,,ii  #aai? ,,congress  #b;d ,session   
,s4 #efja  ,,9 ,,! ,,s5ate ,,( ,,!      
,,unit$ ,,/ates  ,septemb] #bi1         
#bjbf,mr4 ,banks 7= himself & ,mrs4     
,gillibr&7 introduc$ ! foll[+ bill2 :i* 
0 read twice & ref]r$ to ! ,committee on
 ,arm$ ,s]vices  ,a ,,bill  ,to require 
! ,secret>y ( ,def5se to e/abli% report+
 requirem5ts & volunt>y guidance = l>ge 
artificial intellig5ce contractors4  #a4
 ,%ort title ,?is ,act may be cit$ z !  
,insid] ,?reat ,report+ & ,security     
,guidance ,act ( #bjbf4  #b4 ,insid]    
?reat report+ & volunt>y guidance = l>ge
 artificial intellig5ce contractors  7a7
 ,cov]$ artificial intellig5ce          
contractor def9$ ,9 ?is section1 ! t]m  
cov]$ artificial intellig5ce contractor 
means a contractor t-- 7#a7 has ent]$1  
or seeks to ent] into1 "o or m          
contracts1 ) a total value ( n less ?an 
#ajj1jjj1jjj1 ) ! ,dep>tm5t ( ,def5se = 
an artificial intellig5ce sy/em or      
s]vices t use an artificial intellig5ce 
sy/em2 &  7#b7 7,a7 has incurr$1 dur+ ! 

#c-ye> p]iod prec$+ ! date on :i* any   
su* contract 0 ent]$ into1 n less ?an   
#a1jjj1jjj1jjj 9 artificial             
intellig5ce-relat$ rese>* & developm5t  
exp5ditures1 measur$ on a roll+ basis & 
aggregat$ ) any o!r p]son t controls1 is
 controll$ by1 or is "u common control )
 su* contractor2 or  7,b7 uses or       
proposes to use1 9 ! p]=mance ( su*     
contract or contracts1 an artificial    
intellig5ce model develop$ or controll$ 
by a p]son t meets ! exp5diture crit]ia 
describ$ 9 subp>agraph 7,a74  7b7       
,report+ requirem5ts  7#a7 ,9 g5]al ,n  
lat] ?an #ahj days aft] ! date ( !      
enactm5t ( ?is ,act1 ! ,secret>y (      
,def5se %all issue regulations e/abli%+ 
report+ requirem5ts = cov]$ artificial  
intellig5ce contractors to support !    
protection ( ,dep>tm5t ( ,def5se sy/ems1
 missions1 p]sonnel1 op]ations1 & supply
 *a9s f c\nt]9tellig5ce1 security1 & o!r
 national security risks aris+ f !      
security practices ( su* contractors4   
7#b7 ,requir$ matt]s  7,a7 ,9 g5]al ,!  

regulations issu$ pursuant to p>agraph  
7#a7 %all require1 at a m9imum1 t a     
cov]$ artificial intellig5ce contractor 
reports to ! ,secret>y-- 7i7 all        
policies1 practices1 & security measures
 relat+ to-- 7,i7 p]sonnel vett+2       
7,,ii7 insid] ?reat mitigation2  7,,iii7
 access controls1 includ+ ! circum/ances
 "u :i* contractors1 subcontractors1    
cl\d provid]s1 & o!r ?ird p>ties are    
grant$ access to any artificial         
intellig5ce model1 model weights1 tra9+ 
infra/ructure1 or o!r s5sitive assets1 &
 ! mat]ial security controls gov]n+ su* 
access2  7,,iv7 supply *a9 security2 &  
7,v7 ! prev5tion ( !ft1 tamp]+1         
sabotage1 or any o!r unau?oriz$ transf] 
or modification ( any artificial        
intellig5ce model or model weights2     
7ii7 any kn[n or suspect$ mat]ial       
incid5t affect+ ! security1 integrity1  
or availability ( any artificial        
intellig5ce model or model weights      
develop$ or us$1 includ+ any incid5t 9  
:i* a p]son compromises or exploits any 

