,,ii  #aai? ,,congress  #b;d ,session   
,s4 #dfef  ,,9 ,,! ,,s5ate ,,( ,,!      
,,unit$ ,,/ates  ,june #b1 #bjbf,mrs4   
,gillibr& introduc$ ! foll[+ bill2 :i* 0
 read twice & ref]r$ to ! ,committee on 
,arm$ ,s]vices  ,a ,,bill  ,to provide =
 secure & acc\ntable use ( artificial   
intellig5ce by ! ,dep>tm5t ( ,def5se1 & 
= o!r purposes4  #a4 ,%ort title ,?is   
,act may be cit$ z ! ,secure &          
,acc\ntable ,milit>y ,,ai ,act ( #bjbf4 
#b4 ,def9itions ,9 ?is ,act3 7#a7       
,artificial intellig5ce ,! t]m          
artificial intellig5ce has ! mean+ giv5 
t t]m 9 section #ejjb ( ! ,national     
,artificial ,intellig5ce ,initiative    
,act ( #bjbj 7#ae ,u4,s4,c4 #idja74     
7#b7 ,autonom\s weapon sy/em ,! t]m     
autonom\s weapon sy/em means a weapon   
sy/em t1 once activat$1 c select &      
engage t>gets )\t fur!r int]v5tion by an
 op]ator1 includ+ op]ator-sup]vis$      
autonom\s weapon sy/ems t1 aft]         
activation1 c select & engage t>gets )\t
 fur!r op]ator input4  7#c7 ,cov]$      

contract ,! t]m cov]$ contract means a  
contract1 task ord]1 deliv]y ord]1 or   
o!r agreem5t = ! developm5t1 tra9+1     
f9e-tun+1 evaluation1 ho/+1 integration1
 or provision ( an artificial           
intellig5ce model or artificial         
intellig5ce sy/em = use by ! ,dep>tm5t4 
7#d7 ,cov]$ contractor ,! t]m cov]$     
contractor means an entity t develops or
 provides a fronti] artificial          
intellig5ce model to ! ,dep>tm5t "u a   
cov]$ contract4  7#e7 ,cov]$ incid5t ,! 
t]m cov]$ incid5t means any ( ! foll[+3 
7,a7 ,!ft1 unau?oriz$ access1 unau?oriz$
 acquisition1 or exfiltration ( model   
weights = an artificial intellig5ce     
model1 includ+-- 7i7 in/ances 9 :i* a   
model autonom\sly attempts to exfiltrate
 su* model weights or acquire unau?oriz$
 access to sy/ems conta9+ su* model     
weights2 &  7ii7 cr$ible evid5ce        
indicat+ attempts or mat]ial            
vuln]abilities1 relat+ to any su* !ft1  
access1 acquisition1 or exfiltration4   
7,b7 ,attempts by a =eign adv]s>y or    

individual act+ on behalf ( a =eign     
adv]s>y to obta9 unau?oriz$ access to1  
acquire1 influ5ce1 or exfiltrate        
s5sitive in=mation1 sy/ems1 or          
intellectual prop]ty relat$ to an       
artificial intellig5ce model or         
artificial intellig5ce sy/em1 includ+   
?r\gh insid] ?reats1 compromis$         
p]sonnel1 cov]t affiliations1 or o!r    
deceptive means4  7,c7 ,a compromise ( !
 s(tw>e1 h>dw>e1 cl\d1 data1 or o!r     
supply *a9 us$ to develop1 tra91        
f9e-tune1 evaluate1 secure1 or deploy an
 artificial intellig5ce model or        
artificial intellig5ce sy/em1 :]e su*   
compromise c\ld reasonably affect !     
confid5tiality1 integrity1 availability1
 reliability1 or security ( ! model or  
sy/em provid$ to ! ,dep>tm5t4  7,d7     
,poison+1 corruption1 manipulation1 or  
unau?oriz$ alt]ation ( tra9+ data1      
f9e-tun+ data1 retrieval corpora1 model 
*eckpo9ts1 sy/em prompts1 safety filt]s1
 monitor+ sy/ems1 evaluation pipel9es1  
or model-update me*anisms4  7,e7 ,!     

discov]y ( a mat]ial vuln]ability1      
exploit1 backdoor1 or failure ( access  
controls t c\ld p]mit unau?oriz$        
modification1 extraction1 degradation1  
or misuse ( an artificial intellig5ce   
model or artificial intellig5ce sy/em4  
7,f7 ,any mat]ially conc]n+ model       
behavior1 includ+ mat]ially increas$    
capability = cyb] (f5se1 exploitation1  
exploitation or evasion ( safegu>ds1    
deceptive behavior1 capabilities relat$ 
to *emical or biological weapons1       
automat$ rese>* & developm5t 9 national 
security doma9s1 automat$ rese>* &      
developm5t t[>d increas+ly p[]ful       
artificial sy/ems1 unau?oriz$ autonom\s 
action1 or o!r behavior t poses a       
significant risk to national security or
 ! op]ations1 p]sonnel1 or sy/ems ( !   
,dep>tm5t1 :5 su* behavior 0 n previ\sly
 disclos$ to ! ,dep>tm5t4  7,g7 ,any    
incid5t = :i* ! ,secret>y det]m9es t    
timely notice is necess>y to protect    
national security or op]ations ( !      
,dep>tm5t4  7#f7 ,dep>tm5t ,! t]m       

