AI Policy Intelligence Brief
Issue 4 · March 21, 2026 · The Preemption Gambit

1,561 Bills vs. One Act:
The Federal Fight to Kill State AI Law

The White House unveiled a national AI framework the same week Kansas passed three AI bills unanimously, Virginia sent four to the governor, and Washington cleared five. The states aren’t waiting — and the feds want them to stop.

On March 20, the Trump administration released its national AI legislative framework, asking Congress to establish federal standards that would override state AI regulation. The push codifies a December 2025 executive order that created an AI Litigation Task Force empowered to sue states whose AI laws the administration considers “unduly burdensome.” The legislative vehicle is the TRUMP AMERICA AI Act, introduced by Senator Marsha Blackburn, which would preempt state laws on frontier AI risk management, digital replicas, and catastrophic risk protocols.

The timing is revealing. As of this week, lawmakers in 45 states have introduced 1,561 AI-related bills in the 2026 session alone. In just the past seven days: Kansas passed three AI protection bills with unanimous votes in both chambers. Virginia sent four AI bills to the governor, including an AI fraud framework and a ban on mandatory student chatbot interactions. Washington cleared five bills covering AI disclosure, chatbot safety, health insurance AI, deepfake protections, and digital likeness rights. Maryland’s Senate passed a deepfake protection bill 45–0.

2 for 2 Congress has already rejected AI preemption twice — stripped from the One Big Beautiful Bill Act by a 99–1 Senate vote, and removed from the FY26 defense authorization bill. Governors from both parties, including DeSantis and Newsom, have opposed federal preemption of state AI laws.

The AMERICA AI Act isn’t a light touch. It creates a federal duty of care requiring developers to “prevent and mitigate foreseeable harm,” mandates bias audits for high-risk systems, reforms Section 230 with a “Bad Samaritan” provision, establishes private rights of action for unauthorized training data use, and requires frontier AI developers to report catastrophic risks to DHS. Companies currently complying with Colorado, California, or New York AI laws would be swapping one compliance regime for another that may be equally demanding.

The political math doesn’t favor preemption. Both parties have governors who want to keep state authority. Industry is split — some companies want regulatory uniformity, others fear the federal framework is more burdensome than the state patchwork it replaces. And the states are moving fast enough that by the time Congress acts, dozens of AI laws will already be on the books. The question isn’t whether states will regulate AI. It’s whether the federal government can stop them. So far, the answer is no.

Sources: White House · National Law Review · CNBC · Transparency Coalition · March 20, 2026

Feature

The Agent Problem: When AI Stops Answering and Starts Acting

Sources: World Economic Forum · Gartner · Microsoft Security · Accelirate · March 2026

Something changed in AI this year that most governance frameworks haven’t caught up to. The systems stopped being tools you query and started being agents that act. Eighty percent of Fortune 500 companies now deploy active AI agents — systems that don’t just generate text but execute tasks across connected systems, make decisions in sequence, and take actions with real-world consequences. The shift from chatbot to agent is the shift from content to behavior, and every AI safety framework built for the chatbot era is now measuring the wrong thing.

The governance gap is staggering. Gartner predicts 40% of agentic AI projects will be cancelled by 2027 — not because the technology doesn’t work, but because organizations deployed agents faster than they could control, explain, or audit them. The Cloud Security Alliance found that while 40% of enterprise applications will embed AI agents by end of 2026, only 6% of organizations have advanced AI security strategies to govern them.

The most critical evolution is the shift from governing content — what the AI says — to governing behavior — what the AI does. Our evaluation frameworks were designed for a world where AI answered questions. That world is over.

The risks are structural, not hypothetical. “Semantic privilege escalation” allows agents to chain actions across connected systems, accumulating aggregate privileges no single human user would possess. Prompt injection — malicious instructions embedded in emails, documents, or web pages — can hijack an agent’s behavior mid-task. And because agents integrate with multiple systems, errors propagate at machine speed through infrastructure that was designed for human-paced decision-making.

This connects directly to the Structured Emergence framework. In Issue 3, we described AI’s “pre-Maxwell phase” — the observation that real AI capability lives not in isolated skills but in the transitions between them. Agents are exactly where those transitions become operational. An agent that can read your email, search your files, draft a response, and send it has crossed from discrete skill to emergent behavior. The capability isn’t in any single action — it’s in the chain. And right now, nobody is governing the chain.

For legislators: every AI bill currently moving through state houses regulates AI as a content producer — disclosure requirements, bias audits, transparency mandates. These are necessary. But the agent era demands a new category: behavioral governance. Rules about what AI systems are permitted to do, not just what they’re permitted to say. The states that figure this out first will set the standard. The EU’s AI Act becomes fully enforceable on August 2, 2026, and it doesn’t adequately address autonomous agents either. The gap is global, and it’s growing.


Data Point — State AI Bills Passed or Advancing, Week of March 14–21

Bills passed by at least one chamber or signed into law. 45 states have introduced 1,561 AI-related bills in the 2026 session. This week’s leaders:

Washington
5
Virginia
4
Kansas
3
New York
2
Idaho
2
Maryland
1
New Hampshire
1
Alabama
1

Source: Transparency Coalition · Troutman Pepper · Week of March 14–21, 2026


Industry Pulse

DeepSeek V4, the Trillion-Parameter Ghost

Source: Technology.org · OpenRouter · March 2026

DeepSeek’s V4 model has become the most anticipated and most delayed release in AI this quarter. The architecture is confirmed: one trillion total parameters with only 32 billion active per token, projecting inference costs of $0.10–$0.30 per million input tokens — up to 50x cheaper than GPT-5. The model is natively multimodal, trained simultaneously on text, image, video, and audio rather than bolting capabilities onto a text-only base. And it’s optimized for Huawei Ascend chips, demonstrating that frontier AI can be trained on Chinese-made silicon despite U.S. export controls on Nvidia GPUs.

