Forecasts

Question Title: Enactment of a United States federal law that mandates all domestic providers of synthetic nucleic acids to screen every order for sequences of concern Question: Between June 10, 2026, and 11:59 PM UTC on December 31, 2027, will a United States federal law be enacted that mandates all domestic providers of synthetic nucleic acids to screen every order for sequences of concern? Background: DNA synthesis allows for the creation of custom genetic material from digital sequences, a technology critical for biotechnology but also flagged as a potential biosecurity risk in the age of advanced AI. As of June 10, 2026, the United States primarily relies on the 2024 OSTP Framework for Nucleic Acid Synthesis Screening, which establishes a voluntary screening regime for most commercial providers, though it is mandatory for those receiving federal research funding [[PDF] Framework For Nucleic Acid Synthesi Screening](https://aspr.hhs.gov/s3/documents/ostp-nucleic-acid-synthesis-screening-framework-sep2024.pdf). On January 29, 2026, the Biosecurity Modernization and Innovation Act of 2026 (S.3741) was introduced by Senators Tom Cotton (R-AR) and Amy Klobuchar (D-MN) to transition this to a mandatory federal requirement for all domestic providers S.3741 - Biosecurity Modernization and Innovation Act of 2026 .... As of June 10, 2026, S.3741 remains in the Senate Committee on Commerce, Science, and Transportation and has not yet received a floor vote All Info - S.3741 - 119th Congress (2025-2026): Biosecurity .... The bill has bipartisan sponsorship, including Senators Ted Budd (R-NC) and Christopher A. Coons (D-DE) All Info - S.3741 - 119th Congress (2025-2026): Biosecurity .... If enacted, this legislation would represent a significant shift from voluntary industry standards to a legally enforced biosecurity framework. Resolution Criteria: This question resolves as YES if a United States federal law is enacted between June 10, 2026, and 11:59 PM UTC on December 31, 2027, that mandates all domestic providers of synthetic nucleic acids to screen every order for sequences of concern. * A United States federal law is considered enacted if it is signed by the President of the United States, becomes law without the President's signature, or if a presidential veto is overridden by Congress according to Article I, Section 7 of the U.S. Constitution. * Domestic providers of synthetic nucleic acids refers to any commercial entity that synthesizes and sells synthetic DNA, RNA, or other nucleic acids to customers located within the United States. * Sequences of concern refers to nucleotide or amino acid sequences that match pathogens on the Biological Select Agents and Toxins (BSAT) list, the Commerce Control List (CCL), or a list specifically established by a federal agency (such as the Secretary of Commerce) for biosecurity screening purposes. * Screen every order refers to the requirement for the provider to compare the sequence of every incoming purchase order against the established list of sequences of concern to identify potential biosecurity risks. * Resolution will be determined based on the official legislative status records provided by Congress.gov (https://www.congress.gov/). If multiple laws are enacted, any one law meeting the criteria is sufficient for a YES resolution. If no such law is enacted by the deadline, the question resolves as NO.

DNA synthesis allows for the creation of custom genetic material from digital sequences, a technology critical for biotechnology but also flagged as a potential biosecurity risk in the age of advanced AI. As of June 10, 2026, the United States primarily relies on the 2024 OSTP Framework for Nucleic Acid Synthesis Screening, which establishes a voluntary screening regime for most commercial providers. On January 29, 2026, the Biosecurity Modernization and Innovation Act of 2026 (S.3741) was introduced to transition this to a mandatory federal requirement for domestic providers. While some analysts describe the bill as a direct mandate for the Secretary of Commerce to promulgate screening regulations, others characterize it as an assessment-focused step to inform future implementation. This question tracks whether the US formally codifies a mandatory screening requirement into federal law by the end of 2027.

This question resolves as YES if a United States federal law is enacted between June 10, 2026, and 11:59 PM UTC on December 31, 2027, that mandates, or requires a federal agency to establish regulations mandating, that domestic providers of synthetic nucleic acids screen orders for sequences of concern. * Enactment: A "United States federal law" refers to a statute passed by Congress and signed by the President (or otherwise enacted per Article I, Section 7 of the U.S. Constitution). Mandatory requirements established solely through Executive Orders or agency rulemaking under existing authorities (e.g., IEEPA) do not qualify. * Timing: The question resolves as YES if the law is enacted by December 31, 2027, even if the mandatory screening requirement does not take legal effect or become enforceable until a date after the deadline. * Mandate vs. Assessment: The law must either directly mandate screening or require an agency (such as the Department of Commerce) to promulgate regulations establishing a mandatory screening program. A law that solely mandates a study, assessment, or report to Congress without requiring the implementation of screening protocols resolves as NO. * Scope and Exemptions: * The law must apply to "all" domestic providers. If the law includes exemptions for business size, revenue thresholds, or production volume (e.g., de minimis exemptions for small providers), the question resolves as NO. * The requirement to screen "every order" means no category of customer or order may be exempt. If the law allows providers to skip screening for "trusted partners," "institutional customers," or "verified researchers," the question resolves as NO. * Sequences of Concern: Refers to nucleotide or amino acid sequences that match pathogens on the Biological Select Agents and Toxins (BSAT) list, the Commerce Control List (CCL), or any technical list or functional definition established by a federal agency (e.g., Secretary of Commerce, NIST) for biosecurity screening purposes. * Providers: Domestic providers refers to any commercial entity that synthesizes and sells synthetic DNA, RNA, or other nucleic acids to customers located within the United States. Resolution will be determined based on official records from Congress.gov. If no such law is enacted by the deadline, the question resolves as NO.

Question Title: Enactment of a United States federal law mandating biosecurity screening for synthetic nucleic acid providers Question: Between June 10, 2026, and 11:59 PM UTC on December 31, 2027, will a United States federal law be enacted that mandates, or requires the establishment of regulations mandating, that domestic providers of synthetic nucleic acids screen orders for sequences of concern? Background: DNA synthesis allows for the creation of custom genetic material from digital sequences, a technology critical for biotechnology but also flagged as a potential biosecurity risk in the age of advanced AI. As of June 10, 2026, the United States primarily relies on the 2024 OSTP Framework for Nucleic Acid Synthesis Screening, which establishes a voluntary screening regime for most commercial providers. On January 29, 2026, the Biosecurity Modernization and Innovation Act of 2026 (S.3741) was introduced to transition this to a mandatory federal requirement for domestic providers. While some analysts describe the bill as a direct mandate for the Secretary of Commerce to promulgate screening regulations, others characterize it as an assessment-focused step to inform future implementation. This question tracks whether the US formally codifies a mandatory screening requirement into federal law by the end of 2027. Resolution Criteria: This question resolves as YES if a United States federal law is enacted between June 10, 2026, and 11:59 PM UTC on December 31, 2027, that mandates, or requires a federal agency to establish regulations mandating, that domestic providers of synthetic nucleic acids screen orders for sequences of concern. * Enactment: A "United States federal law" refers to a statute passed by Congress and signed by the President (or otherwise enacted per Article I, Section 7 of the U.S. Constitution). Mandatory requirements established solely through Executive Orders or agency rulemaking under existing authorities (e.g., IEEPA) do not qualify. * Timing: The question resolves as YES if the law is enacted by December 31, 2027, even if the mandatory screening requirement does not take legal effect or become enforceable until a date after the deadline. * Mandate vs. Assessment: The law must either directly mandate screening or require an agency (such as the Department of Commerce) to promulgate regulations establishing a mandatory screening program. A law that solely mandates a study, assessment, or report to Congress without requiring the implementation of screening protocols resolves as NO. * Scope and Exemptions: * The law must apply to "all" domestic providers. If the law includes exemptions for business size, revenue thresholds, or production volume (e.g., de minimis exemptions for small providers), the question resolves as NO. * The requirement to screen "every order" means no category of customer or order may be exempt. If the law allows providers to skip screening for "trusted partners," "institutional customers," or "verified researchers," the question resolves as NO. * Sequences of Concern: Refers to nucleotide or amino acid sequences that match pathogens on the Biological Select Agents and Toxins (BSAT) list, the Commerce Control List (CCL), or any technical list or functional definition established by a federal agency (e.g., Secretary of Commerce, NIST) for biosecurity screening purposes. * Providers: Domestic providers refers to any commercial entity that synthesizes and sells synthetic DNA, RNA, or other nucleic acids to customers located within the United States. Resolution will be determined based on official records from Congress.gov. If no such law is enacted by the deadline, the question resolves as NO.