,dep>tm5t means ! ,dep>tm5t ( ,def5se4  
7#g7 ,fronti] artificial intellig5ce    
model ,! t]m fronti] artificial         
intellig5ce model means a g5]al-purpose 
model1 f\ndation model1 or o!r          
l>ge-scale model designat$ by !         
,secret>y1 9 consultation ) ! ,*ief     
,digital & ,artificial ,intellig5ce     
,(fic] & ! ,secret>y ( ,comm]ce1 z      
appropriate1 z pres5t+ significant      
national security relevance due to      
scale1 capability1 op]ational use1 or   
pot5tial = misuse4  7#h7                
,high-consequ5ce artificial intellig5ce 
application ,! t]m high-consequ5ce      
artificial intellig5ce application means
 any use by ! ,dep>tm5t ( artificial    
intellig5ce t ! ,secret>y designates "u 
section #c z pres5t+ height5$ national  
security1 op]ational1 safety1 legal1 or 
civil lib]ties risk1 includ+ any use    
relat+ to nucle> comm&1 control1 &      
communications1 intellig5ce support to  
le?al t>get+1 cyb] op]ations1 autonom\s 
weapon sy/ems1 milit>y decision support 

9 "t-s5sitive op]ations1 homel&-fac+    
surveillance or monitor+1 or            
mission-critical logi/ics & su/a9m5t4   
7#i7 ,individual ,! t]m individual means
 a natural p]son4  7#aj7 ,local def5se  
,! t]m local def5se means def5se )9 a   
specifically def9$ geographic def5sive  
area 7commonly ref]r$ to z po9t def5se7 
or ( a high-value physical asset        
7commonly ref]r$ to z plat=m def5se7 & =
 a specifically def9$ p]iod ( op]ation  
approv$ = ! sy/em conc]n$4  7#aa7       
,mat]iel t>get ,! t]m mat]iel t>get --  
7,a7 means a weapon1 munition1 milit>y  
vehicle1 milit>y vessel1 milit>y        
aircraft1 unmann$ sy/em1 or o!r milit>y 
object2 &  7,b7 does n include an       
individual4  7#ab7 ,patt]n-(-life       
analysis ,! t]m patt]n-(-life analysis  
means ! use ( data ov] "t to inf] or map
 ! habits1 movem5ts1 associations1 or   
r\t9es ( an individual or a gr\p (      
individuals4  7#ac7 ,p]si/5t            
p]son-c5tric analytic product ,! t]m    
p]si/5t p]son-c5tric analytic product   

means a dossi]1 wat*li/1 score1 pr(ile1 
t>get+ package1 or o!r record organiz$  
prim>ily ar\nd an id5tifi$ or           
id5tifiable individual4  7#ad7          
,op]ational deploym5t ,! t]m op]ational 
deploym5t means use ( an artificial     
intellig5ce sy/em 9 support (1 or z "p  
(1 an op]ational milit>y mission1       
cont+5cy1 or real-_w milit>y activity   
o!r ?an te/+1 tra9+1 evaluation1 or     
exp]im5tation conduct$ 9 a controll$    
environm5t4  7#ae7 ,op]ator-sup]vis$    
autonom\s weapon sy/em ,! t]m           
op]ator-sup]vis$ autonom\s weapon sy/em 
means an autonom\s weapon sy/em t is    
design$ to provide op]ators ) ! ability 
to int]v5e & t]m9ate engagem5ts1 includ+
 9 ! ev5t ( a weapon sy/em failure1 be=e
 unacceptable levels ( damage occur4    
7#af7 ,secret>y ,! t]m ,secret>y means !
 ,secret>y ( ,def5se4  7#ag7            
,semi-autonom\s weapon sy/em  7,a7 ,9   
g5]al ,! t]m semi-autonom\s weapon sy/em
 means a weapon sy/em t1 once activat$1 
is int5d$ to only engage s+le t>gets or 

specific t>get gr\ps t h be5 select$ by 
an op]ator4  7,b7 ,inclusions ,! t]m    
semi-autonom\s weapon sy/em includes    
weapon sy/ems t employ autonomy =       
engagem5t-relat$ functions1 includ+--   
7i7 acquir+1 track+1 & id5tify+ pot5tial
 t>gets2  7ii7 cu+ pot5tial t>gets to   
op]ators2  7iii7 prioritiz+ select$     
t>gets2  7iv7 tim+ ( :5 to fire2  7v7   
provid+ t]m9al guidance to home 9 on    
select$ t>gets1 provid$ t op]ator       
control is reta9$ ov] ! decision to     
select s+le t>gets & specific t>get     
gr\ps = engagem5t2 &  7vi7 fire & =get  
or lock-on-aft]-laun* hom+ munitions t  
rely on tactics te*niques & proc$ures to
 maximize ! probability t ! only t>gets 
)9 ! seek]'s acquisition basket :5 !    
seek] activates are ^? individual t>gets
 or specific t>get gr\ps t h be5 select$
 by an op]ator4  7#ah7 ,unit$ ,/ates    
p]son ,! t]m ,unit$ ,/ates p]son has !  
mean+ giv5 t t]m 9 section #aja ( !     
,=eign ,intellig5ce ,surveillance ,act (
 #aigh 7#ej ,u4,s4,c4 #ahja74  #c4      

