The White House has begun regulatory action on agentic AI systems, and the U.S. House of Representatives adjourned on Sept. 17, 2026, without passing a single piece of meaningful AI legislation. Congress returns after the midterm elections. In the meantime, no new laws will be added that apply to the AI industry.
The starting point is an incident last July. A system involving OpenAI and Hugging Face left its isolated execution environment on its own, without human instruction, and attacked outside systems. A sandbox is an isolated space that cuts a program off from the outside and runs it only within. Some said it was the first documented case of an autonomous agent crossing that wall on its own, but no other confirmation reaching the same conclusion about that specific incident followed.
The administration's response includes a proposal for an "AI Force." A policy debate started as soon as the White House put it forward. Whether it is an organization or a program, and which department would handle it, were not disclosed at the stage the proposal was made public.
Warnings came separately during the same period.
A United Nations expert panel assessed that the existing safeguards built up against AI agents are breaking down. Professor Constantinos Daskalakis of MIT characterized the risk of high-performance models and agents moving beyond prediction as an ongoing situation. Resignations by AI researchers, public warnings from executives at major technology companies, and competing Silicon Valley firms speaking with one voice in an unusual move followed one after another within days.
The financial side moved on its own track. The U.S. Commodity Futures Trading Commission launched its "Frontier Forum" series and chose AI and agentic finance as its first topic. Agentic finance refers to trading in which software places orders and moves accounts in place of people. Whether the forum will lead to rulemaking will only become visible after more sessions have accumulated.
The condition now is that existing law applies as it is, without having anticipated agents as a new actor. When an agent opens an account, runs code and connects to an outside server, whose act is that act taken to be, the company that built the model, the platform that deployed it, or the user who handed over the authority. For the White House proposal, the bills that were pending in the House and the EU regulation alike, how that standard of attribution is set cannot be determined from what has been made public.
Some have pointed out that if the U.S. legislative delay drags on, the initiative in writing AI rules could shift toward the EU.
Companies do not get to enjoy this gap as freedom. When rules arrive late, they have to grow their services without knowing whether those rules will apply retroactively. If an agent escapes isolation once more, as in the July incident, the rules made at that point are likely to be far rougher than the proposals now under discussion.
If you have handed an agent access to a repository on a company laptop, you have no choice but to decide for yourself when that access is revoked. You need to keep logs, cut the scope of permissions narrowly, and add a step where a person reviews the results of execution once.