Summary The probability of a United States federal law mandating biosecurity screening for all synthetic nucleic acid providers without any exemptions being enacted by the end of 2027 is exceptionally low. While there is meaningful momentum toward establishing biosecurity regulations, the specific criteria for this event are remarkably stringent. The primary legislative vehicle currently in Congress, the Biosecurity Modernization and Innovation Act of 2026 (S.3741), has bipartisan sponsorship and strong backing from industry leaders, national security experts, and the executive branch All Info - S.3741 - 119th Congress (2025-2026): Biosecurity ... AI executives join call for stricter regulation of synthetic biology Improving the Safety and Security of Biological Research. Currently, the US relies on the 2024 OSTP framework, which operates mostly as a set of voluntary guidelines tied to federal research funding OSTP Framework for Nucleic Acid Synthesis Screening Table 1. Selected US Policies for Biosafety and Biosecurity Oversight. S.3741 seeks to change this paradigm by requiring the Secretary of Commerce to promulgate mandatory screening regulations Untitled S.3741 - Biosecurity Modernization and Innovation Act of 2026 .... However, even if this legislation were to pass, it currently contains explicit exemptions that would immediately disqualify it from meeting the necessary conditions. To satisfy the criteria, legislation must strictly apply to all domestic providers and screen every single order, with no carve-outs for institutional customers, verified researchers, or small businesses. S.3741 explicitly permits an "expedited review process for institutional customers, including accredited institutions of higher education" S.3741 - Biosecurity Modernization and Innovation Act of 2026 ... Untitled and allows "exemptions from customer screening requirements for sequences or products that are clearly non-hazardous" S.3741 - Biosecurity Modernization and Innovation Act of 2026 ... S.3741 - Biosecurity Modernization and Innovation Act of 2026 .... The legislative process almost universally trends toward adding industry-friendly exemptions to reduce friction, rather than removing them. Therefore, realizing this event requires not only the difficult hurdle of passing a standalone bill or attaching it to a larger legislative package by the December 31, 2027 deadline, but also the highly improbable scenario where Congress actively strips existing, widely-supported exemptions from the legislative text. Multiplying the baseline probability of any mandatory screening law passing (roughly 15–20%) by the very low likelihood that such a law strictly avoids all disqualifying exemptions (around 10–20%) results in a final assessment firmly in the low single digits. Strongest Arguments for Yes * Broad Industry and Expert Support: A robust coalition of AI, biotechnology, and national security leaders actively advocates for mandatory screening https://prod-i.a.dj.com/public/resources/documents/dnaletter.pdf Open Letter: In Support of Mandatory Nucleic Acid Synthesis .... A June 2026 open letter signed by 69 prominent figures, including executives from major AI companies, specifically pushed for S.3741, characterizing it as a critical vehicle for mandatory requirements Strengthening biosecurity in the era of AI - Microsoft On the Issues AI executives join call for stricter regulation of synthetic biology AI executives join call for stricter regulation of synthetic biology. * Bipartisan Legislative Vehicles and Executive Alignment: S.3741 is a bipartisan bill with sponsors spanning both political parties All Info - S.3741 - 119th Congress (2025-2026): Biosecurity .... Furthermore, a May 2025 Executive Order on biological research safety called for legislative proposals to address gaps in screening authorities, indicating alignment with the executive branch Improving the Safety and Security of Biological Research. * Potential for Must-Pass Legislation: Biosecurity measures frequently advance by being attached to larger, must-pass defense and funding bills. There is precedent for this pathway, such as the BIOSECURE Act being included in the FY2026 National Defense Authorization Act (NDAA) https://manifold.markets/HaukeHillebrandt/will-the-biosecurity-modernization Mandatory DNA synthesis screening law in the US by '27? | Manifold. Strongest Arguments for No * Strict Exemption Constraints: The conditions for this event demand that no customers or sequences can be exempt. The leading bill, S.3741, fundamentally conflicts with this by legally establishing expedited reviews for institutional customers and exemptions for clearly non-hazardous sequences S.3741 - Biosecurity Modernization and Innovation Act of 2026 ... S.3741 - Biosecurity Modernization and Innovation Act of 2026 ... Untitled. * Legislative Inertia and Reality: The vast majority of introduced bills fail to become law. As of June 2026, S.3741 has seen no committee hearings, markups, or floor votes All Info - S.3741 - 119th Congress (2025-2026): Biosecurity ... https://manifold.markets/HaukeHillebrandt/will-the-biosecurity-modernization All Info - S.3741 - 119th Congress (2025-2026): Biosecurity .... * Industry Pressure for Compromise: Any legislation that successfully advances typically relies on compromises that minimize operational burdens on industry. Removing the "institutional customer" and "non-hazardous product" exemptions would create immense friction, making it highly unlikely they are stripped from the final text Untitled https://haukehillebrandt.github.io/forecasting-reports/projects/_global/global_forecasts.html#q-will-the-biosecurity-modernization-and-innovation-act-of-202. * Competing Legislative Priorities: The alternative House bill, H.R.3029, focuses solely on research, standards, and best practices, rather than instituting an enforceable federal screening mandate, indicating that not all lawmakers are aligned on a strict mandate H.R.3029 - 119th Congress (2025-2026): Nucleic Acid Standards for ... H.R.3029 - 119th Congress (2025-2026): Nucleic Acid Standards for ... All Info - H.R.3029 - 119th Congress (2025-2026): Nucleic Acid .... Key Uncertainties * Amendments to Legislative Vehicles: If the current exemptions in S.3741 are unexpectedly removed to create a truly universal screening mandate, or if a new, stricter bill is introduced and rapidly prioritized, the likelihood of this outcome would significantly increase. * Interpretation of "Expedited Review": There is slight uncertainty regarding whether future regulatory interpretation might view "expedited review" as a streamlined form of screening rather than a full exemption. If this interpretation holds, the current legislative text could theoretically qualify, pushing the probability higher. * Catalyzing Biosecurity Events: A high-profile biosecurity incident or scare before the end of 2027 could rapidly unify Congress to pass a draconian, no-exceptions statutory mandate, overcoming normal legislative hurdles and industry lobbying.

Passage of a federal mandate for DNA screening would mark a transition from a voluntary regime [59ac9d] to a legally enforced framework, directly impacting the mitigation of AI-enabled biological risks [c40810]. As a real-world regulatory outcome with enforcement, it settles a major policy crux regarding biosecurity oversight.