,high-consequ5ce milit>y artificial     
intellig5ce ov]sight  7a7 ,designation (
 high-,consequ5ce applications  7#a7 ,9 
g5]al ,n lat] ?an #ahj days aft] ! date 
( ! enactm5t ( ?is ,act1 ! ,secret>y    
%all e/abli% & ma9ta9 a process to      
designate categories ( artificial       
intellig5ce applications ( ! ,dep>tm5t z
 high-consequ5ce4  7#b7 ,designations ,!
 foll[+ categories %all be designat$ z  
high-consequ5ce artificial intellig5ce  
applications pursuant to p>agraph 7#a73 
7,a7 ,artificial intellig5ce us$ = !    
selection ( t>gets =1 or execution ( !  
laun* or detonation (1 a nucle> weapon4 
7,b7 ,artificial intellig5ce us$ 9      
support ( le?al t>get+ decisions1       
includ+ intellig5ce fusion or t>get     
recomm5dation = le?al op]ations4  7,c7  
,artificial intellig5ce us$ 9 support ( 
cyb] op]ations t are int5d$ or          
reasonably likely to create effects     
outside ,dep>tm5t-own$ or               
,dep>tm5t-controll$ in=mation sy/ems4   
7,d7 ,autonom\s weapon sy/ems &         

op]ator-sup]vis$ autonom\s weapon       
sy/ems4  7,e7 ,artificial intellig5ce   
us$ = dome/ic p]son-bas$ analysis       
describ$ 9 section #f7;a77#b74  7,f7    
,any o!r category designat$ by !        
,secret>y z pres5t+ a mat]ial risk (    
dea?1 s]i\s bodily h>m1 unlawful use (  
=ce1 /rategic surprise1 major mission   
failure1 or sub/antial violation ( law  
or policy if ! sy/em malfunctions1 is   
misus$1 or is employ$ outside approv$   
con/ra9ts4  7b7 ,approval requir$ be=e  
op]ational deploym5t ,! ,secret>y %all  
require t a high-consequ5ce artificial  
intellig5ce application may n be approv$
 = op]ational deploym5t unless a s5ior  
,dep>tm5t (ficial designat$ by !        
,secret>y1 :o may n be bel[ ! level ( ! 
,"u ,secret>y ( ,def5se or ! ,vice      
,*airman ( ! ,jo9t ,*iefs ( ,/aff1      
det]m9es 9 writ+ t ! application        
satisfies ! requirem5ts ( subsection    
7c74  7c7 ,m9imum requirem5ts ,be=e     
approv+ a high-consequ5ce artificial    
intellig5ce application = op]ational    

deploym5t1 ! approv+ (ficial %all ensure
 t ! ,dep>tm5t has complet$1 z          
appropriate to ! application1 ! foll[+3 
7#a7 ,reali/ic developm5tal & op]ational
 te/+ & evaluation suffici5t to assess  
p]=mance1 capability1 reliability1      
effectiv5ess1 suitability1 & resili5ce  
"u expect$ op]ational conditions1       
includ+ adv]s>ial conditions :]e        
feasible4  7#b7 ,legal & policy review4 
7#c7 ,docum5tation ( int5d$ missions1   
int5d$ op]ational environm5ts1 int5d$   
t>get or decision sets1 kn[n            
limitations1 failure modes1 &           
assumptions4  7#d7 ,cle> proc$ures =    
tra9$ op]ators to activate1 deactivate1 
ov]ride1 or t]m9ate sy/em functions1 & !
 circum/ances requir+ su* actions4  7#e7
 ,fallback proc$ures & mission-cont9uity
 measures 9 ! ev5t ( degradation1       
anomal\s behavior1 compromise1 or sy/em 
failure4  7#f7 ,logg+1 auditability1 &  
record-ret5tion me*anisms suffici5t to  
support ov]sight1 inve/igation1 &       
aft]-action review4  7#g7 ,po/-deploym5t

 cont9u\s monitor+ me*anisms4  7#h7     
,tra9+1 doctr9e1 & tactics1 te*niques1 &
 proc$ures appropriate to ! use ( !     
application4  7d7 ,congressional        
notification  7#a7 ,9 g5]al ,except z   
provid$ 9 p>agraph 7#c71 n lat] ?an #ae 
days be=e ! initial op]ational deploym5t
 ( a category ( high-consequ5ce         
artificial intellig5ce application1 !   
,secret>y %all notify ! ,committees on  
,arm$ ,s]vices ( ! ,s5ate & ,h\se (     
,repres5tatives ( su* deploym5t4  7#b7  
,cont5ts ,a notification requir$ by     
p>agraph 7#a7 %all include-- 7,a7 a     
description ( ! application2  7,b7 !    
mission set1 op]ational environm5t1 &1 z
 appropriate1 t>get or decision set =   
:i* ! application is int5d$2  7,c7 a    
summ>y ( ! te/+ & evaluation conduct$2  
7,d7 a description ( key safegu>ds1     
limitations1 & fallback proc$ures2  7,e7
 an id5tification ( ! acc\ntable human  
decision-mak]s & op]ators2 &  7,f7 any  
o!r matt]s ! ,secret>y det]m9es         
appropriate4  7#c7 ,exception ,!        

