Who Is Allowed, Who Is Liable: Agent Accountability Gets Specific | 10.21.26

The American Medical Association has published a governance framework for clinical AI agents built on four questions: what the agent does, what proves it can, what it may do and under what conditions, and who bears responsibility. In the Senate, Hawley and Murphy have introduced a bipartisan bill that would attach criminal and civil liability to operators of agents that recklessly cause hacking damage. A March paper from Kaptein and colleagues argues that the execution path, not the prompt, is the proper object of runtime governance. Illinois has created a standing AI Cabinet to study risk to critical infrastructure, and a new demo paper shows policy-as-code checkpoints inside a generalist enterprise agent. Full briefing: https://blog.bearcanyonhq.com/post/who-is-allowed-who-is-liable-agent-accountability-gets-specific-10-21-26 Produced in the Bear Canyon Systems Lab. Editorial content — real research, real opinions. Check the sourcing on the blog.