While DC Signed a Pledge, the States Served Subpoenas
California's subpoena and Florida's injunction bid did more to shape AI behavior this week than the White House accord. Federalism is the regulator.
The White House accord got the photo. The state actions got the effect. California's AG subpoenaed OpenAI on Oct 1 over the Hugging Face breach, and Florida's AG asked a court to halt OpenAI's frontier development pending outside safety validation. Those are legal obligations, not moral ones.
This is how AI oversight is actually landing in the US: not a federal law, but a patchwork where the states with the labs in their jurisdiction use their authority. California's leverage is that most frontier labs are headquartered there, so its subpoena reaches further than a federal guideline that says 'please.'
For builders, the takeaway is to watch Sacramento and Tallahassee, not just Washington. The voluntary accord creates no compliance duty; a state subpoena creates a discovery obligation and a paper trail. The risk surface is state-level enforcement under existing consumer-protection and security law.
The accord was the ribbon. The subpoenas are the rule. If you deploy agents, assume a state attorney general is your most likely regulator, because this week they acted like it.