Payback's a Bitch, Baby

## Editorial

Payback’s a bitch, baby. Apologies for the blatantly sexist language but it seemed to capture the theme for the week, and possibly the year.

The government is not merely getting involved in the conversation about AI. That has been true for years. No, the frontier AI companies invited the government into the room, and now the government is beginning to behave as if it owns the door, the guest list, the schedule, and the product roadmap.

This is not payback as punishment from critics. It is payback as the consequence of getting what you asked for. Especially Dario Amodei, but now, with the delayed roll out of GPT 5.6 and constraints on who gets it, the wheel has moved full circle.

For several years the leaders of the frontier labs have argued that AI is unusually powerful, unusually risky, and unusually deserving of state attention. Sam Altman asked government to take the risks seriously. Dario Amodei has done the same, and has also tried to shape the acceptable uses of AI in sensitive domains such as defense. Whether each intervention was made in good faith is not the point. The point is that the companies helped create the premise that frontier AI is not normal technology. It is too important to be left to ordinary markets, ordinary product judgment, or ordinary scientific process.

Government heard the second half of that argument. It heard danger, exceptionalism, and national consequence. It heard an invitation. To be honest it was reluctant to play the requested role. But with Anthropic acting tartly, and OpenAI being obliging, it took the bait.

Now the answer is arriving in the bluntest possible form: product release control. Who and when are both under Government control as of yesterday.

OpenAI’s own GPT-5.6 system card presents the model family as a broad-access technology that is wrapped in safety gates. It says Sol, Terra, and Luna remain below OpenAI’s Critical thresholds, while still reaching High capability in biological and chemical domains, cybersecurity, and AI self-improvement. The intended compromise is visible in the language of access:

> broad access protected by baseline systems

and for riskier use:

> stronger verification, accountability, and trust signals

That sounds like OpenAI was trying to keep responsibility inside the product and its operating environment. That is the right course I believe.

But this week the story moved beyond the company. Two new reports make the control point concrete.

Axios has the OpenAI side. GPT-5.6 is now being rolled out first to about 20 companies whose participation has been approved by the government. The article says OpenAI is "limiting access to all three versions of the new model at the behest of the U.S. government." OpenAI itself adds the warning label: "We don't believe this kind of government access process should become the long-term default."

Semafor has the Anthropic side. Commerce has lifted its block on Claude Mythos 5 for more than 100 US institutions, after deciding that "appropriate safeguards are in place to permit certain trusted partners" to access the model. Fable 5 remains unresolved, but Anthropic has committed to work with the US government on "protocols and standards and releases" for its models.

TechCrunch frames the two stories as the same new regime, with access to frontier models approved:

> customer by customer

The Washington Post sharpens the point. It reports that the federal government will vet companies seeking access to OpenAI’s latest ChatGPT upgrade.

That is a very different control point. It is not a model gateway, a usage policy, a payment rail, an audit trail, a security review, or a liability regime. It is permission to receive the model at all.

Dean Ball names the procedural problem. If government is going to control release, then it must say what standard it is applying. Although I believe we have to trust the companies to be in charge of release, clearly that moment has passed.

Why oppose the Government stepping in?

The question is not whether safety matters. Of course it does. The question is whether release decisions are governed by clear tests, review procedures, appeal paths, and public criteria, or whether the default answer becomes no because nobody can say what yes requires. A frontier-model regime without legible standards is not just safety policy. It is discretionary industrial policy. Not to mention chaos and friction in the way of innovation.

Henry Farrell’s piece explains why this matters politically. AI regulation is not disappearing. It is migrating into national-security tools, export controls, executive discretion, trade restrictions, industrial policy, immigration rules, research funding, and state preemption. In that world, regulation does not always look like a statute or a notice-and-comment process. It can look like strategic ambiguity, where companies comply before the line is even drawn.

The intervention is at the wrong layer.

The right question is not whether frontier AI needs governance. It obviously does. The right question is where governance should live. This week’s strongest AI pieces point toward a different answer: responsibility should sit where AI operates in the world. At the point of sale and consumption.

Raphael’s payment-rail essay gets this exactly right. Once software can act on behalf of people, the issue is no longer a prettier chatbot or a smoother checkout page. It is permission, settlement, identity, fraud, and liability. The valuable layer decides whether an agent may spend money, how much, where, how often, with which credential, and with what audit trail. That is governance at the point of action.