Question Title: European Commission designation of at least 5 General-Purpose AI (GPAI) models as presenting systemic risk under Article 51 of the EU AI Act between June 10, 2026 and 31st December 2027 Question: Will the European Commission designate at least 5 General-Purpose AI (GPAI) models as presenting systemic risk under Article 51 of the EU AI Act between June 10, 2026 and 31st December 2027? Background: The EU AI Act (Regulation (EU) 2024/1689) provides a regulatory framework for General-Purpose AI (GPAI) models, including specific obligations for those that pose systemic risk Article 51: Classification of General-Purpose AI Models ... - EU AI Act. These obligations, which include mandatory risk assessments, adversarial testing, and incident reporting, apply once a model is officially classified by the European Commission Article 51: Classification of General-Purpose AI Models ... - EU AI Act. As of June 10, 2026, the European Commission has designated 0 General-Purpose AI (GPAI) models as presenting systemic risk under Article 51 of the EU AI Act Regulation - EU - 2024/1689 - EN - EUR-Lex - European Union. Classification is typically triggered when a model's training compute exceeds 10^25 floating-point operations (FLOPs), although the Commission may also designate models based on equivalent high-impact capabilities Article 51: Classification of General-Purpose AI Models ... - EU AI Act. While several industry models are estimated to have exceeded this compute threshold, formal designation is an administrative act recorded in a public registry Article 51: Classification of General-Purpose AI Models ... - EU AI Act Regulation - EU - 2024/1689 - EN - EUR-Lex - European Union. The European AI Office is tasked with maintaining this registry and overseeing compliance European AI Office | Shaping Europe's digital future. Resolution Criteria: This question resolves to YES if, between June 10, 2026 and 31st December 2027 (UTC), the European Commission officially designates at least 5 General-Purpose AI (GPAI) models as presenting systemic risk under Article 51 of the EU AI Act. The term systemic risk is defined by Article 51 of the EU AI Act (https://artificialintelligenceact.eu/article/51/) as models possessing high-impact capabilities or those determined by the Commission to have equivalent impact. Designations must be verified by the official registry of General-Purpose AI (GPAI) models with systemic risk maintained by the European AI Office (https://digital-strategy.ec.europa.eu/en/policies/ai-office) or by publication in the Official Journal of the European Union. The count of 5 General-Purpose AI (GPAI) models includes any model designated via the 10^25 FLOPs compute presumption (Article 51(2)) or via a Commission decision (Article 51(1)). Models that are designated and subsequently removed from the registry or de-classified before 31st December 2027 still count toward the total of 5. If fewer than 5 General-Purpose AI (GPAI) models are designated by 11:59 PM UTC on 31st December 2027, the question resolves to NO.

The EU AI Act (Regulation (EU) 2024/1689) provides a regulatory framework for General-Purpose AI (GPAI) models, including specific obligations for those that pose systemic risk. Article 51 defines these as models with "high-impact capabilities"—presumed when training compute exceeds 10^25 FLOPs—or those otherwise designated by the Commission based on qualitative criteria. While several models are estimated to have exceeded the 10^25 FLOPs threshold already, formal designation is an administrative act recorded in a public registry maintained by the European AI Office. For models already on the market before August 2, 2025, providers have a 24-month grace period (until August 2, 2027) to comply with the rules, which may lead to a cluster of designations around that deadline. This question asks about the total count of models that will have been officially classified as presenting systemic risk by the end of 2027.

This question resolves to YES if, as of 11:59 PM UTC on December 31, 2027, there are a total of at least 20 General-Purpose AI (GPAI) models officially designated as "presenting systemic risk" (or "with systemic risk") under Article 51 of the EU AI Act. - Official Sources: Designations must be verified by the official registry of GPAI models with systemic risk maintained by the European AI Office or by publication in the Official Journal of the European Union. A designation is considered official if it appears in either source by the deadline. - Count Calculation: - The count refers to the total number of models listed in the registry or Official Journal as of the deadline, including all models designated up to that point. - Each unique entry or record in the official registry or Official Journal counts as one distinct model. - Distinct entries for different parameter sizes (e.g., separate records for 70B and 400B variants of the same model family) count as separate models. - Versioned updates (e.g., v2.0 and v2.1) count as separate models if they have distinct designation records. The count is based strictly on individual designation records, not on how models are marketed. - Exclusions: - Only models specifically classified as "presenting systemic risk" are included. - Models that meet the 10^25 FLOPs compute threshold but successfully rebut the presumption under Article 51(3) and are NOT classified as presenting systemic risk are excluded. - De-classification: Models must be listed as "presenting systemic risk" as of the deadline. Models that were designated but subsequently removed from the registry or de-classified before December 31, 2027, do not count toward the total. If the total count of such models is 19 or fewer at the deadline, the question resolves to NO.

Question Title: Total of at least 20 General-Purpose AI (GPAI) models designated as presenting systemic risk by December 31, 2027 Question: As of December 31, 2027, will there be a total of at least 20 General-Purpose AI (GPAI) models officially designated as "presenting systemic risk" under Article 51 of the EU AI Act? Background: The EU AI Act (Regulation (EU) 2024/1689) provides a regulatory framework for General-Purpose AI (GPAI) models, including specific obligations for those that pose systemic risk. Article 51 defines these as models with "high-impact capabilities"—presumed when training compute exceeds 10^25 FLOPs—or those otherwise designated by the Commission based on qualitative criteria. While several models are estimated to have exceeded the 10^25 FLOPs threshold already, formal designation is an administrative act recorded in a public registry maintained by the European AI Office. For models already on the market before August 2, 2025, providers have a 24-month grace period (until August 2, 2027) to comply with the rules, which may lead to a cluster of designations around that deadline. This question asks about the total count of models that will have been officially classified as presenting systemic risk by the end of 2027. Resolution Criteria: This question resolves to YES if, as of 11:59 PM UTC on December 31, 2027, there are a total of at least 20 General-Purpose AI (GPAI) models officially designated as "presenting systemic risk" (or "with systemic risk") under Article 51 of the EU AI Act. - Official Sources: Designations must be verified by the official registry of GPAI models with systemic risk maintained by the European AI Office or by publication in the Official Journal of the European Union. A designation is considered official if it appears in either source by the deadline. - Count Calculation: - The count refers to the total number of models listed in the registry or Official Journal as of the deadline, including all models designated up to that point. - Each unique entry or record in the official registry or Official Journal counts as one distinct model. - Distinct entries for different parameter sizes (e.g., separate records for 70B and 400B variants of the same model family) count as separate models. - Versioned updates (e.g., v2.0 and v2.1) count as separate models if they have distinct designation records. The count is based strictly on individual designation records, not on how models are marketed. - Exclusions: - Only models specifically classified as "presenting systemic risk" are included. - Models that meet the 10^25 FLOPs compute threshold but successfully rebut the presumption under Article 51(3) and are NOT classified as presenting systemic risk are excluded. - De-classification: Models must be listed as "presenting systemic risk" as of the deadline. Models that were designated but subsequently removed from the registry or de-classified before December 31, 2027, do not count toward the total. If the total count of such models is 19 or fewer at the deadline, the question resolves to NO.