,secret>y may provide a notification    
requir$ by p>agraph 7#a7 n lat] ?an #dh 
h\rs aft] ! initial op]ational deploym5t
 if ! ,secret>y-- 7,a7 det]m9es t !re   
are extraord9>y circum/ances affect+ !  
national security ( ! ,unit$ ,/ates2 &  
7,b7 provides1 ) ! notification1 a      
/atem5t ( su* circum/ances necessitat+  
delay$ notice4  7e7 ,annual brief+ ,n   
lat] ?an #a ye> aft] ! date ( ! enactm5t
 ( ?is ,act1 & annually !reaft]1 !      
,secret>y %all brief ! ,committees on   
,arm$ ,s]vices ( ! ,s5ate & ,h\se (     
,repres5tatives on ! implem5tation ( ?is
 section4  #d4 ,human acc\ntability =   
high-consequ5ce milit>y artificial      
intellig5ce  7a7 ,policy ,x %all be !   
policy ( ! ,dep>tm5t t artificial       
intellig5ce may support analysis1       
prioritization1 recomm5dations1         
automation1 & o!r decision-support      
functions1 b may n sub/itute =          
acc\ntable human judgm5t 9 decisions    
involv+ ! use ( =ce1 det5tion1 dome/ic  
p]son-bas$ analysis1 or o!r             

high-consequ5ce artificial intellig5ce  
applications designat$ pursuant to      
section #c4  7b7 ,acc\ntable human      
decision-,mak] ,= ea* high-consequ5ce   
artificial intellig5ce application      
approv$ = op]ational deploym5t1 !       
,secret>y %all ensure t !re is a cle>ly 
id5tifi$ acc\ntable human decision-mak] 
or acc\ntable *a9 ( decision-mak]s )    
au?ority comm5surate to ! op]ational    
risk pres5t$ by ! application4  7c7     
,requir$ elem5ts ,! acc\ntable human    
decision-mak] or *a9 ( decision-mak]s "u
 subsection 7b7 %all h1 z appropriate to
 ! application-- 7#a7 docum5t$ comm&]   
int5t & mission p>amet]s2  7#b7         
suffici5t tra9+ on ! capabilities1      
limitations1 & failure modes ( !        
application2  7#c7 access to relevant   
in=mation necess>y to und]/& ! basis =  
significant sy/em outputs or            
recomm5dations1 to ! ext5t te*nically   
feasible2  7#d7 au?ority & practical    
ability to pause1 ov]ride1 deactivate1  
or t]m9ate use ( ! application :5       

requir$ by law1 policy1 or op]ational   
circum/ances2 &  7#e7 proc$ures =       
elevat+ unc]ta9ty1 anomal\s outputs1 or 
significant incid5ts = fur!r human      
review4  #e4 ,report+ ( security        
incid5ts & conc]n+ model behaviors by   
c]ta9 fronti] artificial intellig5ce    
contractors  7a7 ,requirem5t = contract 
clause ,! ,secret>y %all require-- 7#a7 
9 any cov]$ contract ent]$ into on or   
aft] ! date t is #cj days aft] ! date ( 
! enactm5t ( ?is ,act1 a clause requir+ 
a cov]$ contractor to report to !       
,secret>y any cov]$ incid5t relat+ to an
 artificial intellig5ce model or        
artificial intellig5ce sy/em develop$1  
tra9$1 f9e-tun$1 ho/$1 or provid$ by !  
contractor2 &  7#b7 9 any cov]$ contract
 ent]$ into prior to ! date t is #cj    
days aft] ! date ( ! enactm5t ( ?is     
,act1 su* a clause to be add$ n lat] ?an
 #ij days aft] ! date ( ! enactm5t ( ?is
 ,act4  7b7 ,implem5tation guidance &   
cl>ity  7#a7 ,9 g5]al ,n lat] ?an #ij   
days aft] ! date ( ! enactm5t ( ?is     

,act1 ! ,secret>y %all issue guidance to
 cov]$ contractors reg>d+ !             
implem5tation ( ?is section 9 ord] to   
promote cle>1 pr$ictable1 & consi/5t    
report+ expectations & support good-fai?
 compliance4  7#b7 ,elem5ts ,! guidance 
requir$ by p>agraph 7#a7 %all include-- 
7,a7 illu/rative examples ( cov]$       
incid5ts1 factors relevant to det]m9+   
:e!r an incid5t is mat]ial or           
reportable2  7,b7 report+ proc$ures &   
timel9es2 &  7,c7 o!r in=mation !       
,secret>y det]m9es appropriate to       
promote consi/5t implem5tation & r$uce  
unc]ta9ty = cov]$ contractors4  7#c7    
,updates to guidance ,! ,secret>y %all  
update su* guidance z appropriate to    
reflect *anges 9 artificial intellig5ce 
capabilities1 deploym5t practices1 ?reat
 environm5ts1 & report+ ne$s ( !        
,dep>tm5t4  7#d7 ,consultation ,9 issu+ 
& updat+ su* guidance1 ! ,secret>y %all 
consult ) ! ,*ief ,digital & ,artificial
 ,intellig5ce ,(fic]1 ! ,director ( !   
,artificial ,intellig5ce ,security ,c5t]

