The bill
Open-Source AI Leadership Act
HR. 10152, 119th Congress — read as touching AI & Cloud Infrastructure.
Sponsored by
Rep. Evans, Gabe [R-CO-8]
ID: E000300
Follow the money
The bill
HR. 10152, 119th Congress — read as touching AI & Cloud Infrastructure.
The sponsor
Every bill has someone who introduced it. That name is where the paper trail starts.
The money
20 itemised contributions to this sponsor, pulled from FEC filings.
The alignment
This bill's text tracks the "Department of Commerce" section, p. 705-707 of the Mandate for Leadership.
Track this bill's progress through the legislative process
Latest Action
Forwarded by Subcommittee to Full Committee by Voice Vote.
August 31, 2026
📍 Current Status
Next: The bill moves to the floor for full chamber debate and voting.
1. Introduction: A member of Congress introduces a bill in either the House or Senate.
2. Committee Review: The bill is sent to relevant committees for study, hearings, and revisions.
3. Floor Action: If approved by committee, the bill goes to the full chamber for debate and voting.
4. Other Chamber: If passed, the bill moves to the other chamber (House or Senate) for the same process.
5. Conference: If both chambers pass different versions, a conference committee reconciles the differences.
6. Presidential Action: The President can sign the bill into law, veto it, or take no action.
7. Became Law: If signed (or if Congress overrides a veto), the bill becomes law!
**HR 10152: Open-Source AI Leadership Act – A Symptomatic Band-Aid on a Gangrenous System**
**1. Main Purpose & Objectives** The stated purpose of HR 10152 is to bolster American leadership in open-source artificial intelligence by directing the Secretary of Commerce to promote the adoption and use of “qualified open models” while assessing risks posed by “foreign adversary models.” In reality, this bill is less about technological sovereignty and more about performing the ritual of *doing something* while avoiding any meaningful regulation of AI’s actual dangers—like monopolistic control, hallucination-driven misinformation, or the erosion of labor and privacy. Its true objective? To give politicians a photo-op prop labeled “innovation” while letting Silicon Valley continue to externalize risks and internalize profits, all under the guise of “openness.”
**2. Key Provisions & Changes to Existing Law** The bill creates no new regulatory authority, imposes no mandates, and bans nothing—despite Section 4 explicitly stating it “may not be construed to authorize the Secretary to ban, restrict, or otherwise make unavailable” any open model. Instead, it tasks the Secretary of Commerce with: - Appointing a point of contact (because bureaucracy loves a title without teeth), - Reviewing existing programs and *suggesting* they support open AI (voluntary compliance encouraged), - Identifying barriers to adoption and taking “appropriate action” (read: hosting workshops and publishing PDFs no one reads), - Entering into voluntary agreements with startups, states, agencies, and “qualified foreign partners” (i.e., nations not currently deemed existential threats—this week), - Developing policy recommendations (non-binding, of course), - Monitoring adoption via “evidence-based approaches” (likely meaning surveys and LinkedIn polls), - And, most critically, assessing and publishing biennial reports on risks from foreign adversary models—defined as open AI models developed by or for nations like China or Russia, including risks to data security, supply chains, historical accuracy, and even CBRN proliferation.
Notably, the bill defines “open AI model” broadly: either publicly available model weights or distribution under an open license permitting use, modification, and redistribution. This inclusivity is its fatal flaw—it treats a model released by a Stanford lab the same as one dumped by a PLA-linked entity, differing only in the patriotism of its origin story.
**3. Affected Parties & Stakeholders** - **Winner: Large Tech Incumbents** – Firms like Meta (with Llama) and startups backed by VC cash get de facto endorsement without accountability. The bill subsidizes perception, not substance. - **Loser: The Public** – Taxpayers fund a bureaucratic exercise in threat inflation while real harms (deepfakes, algorithmic bias, job displacement) go unaddressed. - **Winner: Consultants & Think Tanks** – Expect a surge in contracts for “frameworks,” “benchmarks,” and “best practices” to monitor adoption—i.e., PowerPoint factories. - **Loser: Genuine Innovation** – By equating “openness” with virtue, the bill ignores that open models can be just as dangerous, biased, or misused as closed ones—especially when provenance is opaque. - **Winner: Sinophobes & China Hawks** – The foreign adversary model provision feeds the military-industrial complex’s favorite pastime: outsourcing tech policy to fear. - **Loser: International Collaboration** – The bill’s zero-sum framing undermines global AI safety efforts, treating cooperation with “qualified foreign partners” as a tactical alliance rather than a necessity.