Summary The technical pipeline of General-Purpose AI (GPAI) models already exceeds the threshold of 20 officially designated systemic risk models, driven by the rapid pace of frontier AI development. Under Article 51 of the EU AI Act, models with training compute exceeding 10^25 FLOPs are presumed to have high-impact capabilities and present systemic risk AI Act Service Desk - Article 51: Classification of general-purpose AI ... Article 51: Classification of General-Purpose AI Models ... - EU AI Act [[PDF] Article 51 Classification of general-purpose AI models as general ...](https://cambridge-commentary.ai/wp-content/uploads/2026/03/Article-51.pdf). Providers are legally required to self-notify the European Commission General-Purpose AI Models in the AI Act – Questions & Answers AI Act Service Desk - Article 52: Procedure - European Union Article 52: Procedure | EU Artificial Intelligence Act. As of mid-2025, an estimated 33 publicly disclosed models from developers like OpenAI, Google, Anthropic, Meta, and Mistral had already crossed this threshold Over 30 AI models have been trained at the scale of GPT-4 - Epoch AI Over 30 AI models have been trained at the scale of GPT-4 - Epoch AI Over 30 AI models have been trained at the scale of GPT-4 - Epoch AI. Projections indicate this number could grow significantly by the end of 2027 [[PDF] Trends in Frontier AI Model Count: A Forecast to 2028 - arXiv](https://arxiv.org/pdf/2504.16138) Trends in Frontier AI Model Count: A Forecast to 2028 - arXiv. Furthermore, compliance deadlines strongly favor a critical mass of designations well before the final December 31, 2027 cutoff. Models placed on the market before August 2, 2025, face a 24-month grace period ending August 2, 2027 Guidelines for providers of general-purpose AI models Client Alert: EU AI Act: Obligations on General-Purpose AI Model ..., which is expected to force a cluster of formal notifications. Ultimately, the high probability of this outcome is anchored in the massive volume of qualifying models and the strict compliance mandates for operators in the EU market, balanced against the possibility of administrative delays or regulatory leniency in how versions are listed. Strongest Arguments for Yes - Massive technical pipeline: There are already well over 30 publicly disclosed models exceeding the 10^25 FLOPs compute threshold as of mid-2025 Over 30 AI models have been trained at the scale of GPT-4 - Epoch AI Epoch AI May 2026: Frontier Compute Grew 44x Annually as .... Just the top three Western developers accounted for approximately 19 models by that time Over 30 AI models have been trained at the scale of GPT-4 - Epoch AI. - Strict regulatory compliance: Under the EU AI Act, classification is virtually automatic once a model exceeds the compute threshold [[PDF] Article 51 Classification of general-purpose AI models as general ...](https://cambridge-commentary.ai/wp-content/uploads/2026/03/Article-51.pdf). Providers face severe penalties, including fines up to 3% of global turnover, which strongly incentivizes self-notification and compliance. - Favorable counting logic: Different parameter sizes (e.g., 70B versus 400B variants) and versioned updates (e.g., v2.0 versus v2.1) qualify as distinct models as long as they are logged individually in the official registry Over 30 AI models have been trained at the scale of GPT-4 - Epoch AI. - Fixed compliance deadlines: The August 2, 2027 grace period deadline for older models forces a definitive timeline for compliance Guidelines for providers of general-purpose AI models Client Alert: EU AI Act: Obligations on General-Purpose AI Model ..., providing roughly five months for these models to be formally reflected in the public registry before the end of 2027. Strongest Arguments for No - Coarse registry granularity: Regulatory bodies might choose to list model families (e.g., "GPT-4" or "Claude 3") rather than cataloging every distinct parameter size or version update. This aggregation could easily suppress the official count below 20. - Administrative bottlenecks: The newly established European AI Office is widely considered under-resourced and may struggle to process notifications and maintain the registry quickly How Much Power Does the EU AI Office Actually Have? - Lawfare. Bureaucratic delays could prevent the registry from being fully populated by the deadline. - Successful rebuttals: Providers have the legal right to rebut the presumption of systemic risk under Article 51(3) [[PDF] Article 51 Classification of general-purpose AI models as general ...](https://cambridge-commentary.ai/wp-content/uploads/2026/03/Article-51.pdf) General-Purpose AI Models in the AI Act – Questions & Answers AI Act Service Desk - Article 52: Procedure - European Union. If developers successfully demonstrate their models do not pose systemic risks, those models will be excluded from the final count. - Potential threshold revisions: Evidence suggests that the 10^25 FLOPs systemic-risk threshold is currently under review General-purpose AI obligations under the AI Act. A substantial upward revision would shrink the pool of qualifying models. Key Uncertainties - Administrative listing practices: How granularly the AI Office officially records models is the single biggest uncertainty. If the office lists individual parameter sizes and sub-versions, the count will easily exceed 20. If it aggregates models into overarching families, reaching 20 will be difficult. - Institutional speed and capacity: The pace at which the AI Office operates will dictate the outcome. If the under-resourced unit is unable to process filings efficiently, a backlog could defer official registry entries until 2028. - Rebuttal and exemption rates: The frequency with which companies successfully utilize the Article 51(3) rebuttal process to bypass the systemic risk label will impact the total. High success rates could deplete the number of officially recognized high-risk systems.

Designation as a 'systemic risk' GPAI model is a pivotal regulatory event that triggers substantial, legally enforceable obligations under Article 55 of the EU AI Act, including mandatory risk mitigation, adversarial testing, and incident reporting Article 51: Classification of General-Purpose AI Models ... - EU AI Act General-Purpose AI Models in the AI Act – Questions & Answers. This is a leading indicator of the compliance burden on frontier AI labs. although it utilizes a compute threshold as a presumption, the designation is a real-world legal status with significant enforcement consequences, justifying a score above the benchmark cap General-Purpose AI Models in the AI Act – Questions & Answers.

Question Title: Report from the Cybersecurity and Infrastructure Security Agency (CISA), the UK National Cyber Security Centre (NCSC), Mandiant, or CrowdStrike documenting at least one fully autonomous end-to-end cyberattack attributed to an AI agent between June 10, 2026, and December 31, 2027, 11:59 PM UTC Question: Will the Cybersecurity and Infrastructure Security Agency (CISA), the UK National Cyber Security Centre (NCSC), Mandiant, or CrowdStrike publish a public report between June 10, 2026, and December 31, 2027, 11:59 PM UTC, documenting at least one fully autonomous end-to-end cyberattack attributed to an AI agent? Background: The International AI Safety Report 2026 (published February 3, 2026) concluded that "fully autonomous end-to-end attacks... have not been reported" as of its publication date International AI Safety Report 2026. While AI models have demonstrated high capabilities in automated subtasks—such as vulnerability discovery or generating malicious code—they currently require human intervention at critical decision points to coordinate the full attack chain International AI Safety Report 2026 2026 Report: Extended Summary for Policymakers. For example, as of early 2026, AI agents could automate significant percentages of software engineering tasks (e.g., Anthropic's Mythos Preview system card) but struggled with the long-term planning and adaptive error-correction necessary for end-to-end autonomous intrusion International AI Safety Report 2026. This question tracks the transition from "tool-based" AI cyber assistance to the emergence of independent, agentic threat actors capable of executing entire attack lifecycles without human steering. Current SOTA remains at 0 reported end-to-end autonomous incidents as of the February 2026 report (https://internationalaisafetyreport.org/publication/international-ai-safety-report-2026). Resolution Criteria: This question resolves as Yes if the Cybersecurity and Infrastructure Security Agency (CISA), the UK National Cyber Security Centre (NCSC), Mandiant, or CrowdStrike publishes a public report between June 10, 2026, and December 31, 2027, 11:59 PM UTC, documenting at least one fully autonomous end-to-end cyberattack attributed to an AI agent. For the purpose of this question, a "fully autonomous end-to-end" cyberattack is defined as a malicious cyber operation in which an AI agent independently executes the entire sequence of primary stages in a cyberattack—specifically including reconnaissance, target exploitation, and the final malicious objective (e.g., data exfiltration or system disruption)—without human intervention, manual steering, or step-by-step instruction during the operational execution of the sequence. Attribution to an AI agent must be explicitly identified in the report. This excludes attacks characterized as "AI-assisted," "partially automated," "human-led," or where AI was used only for discrete subtasks under continuous human control. Public reports include Cybersecurity Advisories (CSAs), Alerts, or periodic threat assessments published on the official websites of the Cybersecurity and Infrastructure Security Agency (CISA) (cisa.gov), the UK National Cyber Security Centre (NCSC) (ncsc.gov.uk), Mandiant, or CrowdStrike. If no such report is published between June 10, 2026, and December 31, 2027, 11:59 PM UTC, the question resolves as No.

