Anthropic’s Draft AI Safety Bill Sets a $1B or 50-Person Bar 🚨

Hey everyone 👋 AI safety discussions usually stay abstract. This one has actual numbers and a narrow gate. On 16 October 2026, Politico reported that Anthropic has been quietly circulating a confidential draft bill to Capitol Hill lawmakers. Three people familiar with the discussions described the pitch. An Anthropic spokesperson confirmed the substance to both Politico and Reuters: the bill reflects proposals from the company’s public Advanced AI Framework, which they’ve been advocating to federal and state lawmakers since June.

The core idea is deliberately tight. The government could block a model’s release or use only if it poses a foreseeable, imminent risk of more than $1 billion in damages, or of killing or seriously injuring more than 50 people. That risk has to come from one of three specific categories. Everything else sits outside the block power. 🎯

The three risk pathways that actually matter ⚠️

The draft limits intervention to risks that specifically arise from:

Creation or release of a biological weapon 🦠
The model evading its developer’s controls (loss of control) 🤖
A cyberattack 💻

If the harm doesn’t map cleanly onto one of those three, the $1 billion / 50-person threshold never even triggers. Secondary coverage has already highlighted that this leaves many other forms of harm — economic disruption, large-scale misinformation, dual-use chemical risks that aren’t framed as biological weapons, or gradual capability overhangs — outside the scope of a government block. Whether that’s a feature or a bug depends on how you weigh false positives versus false negatives.

How the actual process would work 🛠️

Independent evaluators would register with the Department of Commerce and periodically evaluate labs and frontier models. Labs may pay the evaluators so long as payment is not tied to the outcome. That design tries to keep the evaluators independent while still letting labs cover the cost of the work.

If evaluators find an “imminent enumerated risk,” they must report it to Commerce within 72 hours. Only the Commerce Department can then petition a federal judge in the U.S. District Court for the District of Columbia to suspend a model. The draft explicitly prohibits any other U.S. department, agency, or officer from suspending development, deployment, or internal use. That single-point design is one of the tighter constraints in the proposal.

Additional requirements include testing of frontier models, transparency about findings, and independent evaluation. The reporting so far doesn’t spell out exact testing protocols or transparency formats; those details would presumably land in implementing rules or later legislative text.

Context, comparisons, and what’s still unknown 💡

Politico notes that the language is similar to California’s SB 53. The draft would limit the circumstances under which the government could block a release, while also potentially preempting some state AI safety laws. Anthropic’s public framing is that the measure gives the government targeted authority to stop the most dangerous deployments without broader regulation.

As of 19 October 2026 the document remains a privately circulated proposal, not introduced legislation, and no sponsor has been named. The actual draft text has not been released, so everything above is based on the descriptions given to Politico and Reuters. Independent verification of the precise statutory language is not yet possible.

One practical consequence worth watching: because the threshold is high and the pathways are narrow, many models that could still cause substantial harm would fall outside any federal block power under this design. Labs would still face the usual liability, insurance, and market pressures, but the special government suspension authority would not apply.

What this does and doesn’t do ✅

This is a deliberately narrow gate: high damage threshold + only three risk categories + only Commerce can ask a judge to stop a model + explicit limits on every other agency. It does not create a general licensing regime, it does not require pre-approval for most models, and it does not cover the majority of harms people currently worry about with frontier systems.

Whether that narrowness is the right tradeoff is the open question the draft is forcing into the conversation. Some will argue it finally gives government a usable tool for the truly catastrophic cases without freezing the rest of the industry. Others will argue the bar is set so high that the tool will almost never be used, even when serious risks exist outside the three enumerated pathways.

Discussion question: Does a $1B / 50-person filter limited to bio weapons, loss of control, and cyberattacks feel like the right scope for a federal block power, or does it leave too many harms on the table? Curious what you think 👇