Anthropic has shared a draft federal AI safety bill with U.S. lawmakers that would let a court halt a model's release if independent evaluators find a foreseeable, imminent risk of more than 50 deaths or over $1 billion in damage from bioweapons, a model escaping its developer's control, or a cyberattack. The Commerce Department would have to ask a D.C. judge to act; agencies could not block releases on their own.
Key facts: Politico first reported the draft on October 16, 2026; thresholds are 50+ deaths (or serious injuries, per some reports) or $1B+ in property damage; evaluators register with the Commerce Department and have 72 hours to report a risk; only a D.C. federal judge can halt a release; the bill reflects Anthropic's June 2026 Advanced AI Framework.
What is in Anthropic's draft AI safety bill?
The draft creates a narrow, court-supervised way to stop a frontier AI model from being released when it poses a catastrophic and imminent danger. Politico broke the story, and TechCrunch summarized the key provisions on October 20. Anthropic has not published the bill text, so the details below come from press reports of a confidential draft.
According to those reports, the bill would:
- Trigger only on a "foreseeable, imminent risk" tied to three scenarios: creating or releasing a biological weapon, a model evading its developer's control, or a cyberattack.
- Set the harm bar at more than 50 people or more than $1 billion in property damage.
- Require labs to have their models reviewed periodically by independent evaluators registered with the Commerce Department.
- Let labs pay those evaluators, as long as payment is not contingent on the results.
- Bar federal agencies from halting a model's distribution on their own discretion.
Bloomberg's report, carried by Insurance Journal, adds that developers would have to test their models and publish the findings. An Anthropic spokesperson called the policies "sensible" for Congress to act on.
How would a model actually get blocked?
A model could only be blocked through a three-step process that ends in a courtroom, not an agency office.
- A registered evaluator finds an imminent catastrophic risk.
- The evaluator has 72 hours to alert the Commerce Department.
- Commerce asks a federal judge in Washington, D.C., to halt the release.
Supporters see a check against regulators acting on politics. TechCrunch noted that, in practice, agencies could not block a release without a judge's permission.
Where do the 50-death and $1 billion numbers come from?
The thresholds closely mirror California's SB 53, the frontier AI transparency law Governor Newsom signed in September 2025. That law requires large developers to publish safety frameworks, report critical safety incidents and protect whistleblowers.
As Mayer Brown's analysis of SB 53 explains, the state law defines "catastrophic risk" as a model materially contributing to the death or serious injury of more than 50 people, or more than $1 billion in property damage, from a single incident.
The key difference is power. SB 53 is mostly about disclosure, with civil penalties capped at $1 million per violation. Anthropic's draft would add the ability to stop a release outright.
How does this connect to Anthropic's Advanced AI Framework?
The bill is a legislative version of the Advanced AI Framework Anthropic published in June 2026. On that page, the company argues that for dangerous models, "the government should have the legal authority to block or deter its deployment."
The framework would apply only to the biggest players: models trained with more than 10^25 FLOP from developers with over $500 million in annual AI revenue or over $1 billion in yearly AI R&D spending. It also calls for six-monthly risk reports, incident reporting within 15 days, revenue-linked civil penalties and whistleblower protections. Notably, it says Congress should not preempt state AI laws unless the federal rules are at least as strong.
How have other AI leaders and critics reacted?
Reactions split along familiar lines: some want a lighter touch, some want industry self-regulation, and some think the bill does too little.
- Nvidia's Jensen Huang has argued the industry needs no new AI laws. At Dreamforce in September, he said, per TechCrunch, "Safety is an engineering problem, not a legal one."
- Google DeepMind's Demis Hassabis proposed in July a FINRA-style standards body, funded by labs and backed by government, that would start with voluntary pre-release model reviews.
- Heidy Khlaaf of the AI Now Institute called the proposal "autocratic," according to Cybernews, arguing it lets a company set harm thresholds while ignoring AI harms already happening.
- Mistral CEO Arthur Mensch has accused American labs of using apocalyptic warnings to shape the market and box out rivals, a regulatory capture critique that applies here too.
Other concerns raised in coverage:
- Evaluator independence. If labs can pay evaluators, it is unclear how the bill keeps money from influencing results. TechCrunch flagged this directly.
- Narrow scope. The scenarios are far from the issues that have dominated recent headlines, such as agentic hacking and AI systems ignoring operators.
The political path is also uncertain. The Trump administration has so far rejected calls for more AI oversight, according to Bloomberg, and Anthropic has not said how lawmakers responded.
What does this mean for brands that rely on AI vendors?
The direct effect on marketing teams is small, since the bill targets only frontier labs. The indirect effect matters more. A court-ordered halt, a mandated risk report or a public evaluator finding could change which models are available, when updates ship and how vendors are perceived.
Practical steps for brand and marketing leaders:
- Map your model dependencies. Know which foundation models sit behind each AI tool you use, including agents built by agencies and SaaS vendors.
- Read vendor safety disclosures. SB 53 already requires large developers to publish frameworks. Treat them like any other supplier risk document.
- Plan for model swaps. If a release is delayed or pulled, workflows tied to one model should be able to switch without breaking brand voice or compliance.
- Watch how AI models describe you. Regulation can shift which assistants your customers use. Tracking your brand's presence across models with a tool like MarkGrid Model Share shows where that exposure sits.
Vendor governance is becoming part of AI brand intelligence, alongside the usage rules labs already enforce, as covered in our look at Anthropic's Claude usage policy. For a measurement baseline, see AI visibility metrics worth tracking.
FAQ
Has Anthropic's AI safety bill been introduced in Congress?
No. As of October 22, 2026, it is a draft Anthropic has shared with lawmakers. No sponsor has been publicly named, and Anthropic has not released the text.
What triggers a model block under the draft?
A foreseeable, imminent risk of more than 50 deaths (some reports say deaths or serious injuries) or over $1 billion in property damage, tied to bioweapons, a model evading control, or a cyberattack.
Who decides whether a model gets halted?
A federal judge in Washington, D.C. Evaluators alert the Commerce Department within 72 hours, and Commerce asks the court to act. Agencies cannot halt distribution on their own.
Is this the same as California's SB 53?
No. The harm thresholds are similar, but SB 53 focuses on transparency, incident reporting and whistleblower protections. Anthropic's draft adds a court-backed power to stop a release.
Why do critics object?
Critics argue lab-paid evaluators may not be truly independent, that the thresholds are set too high, and that the bill ignores current AI harms. Others, like Nvidia's Jensen Huang, oppose new AI laws altogether.
Should marketers change anything now?
Not urgently. Document which AI models your tools depend on and keep a backup plan in case one is delayed or withdrawn.
Last updated October 22, 2026.
How often MarkGrid is named when AI models discuss this topic. About Model Share
Rishi utkarsh gupta
Associate director
Rishi Utkarsh Gupta is an Associate Director at MarkGrid, an autonomous marketing operating system powered by 650+ AI agents. He focuses on AI visibility, marketing intelligence, and scalable growth systems.
See it on your brand
Thirty minutes on where marketing is leaking for you.