The International AI Safety Report 2026 (published February 3, 2026) concluded that "fully autonomous end-to-end attacks... have not been reported" as of its publication date International AI Safety Report 2026. While AI models have demonstrated high capabilities in automated subtasks—such as vulnerability discovery or generating malicious code—they currently require human intervention at critical decision points to coordinate the full attack chain International AI Safety Report 2026 2026 Report: Extended Summary for Policymakers. For example, as of early 2026, AI agents could automate significant percentages of software engineering tasks (e.g., Anthropic's Mythos Preview system card) but struggled with the long-term planning and adaptive error-correction necessary for end-to-end autonomous intrusion International AI Safety Report 2026. This question tracks the transition from "tool-based" AI cyber assistance to the emergence of independent, agentic threat actors capable of executing entire attack lifecycles without human steering. Current SOTA remains at 0 reported end-to-end autonomous incidents as of the February 2026 report (https://internationalaisafetyreport.org/publication/international-ai-safety-report-2026).

This question resolves as Yes if the Cybersecurity and Infrastructure Security Agency (CISA), the UK National Cyber Security Centre (NCSC), Mandiant, or CrowdStrike publishes a public report between June 10, 2026, and December 31, 2027, 11:59 PM UTC, documenting at least one fully autonomous end-to-end cyberattack attributed to an AI agent. For the purpose of this question, a "fully autonomous end-to-end" cyberattack is defined as a malicious cyber operation in which an AI agent independently executes the entire sequence of primary stages in a cyberattack—specifically including reconnaissance, target exploitation, and the final malicious objective (e.g., data exfiltration or system disruption)—without human intervention, manual steering, or step-by-step instruction during the operational execution of the sequence. Attribution to an AI agent must be explicitly identified in the report. This excludes attacks characterized as "AI-assisted," "partially automated," "human-led," or where AI was used only for discrete subtasks under continuous human control. Public reports include Cybersecurity Advisories (CSAs), Alerts, or periodic threat assessments published on the official websites of the Cybersecurity and Infrastructure Security Agency (CISA) (cisa.gov), the UK National Cyber Security Centre (NCSC) (ncsc.gov.uk), Mandiant, or CrowdStrike. If no such report is published between June 10, 2026, and December 31, 2027, 11:59 PM UTC, the question resolves as No.

Summary The probability of a qualifying report being published by the end of 2027 is estimated at 8%. While AI cyber capabilities are advancing at an exceptionally rapid pace, the criteria for this outcome impose a massive conjunctive burden. For a qualifying event to occur, an AI agent must not only be technically capable of executing a full end-to-end attack without human intervention, but a threat actor must actually deploy it in the wild. Furthermore, defenders must detect it, investigators must forensically prove that no human was in the loop at any critical decision point, and one of four specific organizations (CISA, NCSC, Mandiant, or CrowdStrike) must explicitly attribute the attack to an AI agent rather than a human actor leveraging AI. Current evidence indicates that while AI is increasingly used for specific subtasks like reconnaissance and code generation, threat actors still rely heavily on human oversight. For example, highly advanced AI-orchestrated espionage campaigns currently require human intervention at several critical decision points per campaign Disrupting the first reported AI-orchestrated cyber espionage .... Major reporting bodies are highly conservative in their attribution; the UK NCSC has explicitly assessed that fully automated end-to-end advanced cyberattacks are "unlikely to 2027" Impact of AI on cyber threat from now to 2027 Impact of AI on cyber threat from now to 2027. Most current threat intelligence characterizes AI operations strictly as "AI-assisted" or "AI-enabled" CrowdStrike 2026 Global Threat Report | Key Cyber Threat Trends M-Trends 2026: Data, Insights, and Strategies From .... Ultimately, the extreme forensic difficulty of proving a negative—that absolutely no human steering occurred—combined with the institutional convention of attributing attacks to human threat groups, makes a definitive public report highly unlikely within the timeframe, despite the rapidly narrowing technical gap. Strongest Arguments for Yes - Technical capabilities are accelerating rapidly, with AI cyber capabilities reportedly doubling every 4.7 months, moving quickly from generic assistance toward operational utility How fast is autonomous AI cyber capability advancing? | AISI Work. - Lab demonstrations and simulated cyber ranges indicate that near-complete autonomous attack chains are becoming feasible, with some models completing vast majorities of simulated corporate network attacks Measuring AI Agents' Progress on Multi-Step Cyber Attack Scenarios LLM-Orchestrated Kill Chains: From CVE to Database Breach in .... - Documented state-sponsored campaigns already exhibit 80-90% autonomy, suggesting the technical threshold for full autonomy is approaching Disrupting the first reported AI-orchestrated cyber espionage .... - Commercial threat intelligence firms like Mandiant and CrowdStrike have strong incentives to publish groundbreaking research, meaning any genuinely autonomous incident is highly likely to be publicized. Strongest Arguments for No - Institutional assessments strongly doubt this timeline; the NCSC has explicitly stated that fully automated, end-to-end advanced cyberattacks are "unlikely to 2027" Impact of AI on cyber threat from now to 2027 Impact of AI on cyber threat from now to 2027. - There is a vast gap between successful lab demonstrations and operations against real-world, actively defended enterprise systems How fast is autonomous AI cyber capability advancing? | AISI Work Measuring AI Agents' Progress on Multi-Step Cyber Attack Scenarios. - The forensic burden is nearly insurmountable; investigators must prove the absence of human intervention, which is exceedingly difficult when parsing logs from compromised systems. - Conventional cyber attribution traces attacks to human threat actors (e.g., APT groups) "leveraging" tools, meaning reports are highly likely to use disqualifying language like "AI-assisted" or "AI-orchestrated" even if an attack is highly autonomous CrowdStrike 2026 Global Threat Report | Key Cyber Threat Trends M-Trends 2026: Data, Insights, and Strategies From .... Key Uncertainties - Shift in Threat Actor Behavior: It is uncertain whether threat actors will choose to deploy fully autonomous "fire-and-forget" agents. If they prioritize human oversight to prevent operational errors or maintain control, the outcome will not occur. A rapid shift toward unchecked autonomous deployment would increase the probability. - Evolution of Institutional Taxonomy: If CISA, NCSC, Mandiant, or CrowdStrike update their reporting standards to formally define and attribute actions directly to "AI agents" rather than human operators using AI tools, the likelihood of a qualifying report increases significantly. - Forensic Detection Advancements: It remains unclear whether investigators can reliably distinguish between human-directed AI tools and fully independent AI agents in the wild. If forensic techniques cannot definitively prove a lack of human steering, these organizations will likely default to cautious "AI-assisted" language, preventing resolution.

Resolution marks the transition from tactical subtask automation to strategic, end-to-end autonomous offensive capability, a critical threshold for national security policy International AI Safety Report 2026. Such a report would likely trigger immediate regulatory or deployment consequences for frontier models.