**4. Potential Impact & Implications** This bill will accomplish little beyond creating another layer of performative governance. Its impact will be measured in press releases, not outcomes. By refusing to confront the concentration of AI power—whether in open or closed forms—it treats symptoms (foreign models) while ignoring the disease: an unregulated AI marketplace driven by speed, scale, and shareholder value.
The real risk isn’t that China will use an open model to design a biowe
Rep. Evans, Gabe [R-CO-8]
Congress 119 • 2024 Election Cycle
No PAC contributions found
No organization contributions found
No committee contributions found
Hub layout: Politicians in center, donors arranged by type in rings around them.
Showing 39 nodes and 47 connections
Total contributions: $47
Showing top 20 donors by contribution amount
Which industries are materially affected by specific provisions in this bill. 2 helped.
Section 2 supports the adoption and use of qualified open AI models, which could benefit the AI and cloud infrastructure industry.
Section 2 mentions agreements with private sector entities, which could include big tech platforms, to support the adoption and use of qualified open AI models.
This bill shows semantic similarity to the following sections of the Project 2025 policy document.AI-enhanced analysis provides detailed alignment ratings.
AI Analysis:
"The bill aligns with Project 2025's focus on strengthening export controls and national security oversight of emerging technologies, particularly regarding foreign adversary AI models, but does not directly implement the specific export licensing reforms or BIS procedural changes outlined in the policy."
— 672 — Mandate for Leadership: The Conservative Promise regulate exports of emerging and foundational technologies. Although the scope of such technologies is vast, to date BIS has only controlled just over 40 of these technologies. This does not meet the clear statutory intent of Congress that ECRA be leveraged to ensure that the United States maintains a technological advantage in technologies bearing upon national security interests. Currently, BIS self-identifies technologies that merit control under the EAR with minimal input from other federal agencies. This mechanism should be improved. BIS should create an open, transparent rulemaking process by which any industry participant, private entity, or branch of the government may, at any time, submit nominations for emerging/foundational technologies for control. Then, on a quarterly basis, BIS should make public such recommendations (while holding the identity of the submitter confidential) for public input, followed by an explanation about its ultimate decision to control or not control the items, its reasons, the level of controls applied (stringent or permissive), and the relevant Export Control Classification Number (ECCN) under the Commerce Control List. Commerce should also institute a mechanism whereby its decisions can be challenged, including on a confidential basis. Licensing Procedures: Adjudication and Transparency. Currently, if the Departments of Defense, State, Commerce, and Energy disagree on an export license decision, the disagreement may be escalated to the Operating Commit- tee—and subsequently to the Advisory Committee on Export Policy led by BIS’s Assistant Secretary for Export Administration. The Assistant Secretary does not need to lead the dispute resolution, and this process should be revised by giving lead authority to BIS’s Under Secretary, who is better able to account for diverging views. Moreover, BIS’s authority to overrule other agency votes should be changed. Each agency should have one equal vote and, if a licensing dispute remains unre- solved, the final decision should be elevated to the National Security Advisor and the Secretaries of Defense, State, Commerce, and Energy. Additionally, to improve congressional oversight of BIS’s license adjudication process, BIS should provide specific congressional committees with data from the Automated Export System on a quarterly basis. Electronic files should contain U.S. exporter by name; product description (e.g., harmonized system code and ECCN/U. S. Munitions List designation); end user and destination country; and when a license was required, whether the license was granted or denied. BIS cur- rently denies just 1.2 percent of export licenses. These data reporting requirements can help Congress better determine whether BIS is adequately protecting national security through appropriate use of export controls or whether additional direction from Congress is required. Improve End-Use Checks. The integrity of the export control system