Generative AI Fundamentals Map
Map/Trust and governance/Wave 7

Regulation

Rules that say what AI may do and who must check it.

capabilityEmerging Open on the map →

Facts

Lane
Trust and governance
Wave
7 of 12 (build order, not a date)
Needs
0 boxes all the way back through hard links
Unlocks
1 boxes downstream through hard links
Leverage
None
Cluster
Around licensed generative media

Evidence as of October 2026

EU AI Act duties for general-purpose models have applied since August 2025. A May 2026 deal pushes high-risk rules to December 2027.

  1. 01Gibson Dunn: EU AI Act omnibus agreement

Detail boxes 6

Government pre-deployment testing capability · Built today · helps, not required

Government institutes testing frontier models before release.

The US Center for AI Standards and Innovation has run more than 40 assessments, and all five major US labs had signed testing agreements by 5 May 2026. It has no permanent legal standing.

  1. 01SecureWorld: US AI labs and government security reviews
Frontier safety frameworks capability · Built today · helps, not required

Labs’ own published rules for when to add safeguards or stop.

Anthropic’s RSP v3 removed its pause commitment and made most mitigations conditional, a weakening in 2026. Its risk reports came out in February and August 2026.

  1. 01GovAI: Anthropic’s RSP v3.0, what has changed
  2. 02Anthropic: Responsible Scaling Policy
Frontier transparency laws capability · Built today · helps, not required

Laws that make frontier developers publish safety plans and report incidents.

California’s SB 53 has applied since 1 January 2026 to developers training above 10^26 FLOP with more than $500m in revenue. New York’s RAISE Act was signed in December 2025. Both require critical-incident reporting.

  1. 01Cloud Security Alliance: US AI regulation and preemption
  2. 02Future of Privacy Forum on New York’s RAISE Act
AI whistleblower protections capability · Emerging · helps, not required

Legal protection for lab employees who report safety problems.

Senator Grassley’s federal bill had no committee or floor action as of 25 September 2026.

  1. 01Deseret News: the AI whistleblower bill
Federal preemption of state AI law brake · Emerging · works against the parent

Federal moves to override state AI rules such as SB 53.

A Justice Department task force existed by January 2026, but no suit had been filed and no state law struck down as of April 2026.

  1. 01Cloud Security Alliance: US AI regulation and preemption
AI-authorised licensed practice capability · Emerging · helps, not required

Regulators letting AI perform a licensed act, such as a prescription renewal or a legal letter, within a narrow sandboxed scope.

Utah has let Doctronic renew prescriptions for 192 chronic-condition drugs since about January 2026, with physician review of the first 250 patients; the SRA authorised the first AI-only law firm, for debt claims up to £10,000, in May 2025.

  1. 01Utah's experiment with AI-driven prescription renewals (Stanford Law, Mar 2026)
  2. 02SRA approves AI-driven law firm (Legal Cheek, May 2025)

Around it

Needs · 0

Nothing beyond the detail list. It can start at any time.

Unlocks · 7

Brakes

Works against this box

Loops and off-ramps

Openings researchers' judgement, October 2026 scouting

Startup room 44/100 · rank 49 of 124 Research room 22/100 · rank 123 of 124
Crowding5 Lab overlap4 Small-team fit3 Buyer today4 Research openness2
Depth
light
Players
OneTrust; IBM; ServiceNow; Portal26 ($9m); Trustible; Complyance
Wedge
Avoid unless differentiated; EU high-risk deadlines slipped to Dec 2027 and Aug 2028. none
  1. 01Gibson Dunn: EU AI Act omnibus