Question Title: Binding G7 agreement prohibiting autonomous offensive cyber-operations against critical civilian infrastructure Question: Will at least five G7 nations sign a binding international treaty or agreement that prohibits the use of AI for autonomous offensive cyber-operations against critical civilian infrastructure between 10th June 2026 and 31st December 2027 (23:59 UTC)? Background: As of 10th June 2026, international governance of AI in cyber-operations remains centered on non-binding frameworks and voluntary norms. Key milestones include the 2024 REAIM (Responsible AI in the Military Domain) Seoul Summit, which concluded with a non-binding Blueprint for Action supported by over 60 countries. The G7 Hiroshima AI Process has focused on transparency and codes of conduct for generative AI rather than binding restrictions on offensive capabilities. The 2025 G7 Kananaskis Summit in Canada resulted in a Leaders' Statement on AI for Prosperity that emphasized public sector adoption and economic benefits but did not establish a legally binding treaty regarding cyber-warfare or critical infrastructure protection https://www.g7.utoronto.ca/summit/2025kananaskis/index.html. While the 2015 UN GGE report (A/70/174) established a norm that states should not intentionally damage critical infrastructure providing services to the public, this is not a legally binding instrument https://undocs.org/A/70/174. The G7 nations consist of Canada, France, Germany, Italy, Japan, the United Kingdom, and the United States. A transition from voluntary declarations to binding international law would represent a significant shift in the regulation of frontier AI capabilities. Resolution data for international treaties is maintained by the United Nations Office for Disarmament Affairs (UNODA) at: https://treaties.unoda.org/ Resolution Criteria: The question resolves to YES if at least five G7 nations (Canada, France, Germany, Italy, Japan, United Kingdom, and United States) sign a binding international treaty or agreement that prohibits the use of AI for autonomous offensive cyber-operations against critical civilian infrastructure between 10th June 2026 and 31st December 2027 (23:59 UTC). For this question, binding refers to a written agreement governed by international law (e.g., a treaty, convention, or executive agreement) that creates legal obligations for the signatories, distinct from non-binding political declarations or communiques. Critical civilian infrastructure is defined as systems in the energy, water, healthcare, financial services, or telecommunications sectors providing essential services to the public. Autonomous offensive cyber-operations are defined as cyber-attacks where an AI system performs target identification, vulnerability analysis, and exploit delivery without real-time human intervention. Resolution will be determined by official records from the United Nations Office for Disarmament Affairs (UNODA) Treaty Database or the official government treaty gazettes of the signatory nations. If multiple G7 nations sign different agreements, they do not aggregate; at least five G7 nations must sign the same instrument.

As of 10th June 2026, international governance of AI in cyber-operations remains centered on non-binding frameworks and voluntary norms. Key milestones include the 2024 REAIM (Responsible AI in the Military Domain) Seoul Summit, which concluded with a non-binding Blueprint for Action supported by over 60 countries. The G7 Hiroshima AI Process has focused on transparency and codes of conduct for generative AI rather than binding restrictions on offensive capabilities. The 2025 G7 Kananaskis Summit in Canada resulted in a Leaders' Statement on AI for Prosperity that emphasized public sector adoption and economic benefits but did not establish a legally binding treaty regarding cyber-warfare or critical infrastructure protection (https://www.g7.utoronto.ca/summit/2025kananaskis/index.html). While the 2015 UN GGE report (A/70/174) established a norm that states should not intentionally damage critical infrastructure providing services to the public, this was not a legally binding instrument (https://undocs.org/A/70/174). The G7 nations consist of Canada, France, Germany, Italy, Japan, the United Kingdom, and the United States. A transition from voluntary declarations to binding international law would represent a significant shift in the regulation of frontier AI capabilities.

The question resolves to YES if at least five G7 nations (Canada, France, Germany, Italy, Japan, United Kingdom, and United States) sign the same binding international treaty or agreement that prohibits the use of AI for autonomous offensive cyber-operations against critical civilian infrastructure between 10th June 2026 and 31st December 2027 (23:59 UTC). * Legally Binding: For this question, "binding" refers to a written agreement governed by international law that meets the criteria of the Vienna Convention on the Law of Treaties or is explicitly characterized as "legally binding" within its own text. This is distinct from non-binding political declarations, communiques, or voluntary codes of conduct. * Critical Civilian Infrastructure: This refers to systems in the energy, water, healthcare, financial services, or telecommunications sectors providing essential services to the public. An asset is considered civilian if it meets the "predominant use" rule (more than 50% of its capacity or user base is non-military). * Autonomous Offensive Cyber-Operations: This includes operations often referred to as "autonomous weapon systems" or "automated means of warfare" in the cyber domain. These are cyber-attacks where an AI system performs target identification, vulnerability analysis, and exploit delivery without real-time human intervention. * Real-time Human Intervention: This requires a human to review and approve each specific target identification and exploit delivery individually at the moment of execution. * Offensive Operations: Any operation involving the unauthorized access and alteration of systems outside of a nation's own domestic network is considered "offensive" for the purposes of this question. * Same Instrument: This includes a single multilateral treaty or identical text signed as part of a coordinated series of bilateral agreements if they share a common entry-into-force mechanism.

Question Title: Binding G7 agreement prohibiting autonomous offensive cyber-operations against critical civilian infrastructure Question: Will at least five G7 nations sign a binding international treaty or agreement that prohibits the use of AI for autonomous offensive cyber-operations against critical civilian infrastructure between 10th June 2026 and 31st December 2027 (23:59 UTC)? Background: As of 10th June 2026, international governance of AI in cyber-operations remains centered on non-binding frameworks and voluntary norms. Key milestones include the 2024 REAIM (Responsible AI in the Military Domain) Seoul Summit, which concluded with a non-binding Blueprint for Action supported by over 60 countries. The G7 Hiroshima AI Process has focused on transparency and codes of conduct for generative AI rather than binding restrictions on offensive capabilities. The 2025 G7 Kananaskis Summit in Canada resulted in a Leaders' Statement on AI for Prosperity that emphasized public sector adoption and economic benefits but did not establish a legally binding treaty regarding cyber-warfare or critical infrastructure protection (https://www.g7.utoronto.ca/summit/2025kananaskis/index.html). While the 2015 UN GGE report (A/70/174) established a norm that states should not intentionally damage critical infrastructure providing services to the public, this was not a legally binding instrument (https://undocs.org/A/70/174). The G7 nations consist of Canada, France, Germany, Italy, Japan, the United Kingdom, and the United States. A transition from voluntary declarations to binding international law would represent a significant shift in the regulation of frontier AI capabilities. Resolution Criteria: The question resolves to YES if at least five G7 nations (Canada, France, Germany, Italy, Japan, United Kingdom, and United States) sign the same binding international treaty or agreement that prohibits the use of AI for autonomous offensive cyber-operations against critical civilian infrastructure between 10th June 2026 and 31st December 2027 (23:59 UTC). * Legally Binding: For this question, "binding" refers to a written agreement governed by international law that meets the criteria of the Vienna Convention on the Law of Treaties or is explicitly characterized as "legally binding" within its own text. This is distinct from non-binding political declarations, communiques, or voluntary codes of conduct. * Critical Civilian Infrastructure: This refers to systems in the energy, water, healthcare, financial services, or telecommunications sectors providing essential services to the public. An asset is considered civilian if it meets the "predominant use" rule (more than 50% of its capacity or user base is non-military). * Autonomous Offensive Cyber-Operations: This includes operations often referred to as "autonomous weapon systems" or "automated means of warfare" in the cyber domain. These are cyber-attacks where an AI system performs target identification, vulnerability analysis, and exploit delivery without real-time human intervention. * Real-time Human Intervention: This requires a human to review and approve each specific target identification and exploit delivery individually at the moment of execution. * Offensive Operations: Any operation involving the unauthorized access and alteration of systems outside of a nation's own domestic network is considered "offensive" for the purposes of this question. * Same Instrument: This includes a single multilateral treaty or identical text signed as part of a coordinated series of bilateral agreements if they share a common entry-into-force mechanism. Resolution Source: Resolution will be determined by official records from the United Nations Treaty Series (UNTS) or the official national treaty gazettes/series of the signatory nations (e.g., the U.S. Treaties and Other International Acts Series (TIAS), the UK Treaty Series, or the Canada Treaty Series). If official records are delayed, a consensus of reports from at least three major international news agencies (e.g., Reuters, AP, AFP) explicitly stating that a binding treaty has been signed by the required number of G7 nations will suffice.