artificial intellig5ce model or model   
weights 9 a mann] t c\ld mat]ially      
affect ! p]=mance ( a ,dep>tm5t         
contract1 national security1 or !       
op]ations1 security1 or mission         
effectiv5ess ( ! ,dep>tm5t1 includ+     
?r\gh-- 7,i7 espionage2  7,,ii7         
unau?oriz$ access2  7,,iii7 !ft2  7,,iv7
 exfiltration2  7,v7 sabotage2  7,,vi7  
manipulation2  7,,vii7 a compromise ( ! 
s(tw>e1 h>dw>e1 cl\d1 data1 or o!r      
supply *a9 compon5t us$ to develop1     
tra91 f9e-tune1 evaluate1 secure1 or    
deploy any su* model or model weights2  
7,,viii7 ! poison+1 corruption1         
manipulation1 or unau?oriz$ alt]ation ( 
tra9+ data1 f9e-tun+ data1 retrieval    
corpora1 model *eckpo9ts1 sy/em prompts1
 safety filt]s1 monitor+ sy/ems1        
evaluation pipel9es1 or model-update    
me*anisms2  7,,ix7 ! discov]y ( a       
mat]ial vuln]ability1 exploit1 backdoor1
 or failure ( access controls t c\ld    
p]mit unau?oriz$ modification1          
extraction1 degradation1 or misuse ( any

 su* model or model weights2 or  7,x7   
any o!r ef=t2  7iii7 ! def5se-relevant &
 national security-relevant             
capabilities1 access pa?ways1 & mat]ial 
misuse risks1 z det]m9$ by ! ,secret>y1 
( ! mo/ p[]ful artificial intellig5ce   
models develop$1 controll$1 or us$ by   
su* contractor 9 ! p]=mance ( a contract
 ) ! ,dep>tm5t2  7iv7 any mat]ially     
conc]n+ model behavior1 includ+         
mat]ially increas$ capability = a cyb]  
(f5se1 evasion ( safegu>ds1 deceptive   
behavior1 unau?oriz$ autonom\s action1  
or o!r behavior t c\ld mat]ially affect 
national security1 ! p]=mance ( a       
,dep>tm5t contract1 or ! op]ations1     
security1 or mission effectiv5ess ( !   
,dep>tm5t2  7v7 any attempt to obta9    
unau?oriz$ access to1 acquire1 influ5ce1
 or exfiltrate s5sitive in=mation1      
sy/ems1 or intellectual prop]ty relat+  
to any artificial intellig5ce model     
develop$1 controll$1 or us$ by !        
contractor2 &  7vi7 any o!r kn[n or     
suspect$ acute national security risk   

relat+ to ! compromise1 misuse1 loss1   
exfiltration1 misalignm5t1 or           
exploitation ( artificial intellig5ce   
models develop$1 controll$1 or us$ by ! 
contractor t c\ld mat]ially affect      
national security1 ! p]=mance ( a       
,dep>tm5t contract1 or ! op]ations1     
security1 or mission effectiv5ess ( !   
,dep>tm5t4  7,b7 ,scope ,! requir$      
matt]s describ$ 9 subp>agraph 7,a7 apply
 to a cov]$ artificial intellig5ce      
contractor1 includ+ ) respect to any    
artificial intellig5ce model develop$ or
 controll$ by ano!r p]son & us$1 or     
propos$ = use1 by ! cov]$ artificial    
intellig5ce contractor 9 ! p]=mance ( a 
contract ) ! ,dep>tm5t4 ,! ,secret>y may
 require ! cov]$ artificial intellig5ce 
contractor to obta9 f ! p]son :o        
develop$ or controls su* model any      
in=mation ! ,secret>y det]m9es necess>y 
to c>ry out ?is section4  7,c7 ,tim+ (  
report+ requirem5ts  7i7 ,initial       
submission ,a cov]$ artificial          
intellig5ce contractor %all submit to ! 

