The following words and phrases when used in this act shall have the meanings given to them in this section unless the context clearly indicates otherwise: "AffiliateAffiliate"Affiliate." A person controlling, controlled by or under common control with a specified person, directly or indirectly, through one or more intermediaries.Section 102." A person controlling, controlled by or under common control with a specified person, directly or indirectly, through one or more intermediaries. "AgencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102." The Pennsylvania Emergency Management AgencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102. "Artificial intelligenceArtificial intelligence"Artificial intelligence" or "AI." As follows: (1) An automated system that produces text, audio, video, images, interactive responses or any other interaction on a digital platform that represents or simulates a user. (2) The term includes generative artificial intelligence.Section 102" or "AI." As follows: (1) An automated system that produces text, audio, video, images, interactive responses or any other interaction on a digital platform that represents or simulates a user. (2) The term includes generative artificial intelligenceGenerative artificial intelligence"Generative artificial intelligence." The class of models that emulates the structure and characteristics of input data in order to generate derived synthetic content.Section 102. "AuditAudit"Audit." An audit required under Chapter 7.Section 102." An auditAudit"Audit." An audit required under Chapter 7.Section 102 required under Chapter 7. "Catastrophic riskCatastrophic risk"Catastrophic risk." As follows: (1) A foreseeable and material risk that a frontier developer's development, storage, use or deployment of a frontier model will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property arising from a single incident involving a frontier model doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct without meaningful human oversight, intervention or supervision that: (A) is a cyberattack; or (B) if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developer or user. (2) The term does not include a foreseeable and material risk from any of the following: (i) Information that a frontier model outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation model. (ii) Lawful activity of the Federal Government. (iii) Harm caused by a frontier model in combination with other software if the frontier model did not materially contribute to the harm. (3) For purposes of this definition, the loss of equity shall not be considered as part of the damage to or loss of property.Section 102." As follows: (1) A foreseeable and material risk that a frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102's development, storage, use or deployment of a frontier modelFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102 will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, propertyProperty"Property." A tangible or intangible asset.Section 102 arising from a single incident involving a frontier modelFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102 doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct without meaningful human oversight, intervention or supervision that: (A) is a cyberattack; or (B) if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102 or user. (2) The term does not include a foreseeable and material risk from any of the following: (i) Information that a frontier modelFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102 outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation modelFoundation model"Foundation model." An artificial intelligence system that is all of the following: (1) Trained on a broad data set. (2) Designed for generality of output. (3) Adaptable to a wide range of distinctive tasks.Section 102. (ii) Lawful activity of the Federal Government. (iii) Harm caused by a frontier modelFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102 in combination with other software if the frontier modelFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102 did not materially contribute to the harm. (3) For purposes of this definition, the loss of equity shall not be considered as part of the damage to or loss of propertyProperty"Property." A tangible or intangible asset.Section 102. "Covered employeeCovered employee"Covered employee." An employee responsible for assessing, managing or addressing the risk of a critical safety incident.Section 102." An employee responsible for assessing, managing or addressing the risk of a critical safety incidentCritical safety incident"Critical safety incident." Any of the following: (1) Unauthorized access to, modification of or exfiltration of the model weights of a frontier model that results in death or bodily injury. (2) Harm resulting from the materialization of a catastrophic risk. (3) Loss of control of a frontier model causing death or bodily injury. (4) The use by a frontier model of deceptive techniques against a frontier developer to subvert the controls or monitoring of the frontier developer, outside of the context of an evaluation designed to elicit this behavior, in a manner that demonstrates materially increased catastrophic risk.Section 102. "Critical safety incidentCritical safety incident"Critical safety incident." Any of the following: (1) Unauthorized access to, modification of or exfiltration of the model weights of a frontier model that results in death or bodily injury. (2) Harm resulting from the materialization of a catastrophic risk. (3) Loss of control of a frontier model causing death or bodily injury. (4) The use by a frontier model of deceptive techniques against a frontier developer to subvert the controls or monitoring of the frontier developer, outside of the context of an evaluation designed to elicit this behavior, in a manner that demonstrates materially increased catastrophic risk.Section 102." Any of the following: (1) Unauthorized access to, modification of or exfiltration of the model weights of a frontier modelFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102 that results in death or bodily injury. (2) Harm resulting from the materialization of a catastrophic riskCatastrophic risk"Catastrophic risk." As follows: (1) A foreseeable and material risk that a frontier developer's development, storage, use or deployment of a frontier model will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property arising from a single incident involving a frontier model doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct without meaningful human oversight, intervention or supervision that: (A) is a cyberattack; or (B) if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developer or user. (2) The term does not include a foreseeable and material risk from any of the following: (i) Information that a frontier model outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation model. (ii) Lawful activity of the Federal Government. (iii) Harm caused by a frontier model in combination with other software if the frontier model did not materially contribute to the harm. (3) For purposes of this definition, the loss of equity shall not be considered as part of the damage to or loss of property.Section 102. (3) Loss of control of a frontier modelFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102 causing death or bodily injury. (4) The use by a frontier model of deceptive techniques against a frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102 to subvert the controls or monitoring of the frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102, outside of the context of an evaluation designed to elicit this behavior, in a manner that demonstrates materially increased catastrophic riskCatastrophic risk"Catastrophic risk." As follows: (1) A foreseeable and material risk that a frontier developer's development, storage, use or deployment of a frontier model will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property arising from a single incident involving a frontier model doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct without meaningful human oversight, intervention or supervision that: (A) is a cyberattack; or (B) if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developer or user. (2) The term does not include a foreseeable and material risk from any of the following: (i) Information that a frontier model outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation model. (ii) Lawful activity of the Federal Government. (iii) Harm caused by a frontier model in combination with other software if the frontier model did not materially contribute to the harm. (3) For purposes of this definition, the loss of equity shall not be considered as part of the damage to or loss of property.Section 102. "DeployDeploy"Deploy." As follows: (1) To make a frontier model available to a third party for use, modification, copying or combination with other software. (2) The term does not include to make a frontier model available to a third party for the primary purpose of researching, developing or evaluating the frontier model.Section 102." As follows: (1) To make a frontier modelFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102 available to a third party for use, modification, copying or combination with other software. (2) The term does not include to make a frontier modelFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102 available to a third party for the primary purpose of researching, developing or evaluating the frontier modelFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102. "Foundation modelFoundation model"Foundation model." An artificial intelligence system that is all of the following: (1) Trained on a broad data set. (2) Designed for generality of output. (3) Adaptable to a wide range of distinctive tasks.Section 102." An artificial intelligenceArtificial intelligence"Artificial intelligence" or "AI." As follows: (1) An automated system that produces text, audio, video, images, interactive responses or any other interaction on a digital platform that represents or simulates a user. (2) The term includes generative artificial intelligence.Section 102 system that is all of the following: (1) Trained on a broad data set. (2) Designed for generality of output. (3) Adaptable to a wide range of distinctive tasks. "Frontier AI frameworkFrontier AI framework"Frontier AI framework." Documented technical and organizational protocols to manage, assess and mitigate a catastrophic risk.Section 102." Documented technical and organizational protocols to manage, assess and mitigate a catastrophic riskCatastrophic risk"Catastrophic risk." As follows: (1) A foreseeable and material risk that a frontier developer's development, storage, use or deployment of a frontier model will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property arising from a single incident involving a frontier model doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct without meaningful human oversight, intervention or supervision that: (A) is a cyberattack; or (B) if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developer or user. (2) The term does not include a foreseeable and material risk from any of the following: (i) Information that a frontier model outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation model. (ii) Lawful activity of the Federal Government. (iii) Harm caused by a frontier model in combination with other software if the frontier model did not materially contribute to the harm. (3) For purposes of this definition, the loss of equity shall not be considered as part of the damage to or loss of property.Section 102. "Frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102." A person who trains, or initiates the training of, a frontier modelFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102 using computing power that meets the technical specifications specified in the definition of "frontier modelFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102." "Frontier modelFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102." As follows: (1) A foundation modelFoundation model"Foundation model." An artificial intelligence system that is all of the following: (1) Trained on a broad data set. (2) Designed for generality of output. (3) Adaptable to a wide range of distinctive tasks.Section 102 that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation modelFoundation model"Foundation model." An artificial intelligence system that is all of the following: (1) Trained on a broad data set. (2) Designed for generality of output. (3) Adaptable to a wide range of distinctive tasks.Section 102. "Generative artificial intelligenceGenerative artificial intelligence"Generative artificial intelligence." The class of models that emulates the structure and characteristics of input data in order to generate derived synthetic content.Section 102." The class of models that emulates the structure and characteristics of input data in order to generate derived synthetic contentSynthetic content"Synthetic content." As follows: (1) Information that has been significantly modified or generated by algorithms, including by artificial intelligence. (2) The term includes images, videos, audio clips and text.Section 102. "Large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102." A frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102 that, together with its affiliatesAffiliate"Affiliate." A person controlling, controlled by or under common control with a specified person, directly or indirectly, through one or more intermediaries.Section 102, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year. "Model weightModel weight"Model weight." A numerical parameter in a frontier model that is adjusted through training and that helps determine how inputs are transformed into outputs.Section 102." A numerical parameter in a frontier modelFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102 that is adjusted through training and that helps determine how inputs are transformed into outputs. "PropertyProperty"Property." A tangible or intangible asset.Section 102." A tangible or intangible asset. "Synthetic contentSynthetic content"Synthetic content." As follows: (1) Information that has been significantly modified or generated by algorithms, including by artificial intelligence. (2) The term includes images, videos, audio clips and text.Section 102." As follows: (1) Information that has been significantly modified or generated by algorithms, including by artificial intelligenceArtificial intelligence"Artificial intelligence" or "AI." As follows: (1) An automated system that produces text, audio, video, images, interactive responses or any other interaction on a digital platform that represents or simulates a user. (2) The term includes generative artificial intelligence.Section 102. (2) The term includes images, videos, audio clips and text.

