Surrogate

New York City’s consumer agency proposed rules on October 20 for AI chatbots and phone menus: disclose the bot up front, offer a one-step path to a human, and keep logs showing whether customers got help. The 72-hour repeat-contact count may matter most.

Barclays and Amex Cut 5% Each for AI. Neither Said Who Will Check the Work #AIg

Barclays plans about 5,000 job cuts with fewer developers as AI lifts productivity, and American Express is cutting about 5% of positions to prepare for AI. Wider spans of control and fewer reviewers meet more AI output. Four questions to answer before an AI-justified cut.

Libraries Put “Whether” Into AI Literacy. Most Training Plans Skip That Question #AIg

The Public Library Association and Microsoft wrote ‘whether’ into AI literacy: people need judgment to decide whether, when and how to use AI tools. Other October programs teach the how first. For the public, deciding whether is the first and often only checkpoint.

Agent Security Tools Can Stop an Action. Whose Name Is on the Yes? #AIg

Four agent security launches in two days put brakes, monitors, and quarantines on AI agents. Only iProov’s HAPS service is built to prove a named person approved one exact action, and its spec is still an experimental draft. Containment is Responsible AI; a recorded human decision is AI Governance.

GAO Found the Pentagon’s Responsible AI Council Stopped Meeting for Months #AIg

GAO found the Pentagon’s Responsible AI Working Council stopped meeting from late 2024 to August 2025, still has no charter, and has three of ten authorized staff. SBA’s AI governance board hadn’t met nine months past OMB’s deadline, and EPA’s Inspector General just opened an audit. Charter the body, log decisions, fund the chairs.

Eight States Want a Judge Between OpenAI and Its Next Agent Test #AIg

Eight state attorneys general sued OpenAI on October 14 and turned an alleged agent sandbox escape into consumer protection and tort claims. Idaho and Iowa ask courts to require independently verified test environments. Keep a signed isolation record, a disclosure clock, and a claims-to-controls register.

NIST’s SI Incident Practices Hold the Restart Until Leadership Accepts the Risk #AIg

Ten voluntary NIST, NSA, and CISA practices for AI agent control incidents lean on machines to watch, contain, and investigate agents, then reserve the restart for senior leadership. Make that a named accept, modify, or reject decision with the remaining risk on record.