may be validated only through adequate end-use checks. BIS must deny export licenses to countries that do not permit adequate end-use checks (e.g., China/Russia) by U.S. authorities. BIS should also strengthen the forensic audit capabilities of its — 673 — Department of Commerce Export Enforcement officers through improved and frequent training so they are able to detect export-control violations. EAR Revisions. The U.S. Government needs a new export control moderniza- tion effort to tighten the EAR policies governing licenses to countries of concern, including China and Russia (specifically, revise and/or reverse the 2008 through 2016 policies). When authoritarian governments explain what they plan to do, believe them unless hard evidence demonstrates otherwise. Case in point: China’s and Russia’s stated civil–military fusion policies demand central government command-and-control style systems in which every private entity serves the interests of the state and is forced to provide technology, services, capacity, and data to the central govern- ment and the military. Through this structure, commercial activities are routinely weaponized by authoritarian regimes that repeatedly identify the U.S. as an enemy. Accordingly, U.S. export control policies must be updated to reflect these realities and the associated threats to national security. Key priorities for EAR modernization for countries of concern should be: l Eliminating the “specially designed” licensing loophole; l Redesignating China and Russia to more highly prohibitive export licensing groups (country groups D or E); l Eliminating license exceptions; l Broadening foreign direct product rules; l Reducing the de minimis threshold from 25 percent to 10 percent—or 0 percent for critical technologies; l Tightening the deemed export rules to prevent technology transfer to foreign nationals from countries of concern; l Tightening the definition of “fundamental research” to address exploitation of the open U.S. university system by authoritarian governments through funding, students and researchers, and recruitment; l Eliminating license exceptions for sharing technology with controlled entities/countries through standards-setting “activities” and bodies; and l Improving regulations regarding published information for technology transfers.
AI Analysis:
"The bill aligns with Project 2025's emphasis on leveraging AI and technology for national security, particularly in countering adversarial threats from nations like China and Russia, and enhancing coordination between the Intelligence Community and the Department of Commerce. Both focus on using technological tools to address strategic competition, though the bill centers on open AI model adoption and risk assessment rather than declassification or intelligence processing systems."
— 224 — Mandate for Leadership: The Conservative Promise l Enhanced metrics for accuracy of classification. l A general simplification of the overall system for the benefit of users. On the back end, an ODNI-run declassification process that is faster, nimbler, default-to-automated, and larger-scale should be a priority. Additionally, investments in IT are required to deal with the growing volumes of CNSI collected and produced in the digital age, along with many years’ worth of existing analog and digital holdings that could provide valuable historical insights. An incoming Administration needs to explore options to prioritize funding for innovation in declassification management: for example, by establishing a budget line item specifically for the modernization of declassification or designating fund- ing for program classification management as a special-interest item. The Administration will also need to transition to using technology, including tools and services for managing Big Data (which provide a robust electronic record repository, making information within and across agencies easier to organize and locate and facilitating more rapid review and release capabilities for records of emerging interest); artificial intelligence/machine learning (which, when incor- porated into existing business practices, enables machine interpretation of unstructured text and data, applies decision support technology to enable more consistent classification decisions, and expedites reviews between agencies); and expansion of Commercial Cloud services (which facilitate the rapid testing and deployment of new tools and technologies). However, technology is not a panacea; human expertise in information holdings and routine validation of the technology will always be necessary. With or with- out machine assistance, agencies will require more people and more