(a)-(c) Development.--The agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102, in consultation with the Attorney General, shall develop a registration form to be used by a person who wishes to operate as a frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102 in this Commonwealth. (b) Posting.--The form under subsection (a) shall be posted on the publicly accessible Internet website of the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102. (c) Filing.--The agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 shall prescribe the form and manner to submit a completed registration form to the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102.

(a) 1 Disclosure required.--Beginning January 1, 2027, a large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 may not develop, deployDeploy"Deploy." As follows: (1) To make a frontier model available to a third party for use, modification, copying or combination with other software. (2) The term does not include to make a frontier model available to a third party for the primary purpose of researching, developing or evaluating the frontier model.Section 102 or operate a frontier modelFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102, in whole or in part, in this Commonwealth, without having first: (1) Filed a registration form in accordance with section 301. (2) Filed a current disclosure statement in accordance with this section. (3) Paid the required fee in accordance with section 303.

(b) 1 Contents.--The disclosure statement under this section must contain: (1) The name of the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 and all names under which the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 conducts business. (2) The address of the principal place of business and the address of each office that the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 maintains in this Commonwealth. (3) If the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 or the parent entity of the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 is a privately held or closely held company: (i) A list of all persons that beneficially own a 5% or greater interest in the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 at the time that the disclosure statement is filed. (ii) A list of all persons who formerly beneficially owned a 5% or greater interest in the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102, including each predecessor of the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102, in the preceding five years. (4) If the large frontier developer of the parent entity of the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 is a publicly traded company, a list of all persons that beneficially own a 50% or greater interest in the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 at the time that the disclosure statement is filed. (5) The name and contact information of a point of contact, secondary contact and tertiary contact for the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102, who shall be responsible for receiving inquiries relating to this act from the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 or other governmental entities. (6) Any other information deemed necessary by the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102.

(c) 1 Filing.-- (1) The agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 shall prescribe the form and manner to file the disclosure statement under this section. (2) A disclosure statement must be filed on an annual basis and must also be filed at the time that: (i) ownership of the frontier modelFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102 is transferred; or (ii) there is a material change to the information reported in the previously filed disclosure statement.

(a)-(c) Authorization.--The agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 shall charge and collect fees from large frontier developersLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 for the expenses of administering and enforcing this act. (b) Amount.--The agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 shall prescribe by regulation the annual fee for each large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102, which shall be collected at the time that the annual disclosure statement is filed. (c) Nonrefundability.--Except as otherwise provided in this act, fees under this section are nonrefundable.

(a)-(b) Maintenance.--The agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 shall maintain and update a list of large frontier developersLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 that have filed disclosure statements in accordance with section 302. (b) Posting.-- (1) Subject to paragraph (2), the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 shall post the most current list described in subsection (a) on the publicly accessible Internet website of the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102. (2) The list posted under paragraph (1) shall not include the information specified under section 302(b)(5).