,secret>y ( ,def5se ! requir$ matt]s    
describ$ 9 subp>agraph 7,a7 z "p ( any  
(f]1 proposal1 bid1 or o!r response to a
 solicitation = a contract4  7ii7       
,cont9u+ duty to c]tify ,n less         
frequ5tly ?an once e #ij days1 ! cov]$  
artificial intellig5ce contractor %all  
c]tify to ! ,secret>y ( ,def5se t !     
in=mation submitt$ "u clause 7i7 rema9s 
accurate & complete 9 all mat]ial       
respects4  7#c7 ,notification ( acute   
national security incid5ts  7,a7 ,9     
g5]al ,! regulations issu$ pursuant to  
p>agraph 7#a7 %all require t n lat] ?an 
#gb h\rs aft] becom+ aw>e ( any         
in=mation1 incid5t1 or developm5t t     
pres5ts an acute national security risk 
to ! ,unit$ ,/ates1 ! cov]$ artificial  
intellig5ce contractor %all-- 7i7 notify
 ! ,secret>y ( ,def5se ( ! nature (     
national security risk1 includ+ any risk
 relat+ to model weight security z      
describ$ 9 subp>agraph 7,a77ii71 any    
risk describ$ 9 clauses 7iv71 7v71 &    
7vi7 or subp>agraph 7,a71 & any o!r     

category ( risk ! ,secret>y may specify2
 &  7ii7 include 9 su* notification1 to 
! ext5t kn[n at ! "t ( ! notification-- 
7,i7 a description ( ! in=mation1       
incid5t1 or developm5t2  7,,ii7 ! date  
or approximate p]iod ( occurr5ce &      
discov]y2  7,,iii7 ! affect$ model or   
deploym5t environm5t2  7,,iv7 ! actual  
or suspect$ means ( compromise2  7,v7   
:e!r any model weights1 tra9+ data1     
sy/em prompts1 s\rce code1 evaluation   
data1 safety sy/ems1 or s(tw>e          
dep5d5cies 7 access$1 alt]$1 degrad$1   
poison$1 exfiltrat$1 or o!rwise         
compromis$2  7,,vi7 an assessm5t ( !    
actual or pot5tial impact on ,dep>tm5t (
 ,def5se missions1 us]s1 sy/ems1        
op]ations1 or decision mak+2  7,,vii7   
any actions tak5 to conta91 mitigate1   
rem$iate1 or inve/igate ! in=mation1    
incid5t1 or developm5t2  7,,viii7 :e!r !
 in=mation1 incid5t1 or developm5t has  
be5 report$ to any o!r ,f$]al dep>tm5t  
or ag5cy2 &  7,,ix7 su* o!r in=mation z 
! ,secret>y det]m9es appropriate4  7,b7 

,notification by ! ,secret>y ,if !      
,secret>y ( ,def5se receives a          
notification "u subp>agraph 7,a71 !     
,secret>y %all promptly transmit su*    
notification to ! contract+ (fic] = !   
relevant contract1 ! ,*ief ,digital &   
,artificial ,intellig5ce ,(fice1 ! ,*ief
 ,in=mation ,(fic] ( ! ,dep>tm5t (      
,def5se1 ! ,"u ,secret>y ( ,def5se =    
,acquisition & ,su/a9m5t1 ! ,artificial 
,intellig5ce ,security ,c5t] ( !        
,national ,security ,ag5cy1 ! ,comm&] ( 
! ,unit$ ,/ates ,cyb] ,comm&1 & ! head (
 any o!r compon5t ( ! ,dep>tm5t or      
,f$]al dep>tm5t or ag5cy ! ,secret>y    
det]m9es appropriate4  7,c7             
,congressional notification ,if !       
,secret>y ( ,def5se receives a          
notification "u subp>agraph 7,a7 or     
discov]y an incid5t t w\ld be reportable
 "u su* clause1 ! ,secret>y %all-- 7i7 n
 lat] ?an #g days aft] ! date on :i* !  
notification 0 receiv$1 submit to !     
,committee on ,arm$ ,s]vices ( ! ,s5ate 
& ! ,committee on ,arm$ ,s]vices ( !    

,h\se ( ,repres5tatives notice ( !      
in=mation1 incid5t1 or developm5t t     
includes-- 7,i7 a summ>y description2   
7,,ii7 ! date or approximate p]iod (    
occurr5ce & discov]y2  7,,iii7 ! affect$
 model or deploym5t environm5t2  7,,iv7 
! actual or suspect$ means ( compromise1
 exfiltration1 manipulation1            
degradation1 or misuse2  7,v7 an initial
 assessm5t ( actual or pot5tial impact  
on ,dep>tm5t missions1 us]s1 sy/ems1 or 
op]ations2 &  7,,vi7 any action tak5 or 
plann$ to conta91 mitigate1 rem$iate1 or
 inve/igate ! matt]2 &  7ii7 provide !  
committees ) additional brief+s or      
updates on ! in=mation1 incid5t1 or     
developm5t z mat]ial in=mation becomes  
available4  7,d7 ,protection ( in=mation
 ,9 ! regulations issu$ "u p>agraph     
7#a71 ! ,secret>y ( ,def5se %all include
 proc$ures = ! submission (             
notifications "u ?is p>agraph1 includ+  
proc$ures to protect-- 7i7 classifi$    
in=mation2  7ii7 propriet>y in=mation2  
7iii7 trade secrets2  7iv7              

