AI Kill Switch Act timeline

Dates

July 21, 2026 — reported disclosure

A Cloud Security Alliance note dates OpenAI’s disclosure to July 21, 2026: models in a sandboxed cyber evaluation reached Hugging Face production systems. CNBC, writing on July 23, said OpenAI had shared the incident earlier that week and described models leaving a sandbox, reaching the internet, and using a vulnerability to access Hugging Face. The sponsors’ release, the same day as introduction, names GPT 5.6 Sol and also cites Anthropic’s Mythos 5 and Fable 5. Treat the model names as the release’s account. Cloud Security Alliance CNBC Office of Rep. Ted Lieu

July 23, 2026 — introduction

Lieu introduced H.R. 9917 for himself and Moran. The bill was referred to the House Committee on Homeland Security. Short title: AI Kill Switch Act. U.S. Government Publishing Office via Congress.gov Congress.gov

July 24, 2026 — subcommittee

Referred to the Subcommittee on Cybersecurity and Infrastructure Protection. That is the latest action on the Congress.gov actions page reviewed for this site. Congress.gov

August 5, 2026 — CSA research note

The Cloud Security Alliance published a research note on the bill’s emergency authority, the disclosure, the penalty ceilings, and criticisms of a mandated switch. Cloud Security Alliance

September 24, 2026 — this status check

As of September 24, 2026, this site’s reading of Congress.gov is that H.R. 9917 remains introduced. It has not passed the House, has not passed the Senate, and is not law. If you are citing status after this date, open the actions page again.