 ( ! ,national ,security ,ag5cy1 & !    
heads ( any o!r ,f$]al ag5cies or       
,dep>tm5ts ! ,secret>y deems            
appropriate4  7c7 ,report+ timel9e =    
cov]$ contractors  7#a7 ,9 g5]al ,a     
cov]$ contractor %all submit to ! ,"u   
,secret>y = ,rese>* & ,eng9e]+-- 7,a7 an
 initial report reg>d+ a cov]$ incid5t  
describ$ 9 subp>agraph 7,a71 7,b71 7,c71
 or 7,d7 ( section #b7e7 n lat] ?an #gb 
h\rs aft] ! discov]y ( su* cov]$        
incid5t2 &  7,b7 an initial report      
reg>d+ a cov]$ incid5t describ$ 9       
subp>agraph 7,e7 or 7,f7 ( section #b7e7
 n lat] ?an #g days aft] ! contractor   
discov]s a behavior specifi$ by !       
implem5tation guidance issu$ pursuant to
 subsection 7b7 or t a reasonable p]son 
w\ld deem likely to be mat]ial4  7#b7   
,supplem5tal updates ,a cov]$ contractor
 %all submit to ! ,secret>y supplem5tal 
updates ) respect to any cov]$ incid5t z
 mat]ial new in=mation becomes          
available4  7d7 ,cont5ts ( contractor   
report ,ea* report submitt$ by a cov]$  

contractor 9 accordance ) ?is section   
%all include1 to ! ext5t kn[n at ! "t ( 
submission-- 7#a7 a description ( !     
cov]$ incid5t2  7#b7 ! date or          
approximate p]iod ( occurr5ce &         
discov]y2  7#c7 ! artificial intellig5ce
 model1 artificial intellig5ce sy/em1 or
 relevant tra9+1 f9e-tun+1 evaluation1  
or deploym5t environm5t affect$2  7#d7 !
 actual or suspect$ means ( compromise1 
exfiltration1 manipulation1 degradation1
 or misuse2  7#e7 :e!r model weights1   
tra9+ data1 sy/em prompts1 s\rce code1  
evaluation data1 safety sy/ems1 or      
s(tw>e dep5d5cies 7 access$1 alt]$1     
degrad$1 poison$1 exfiltrat$1 or o!rwise
 compromis$2  7#f7 an assessm5t ( actual
 or pot5tial impact on missions1 us]s1  
sy/ems1 op]ations1 or decision-mak+ ( ! 
,dep>tm5t2  7#g7 any actions tak5 to    
conta91 mitigate1 rem$iate1 or          
inve/igate ! cov]$ incid5t2  7#h7 :e!r !
 cov]$ incid5t has be5 report$ to any   
o!r ,f$]al dep>tm5t or ag5cy2 &  7#i7   
su* o!r in=mation z ! ,secret>y det]m9es

 appropriate4  7e7 ,recipi5ts )9 !      
,dep>tm5t ,a report submitt$ to !       
,secret>y "u ?is section %all be        
transmitt$ by ! ,secret>y to-- 7#a7 !   
contract+ (fic] = ! cov]$ contract2     
7#b7 ! ,*ief ,digital & ,artificial     
,intellig5ce ,(fice2  7#c7 ! ,*ief      
,in=mation ,(fic] ( ! ,dep>tm5t (       
,def5se2  7#d7 ! ,"u ,secret>y ( ,def5se
 = ,acquisition & ,su/a9m5t2  7#e7 !    
,artificial ,intellig5ce ,security ,c5t]
 ( ! ,national ,security ,ag5cy2  7#f7 !
 ,comm&] ( ! ,unit$ ,/ates ,cyb] ,comm&2
 &  7#g7 ! heads ( su* o!r compon5ts ( !
 ,dep>tm5t & o!r ,f$]al dep>tm5ts or    
ag5cies z ! ,secret>y det]m9es          
appropriate4  7f7 ,congressional        
notification by ,dep>tm5t  7#a7 ,9 g5]al
 ,n lat] ?an #g days aft] receipt ( an  
initial report "u subsection 7b7 reg>d+ 
a cov]$ incid5t1 or ! discov]y ( a cov]$
 incid5t by ! ,dep>tm5t1 ! ,secret>y    
%all submit to ! ,committees on ,arm$   
,s]vices ( ! ,s5ate & ,h\se (           
,repres5tatives notice ( su* cov]$      

incid5t4  7#b7 ,cont5ts ,a notice       
requir$ by p>agraph 7#a7 %all include1  
to ! ext5t kn[n at ! "t ( submission--  
7,a7 a summ>y description ( ! cov]$     
incid5t2  7,b7 ! date or approximate    
p]iod ( occurr5ce & discov]y2  7,c7 !   
artificial intellig5ce model1 artificial
 intellig5ce sy/em1 or relevant tra9+1  
f9e-tun+1 evaluation1 or deploym5t      
environm5t affect$2  7,d7 ! actual or   
suspect$ means ( compromise1            
exfiltration1 manipulation1 degradation1
 or misuse2  7,e7 an initial assessm5t (
 actual or pot5tial impact on missions1 
us]s1 sy/ems1 or op]ations ( !          
,dep>tm5t2 &  7,f7 any actions tak5 or  
plann$ to conta91 mitigate1 rem$iate1 or
 inve/igate ! cov]$ incid5t4  7#c7      
,additional updates ,! ,secret>y %all   
provide to ! ,committees on ,arm$       
,s]vices ( ! ,s5ate & ,h\se (           
,repres5tatives additional brief+s or   
updates on a cov]$ incid5t z mat]ial    
in=mation becomes available4  7g7       
,protection ( report$ in=mation ,!      