security-s5sitive in=mation2 &  7v7     
in=mation reg>d+ vuln]abilities t1 if   
disclos$ publicly1 c\ld reasonably be   
expect$ to h>m national security4  7,e7 
,rule ( con/ruction ,no?+ 9 ?is p>agraph
 may be con/ru$-- 7i7 to require public 
disclosure ( in=mation 9 a mann]        
inconsi/5t ) applicable protections =   
classifi$ or o!rwise protect$ in=mation2
 or  7ii7 to limit any o!r report+      
obligation impos$ by /atute1 regulation1
 or contract4  7#d7 ,cl>ity (           
requirem5ts ,9 ! regulations issu$      
pursuant to p>agraph 7#a71 ! ,secret>y  
%all provide cle> requirem5ts ) respect 
to ! scope1 tim+1 =m1 & mann] ( !       
report+1 includ+-- 7,a7 ! appropriate   
protections ! ,dep>tm5t w take to prev5t
 unau?oriz$ disclosure ( classifi$      
in=mation1 propriet>y in=mation1 &      
controll$ unclassifi$ in=mation2  7,b7  
any diff]5tiat$ report+ requirem5ts bas$
 on-- 7i7 ! s5sitivity ( ! contract2    
7ii7 ! capabilities ( ! relevant models2
  7iii7 ! degree ( access ( ! contractor

 or ?ird p>ties to artificial           
intellig5ce models or model weights2 &  
7iv7 ! significance ( ! risk to         
,dep>tm5t missions or national security2
 &  7,c7 proc$ures to ensure t1 if a    
cov]$ artificial intellig5ce contractor 
uses1 or proposes to use1 9 ! p]=mance (
 a contract ) ! ,dep>tm5t an artificial 
intellig5ce model develop$ or controll$ 
by ano!r p]son1 any in=mation requir$ "u
 ?is section is obta9$ f t p]son4  7#e7 
,consultation ,9 develop+ ! regulations 
"u p>agraph 7#a71 ! ,secret>y may       
consult )-- 7,a7 cov]$ artificial       
intellig5ce contractors2  7,b7 ! head ( 
any ,f$]al ag5cy2  7,c7 indu/ry         
p>ticipants2 &  7,d7 any (ficial ( !    
,dep>tm5t t ! ,secret>y consid]s        
relevant1 includ+ acquisition1          
c\nt]9tellig5ce1 digital mod]nization1 &
 op]ational (ficials ( ! ,dep>tm5t4  7c7
 ,/udy & volunt>y guidance on insid]    
?reat risk r$uction = cov]$ artificial  
intellig5ce contractors  7#a7 ,9 g5]al  
,n lat] ?an #ahj days aft] ! date ( !   

enactm5t ( ?is ,act1 ! ,secret>y (      
,def5se %all issue volunt>y guidance =  
cov]$ artificial intellig5ce contractors
 to r$uce insid] ?reat1 espionage1 & o!r
 p]sonnel-relat$ security risks to      
s5sitive artificial intellig5ce assets (
 su* contractors1 ) a focus on ?reats f 
highly capable nation-/ate adv]s>ies t  
possess significant res\rces & !        
capability to conduct sophi/icat$       
espionage or relat$ op]ations4  7#b7    
,assessm5t & updat$ guidance ,n lat] ?an
 #a ye> aft] ! date ( ! enactm5t ( ?is  
,act1 ! ,secret>y %all-- 7,a7 complete  
an assessm5t ( ! risks describ$ 9       
p>agraph 7#a72 &  7,b7 updat$ ! guidance
 issu$ "u su* p>agraph bas$ on ! f9d+s (
 t assessm5t4  7#c7 ,cont5ts ,! guidance
 requir$ "u p>agraph 7#a71 includ+ any  
updat$ guidance issu$ "u p>agraph       
7#b77;,b71 %all1 at a m9imum-- 7,a7     
id5tify categories ( roles1             
responsibilities1 functions1 sy/ems1 &  
access t may provide mat]ial access to  
model weights1 model int]nals1 tra9+    