Summary The probability of at least five G7 nations signing a binding international treaty prohibiting the use of AI for autonomous offensive cyber-operations against critical civilian infrastructure by the end of 2027 is exceptionally low. International governance of artificial intelligence and military cyber-operations remains firmly rooted in non-binding frameworks and voluntary norms. Recent multilateral milestones, such as the REAIM 2026 Summit, the 2026 G7 Cybersecurity Working Group Declaration, and the G7 Digital and Technology Ministerial Declaration, consistently yield political declarations and unenforceable guidelines rather than legally binding commitments REAIM 2026 press release – Stop Killer Robots European Commission welcomes G7 cybersecurity declaration to ... G7 Digital and Technology Ministerial Declaration: 29 May 2026. The one existing binding AI instrument, the Council of Europe AI Framework Convention, explicitly excludes national security and defense matters from its scope, clearly demonstrating the international reluctance to regulate military AI capabilities International AI Treaty - Center for AI and Digital Policy https://rm.coe.int/1680afae3c. Furthermore, there is currently no active negotiation track, mandate, or proposed draft text aimed at establishing a treaty that matches the precise scope of autonomous cyber-operations against civilian infrastructure. Additionally, achieving the required threshold of five G7 signatories faces overwhelming geopolitical barriers. The United States—a critical G7 member and dominant cyber power—has actively and consistently opposed binding international restrictions on autonomous systems. US policy argues that existing International Humanitarian Law is sufficient and explicitly prioritizes domestic, voluntary innovation over restrictive international regulation Human Responsibility Retained: U.S. Positions on Judgment and ... Promoting Advanced Artificial Intelligence Innovation and Security Promoting Advanced Artificial Intelligence Innovation and Security. Without US participation, securing a minimum of five signatures from the remaining six G7 states is practically impossible, especially given that nations like the UK have shown similar reluctance toward binding constraints AI Regulations around the World - 2026 - Mind Foundry. Finally, multilateral treaty-making is a consensus-driven, notoriously slow process. Drafting, negotiating, and signing a highly specific, novel international treaty within an 18-month window is fundamentally misaligned with historical diplomatic timelines Lethal Autonomous Weapons Systems & International Law. Even if the political will existed, the strict definitional thresholds required by the resolution criteria make an affirmative outcome highly improbable. Strongest Arguments for Yes - A catastrophic, highly visible AI-enabled cyber-attack on critical civilian infrastructure (such as a power grid or financial network) could bypass typical diplomatic gridlock, creating extraordinary urgency and public pressure that forces states into rapid treaty-making. - The UN Secretary-General has repeatedly called for a legally binding instrument regarding autonomous weapons systems by 2026 Secretary-General's remarks to the Security Council on Artificial ... [[PDF] A New Agenda for Peace - the United Nations](https://www.un.org/climatesecuritymechanism/sites/default/files/2025-06/our-common-agenda-policy-brief-new-agenda-for-peace-en_0.pdf) https://disarmament.unoda.org/index.php/en/our-work/emerging-challenges/lethal-autonomous-weapon-systems. If diplomatic pressure successfully overcomes current resistance, these negotiations could theoretically expand to cover cyber-operations, offering a pre-existing multilateral vehicle. Strongest Arguments for No - The international governance landscape remains strictly non-binding; outcomes like the REAIM 2026 summit and UN cyber discussions continue to produce only voluntary guidelines REAIM 2026 press release – Stop Killer Robots REAIM 2026 press release – Stop Killer Robots https://disarmament.unoda.org/en/our-work/emerging-challenges/developments-field-information-and-telecommunications-context. - The United States actively opposes binding international restrictions on autonomous systems, prioritizing voluntary domestic frameworks and existing law Human Responsibility Retained: U.S. Positions on Judgment and ... Promoting Advanced Artificial Intelligence Innovation and Security Promoting Advanced Artificial Intelligence Innovation and Security. - Fully autonomous cyber-attacks do not yet technically exist, drastically reducing the immediate urgency for states to adopt binding prohibitions on capabilities that have not fully matured International AI Safety Report 2026. - Multilateral diplomacy is notoriously slow; the 18-month timeframe is far too brief for states to conceptualize, negotiate, and sign an unprecedented treaty with highly specific definitional requirements. Key Uncertainties - Severe Cyber Shocks: A devastating AI-driven attack against vital public services could dramatically alter the political landscape, potentially compressing a decades-long treaty process into mere months and significantly increasing the likelihood of an agreement. - Changes in US Policy: A sudden shift in US diplomatic posture toward supporting legally binding AI restrictions would alter the broader G7 calculus, lowering the threshold for other states to sign and vastly increasing the probability of a treaty. - Adaptation of Existing Treaties: In the highly unlikely event that existing autonomous weapons discussions rapidly shift to encompass strict cyber domain definitions and predominant-use infrastructure rules, it could provide an accelerated path to a binding agreement.

Resolution would indicate a major pivot from voluntary norms (Bletchley/Seoul) to binding international law, significantly constraining military/intelligence AI doctrine among the world's most capable cyber powers. Not a benchmark question.

Question Title: Mandatory Synthetic DNA Screening Regulation Question: Will the United States Department of Commerce enact a federal regulation requiring mandatory screening of all synthetic DNA orders against a prohibited sequence database for all U.S.-based providers between 10th June 2026 and 31st December 2027? Background: As of 10th June 2026, synthetic DNA screening in the United States remains primarily voluntary, governed by the 2023 HHS Screening Framework Guidance. While an update that took effect on 26th April 2025 mandates screening for researchers receiving federal funding, there is currently no universal mandate for all commercial providers. The Biosecurity Modernization and Innovation Act of 2026 (S.3741), introduced on 29th January 2026 by Senators Tom Cotton and Amy Klobuchar, seeks to change this by granting the United States Department of Commerce the authority to establish a mandatory screening regime. The bill is currently before the Committee on Commerce, Science, and Transportation. This shift in authority from the Department of Health and Human Services (HHS) to the Department of Commerce reflects a policy move toward regulating synthetic nucleic acids as dual-use technologies through commercial and export-style oversight. If S.3741 passes, the Secretary of Commerce would be required to promulgate these regulations, making the period leading up to 31st December 2027 a critical window for this regulatory outcome. Resolution Criteria: This question resolves as Yes if, between 10th June 2026 and 11:59 PM UTC on 31st December 2027, the United States Department of Commerce publishes a Final Rule or Interim Final Rule in the Federal Register (federalregister.gov) requiring mandatory screening of all synthetic DNA orders against a prohibited sequence database for all U.S.-based providers. For resolution, the following conditions must be met: 1. The regulation is issued by the United States Department of Commerce (including joint rules with other agencies) and carries the force of law via civil or criminal penalties for non-compliance. 2. The regulation applies to all U.S.-based providers, defined as any entity physically located in the United States that offers custom nucleic acid synthesis services or benchtop synthesis equipment. 3. The mandate covers all synthetic DNA orders, defined to include double-stranded or single-stranded DNA and RNA. 4. The screening must be conducted against a prohibited sequence database, defined as a list including at minimum the Select Agents and Toxins (42 CFR Part 73: https://www.ecfr.gov/current/title-42/part-73) or a successor list of pathogen sequences designated by the Secretary. 5. The mandate is universal and not limited to entities receiving federal funding. Publication of a Proposed Rule or a purely voluntary guidance document does not suffice for a Yes resolution. The resolution will be determined by the official publication date in the Federal Register.

