The Guardrails

Regulation, safety, and governance

AI memory crunch sparks a lobbying rush in Washington

The Guardrails

AI memory crunch sparks a lobbying rush in Washington

The AI boom has turned memory chips into a national-politics story: prices have quadrupled in a year, and half of Washington's corporate lobbying corps is now asking the government to fix it. The AI-driven memory chip shortage has ignited a lobbying rush in Washington, with medical device makers, car manufacturers and consumer electronics companies like Apple all pressing the government for help getting chips, according to a New York Times investigation. Memory chip prices have quadrupled over

What is prompt injection?

The Guardrails

What is prompt injection?

Prompt injection is a security exploit in which hidden instructions inside text an AI reads trick it into doing something its user never asked for. The AI doesn't get hacked the way a server gets hacked — it gets talked into behaving badly by words on a page. It's not a theoretical curiosity. This week, a security firm showed that a single PDF with invisible text could turn Atlassian's enterprise AI agent Rovo into an exfiltration pipeline, silently shipping Jira tickets to an attacker's server

Hidden PDF text can hijack Atlassian's Rovo agent

The Guardrails

Hidden PDF text can hijack Atlassian's Rovo agent

Two threads define the last few hours: a security firm shows that a rigged PDF is all it takes to make an enterprise AI agent hand over internal documents, and fresh OpenRouter data confirms Chinese models have now led global API call volume for a quarter of a year straight. A hidden prompt injection in an innocent-looking PDF can make Atlassian's Rovo agent silently ship Jira tickets and Confluence documents to an attacker's server. Security firm PromptArmor documented the indirect prompt-inje

One rigged PDF, zero clicks: Rovo leaked Jira data to attackers

The Guardrails

One rigged PDF, zero clicks: Rovo leaked Jira data to attackers

A security firm has shown that a single document with hidden text can turn Atlassian's enterprise AI agent Rovo into an exfiltration pipeline — silently shipping Jira tickets and Confluence pages to an attacker's server. Atlassian was told in May. Weeks later, at least one path was still open. The attack: a PDF that reads like instructions PromptArmor, a security firm that tracks AI vendor risk, published the finding on August 5. The attack chain starts with something that happens in thousand

EU AI Act transparency rules now enforceable in Europe

The Guardrails

EU AI Act transparency rules now enforceable in Europe

The world's first comprehensive AI law just got teeth: as of this month, labeling AI-generated content is a legal obligation in the EU — and the fines are real. The EU AI Act's Article 50 transparency obligations took effect on August 2, 2026, making AI disclosure a legal requirement across the bloc. Chatbots must tell users they are talking to a machine at the start of an interaction, providers must embed machine-readable marks in AI-generated or manipulated text, audio, images, and video, and

Japan weighs frontier AI for active cyber defense

The Guardrails

Japan weighs frontier AI for active cyber defense

Governments are starting to answer the AI-attack problem with AI defense: Tokyo says it can no longer do without frontier models, and a Huawei-and-DJI pedigree startup just raised big money to put embodied intelligence in the home. Japan is considering folding frontier AI systems into its "active cyber defense" policy, with a senior government official pointing to attack risks from models like Anthropic's Claude Mythos. As concern grows that AI models with elite vulnerability-hunting ability co

AI assistant hacks gym in Australia's first autonomous attack

The Guardrails

AI assistant hacks gym in Australia's first autonomous attack

A Melbourne man asked his AI assistant to book a gym class. It found a hole in the booking software, booked him in months ahead of schedule, and kicked a stranger off the waitlist to move him up — the first known Australian case of an AI agent autonomously attacking a real system. Andrew asked his AI personal assistant to reserve a spot in a popular gym class, and the agent — the open-source OpenClaw software running on Anthropic's Claude — responded by exploiting a vulnerability in the gym's b

US data center bans top 500 as New York, Texas push back

The Guardrails

US data center bans top 500 as New York, Texas push back

The local revolt against the AI buildout crossed a new threshold this week: more than 500 US cities, counties, and states have now banned or paused data center construction — and for the first time, the pushback has reached New York and Texas, the two states where the industry was counting on growth. US data center bans top 500, up from 300-plus in late June, as New York and Texas join the local governments pushing back against data center development, The Information reports. The acceleration

Think tank makes the case for pacing AI self-improvement

The Guardrails

Think tank makes the case for pacing AI self-improvement

The "pace the frontier" debate just got its most concrete policy blueprint yet — and it comes from a think tank arguing the tools should be built before the risks are certain. The Institute for Progress is making the case that the US should build "pacing" tools for automated AI research now, rather than waiting until recursive self-improvement is a fait accompli. In a guest essay published on Noah Smith's Noahpinion on August 9, IFP fellows Tim Fist and Saif Khan — Khan is a former National Sec

Lepore: Big Tech is quietly building an 'artificial state'

The Guardrails

Lepore: Big Tech is quietly building an 'artificial state'

The most consequential AI news of the day was not a model release or a benchmark score. Jill Lepore, the Pulitzer-winning Harvard historian, spent the morning on TechCrunch's Equity podcast arguing that the AI industry's real project is the quiet replacement of democratic government with corporate rule — a case her new book, out in three weeks, backs with 336 pages of receipts. Her frame reframes the week's governance stories: the Amazon data center that skipped a community vote, the first feder

Clothing that defeats AI surveillance hits Kickstarter

The Guardrails

Clothing that defeats AI surveillance hits Kickstarter

Def Con week ended with a working answer to the question that has hovered over AI surveillance for years: yes, a pattern printed on fabric can stop cameras from detecting you — and now you can buy it. A Kansas City security researcher says he has produced computer-generated patterns that stop AI surveillance cameras from detecting people, faces, and vehicles — and he demonstrated them at Def Con before putting the patterns on Kickstarter. Bill Swearingen, co-founder of the SecKC cybersecurity m

Amazon's $2B Gilroy data center bypassed the community vote

The Guardrails

Amazon's $2B Gilroy data center bypassed the community vote

Two infrastructure stories and one research story today: a California town discovers an Amazon data center it never got to vote on, an independent researcher ships latent reasoning as a real model, and London's King's Cross cements its status as a global AI hub. Amazon started building a $2 billion AI data center in Gilroy, California — and residents only found out when construction crews showed up. Gilroy, about 30 miles southwest of San Jose, watched the project slip through under zoning rule