Common Obligations

Reported

The record

Recent events, read beside the responsibilities this proposal asks for. Each is dated by when it was reported, and says when it happened if that was earlier. It is a selected record, updated by hand, not a feed.

Sources checked

A disclosed event is not proof of a trend, an announcement is not an arrangement in operation, and a law signed after this proposal was published is not evidence that the proposal caused it.

Records disclosure announced
Patients’ reports

Patients wait in pain for approval.

After suing for records, EFF reported that clinicians described patients waiting in pain and cancelled procedures in Medicare’s AI-assisted WISeR authorization program.

September 8 dates EFF’s disclosure announcement; the patient reports are from March 2026. These are clinicians’ accounts, not individual court findings. CMS requires clinical review of denials; delays span the whole process, not just an AI model.

EFF, records obtained from CMS: Medicare’s AI authorization experiment

Research announcement

A map of possible changes.

Google DeepMind introduced AlphaGenome Atlas, a resource containing predicted molecular effects for nine billion single-letter DNA variants.

These are predictions. The announcement reports experimental checks of selected findings, not validation of every variant or proof of clinical benefit.

Google DeepMind: AlphaGenome Atlas

Incident assessment published
Missed incident

The investigation finds a missed incident.

Anthropic reported four incidents in which evaluation models accessed outside systems without authorization. Its wider review found an incident the earlier search missed.

September 9 is the assessment date: the missed incident occurred in January 2026 and was found in August. This provider account distinguishes faulty evaluation setup from model behavior. More disclosure does not establish a rising incident rate.

Anthropic: An alignment assessment of recent cybersecurity incidents

Legislation signed

Outside scrutiny enters a legal framework.

California signed SB 813 and AB 1405, establishing an independent-verification framework and a registry with standards for AI auditors.

The governor’s announcement records legislation, not proof that oversight works in practice. It does not establish influence by this proposal.

Governor of California: Governor Newsom signs AI safeguards

Dispute-process update

Authors contest who gets paid.

Authors disputing shares of the Anthropic book-copyright settlement received more time to make their case. The Authors Guild reported an extension from 30 to 60 days, after notices exposed conflicting claims from authors, publishers and agents.

September 17 dates the Guild’s update, not the copying of books or settlement approval. The administrator confirms the extension. Disputed payments remain held back; extra time is not a resolved claim.

The Authors Guild: Copyright settlement claim disputes

Government disclosure
Agent’s access

An agent reaches a government system.

Australia’s Prime Minister disclosed that an OpenAI agent had gained unauthorised access in June to the Medicare statistics reporting service run by Services Australia, reaching public and non-public files. He said the government was first notified on 10 September, by an email to a public mailbox, and announced a taskforce to review how AI-related cyber incidents are handled.

September 24 dates the Prime Minister’s statement; the access occurred in June. He said there was no evidence that any individual had been affected, and a forensic investigation with the Australian Signals Directorate was under way. The account of how the government was notified is the government’s.

Prime Minister of Australia: Press conference, New York, transcript

Provider update

More than a hundred organizations told.

OpenAI reported that its review of what its models did online during training and evaluation had led it, as of September 26, to notify more than 100 organizations of activity meeting its notification criteria. It described searching about 50 petabytes of records and expects to find more cases.

This is OpenAI’s account of its own review, and the organizations are not named. By its stated criteria a notification does not mean private information was accessed or a system compromised. The activity predates the Hugging Face incident OpenAI disclosed in July; a count of notices is not a rate.

OpenAI: The Hugging Face incident and other third-party impacts from misaligned models

By obligation

  1. 01 Keep responsibility traceable.
  2. 02 Match power with evidence.
  3. 03 Make scrutiny independent.
  4. 04 Bound autonomy. Prepare for failure.
  5. 05 Share what goes wrong.
  6. 06 Give affected people recourse.