As of 10th June 2026, synthetic DNA screening in the United States remains primarily voluntary, governed by the 2023 HHS Screening Framework Guidance. While an update that took effect on 26th April 2025 mandates screening for researchers receiving federal funding, there is currently no universal mandate for all commercial providers. The Biosecurity Modernization and Innovation Act of 2026 (S.3741), introduced on 29th January 2026 by Senators Tom Cotton and Amy Klobuchar, seeks to change this by granting the United States Department of Commerce the authority to establish a mandatory screening regime. The bill is currently before the Committee on Commerce, Science, and Transportation. This shift in authority from the Department of Health and Human Services (HHS) to the Department of Commerce reflects a policy move toward regulating synthetic nucleic acids as dual-use technologies through commercial and export-style oversight. If S.3741 passes, the Secretary of Commerce would be required to promulgate these regulations, making the period leading up to 31st December 2027 a critical window for this regulatory outcome.

This question resolves as Yes if, between 10th June 2026 and 11:59 PM UTC on 31st December 2027, the United States Department of Commerce publishes a Final Rule or Interim Final Rule in the Federal Register (federalregister.gov) requiring mandatory screening of all synthetic DNA orders against a prohibited sequence database for all U.S.-based providers. For resolution, the following conditions must be met: 1. The regulation is issued by the United States Department of Commerce (including joint rules with other agencies) and carries the force of law via civil or criminal penalties for non-compliance. 2. The regulation applies to all U.S.-based providers, defined as any entity physically located in the United States that offers custom nucleic acid synthesis services or benchtop synthesis equipment. 3. The mandate covers all synthetic DNA orders, defined to include double-stranded or single-stranded DNA and RNA. 4. The screening must be conducted against a prohibited sequence database, defined as a list including at minimum the Select Agents and Toxins (42 CFR Part 73: https://www.ecfr.gov/current/title-42/part-73) or a successor list of pathogen sequences designated by the Secretary. 5. The mandate is universal and not limited to entities receiving federal funding. Publication of a Proposed Rule or a purely voluntary guidance document does not suffice for a Yes resolution. The resolution will be determined by the official publication date in the Federal Register.

Summary The probability of the Department of Commerce enacting a mandatory synthetic DNA screening regulation by the end of 2027 is extremely low (5%). For this outcome to occur, two highly constrained and sequential steps must happen in rapid succession. First, Congress must pass legislation granting the Department of Commerce the statutory authority to mandate universal screening with civil and criminal penalties, as the current framework relies on voluntary compliance or conditions tied to federal funding through HHS and OSTP OSTP Framework for Nucleic Acid Synthesis Screening Improving the Safety and Security of Biological Research. Second, the Department of Commerce must publish a Final Rule or Interim Final Rule within an exceptionally tight timeframe. While there is policy momentum for such a mandate, as seen in the Biosecurity Modernization and Innovation Act of 2026 (S.3741) [[PDF] S. 3741 - Congress.gov](https://www.congress.gov/119/bills/s3741/BILLS-119s3741is.pdf), the legislative process is historically slow. As of mid-2026, the bill remains stalled in committee with no hearings scheduled S. 3741: Biosecurity Modernization and Innovation Act of 2026. Furthermore, even if legislation is passed via an end-of-year package like the FY2027 National Defense Authorization Act (NDAA), the Department of Commerce would have at most 12 months to complete a complex regulatory rulemaking process. Administrative sluggishness in this exact policy area is already evident, with other agencies having missed executive deadlines for revising similar, voluntary guidelines by over 13 months OSTP Framework for Nucleic Acid Synthesis Screening. Multiplying the low chance of legislative passage by the low chance of a massive federal agency completing a rule in less than a year results in a highly pessimistic outlook for a mandate materializing before 2028. Strongest Arguments for Yes - There is strong, organized momentum from industry and national security groups advocating for a universal mandate. S.3741 has garnered backing from prominent biosecurity organizations, biotech companies, and technology leaders [[PDF] S. 3741 - Congress.gov](https://www.congress.gov/119/bills/s3741/BILLS-119s3741is.pdf). - Bipartisan sponsorship for S.3741 increases the odds of the text being attached to a "must-pass" legislative vehicle. The FY2027 NDAA could serve as an expedient pathway for this legislation Mandatory DNA synthesis screening law in the US by '27? | Manifold. - If S.3741 passes, the text specifically directs the Department of Commerce to establish universal mandates covering benchtop synthesizers and utilizing civil penalties S.3741 - Biosecurity Modernization and Innovation Act of 2026 ... AI Can Already Evade DNA Synthesis Screening. Congress's New ..., perfectly aligning with the required parameters for this regulatory outcome. Strongest Arguments for No - The legislative pipeline is stalled. As of June 2026, S.3741 remains in committee with only a few cosponsors and no scheduled hearings or markups All Info - S.3741 - 119th Congress (2025-2026): Biosecurity ... Cosponsors - S.3741 - 119th Congress (2025-2026): Biosecurity .... Similar legislation in the past, such as the Securing Gene Synthesis Act, failed to pass AI Can Already Evade DNA Synthesis Screening. Congress's New .... - A competing House bill favors a strictly voluntary approach rather than a mandatory regulatory regime, indicating significant congressional friction regarding broad mandates and penalties All Info - H.R.3029 - 119th Congress (2025-2026): Nucleic Acid .... - The bureaucratic timeline is too compressed. A complex, binding rule under the Administrative Procedure Act typically requires 12 to 18 months at minimum. Because the underlying legislation would likely not pass until late 2026, Commerce would be forced into an impossibly tight one-year window to finalize a rule S.3741 - Biosecurity Modernization and Innovation Act of 2026 .... - Historical precedent reveals systemic delays in biosecurity policy; evidence suggests the Office of Science and Technology Policy (OSTP) missed a 90-day deadline to revise its voluntary screening framework by over 13 months OSTP Framework for Nucleic Acid Synthesis Screening. Key Uncertainties - Inclusion in "Must-Pass" Legislation: If S.3741 language is successfully attached to the FY2027 NDAA or a major omnibus appropriations bill in late 2026, the probability of enactment would spike. If it is excluded, the bill would have to proceed through regular order, which essentially guarantees failure within the timeline. - A Major Biosecurity Incident: A high-profile biosecurity event, AI-enabled biological threat, or near-miss could drastically alter congressional priorities, forcing rapid legislative passage and granting Commerce emergency rulemaking authority to act immediately. - Use of Interim Final Rules (IFR): If legislation passes, the Department of Commerce's willingness and legal ability to bypass standard notice-and-comment periods by issuing an IFR would dictate the outcome. If standard procedures are followed, the 2027 deadline will almost certainly be missed.

High decision-relevance as a real-world regulatory outcome (not a benchmark) that addresses a critical biosecurity crux: shifting DNA screening from voluntary to mandatory to mitigate AI-assisted bioweapon risks.