,secret>y %all e/abli% proc$ures = !    
h&l+ ( reports "u ?is section1 includ+  
proc$ures to protect classifi$          
in=mation1 propriet>y in=mation1 trade  
secrets1 security-s5sitive in=mation1 & 
in=mation reg>d+ vuln]abilities t1 if   
disclos$ publicly1 c\ld reasonably be   
expect$ to h>m national security4  7h7  
,rule ( con/ruction ,no?+ 9 ?is section 
%all be con/ru$-- 7#a7 to require !     
disclosure ( in=mation 9 a mann]        
inconsi/5t ) ! protection ( classifi$   
in=mation1 s5sitive comp>tm5t$          
in=mation1 or o!r in=mation protect$ by 
law2  7#b7 to waive any applicable      
privilege or legal protection2 or  7#c7 
to limit any o!r report+ obligation     
impos$ by law1 regulation1 or contract4 
#f4 ,limitations on c]ta9 uses (        
artificial intellig5ce by ! ,dep>tm5t   
7a7 ,9 g5]al ,! ,dep>tm5t may n-- 7#a7  
use artificial intellig5ce = ! selection
 ( t>gets = ! use ( a nucle> weapon or =
 ! execution ( laun*+ or detonat+ a     
nucle> weapon2  7#b7 except z provid$ 9 

subp>agraph 7b71 use artificial         
intellig5ce to acquire1 collect1 +e/1   
reta91 qu]y1 correlate1 analyze1 or     
dissem9ate in=mation conc]n+ a ,unit$   
,/ates p]son locat$ 9 ! ,unit$ ,/ates = 
! purpose (-- 7,a7 id5tify+ or resolv+ !
 id5tity ( su* p]son across datasets2   
7,b7 track+ or conduct+ patt]n-(-life   
analysis ( su* p]son2  7,c7 conduct+ l9k
 analysis reg>d+ ! associations1        
contacts1 activities1 or movem5ts ( su* 
p]son2  7,d7 assign+ a risk score1 ?reat
 score1 or o!r pr$ictive assessm5t to   
su* p]son2  7,e7 creat+ or ma9ta9+ a    
wat*li/1 dossi]1 t>get+ package1 or o!r 
p]si/5t p]son-c5tric analytic product   
reg>d+ su* p]son2 or  7,f7 select+ su*  
p]son = inve/igative1 op]ational1 or law
 en=cem5t att5tion1 unless su* activity 
is expressly au?oriz$ by ,f$]al law &   
support$ by a lawful & docum5t$         
pr$icate2 or  7#c7 develop1 procure1    
field1 or employ an autonom\s weapon    
sy/em1 except z provid$ 9 subsection    
7d74  7b7 ,rule ( con/ruction           

,subsection 7a7 %all n be con/ru$ to    
prohibit ! use ( artificial             
intellig5ce-- 7#a7 = cyb]security1      
in=mation assurance1 ?reat detection1   
vuln]ability managem5t1 malw>e analysis1
 incid5t response1 or def5sive cyb]space
 op]ations und]tak5 to protect !        
,dep>tm5t ( ,def5se ,in=mation ,network1
 in=mation sy/ems1 weapons sy/ems1      
milit>y networks1 or def5se critical    
infra/ructure ( ! ,dep>tm5t f malici\s  
cyb] activity2  7#b7 = =ce protection or
 c\nt]9tellig5ce purposes to id5tify1   
assess1 or w>n ( a specific1 cr$ible1 & 
articulable ?reat to p]sonnel1          
in/allations1 facilities1 op]ations1    
activities1 or cov]$ assets ( !         
,dep>tm5t2 or  7#c7 ) ! in=m$ cons5t ( !
 p]son conc]n$4  7c7 ,additional        
limitations on dome/ic uses ,! ,dep>tm5t
 may n use artificial intellig5ce-- 7#a7
 solely on ! basis ( activity protect$  
by ! ,fir/ ,am5dm5t ( ! ,con/itution ( !
 ,unit$ ,/ates or ! lawful ex]cise ( any
 o!r "r secur$ by ! ,con/itution ( !    

,unit$ ,/ates or ! laws ( ! ,unit$      
,/ates2 or  7#b7 to acquire1 correlate1 
or analyze publicly available in=mation1
 comm]cially available in=mation1 or    
hack$1 leak$1 or brea*$ data t is po/$  
onl9e or made available = sale = !      
prim>y purpose ( circumv5t+ o!rwise     
applicable con/itutional1 /atutory1 or  
regulatory protections gov]n+           
collection1 ret5tion1 qu]y+1 or         
dissem9ation ( in=mation by ! ,f$]al    
,gov]nm5t conc]n+ ,unit$ ,/ates p]sons4 
7d7 ,exceptions = autonom\s weapon      
sy/ems ,subsection 7a77#c7 %all n apply 
to ! foll[+1 provid$ t any su* sy/em    
satisfies ! conditions ( subsection 7e73
 7#a7 ,semi-autonom\s weapon sy/ems us$ 
to apply le?al or non-le?al1 k9etic or  
non-k9etic =ce1 s long z su*            
semi-autonom\s weapon sy/ems d n include
 any mode ( op]ation 9 :i* !            
semi-autonom\s weapon sy/em is int5d$ to
 function z an autonom\s weapon sy/em4  
7#b7 ,op]ator-sup]vis$ autonom\s weapon 
sy/ems us$ to select & engage mat]iel   