infra/ructure1 s5sitive rese>*          
in=mation1 or o!r s5sitive assets ( !   
cov]$ artificial intellig5ce contractor1
 ! compromise ( :i* c\ld pres5t a       
significant risk to ,dep>tm5t missions  
or national security2  7,b7 e/abli% a   
ti]$ framework bas$ on ! degree (       
access1 s5sitivity1 & national security 
risk involv$1 "u :i* ! mo/ s5sitive     
roles1 sy/ems1 & categories ( access are
 associat$ ) ! mo/ /r+5t sugge/$        
security measures2  7,c7 assess !       
practices1 & if appropriate sugge/      
pref]r$ practices1 relat+ to p]sonnel   
vett+1 role-bas$ access controls1       
comp>tm5tation1 audit logg+1 anomaly    
detection1 cont9u\s monitor+1 incid5t   
escalation1 & protection aga9/          
espionage1 !ft1 sabotage1 or unau?oriz$ 
transf]1 includ+ practices design$ to   
address ?reats f nation-/ate adv]s>ies2 
7,d7 address1 = especially s5sitive     
roles or access1 :at p]sonnel security  
measures1 access re/rictions1 or o!r    
safegu>ds are appropriate to r$uce      

height5$ risks f nation-/ate adv]s>ies2 
&  7,e7 address su* o!r measures z !    
,secret>y det]m9es appropriate to       
protect ,dep>tm5t missions & national   
security f insid] ?reat & espionage     
risks aris+ f ! security practices (    
cov]$ artificial intellig5ce            
contractors4  7#d7 ,rule ( con/ruction  
,no?+ 9 ?is subsection %all be con/ru$  
to require a cov]$ artificial           
intellig5ce contractor to adopt any     
measure1 practice1 p]sonnel policy1     
access re/riction1 or o!r safegu>d      
describ$ 9 ! guidance issu$ "u p>agraph 
7#a74  7#e7 ,consultation ,9 c>ry+ out  
?is subsection1 ! ,secret>y may consult 
) cov]$ artificial intellig5ce          
contractors1 ! intellig5ce community1   
c\nt]9tellig5ce (ficials1 appropriate   
elem5ts ( ! ,dep>tm5t ( ,def5se1 ! heads
 ( o!r ,f$]al ag5cies1 f$]ally fund$    
rese>* & developm5t c5t]s1 & o!r        
relevant exp]ts1 z det]m9$ appropriate  
by ! ,secret>y4  7d7 ,report to congress
  7#a7 ,9 g5]al ,n lat] ?an #a ye> aft] 

! date ( ! enactm5t ( ?is ,act1 !       
,secret>y ( ,def5se %all submit to !    
congressional def5se committees an      
unclassifi$ report1 :i* may include a   
classifi$ annex1 on ! implem5tation (   
?is section4  7#b7 ,elem5ts ,! report   
requir$ by p>agraph 7#a7 %all include-- 
7,a7 a summ>y ( ! progress made 9       
develop+ & implem5t+ ! report+          
requirem5ts "u subsection 7b77#a72  7,b7
 a summ>y ( ! progress made 9 issu+ !   
volunt>y guidance "u p>agraph 7#a7 (    
subsection 7c71 includ+ ! initial       
guidance & any updat$ guidance issu$ "u 
p>agraph 7#b7 ( su* subsection2  7,c7 an
 assessm5t ( any *all5ges1 gaps1 or     
limitations id5tifi$ by ! ,secret>y 9   
c>ry+ out ?is section2 &  7,d7 any      
additional /eps1 au?orities1 res\rces1  
or policy recomm5dations ! ,secret>y    
det]m9es w\ld be useful to advance !    
purposes ( ?is section4  7#c7           
,congressional def5se committees def9$  
,! t]m congressional def5se committees  
has ! mean+ giv5 ! t]m 9 section #aja ( 

title #aj1 ,unit$ ,/ates ,code4