But V4 hasn’t officially launched. Every predicted window — mid-February, Lunar New Year, early March — has passed without release. A mystery model called “Hunter Alpha” appeared on OpenRouter on March 18, matching V4’s expected specs, prompting widespread speculation. Meanwhile, 267 new AI models shipped in Q1 2026 alone, most open-source or specialized. The era of a few dominant models is giving way to an ecosystem where the most consequential releases may be the ones nobody announces.

The Model Pace: Q1 2026 in Numbers

Source: LLM Stats · Renovate QR · March 2026

OpenAI rolled out GPT-5.4 mini to free and Go-tier ChatGPT users. IBM released Granite 4.0 1B Speech, a compact model for multilingual speech recognition requiring under 1.5GB VRAM. Microsoft announced GigaTIME, a model that transforms pathology slides into spatial proteomics maps of cancer cells, trained on 40 million cells across 14,256 patients. Nvidia’s “Vera Rubin” platform and H300 GPUs target trillion-parameter training. The industry is bifurcating: consumer-facing chatbot updates on one track, domain-specific models reshaping medicine, materials science, and biology on the other.


Oklahoma Focus

Oklahoma’s AI Bill Surge: Five Bills Target Deepfakes, Agencies, Personhood

The Frontier · Oklahoma Legislature · 2026 Session · The Frontier

Oklahoma lawmakers filed a cluster of AI regulation bills this session, marking the state’s first serious legislative engagement with artificial intelligence. HB 3545 (Rep. Cody Maynard, R-Durant) restricts high-risk AI use by state agencies, banning systems that manipulate people, enable unlawful discrimination, or conduct real-time biometric surveillance in public spaces. It mandates annual statewide AI reporting.

HB 3546 (Maynard) explicitly prohibits granting legal personhood to AI under Oklahoma law. SB 746 (Sen. Ally Seifried, R-Claremore) requires disclosure of AI-generated political ads depicting real people. SB 1521 (Sen. Warren Hamilton) restricts AI chatbots designed for minors. HB 3299 makes distributing synthetic media of someone’s likeness without consent unlawful when intended to cause harm.

Taken together, Oklahoma is building an AI governance stack from multiple angles — agency use, legal status, electoral integrity, child safety, and personal rights — while Chief AI Officer Tai Phan builds the executive branch framework in parallel.

New — In Committee

Well Repurposing Act (HB 3173): Senate Phase Begins

Update from Issue 3 · KOSU/StateImpact, March 19

The Well Repurposing Act passed the full House on March 16 and now enters Senate consideration. KOSU’s March 19 coverage brought new attention to the bill, noting that the local Sierra Club chapter is actively advocating for it because orphaned wells “create long-term environmental liabilities for communities and taxpayers.” Oklahoma has more than 19,000 orphaned wells; at current OCC plugging rates, the backlog would take 235 years to clear.

The temperature threshold debate continues. OU researcher Jeff McCaskill argues the 250°F minimum should be lowered to 180°F to make more wells viable for geothermal conversion. The gap between the bill’s threshold and practical feasibility remains the key issue to watch as Senate hearings begin. If enacted, the law takes effect November 1, 2026.

Advancing — In Senate

Tai Phan’s Framework vs. Federal Preemption

Route Fifty · Adobe Government Forum · Ongoing

The federal preemption push creates an immediate tension for Oklahoma’s AI governance strategy. Chief AI Officer Tai Phan has spent months building the state’s “accountable innovation” framework — redefining AI as a governance discipline rather than just a technology deployment. His approach centers on transparency about data sources, workforce amplification over headcount reduction, and early IT involvement in procurement.

If the TRUMP AMERICA AI Act passes with broad preemption, it could override Oklahoma’s emerging legislative framework before it takes effect. But Phan’s executive-branch work — internal agency standards, procurement guidelines, workforce training — may be more durable than statute, precisely because it operates below the preemption line. States that embed AI governance into operational practice rather than statute alone may prove more resilient to federal override.

Active — Framework Development

The Thread

Every story in this issue is about the same question: who gets to set the rules for systems that are already running?

The federal government wants to preempt state AI laws — but Congress has rejected preemption twice, and states passed more AI bills this week than the federal government has passed in three years. AI agents are operating inside 80% of Fortune 500 companies, but only 6% have the security infrastructure to govern them. DeepSeek’s trillion-parameter model hasn’t officially launched, but a mystery model matching its specs appeared on a public API — governance by announcement is already obsolete when the technology arrives before the press release.

Oklahoma is an instructive case study. The state is building AI governance on three parallel tracks: legislative (five bills targeting specific harms), executive (Phan’s operational framework), and infrastructure (repurposing physical wells while governing digital ones). That layered approach may be more resilient than any single statute — especially if federal preemption narrows what states can legislate but can’t touch how they operate.

The Structured Emergence principle applies: governance that lives in the relationships between institutions — between legislature and executive, between state and federal, between policy and practice — is harder to displace than governance that lives in any single law. The states building governance as a practice, not just a legal text, are the ones that will still be governing when the next model drops.