t>gets = local def5se to int]cept       
attempt$ "t-critical or saturation      
attacks =-- 7,a7 /atic def5se (         
in/allations ) p]sonnel1 includ+        
network$ def5se 9 :i* ! autonom\s weapon
 sy/em is n co-locat$ ) ! in/allation2  
or  7,b7 onbo>d or network$ def5se (    
plat=ms ) onbo>d p]sonnel4  7#c7        
,int]ception ( surface-to-air missiles4 
7#d7 ,autonom\s weapon sy/ems us$ to    
apply non-le?al1 non-k9etic =ce aga9/   
mat]iel t>gets 9 accordance ) ,dep>tm5t 
( ,def5se ,directive #cjjj4jc;,e4  7e7  
,conditions on except$ sy/ems ,a sy/em  
describ$ 9 subsection 7d7 may be        
develop$1 procur$1 field$1 or employ$   
only if ! ,secret>y c]tifies t su*      
sy/em-- 7#a7 has und]gone legal review =
 consi/5cy ) ! law ( w>1 applicable     
treaties1 weapon sy/em safety rules1 &  
applicable rules ( engagem5t2  7#b7 has 
complet$ rigor\s v]ification &          
validation & reali/ic developm5tal &    
op]ational te/+ & evaluation "u         
conditions t reflect ! int5d$ op]ational

 environm5t & reasonably anticipat$     
adv]s>y c\nt]measures2  7#c7 is design$ 
& field$ to p]mit comm&]s & op]ators to 
ex]cise appropriate levels ( human      
judgm5t ov] ! use ( =ce2  7#d7 includes 
human-ma*9e int]faces & controls t--    
7,a7 are readily und]/&able to tra9$    
op]ators2  7,b7 provide transp>5t       
fe$back on sy/em /atus2  7,c7 provide   
cle> proc$ures = activation &           
deactivation ( sy/em functions2 &  7,d7 
= op]ator-sup]vis$ autonom\s weapon     
sy/ems1 p]mit op]ators to int]v5e &     
t]m9ate engagem5ts be=e unacceptable    
levels ( damage occur1 includ+ 9 ! ev5t 
( weapon sy/em failure2  7#e7 is approv$
 = use only )9 def9$ temporal1          
geographic1 environm5tal1 & op]ational  
con/ra9ts1 &1 if unable to complete an  
engagem5t consi/5t ) su* con/ra9ts1 is  
design$ to t]m9ate ! engagem5t or obta9 
additional op]ator input be=e cont9u+2 &
  7#f7 uses te*nologies & data s\rces t 
are1 to ! maximum ext5t practicable     
consi/5t ) milit>y necessity1 transp>5t 

to1 auditable by1 & expla9able to       
relevant p]sonnel4  7f7 ,c]tification & 
notification  7#a7 ,9 g5]al ,n lat] ?an 
#cj days be=e field+ a sy/em pursuant to
 subsection 7d71 ! ,secret>y %all submit
 to ! congressional def5se committees a 
writt5 c]tification t ! sy/em falls )9  
"o ( ! exceptions "u subsection 7d7 &   
satisfies ! conditions ( subsection 7e74
  7#b7 ,cont5ts ,a c]tification "u      
p>agraph 7#a7 %all include-- 7,a7 !     
exception "u subsection 7d7 on :i* !    
,dep>tm5t relies2  7,b7 a summ>y ( !    
legal review conduct$ "u subsection     
7e77#a72  7,c7 ! int5d$ mission set1    
t>get class1 & op]ational concept = !   
sy/em2  7,d7 ! temporal1 geographic1    
environm5tal1 & op]ational con/ra9ts    
approv$ = ! sy/em2  7,e7 a description (
 ! op]ator sup]vision concept1 includ+  
proc$ures = int]v5tion1 t]m9ation1      
activation1 & deactivation2  7,f7 a     
summ>y ( te/+1 v]ification1 & validation
 conduct$ = ! sy/em2 &  7,g7 any        
sub/antial modification to ! sy/em's    

algori?ms1 int5d$ mission set1 int5d$   
op]ational environm5t1 int5d$ t>get set1
 or expect$ adv]s>ial c\nt]measures s9ce
 any prior c]tification submitt$ "u ?is 
subsection4  #g4 ,implem5tation  7a7    
,regulations ,n lat] ?an #ahj days aft] 
! date ( ! enactm5t ( ?is ,act1 !       
,secret>y %all revise ! ,def5se ,f$]al  
,acquisition ,regulation ,supplem5t &   
issue su* regulations1 guidance1 &      
in/ructions z are necess>y to implem5t  
?is ,act4  7b7 ,initial implem5tation   
brief+ ,n lat] ?an #bdj days aft] ! date
 ( ! enactm5t ( ?is ,act1 ! ,secret>y   
%all brief ! ,committees on ,arm$       
,s]vices ( ! ,s5ate & ,h\se (           
,repres5tatives on ! implem5tation plan 
= ?is ,act1 includ+-- 7#a7 plann$       
regulatory *anges2  7#b7 directive &    
in/ruction updates2 &  7#c7 any res\rce 
or organizational issues likely to      
affect implem5tation4  #h4 ,au?orization
 = specializ$ autonom\s weapon sy/ems   
7a7 ,petition = au?orization ,!         
,secret>y may submit to ! ,h\se & ,s5ate

