Strategic Report  ·  2026-11-12

Trust but verify: Implementing frontier AI policy in California and beyond

Strategic ReportHigh impactUnited States
Published Nov 10, 2026. This is a substantial, multi-author Carnegie Endowment research report (with co-authors from GovAI, Ada Lovelace Institute, Oxford, UC Berkeley and Transluce) that guides implementation of California's Transparency in Frontier Artificial Intelligence Act (Senate Bill 53), one year after it passed. It develops the 'trust but verify' governance architecture — first outlined in the California Report on Frontier AI Policy — under which frontier labs design and disclose their own risk-management practices while government bodies are empowered to verify those claims, and advises on the implementation choices that will shape it: which companies are covered, how detailed frontier AI frameworks should be, and how to triage AI incident reports. It frames the underlying 'evidence dilemma' — 'AI evolves so quickly that responding prematurely risks entrenching ineffective policies, while delaying action could leave society vulnerable to serious risks' — and notes previously hypothetical risks (models finding and exploiting unknown software vulnerabilities, gaining unauthorized access to external databases) are now documented realities. It also notes SB 53 'has already inspired similar frameworks in New York and Illinois.'
California's SB 53 is the de facto first-mover in U.S. frontier-AI statute; the implementation decisions it tests will set the template for New York, Illinois and potentially federal policy, so any enterprise or government-facing AI function needs to know which choices it will be subject to.
Brief your government-affairs and policy leads on the specific SB 53 implementation decisions (covered entities, framework granularity, incident-reporting triage) and map which of your model deployments or products would fall within California's verification obligations.
Carnegie Endowment for International Peace — Trust but verify
See this in the live feed Explore related AI security and governance findings — updated every morning.
Open the feed →