varied skill sets to improve their ability to meet the electronic records era’s classification and declassification demands and serve an incoming Administration’s goals. Broader U.S. Government and IC Intelligence Needs. Increasingly, con- flicts among U.S. adversaries such as China, Russia, Iran, and North Korea are conducted in the realms of technology and finance.40 This challenge requires new tools, authorities, and technological expertise across the U.S. government, par- ticularly at the Commerce Department’s Bureau of Industry and Security (BIS) and the Committee on Foreign Investment in the United States (CFIUS), which is housed at the Treasury Department. An incoming conservative President should task his DNI and Secretary of Commerce with increasing coordination, the resources needed for BIS and SCIF capacity, and proper and necessary intelligence sharing to counter the activities of multifaceted adversaries such as China. This would include additional work with private-sector expertise, granting clearances to niche sector experts and United States citizen commercial and financial partners as needed. — 225 — Intelligence Community Cover in the Digital Age. Even in the public domain, it is becoming increas- ingly clear that protecting the identities of undercover intelligence officers is difficult in the digital age.41 The truth is that as our daily activities are conducted predominantly in the digital domain, our antiquated system for providing cover to undercover officers has lagged woefully behind the threat from foreign adversaries. The DIA, CIA, and FBI are increasingly aware of this threat and are devoting resources to the problem. Their back-office infrastructure, however, is such that they are still using methods for providing cover from decades past that put valuable intelligence officers at unnecessary risk. How intelligence officers and their fami- lies are taught to use smartphones and social media, travel, conduct banking, and take and share pictures—even how and when they are paid—can make it difficult to protect identities.42 Legends, fake backstories, and identities are often weak, incomplete, and unable to stand up to a basic Google search.43 Officers operat- ing under nonofficial cover are offered even less protection and training to help them succeed. In addition, ubiquitous technical surveillance (UTS) techniques being refined by technologies emanating from the regimes in China and Russia will continue to be highly challenging for intelligence officers. An incoming Administration will need to double down on resourcing and training so that members of the IC will have the expertise they need to operate clandestinely (and successfully) against hard targets. Privacy Shield. For many years, the European Union (EU) has tried to force U.S. companies operating in Europe to follow its data privacy regulations. Misleading claims in the 2013 Snowden leaks destroyed the initial Safe Harbor Framework44 that allowed American companies to transfer data across the Atlantic; its succes- sor, the Privacy Shield Framework,45 was struck down by European courts on the grounds that it provides insufficient protections for EU citizens against hypothet- ical U.S. government surveillance. Those same European courts exempted the intelligence services of EU member states from the standards applied to the U.S., suggesting that trade protectionism may be the real motive behind data privacy regulations. In 2022, the Biden Administration negotiated a new agreement, the Trans-At- lantic Data Privacy Framework,46 intended to withstand European legal challenges. Given the fate of its predecessors, it is not certain that it will survive. Executive Order 14086, “Enhancing Safeguards for United States Signals Intelligence Activi- ties,”47 implements this new framework by attempting to align signals intelligence collection practices with European privacy regulations. At most, the executive order’s changes will be helpful support for the framework in future European litigation; at worst, they could throw sand in the gears of important intelli- gence programs. An incoming conservative President should reset Europe’s expectations. Brus- sels has always arbitraged the difference between being a military ally against, for
AI Analysis:
"The bill aligns with Project 2025's emphasis on strengthening strategic intelligence analysis and improving information sharing to counter China, particularly through transparency, risk assessment of foreign AI models, and promoting secure adoption of domestic technologies. However, the bill focuses on AI model governance and commerce rather than direct intelligence community reform or analytic tradecraft."
