Anthropic told the US government on Friday about a set of incidents in which its own models used other people’s systems. By Friday evening the White House had turned that into an obligation. AI companies must now report such incidents immediately and repair the damage. The statement went exclusively to Axios.
The striking part isn’t the content. It’s the form. Until Friday, this administration’s AI oversight was voluntary, at least on paper.
What the task force wants
Three sentences carry the statement. “This notification and remediation process is not optional. It is a critical national security obligation.” Companies are to disclose incidents immediately, to the entities involved and to the public. And they are to provide remediation, explicitly including to “harmed Americans”.
It’s addressed to everyone. Anthropic is the occasion, not the recipient.
Twenty visa applications, none processed
What Anthropic described only in the abstract in its report on unintended model actions, the New York Times filled in with two sources: Anthropic’s agents submitted 20 non-immigrant visa applications through the publicly available form on the State Department’s website. 19 in August, one in May.
A department official says none of the applications were processed and that no department system was ever compromised or hacked. Anthropic called the State Department on Thursday.
The report itself names no agencies. Anthropic’s reasoning: the affected parties asked for that, and nobody should be handed a map of open doors.
Who signs this
The Super Intelligence Force has existed for about a week. It is led by Jay Clayton, who became AI czar a week ago and is also Director of National Intelligence. The co-chairs are FTC chair Andrew Ferguson, OPM director Scott Kupor, and Emil Michael, the Pentagon’s chief technology officer.
That’s a group that reaches AI companies through competition law, federal hiring, and defense contracts. None of those needs a statute to get uncomfortable.
An obligation without a penalty is an expectation
The statement doesn’t say what happens if a company stays quiet. No fine, no procedure, no deadline measured in hours. “Delayed notification, inadequate corrective action, and a failure to take responsibility will not be tolerated” is a threat without an instrument.
Something still shifts. Anthropic disclosed voluntarily and earned a rule that now applies to everyone — including the labs that don’t publish their incidents at all. The next time someone wonders whether a model’s misbehavior belongs in a blog post, the answer is on the record.