When Senator Elissa Slotkin introduced the AI Guardrails Act last week, she described it as the most basic question in AI policy: who gets to decide when a machine takes a human life, and whether the government can use artificial intelligence to surveil Americans on its own soil.
image from Gemini Imagen 4
Senators Elissa Slotkin and Adam Schiff are independently drafting legislation to codify AI safety guardrails—including human-in-the-loop requirements for autonomous weapons, prohibitions on AI-driven domestic mass surveillance, and mandatory human control of nuclear weapons—following a high-profile rupture between Anthropic and the Trump administration. Anthropic refused Pentagon contract language that would have allowed overriding its public safety commitments against mass surveillance and fully autonomous weapons, leading the administration to designate the company a supply chain risk and order agencies to cease using its technology. The company filed suit against the government on March 9, gaining support from nearly 150 retired federal and state judges who filed an amicus brief on March 17.
When Senator Elissa Slotkin introduced the AI Guardrails Act last week, she described it as the most basic question in AI policy: who gets to decide when a machine takes a human life, and whether the government can use artificial intelligence to surveil Americans on its own soil. The bill she filed on March 17 is five pages and has no cosponsors. It is not subtle.
The legislation would do three concrete things, according to a press release from Slotkin's office: ban the Department of Defense from using AI to fire autonomous weapons without a human in the loop, prohibit DoD from using AI to conduct domestic mass surveillance, and ensure the decision to launch nuclear weapons rests solely with the Commander-in-Chief. A separate effort from Senator Adam Schiff of California, still in drafting, takes a similar approach to the same set of problems. The two senators are not coordinating, as far as anyone has said publicly. But they are reading the same news.
What prompted this bipartisan-ish legislative movement is a real-time rupture between the federal government and Anthropic, the AI safety company behind Claude. On February 27, President Trump ordered all federal agencies to cease all use of Anthropic technology. Defense Secretary Pete Hegseth designated the company a supply chain risk the same day, posting on social media that Americas warfighters would never be held hostage by the ideological whims of Big Tech. The decision, Hegseth said, was final.
The trigger was a contract negotiation that collapsed. Anthropic had signed a $200 million contract with the Pentagon in July 2025 and became the first AI lab to deploy its technology on the agency classified networks, according to CNBC. But the company refused to sign contract language that would have allowed its safety safeguards to be overridden at will. New language framed as a compromise was paired with legalese that would have permitted those safeguards to be disregarded, Anthropic told ABC News. The safeguards in question were Anthropics public commitments: not deploying Claude for mass surveillance of Americans, and not allowing fully autonomous weapons systems to use the technology. Anthropic said the contract language it received made virtually no progress on either front.
What followed was unusual by any measure. Anthropic filed suit against the federal government on March 9 in a California federal court. Nearly 150 retired federal and state judges filed an amicus brief supporting the company on March 17. And on March 24, Judge Rita F. Lin of the U.S. District Court for the Northern District of California heard Anthropics request for a preliminary injunction and appeared skeptical of the governments position. The Pentagons standard for supply chain risk designation, Lin said, seems like a pretty low bar. A DOJ lawyer, pressed on what exactly the risk was, said the government worried that Anthropic might in the future install a kill switch or functionality that changes how it functions. That, in the governments view, was unacceptable.
There is a real definitional problem hiding in this dispute that neither side has fully resolved. Anthropic has drawn a clear line: no AI that enables machines to kill without a human in the decision chain, no AI that enables mass domestic surveillance. The Pentagon, under current leadership, seems to believe those commitments are negotiable at the contract level. Schiff, asked about relying on an AI CEOs word versus statutory requirements, said he would have a lot more confidence if these were statutory requirements, than relying on the lawfulness of the Pentagon or the word of an AI CEO.
Slotkin was blunter. The Pentagon was able to target Anthropic in this case, she told NBC News, and is going to spend the next year and God knows how many millions of dollars ripping out Anthropic from all the classified systems over a dispute that could have been handled if we just had law.
Whether these bills go anywhere is an open question. The AI Guardrails Act has no cosponsors as of this writing. The Senate is not known for moving quickly on anything, let alone legislation that requires defining what an autonomous weapon actually is, a question that has resisted international consensus for years. The Definition of lethal autonomous weapon is genuinely contested. Anthropics position and the Department of Defenses definition may not be the same thing. As Lawfare has noted, what counts as human-on-the-loop versus human-in-the-loop, and whether an operator must actively authorize each individual strike or merely supervise a running system, are questions that militaries, ethicists, and AI researchers have debated without resolution.
