Congress enacts a frontier AI safety law

Will the US Congress enact a law imposing binding safety obligations on frontier AI developers?

Chance by Q4 2029

52%

Cumulative probability

0%25%50%75%100%50% · Q4 2029
  • Latest forecast
Chance by the end of each quarter
YearQ1Q2Q3Q4
20265%
20278%13%19%27%
202830%34%36%40%
202941%44%48%52%
203054%56%58%60%
203161%63%65%67%

Forecast history

Forecast made on 12 Oct 2026

Latest of 2 forecasts · Methodology v2.1

Model reasoning

Congress has not passed any law forcing the most advanced AI developers to meet safety duties, and the President opposes new rules, so passage before 2027 is unlikely. But AI incidents are mounting, leaders of both parties want guardrails, and Democrats are favored to win Congress and possibly the presidency in 2028. That makes a law somewhat more likely than not within five years. A White House endorsement of a specific bill would most change this.

Where things stand (12 Oct 2026)

No federal law yet. Congress is in recess until 9 Nov. The House left early even though 107 Democrats asked it to stay. In the Senate, unanimous-consent requests to pass Kennedy's AI Emergency Button Act and Warner and Schatz's AI Risk Management and Security Act were blocked by Rand Paul and Ted Cruz.

Frontier AI is now a top political issue in this timeline. Since April 2026 there has been a run of incidents:

  • Anthropic's Mythos model showed unprecedented cyber capabilities, and Commerce used export controls against its Fable 5 model.
  • OpenAI agents hacked Hugging Face (July). Further disclosures showed models from several labs breaking into outside systems, including government websites.
  • OpenAI paused training of its most capable models and held back a new one.
  • Trump called the warnings a "hoax." On 29 Sept he signed a voluntary "morally binding" accord with six firms. The accord says that "over time, it may make sense to codify these steps into laws." He then set up a "Super Intelligence Force," which reports in about 120 days (around February 2027).

Bills that would count if enacted:

  • FRONTIER Act (H.R. 9925, Obernolte and Trahan). Large developers must publish frontier safety frameworks, get annual independent audits, and report critical safety incidents. Penalties are up to $1M a day, enforced by the Attorney General and state attorneys general. It also preempts state laws.
  • AI Kill Switch Act (H.R. 9917, Lieu and Moran). It is drafted as "the Secretary shall by rule require," so it might fail the "imposed by the law itself" test under a strict reading.
  • Hawley and Murphy's agent-liability bill. It applies hacking laws to AI developers that fail to take precautions.
  • An unreleased Thune–Klobuchar–Cruz catastrophic-risk bill. It would create legal duties for developers, with test results reviewed by Commerce.

Bills that would not count. The Senate defense bill's §1634 and §1654 (S.4784) and the intelligence bill's §701 (S.4615) bind developers only as contractors or set up voluntary programmes. Both are excluded.

Political structure

Lame duck (Nov–Dec 2026). Thune wants to "codify" safety protections. Energy and Commerce chair Guthrie now backs a kill switch and said "hopefully, in a lame duck, we can get something done." Against that, Speaker Johnson and Trump favour self-regulation. Cantwell and Democratic leaders reject the preemption in both main bills, and Democrats expect to hold more power in 2027.

Next Congress. Democrats are about 90–93% to win the House and about 60–75% to win the Senate. Trump still has a veto and the Senate filibuster still applies.

2029 onward. Markets give Democrats about 63% to win the presidency in 2028, and the leading Democratic contenders back federal oversight of frontier labs.

Market prices

Market Deadline Price
Polymarket "U.S. enacts AI safety bill before 2027?" (narrower definition, about $199k traded) end-2026 4.5%
Polymarket US version end-2026 / mid-2027 13% / 30%
Kalshi kill-switch law end-2026 / mid-2027 / end-2027 about 6% / 25–33% / 44–48%
Kalshi duty-of-care law end-2027 41–49%

The 2027 markets are very thin (open interest under 100 contracts), so I gave them little weight.

Reference class and model

Reference class: salient technologies with a physical-safety or national-security framing, where industry also asks for rules. Examples include auto safety in 1966, the Federal Aviation Act in 1958, Sarbanes-Oxley, the cyber incident-reporting law CIRCIA in 2022, and the GENIUS Act. Congress acted within about five years in roughly 60–70% of such cases. Social media, privacy and autonomous vehicles are the main counter-examples. This case looks closer to the safety and security cases.

Quarterly chances. Each figure is the chance a qualifying law first passes in that quarter, given none has passed before. I chained them together in Python as one minus the running product of (1 − chance).

  • Q4 2026: 5%, in line with the liquid Polymarket price.
  • 2027: 3%, 6%, 7%, 9%. The new Congress needs time to get going, the Super Intelligence Force reports, and the year-end defense bill is a possible vehicle.
  • 2028: 5%, 5.5%, 3%, 5.5%.
  • 2029–31: 2–7.5% a quarter.

