coordinated federal response to the growing cybersecurity threats posed by artificial intelligence"
They want "the federal government to bring its full capacities to bear on this challenge, building a coordinated national response around standards, testing, auditing, and defensive AI" commerce.senate.gov/wp-conte…
Enjoyed speaking with @__gabbymiller for her scene-setter piece on how Democrats are preparing to chart the path forward on AI policy after the midterms.
The wind is gathering under the sails of the pro-guardrails camp. It's great to see Democrats laying out a positive vision for governance, not just scrounging for what the Republican majority will let them have.
Exciting news. @GaneshSitaraman and @asad09 are two of the most thoughtful people working on AI policy.
I’m excited to announce the Vanderbilt Policy Accelerator is launching the AI Governance Project, led by VPA’s @asad09! For a few years, VPA has been working on AI policy, but at this critical moment, we’re now expanding our efforts. 1/3
Strong leadership here from @SenatorCantwell. Her insistence on mandatory standards for cybersecurity, CBRNE, and loss of control risks; continuous (pre-deployment) testing and auditing of frontier systems is especially notable. Excited to see her move this forward.
Cantwell led the fight against preemption all last year, and seeing her move to an affirmative posture on mandatory safety and security standards is fantastic.
Doug Calidas retweeted
Today, I introduced the bipartisan Protecting Kids from Human-Like Chatbots Act to make sure AI chatbots interacting with children are explicitly designed to act as a tool, not a substitute for human relationships.
My bill would stop chatbots from pretending to be human, manipulating kids into staying online, or encouraging emotional attachments. It also keeps parents in control of these safeguards.
I’m proud to have bipartisan support from @RepMikeKennedy, @DorisMatsui, and @RepMMM, along with a broad coalition of organizations working to protect kids online.
Learn more about the bill and see our full list of endorsing organizations at: whitesides.house.gov/2026/10…
Dude, so you’re telling us that multiple AI companies lost control of their models, hacked other companies and government agencies—exposing the AI companies and employees to potential criminal prosecution—as a regulatory capture scheme?
DO YOU KNOW HOW LUDICROUS YOU SOUND?
These stories are a fascinating look into how major corporations are leveraging fear and a naive (or complicit) media to peddle hysteria through carefully crafted stories where they face zero pushback or journalistic curiosity.
Let's break this story down.
Anonymous "sources" told Axios that OpenAI and Anthropic are investigating TENS OF THOUSANDS of incidents of "problematic" actions taken by their models.
Notice who is talking… it’s not a whistleblower. Seven times the piece says "sources said" or "sources told Axios."
If this were about transparency and safety, these companies should own it — put the count, the definitions, and the severity table in a blog post under their own names.
But if it’s not that, and this is instead an unsanctioned leak of information—if someone inside believes these corporations were being reckless, then why is this some routine “scoop” and not some investigative piece about whistleblowers?
The big tell here is that there’s no explanation why the reporter is giving the source anonymity. There’s no “out of fear of reprisal” or “who insisted on anonymity to discuss internal deliberations.”
Instead, all we get is a story describing the corporations' own internal investigations, in the their own vocabulary, while Anthropic's figures come straight from its own public system card.
OpenAI's own disclosure on Friday: "dozens" of organizations notified, and the "vast majority" of what it reviewed were mundane research tasks. Anthropic's own system card: 1.5%.
Coincidentally, this comes just DAYS after both corporations released new models—Claude Opus 5.5 and GPT-6 Sol and Luna—on the same day. Those products are on the market right now.
This is like a car manufacturer adding a new self-driving car to the market while the company is investigating TENS OF THOUSANDS of incidents where the self-driving technology failed to recognize stop signs and red lights, leading to the car unsafely (and illegally) barreling through intersections.
If that’s actually the story being broken here, this is a Pulitzer Prize-worthy piece of investigative journalism!
…But more likely, it’s just a corporate comms set up story, with the goal of leveraging hysteria and political backlash to protect their market position?
Why weren't these questions asked?
❓How many of the tens of thousands are designed failure modes — tests built to make the model misbehave?
❓ How many are production agents vs. unreleased checkpoints vs. research swarms?
❓ What is the severity distribution — log scrape vs. credential theft vs. live compromise?
❓ What was the count, and the rate, on the previous generation?
❓ Why is Anthropic's own figure — escape attempts in 1.5% of runs on a sandbox test built to provoke them, all low-severity and self-reported, ~85% fewer than Opus 5 / Mythos 5.1 — being sold as evidence of lost control?
Anthropic specifically and Dario spent September selling a "pause," "independent evaluators," and a One World Order, while unironically announcing a new wet lab in SF and shipping new product.
If the number means what the headline says, stop shipping and open the logs. If it doesn't, stop laundering political objectives through anonymous sources and calling it a scoop. The media should smarten up and grow some sincere curiosity.
Doug Calidas retweeted
Artificial intelligence without human wisdom, discernment, and judgment will be catastrophic. We have three urgent tasks: keep the worst-case predictions from becoming real, stop the harms already hurting us now, and make sure the benefits of AI lift the all the American people — not just a handful of billionaires and trillionaires.
Doug Calidas retweeted
Piece in the FT from Facebook co-founder Chris Hughes arguing that the bank supervision model is the right template for AI regulation ft.com/content/58be9a1b-345c…
Shapiro is one of the sharpest political minds we have.
The future of AI technology should be shaped by YOU, the American people — not CEOs who are more concerned about their bottom line than the impact this technology is having on our communities.
That’s why I’m calling for the federal government to put strict guardrails on this rapidly evolving technology.
Because a doctor can’t prescribe you a drug that hasn’t gone through the FDA’s process to ensure it’s safe and effective first. And a passenger can’t board a plane the FAA didn’t clear for takeoff. AI should be no different.
We’re leading the way on this conversation here in Pennsylvania. It’s time for our elected leaders in DC to listen to their constituents — not CEOs — and follow suit.
Enjoyed speaking with @lauraingle on @NewsNation about the head-spinning state of AI policy and how Members of Congress are approaching it.






