 ,arm$ ,s]vices ,committees a =mal      
reque/ = au?orization to develop1       
procure1 or field a specific autonom\s  
weapon sy/em or category ( sy/ems t does
 n meet ! exceptions "u section #f7;d74 
7b7 ,requir$ elem5ts ( reque/ ,any      
reque/ submitt$ "u subsection 7a7 %all  
include a classifi$ annex conta9+ !     
foll[+3 7#a7 ,milit>y necessity /atem5t 
,a detail$ ju/ification ( :y ! mission  
_c be accompli%$ ?r\gh semi-autonom\s   
weapon sy/ems or exi/+ human-9-!-loop   
capabilities4  7#b7 ,op]ational         
con/ra9ts ,! specific op]ational1       
geographic1 temporal1 & t>get-class     
con/ra9ts "u :i* ! sy/em w op]ate4  7#c7
 ,law ( arm$ conflict compliance        
c]tification ,a writt5 legal op9ion f ! 
,g5]al ,c\nsel ( ! ,dep>tm5t c]tify+ t !
 sy/em's int5d$ use complies ) ! ,law ( 
,arm$ ,conflict1 specifically address+  
h[ ! sy/em w satisfy ! pr9ciples (      
di/9ction & proportionality4  7#d7 ,risk
 mitigation plan ,a description ( !     
te*nical safegu>ds design$ to prev5t    

unau?oriz$ autonom\s action1 fla% w>s1  
or un9t5d$ escalation4  7#e7 ,human     
judgm5t framework ,a description ( !    
appropriate levels ( human judgm5t t w  
be ex]cis$1 ev5 if ! sy/em op]ates      
autonom\sly dur+ ! engagem5t phase4  7c7
 ,congressional action  7#a7 ,jo9t      
resolution ( approval ,a sy/em reque/$  
"u subsection 7a7 may only be field$ if 
,congress enacts a jo9t resolution (    
approval specifically nam+ ! sy/em & !  
au?oriz$ mission set4  7#b7 ,exp$it$    
proc$ures ,= ! purposes ( ?is section1 !
 t]m jo9t resolution means only a jo9t  
resolution t is introduc$ )9 ! #cj-;day 
p]iod beg9n+ on ! date 9 :i* ! ,secret>y
 submits a reque/ "u subsection 7a71 & !
 matt] aft] ! resolv+ clause is z       
foll[s3 ,t ,congress approves !         
op]ational deploym5t ( ! autonom\s      
weapon sy/em describ$ 9 ! reque/        
submitt$ by ! ,secret>y ( ,def5se on 41 
) ! blank space be+ fill$ ) ! date !    
reque/ 0 submitt$ to ,congress "u       
subsection 7a74  7#c7 ,ref]ral ,a jo9t  

resolution introduc$ 9 ! ,s5ate %all be 
ref]r$ to ! ,committee on ,arm$         
,s]vices4 ,a jo9t resolution 9 ! ,h\se (
 ,repres5tatives %all be ref]r$ to !    
,committee on ,arm$ ,s]vices4  7#d7     
,dis*>ge ( committee ,if ! committee to 
:i* is ref]r$ a jo9t resolution has n   
report$ su* jo9t resolution 7or an      
id5tical resolution7 at ! end ( ! #bj   
cal5d> days aft] ! introduction ( su*   
jo9t resolution1 su* committee %all be  
deem$ to be dis*>g$ f fur!r consid]ation
 ( su* resolution1 & su* jo9t resolution
 %all be plac$ on ! appropriate cal5d> (
 ! *amb] involv$4  7#e7 ,privileg$      
motion 9 ! ,s5ate  7,a7 ,motion to      
proce$ ,not)/&+ ,rule ,,xxii ( ! ,/&+   
,rules ( ! ,s5ate1 x is 9 ord] at any "t
 aft] ! ,committee on ,arm$ ,s]vices has
 report$ or has be5 dis*>g$ f           
consid]ation ( a jo9t resolution to move
 to proce$ on ! consid]ation ( ! jo9t   
resolution4 ,! motion is privileg$ & is 
n debatable4 ,! motion to proce$ is n   
subject to a motion to po/pone4 ,a      

motion to reconsid] ! vote by :i* !     
motion is agre$ to or disagre$ to %all n
 be 9 ord]4  7,b7 ,limits on debate     
,debate on ! jo9t resolution1 & on all  
debatable motions & appeals 9 connection
 !re)1 %all be limit$ to n m ?an #aj    
h\rs1 :i* %all be divid$ equally betwe5 
^? favor+ & ^? oppos+ ! jo9 resolution4 
,a motion fur!r to limit debate is 9    
ord] & n debatable4  7,c7 ,no am5dm5ts  
,an am5dm5t to ! jo9t resolution1 or a  
motion to po/pone1 or a motion to proce$
 to ! consid]ation ( o!r bus9ess1 or a  
motion to recommit ! jo9t resolution is 
n 9 ord]4  7#f7 ,vote on f9al passage   
,imm$iately foll[+ ! conclusion ( !     
debate on a jo9t resolution1 & a s+le   
quorum call at ! conclusion ( ! debate  
if reque/$ 9 accordance ) ! rules ( !   
appropriate *amb]1 ! vote on f9al       
passage ( ! jo9t resolution %all occur4 
7d7 ,duration & r5ewal ,any au?orization
 grant$ "u ?is section %all expire #c   
ye>s aft] ! date ( enactm5t ( ! jo9t    
resolution ( approval1 b ! ,secret>y may

 submit a r5ew$ reque/ "u subsection 7a7
 = exp$it$ consid]ation "u subsection   
7c74 ,! ,secret>y mu/ c]tify 9 su*      
reque/ t sy/em has op]at$ )9 ! approv$  
p>amet]s4