Sen. Maria Cantwell, ranking member of the Senate Commerce Committee, released a six-principle framework Oct. 7 that would require independent pre-release audits of frontier AI models and lean on large AI firms to extend advanced capabilities to small businesses. It’s the clearest sketch yet of what a federal AI law could look like once the post-midterm Congress returns.

Under the blueprint, NIST would set “clear, transparent, measurable, risk-based standards” for systems capable of catastrophic harm, and “Covered models should not be released until they have undergone an independent audit.” Cantwell’s release likens the review to the way outside auditors examine a public company’s financial statements. Per Broadband Breakfast, developers would also face securities-style public risk disclosures, prompt incident reporting, and continued civil and criminal liability for foreseeable harms, echoing the CLAIM Act’s developer-and-deployer liability model.

The quieter policy move is the “Shared Capabilities” principle, which asks leading AI companies to contribute compute, expertise, and defensive tools so small and medium-sized businesses can benefit from capabilities they can’t build themselves. Washington is now naming the access gap directly.

The Cato Institute flags real ambiguity: whether audits become a mandatory pre-launch gate, and whether federal law would preempt state AI rules. Those two questions, more than the headline principles, will decide what the audit and liability structure actually does. Legislative text isn’t imminent; by prior reporting, federal AI law is unlikely before 2027.

For owners already using AI to find customers, the directional signal matters now. If disclosure and deployer-liability rules land, exposure concentrates on tools that send or publish autonomously. Done-for-you services where a human approves every outbound send and every published item sit on the safer side of that line. LemonLime, which prepares sales and marketing work proactively and requires customer approval before anything ships, is one example of that design pattern.

Sources

Sources