Alex Lazarow makes the same point through the language of trust. Earlier technologies produced auditors, insurers, certificate authorities, underwriters, and standards bodies. AI is doing the same now because the question is changing from whether a model’s output looks right to whether someone can stand behind the work an autonomous system just performed. The trust layer is not decorative. It is the civilizational plumbing that lets powerful systems become ordinary enough to use. So far OpenAI and Anthropic (as well as Google and the Chinese models) have done a good job of that.

Kong CEO Augusto Marietti brings it down to enterprise infrastructure. The issue is who controls cost, policy, routing, and observability when thousands of employees and agents call models all day.

An AI gateway is a control surface. It can route simple prompts to cheaper models, compress context, cache common requests, enforce security rules, and prevent every request from defaulting to the most expensive or most dangerous capability. It can also police outputs and actions.

Andre Karpathy’s post makes a version of the same argument. The next AI interface is not merely a website or local app. It is:

> a self-contained, persistent, asynchronous entity with org-wide tools and context, working alongside teams of humans.

If that is right, then the governance problem is not solved by deciding who gets a model preview. The governance problem becomes how organizations grant memory, context, permissions, tools, budget, identity, persistence, and authority to a new class of software actor. That is not model-release policy. That is operating policy. It is also about the agent entering the team as part of it and engaging with human processes.

Nathan Lambert’s TMax post shows the research version. He argues that progress in terminal agents now depends on recipe work: data, algorithms, harnesses, infrastructure, pitfalls, baselines, and reproducible decision steps. Agent systems do not become reliable because someone writes a better slogan about safety. They become reliable because the environment around them can measure, test, retry, evaluate, and improve.

Nilesh Barla’s self-improving agent piece says the same thing in production terms. The improvement is not in the model weights alone. It is in the harness around the model: tools, memory, evaluation loops, telemetry, and environment design. The system that learns is the system whose operating environment can observe, judge, retain, and reuse behavior.

This is why the government-vetting model feels both inappropriate and premature. It tries to control distribution before we have properly built the downstream institutions of use.

It also risks confusing access with responsibility. If a company receives GPT 5.6, has responsibility been solved? No. If another company is denied access, has risk disappeared? No. Models matter, but agency happens when models are connected to tools, money, code, data, workflows, identity, permissions, and people. That is where the consequences appear. That is where the controls should be strongest. Much of my own work with AI (Codex and Claude code mainly) is iterating skills through trial and error until they are honed. The entire process creates an operating canvas I determine.

Exponential View estimates that generative AI produced $110 billion in customer revenue over the past 12 months and is running above a $175 billion annualized rate. It also says AI-linked CapEx has added $535 billion above the pre-AI trend by 2026, while 2026 depreciation approaches $111 billion. The demand is real, but so is the bill. If AI becomes a utility, the utility must pay for itself. Government interjection will slow down the re-payment of the loan.

The venture pieces fit the same pattern. Alfred Lin reminds us that:

> You make the most money when you are right and contrarian.

But contrarianism only matters if it is attached to operating capability. If the Government sees its role as consensus, don’t bet on contrarianism.

That is also the lesson for AI governance. Capital is not enough. Models are not enough. Government permission is not enough. The system has to work. Self-governance across borders may be the right path.

The human question is still present. Andrew Keen’s interview with Kate O’Neill opens with the warning:

> They profit when you think the chatbot cares.

That line is important because it names the moral hazard beneath the product excitement. The more human the interface feels, the more important it becomes to know who is responsible behind it. Humanism in the AI age cannot mean pretending machines have inner life. It has to mean designing systems that keep human agency, accountability, and meaning intact even as software gets more capable.

So yes, payback’s a bitch. The frontier labs asked government to treat AI as exceptional. Government is now doing exactly that. The danger is that the state will choose the easiest visible lever: model access. That may satisfy political anxiety, but it will not build the trust layer, payment layer, audit layer, gateway layer, liability layer, security layer, or operational layer that real deployment requires.

The companies should not outsource responsibility upward and then act surprised when the state keeps the keys. The government should not pretend release permission is the same as governance. And the rest of us should not confuse fear with seriousness.

AI needs controls. But the controls should follow the work. They should live where agents act, where money moves, where code ships, where infrastructure strains, where risk is insured, where failures are audited, and where humans decide what kind of civilization this technology is supposed to serve.