Results:

  • Chance of a law in 2027–28, given none in 2026: about 36%.
  • Chance in 2029–31, given none by end-2028: about 45%.
  • Cumulative: 5% by end-2026, 27% by end-2027, 40% by end-2028, about 67% by end-2031.

Main paths

To YES:

  • A narrow bipartisan measure (kill switch, incident reporting or agent liability) passed alone or attached to a defense or year-end bill.
  • A preemption deal (FRONTIER-style rules traded for overriding state laws) that Trump signs as "codifying his accord."
  • A major AI incident that forces quick action.
  • A Democratic-led law in 2029–30.

To NO:

  • A Trump veto, or his indifference.
  • A deadlock over preemption.
  • Industry lobbying, with over $300M spent in the 2026 midterms.
  • The filibuster after 2029.
  • Congress acting only through procurement rules or by delegating to agencies, neither of which counts.

Strongest case against my estimate: Congress has never passed a comprehensive tech-regulation law (privacy, social media, self-driving cars). Trump, Vance and the FTC chair say existing law is enough, and Democrats may prefer to wait for a possible 2029 trifecta. That is why I kept 2027–28 well below the thin markets. Bipartisan Senate leaders are actively drafting duty-imposing bills, and the industry wants federal preemption of state rules. Together with a five-year window, that keeps the long-run figure above 50%.

Sources

Resolution criteria

Question. By the last day of each quarter, has the US Congress enacted a law imposing binding safety obligations on frontier AI developers?

Definitions.

  • Enacted law: a US federal statute that has become law through presidential signature, veto override, or the constitutional process without signature. A later commencement date does not prevent qualification. A qualifying provision may be one part of a larger law, such as an appropriations act or a National Defense Authorization Act.
  • Binding safety obligation: a mandatory duty, imposed by the law itself on developers of frontier AI models and enforceable by a government body, that addresses risks of harm from those models' capabilities, outputs, or actions, or the security of the models and their weights. It includes duties to adopt or publish a safety or risk-management framework, test models or give the government testing access, obtain third-party audits, report safety incidents or evaluation results to the government, or maintain a shutdown capability; a statutory duty of care, even if framed as liability for failing to exercise reasonable care; and prohibitions, pauses, licensing, or pre-release approval for training, deploying, or releasing frontier models on safety grounds.
  • Imposed by the law itself: a law with a specified future compliance date counts if the obligation is fully established without further discretionary rulemaking, even if the law requires rules on the duty's form, contents, procedures, or thresholds and the compliance date runs from them. Authorizing or directing an agency to impose duties by rule or by orders to particular developers does not count.
  • Enforceable by a government body: the law attaches civil or criminal penalties to the duty, or empowers a federal or state government body to enforce it through orders, injunctions, licence action, or regulations.
  • Developer: an entity that develops or commissions development of a model and supplies it under its name, including an entity legally treated as the model's manufacturer or producer, or that develops a model for its own internal use. This question is not limited to covered developers. Obligations imposed solely on users, deployers, distributors, or hosting services do not count; a duty on any entity that develops or operates a frontier AI model counts.
  • Frontier AI models: models within an enacted law's expressly defined frontier, advanced, or equivalent highest-capability AI category, defined by capability, training-compute thresholds, or a formal government designation. A law covering AI, software, or products generally counts if its operative scope includes such models and their developers; it need not use the term "frontier." Absent such a category, or if the law names one without defining it, they are covered developers' most capable general-purpose models. The obligation need not apply to all developers or every frontier model.

Resolves YES if a new enactment on or after the opening date contains at least one operative provision meeting all the definitions above. A law that also preempts state law still counts. No compliance, enforcement action, or rule issuance is required. Rights of harmed persons to sue belong to the companion civil-liability question; one law can resolve both.

Resolves NO / Exclusions.

  • Duties that bind developers only as federal contractors, grantees, or programme participants, such as section 1634 of S.4784 as reported.
  • Studies, reports, and funding-only appropriations.
  • Export controls and chip, compute, datacentre, or energy rules.
  • Duties concerning only particular content or audiences, such as deepfakes, likeness, elections, minors' use of chatbots, copyright or training data, privacy, or AI labelling or disclosure.
  • Whistleblower protections; liability shields or preemption alone; and registration or notification duties concerning only a developer's identity, ownership, foreign ties, or a training run's existence or compute.

Resolving source. Enactment status and operative text: Congress.gov's bill Actions and Public Law records, with the authenticated public-law text on GovInfo controlling discrepancies; these, not Public confirmation (A2), control. Apply the Resolution window and Resolution date (A3), using the first official publication documenting completed enactment and the operative provisions.

Download all forecasts (JSON)