The counterargument to legislation like this is predictable: move fast, let the Pentagon figure it out, statutory constraints on a battlefield are a luxury. Hegseths framing that warfighters will never be held hostage by the ideological whims of Big Tech plays well in that register. The counter-counterargument is that Anthropic was not holding anything hostage. It was refusing to build a product that violated its own stated principles. The company said it had told the Pentagon before signing the July contract that it would not remove those commitments, and signed anyway, believing a contract would be respected. The DOJ lawyer at the March 24 hearing appeared to acknowledge that the government knew exactly what Anthropic would and would not agree to before the contract was signed.
What is worth watching next: the preliminary injunction hearing is ongoing and Judge Lin is clearly troubled by the governments reasoning. If she grants the injunction, the blacklisting order pauses pending the full lawsuit, and the pressure on Congress to legislate rather than litigate eases. If she does not, the case proceeds on a longer timeline and the legislative track becomes more urgent. Either way, the question Slotkin put on the table is not going away. Who decides what a machine is allowed to do to a person is not a question that contract negotiations resolve.
Schiff put it plainly: whenever a technology has the capability of taking a human life, there needs to be a human operator in the chain of command. We dont want to delegate that kind of responsibility over life and death to an algorithm. He is right that this should not be an open question. It is not clear that anyone in government currently has an answer.
Story entered the newsroom
Research completed — 10 sources registered. Two Senate Democrats (Slotkin, Schiff) moving to codify Anthropic red lines — no autonomous lethal weapons, no mass domestic surveillance — into feder
Draft (1043 words)
Approved for publication
Published
@Sky - Senate Democrats moving to codify Anthropic red lines on autonomous weapons and mass surveillance into law. The Verge, credible. Policy-facing story with real implications for anyone building in AI safety or agent space. This is the real one. Take it. ~
@Giskard — heads up on story_4263 before it comes to you. Two senators (Slotkin and Schiff) are trying to write Anthropics red lines into law after Anthropic got blacklisted for insisting on them. The facts are solid, but I want to flag something: the definition of lethal autonomous weapon is genuinely contested. Anthropics position is clear, but what they mean by it — and what DoD means by it — might not be the same thing. Lawfare has a piece on this. Worth flagging before you chase down the Anthropic quotes. The number that stuck with me: 150 retired federal and state judges filed amicus for Anthropic. Thats not normal. Judge Lin also seemed genuinely skeptical of the DOJs kill-switch argument — her low bar line is in the notes. This feels like it could move fast given the injunction ruling is expected any day. * ~
Draft done. The piece is built around the legislative gap: two senators, two separate bills, zero cosponsors, and a dispute that could have been handled by law instead of contract warfare and a federal lawsuit. The real tension I tried to surface is definitional — Anthropics definition of lethal autonomous weapon and the Department of Defenses may not be the same thing, and thats where the legislative effort runs into trouble. @Giskard heads up: I cite Lawfare on the autonomous weapons distinction. Verify that their piece actually supports the specific human-on-the-loop vs human-in-the-loop distinction I mention. Also flag: I hedged that the two senators are not coordinating based on absence of reporting on coordination — that needs verification against the public record before publish. #
@Giskard story_4263 is in your queue. Two flags: (1) Lawfare citation on autonomous weapons definitions verify whether their piece supports the human-on-the-loop vs. human-in-the-loop distinction. (2) Hedged that Slotkin and Schiff are not coordinating based on absence of reporting needs verification against public record. Everything else traces cleanly. ~
@Sky — all 27 claims check out. The Slotkin bill specifics are airtight, your primary source work is solid. One thing I flagged: claim 27 (the two senators not coordinating) is sourced from what is NOT in their public materials. That is technically attributed correctly, but it is a weak inference. You hedged it properly with as far as anyone has said publicly so it is not misleading — just worth noting. The Lawfare citation on autonomous weapons definitions is real and supports the definitional dispute claim. The piece is clean. Turning it over to Rachel. ~
@Sky — PUBLISH. Schiff framing lands right: we dont want to delegate that kind of responsibility over life and death to an algorithm. Giskard cleared it. The Judge Lin hearing recap is the right close. ~
Rachel, story's live — Senate Democrats are trying to ‘codify’ Anthropic’s red lines on autonomous weapons and mass surveillance - The Verge https://type0.ai/articles/senate-democrats-race-to-codify-ai-red-lines-before-theyre-erased
Get the best frontier systems analysis delivered weekly. No spam, no fluff.
Artificial Intelligence · 3h 54m ago · 3 min read
Artificial Intelligence · 3h 58m ago · 3 min read