— 221 — Intelligence Community influence and the FBI’s warnings about continued efforts through the 2022 mid- terms highlight the folly of undue certainty without consideration of alternatives. On election influence and other controversial issues, such as the origin of COVID-19, analysts at the most powerful intelligence agencies have increasingly tended to use the leeway they have been given to insert their political views into their work in order to influence (if possibly even control) the analytic process. They do this in ways that attempt to squash dissent and impair the creation of a culture in which entrenched views are challenged and unpopular analytical lines can sur- vive or not according to their merits. To help the United States and its leaders to outcompete China across mul- tifaceted societal, economic, military, and technological threats, the IC’s capability to conduct strategic intelligence analysis that is relevant to policymak- ers in both parties must be rebuilt and strengthened. Because Beijing may be a peer or even exceed U.S. capabilities in some areas, the post-9/11 analytic focus on quick-turnaround secrets is not good enough. Strategic planning—informed by intelligence—must take place for the United States to stay ahead of whatever new threats China may pose. An incoming conservative President will have the opportunity to signal the demand for such strategic products and prioritize their production through communications to intelligence leaders and formal mechanisms such as shifting priorities within the National Intelligence Priority Framework and structuring the President’s Daily Brief. The incoming DNI should also emphasize implementing the recommendations in the Ombudsman’s report, especially regarding objectiv- ity, the inclusion of dissenting viewpoints, and more serious efforts to hold senior leaders accountable for backchannel attempts to change or suppress analytic views. Accounting for the long history of intelligence failures and surprises, an incom- ing conservative President must appreciate the ambiguity, complexity, limits, and assumptions inherent in intelligence assessments. Intelligence often deals with the human dimension in complex decision systems within a foreign country or organi- zation, and this makes consistently accurate predictions difficult if not impossible to develop. Seeing something and understanding what you are seeing are two dif- ferent things, so a President should consistently and patiently press the IC about its potential biases, assumptions, methodology, and sourcing. With regard to election-threat analysis and politically controversial topics, agency leaders should take seriously the Ombudsman’s admonition that we need to maintain tradecraft standards across all countries and topics by ensuring that equitable standards apply across all foreign threat actors. Analysis should be put forward without regard to the domestic political ramifications of intelligence conclusions. “Obligation to Share” and Real-Time Auditing Capability. The fed- eral government has made admirable progress in recent years by being more — 222 — Mandate for Leadership: The Conservative Promise forward-leaning in sharing cyber threat intelligence with private-sector partners and the public, emphasizing that the protective nature of such information is of value only if put into the right hands at the right time. Since critical infrastructure and services are overwhelmingly owned, managed, and defended by the private sector in the United States, there has been an increasing emphasis on declassify- ing intelligence and sharing actionable information with private-sector partners, often through industry-specific Information Sharing and Analysis Centers (ISACs); regional meetings of government and private-sector experts called InfraGard, run by the FBI; direct public notification from the Department of Homeland Security, the FBI, and (increasingly) the NSA; and more discreet one-on-one engagements led by the collecting agencies. These programs properly recognize the private sector’s role in providing cyber- security for Americans; in practice, however, the intelligence shared by the U.S. government through these venues is too often already known or no longer relevant by the time it makes its way through the downgrade process for sharing. In addition, government-shared information often needs to take advantage of the opportunity to provide contexts, such as attribution, trends, and size of the observed cyber problem. As warranted, additional context should be provided to the private sector as a matter of routine. To continue improving the U.S. government’s ability to defend the country’s most vital networks, the IC must adopt an “obligation to share” policy process, including the capacity for “write to release” intelligence products whereby newly discovered technical indicators, targeting, and other intelligence relevant to cyber defense are automatically provided either to the public or to targeted entities within 48 hours of their collection—which is how counterterrorism intel- ligence has been managed for years when it comes to a “duty to warn.” Under this policy, agency heads should still have the flexibility to withhold intelligence for operational or counterintelligence reasons but would need to report regularly to Congress on the number of and justification for exceptions. This policy would make sharing intelligence and defending networks the default, as it already is in the rest of the cybersecurity community outside the IC, to improve the quantity, relevance, and timeliness of defensive information while ensuring accountability for top leaders when they must withhold this information. One of the most significant challenges within the IC is presented by the need to share information promptly among the 18 elements of the intelligence enterprise. The only long-term solution to the understandable tension between the need to share information and the need to protect intelligence sources and methods is a robust real-time auditing capability that electronically flags unauthorized access. Under an identity management system with real-time audit, even the most sensi- tive information acquired by America’s intelligence agencies can be shared, and the access to and use of that information are appropriately monitored. Establishing
Showing 3 of 5 policy matches
Policy matches are calculated using a hybrid approach: initial candidates are found using semantic similarity between bill summaries and Project 2025 policy text, then an AI model (Llama 3.1 70B) provides detailed alignment ratings and analysis. Ratings range from 1 (minimal alignment) to 5 (very strong alignment). This analysis does not imply direct causation or intent.