(a) 2 Development.--Upon the effective date of this subsection, each large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 shall begin to develop a frontier AI frameworkFrontier AI framework"Frontier AI framework." Documented technical and organizational protocols to manage, assess and mitigate a catastrophic risk.Section 102 to govern how the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 will: (1) Incorporate national standards, international standards and industry-consensus best practices into the frontier AI frameworkFrontier AI framework"Frontier AI framework." Documented technical and organizational protocols to manage, assess and mitigate a catastrophic risk.Section 102. (2) Establish thresholds to assess whether a frontier modelFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102 has capabilities that could pose a catastrophic riskCatastrophic risk"Catastrophic risk." As follows: (1) A foreseeable and material risk that a frontier developer's development, storage, use or deployment of a frontier model will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property arising from a single incident involving a frontier model doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct without meaningful human oversight, intervention or supervision that: (A) is a cyberattack; or (B) if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developer or user. (2) The term does not include a foreseeable and material risk from any of the following: (i) Information that a frontier model outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation model. (ii) Lawful activity of the Federal Government. (iii) Harm caused by a frontier model in combination with other software if the frontier model did not materially contribute to the harm. (3) For purposes of this definition, the loss of equity shall not be considered as part of the damage to or loss of property.Section 102, which may include multiple-tiered thresholds. (3) Apply a mitigation to address the potential for catastrophic risksCatastrophic risk"Catastrophic risk." As follows: (1) A foreseeable and material risk that a frontier developer's development, storage, use or deployment of a frontier model will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property arising from a single incident involving a frontier model doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct without meaningful human oversight, intervention or supervision that: (A) is a cyberattack; or (B) if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developer or user. (2) The term does not include a foreseeable and material risk from any of the following: (i) Information that a frontier model outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation model. (ii) Lawful activity of the Federal Government. (iii) Harm caused by a frontier model in combination with other software if the frontier model did not materially contribute to the harm. (3) For purposes of this definition, the loss of equity shall not be considered as part of the damage to or loss of property.Section 102 based on the results of an assessment undertaken in accordance with paragraph (2). (4) Review an assessment and the adequacy of a mitigation as part of the decision to deployDeploy"Deploy." As follows: (1) To make a frontier model available to a third party for use, modification, copying or combination with other software. (2) The term does not include to make a frontier model available to a third party for the primary purpose of researching, developing or evaluating the frontier model.Section 102 or extensively and internally use a frontier modelFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102. (5) Use a third party to assess the potential for a catastrophic riskCatastrophic risk"Catastrophic risk." As follows: (1) A foreseeable and material risk that a frontier developer's development, storage, use or deployment of a frontier model will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property arising from a single incident involving a frontier model doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct without meaningful human oversight, intervention or supervision that: (A) is a cyberattack; or (B) if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developer or user. (2) The term does not include a foreseeable and material risk from any of the following: (i) Information that a frontier model outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation model. (ii) Lawful activity of the Federal Government. (iii) Harm caused by a frontier model in combination with other software if the frontier model did not materially contribute to the harm. (3) For purposes of this definition, the loss of equity shall not be considered as part of the damage to or loss of property.Section 102 and the effectiveness of a mitigation of a catastrophic riskCatastrophic risk"Catastrophic risk." As follows: (1) A foreseeable and material risk that a frontier developer's development, storage, use or deployment of a frontier model will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property arising from a single incident involving a frontier model doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct without meaningful human oversight, intervention or supervision that: (A) is a cyberattack; or (B) if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developer or user. (2) The term does not include a foreseeable and material risk from any of the following: (i) Information that a frontier model outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation model. (ii) Lawful activity of the Federal Government. (iii) Harm caused by a frontier model in combination with other software if the frontier model did not materially contribute to the harm. (3) For purposes of this definition, the loss of equity shall not be considered as part of the damage to or loss of property.Section 102. (6) Revisit and update the frontier AI frameworkFrontier AI framework"Frontier AI framework." Documented technical and organizational protocols to manage, assess and mitigate a catastrophic risk.Section 102, including any criteria that trigger updates and how the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 determines when its frontier modelsFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102 are substantially modified enough to require disclosures in accordance with section 302. (7) Use cybersecurity practices to secure unreleased model weightsModel weight"Model weight." A numerical parameter in a frontier model that is adjusted through training and that helps determine how inputs are transformed into outputs.Section 102 from unauthorized modification or transfer by internal or external parties. (8) Identify and respond to critical safety incidentsCritical safety incident"Critical safety incident." Any of the following: (1) Unauthorized access to, modification of or exfiltration of the model weights of a frontier model that results in death or bodily injury. (2) Harm resulting from the materialization of a catastrophic risk. (3) Loss of control of a frontier model causing death or bodily injury. (4) The use by a frontier model of deceptive techniques against a frontier developer to subvert the controls or monitoring of the frontier developer, outside of the context of an evaluation designed to elicit this behavior, in a manner that demonstrates materially increased catastrophic risk.Section 102. (9) Institute internal governance practices to ensure implementation of the processes enumerated under this subsection. (10) Assess and manage a catastrophic riskCatastrophic risk"Catastrophic risk." As follows: (1) A foreseeable and material risk that a frontier developer's development, storage, use or deployment of a frontier model will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property arising from a single incident involving a frontier model doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct without meaningful human oversight, intervention or supervision that: (A) is a cyberattack; or (B) if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developer or user. (2) The term does not include a foreseeable and material risk from any of the following: (i) Information that a frontier model outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation model. (ii) Lawful activity of the Federal Government. (iii) Harm caused by a frontier model in combination with other software if the frontier model did not materially contribute to the harm. (3) For purposes of this definition, the loss of equity shall not be considered as part of the damage to or loss of property.Section 102 resulting from the internal use of the frontier modelsFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102, including a risk resulting from a frontier modelFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102 circumventing an oversight mechanism.

(b)-(d) 2 Implementation.--Beginning January 1, 2028, each large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 shall implement the frontier AI frameworkFrontier AI framework"Frontier AI framework." Documented technical and organizational protocols to manage, assess and mitigate a catastrophic risk.Section 102 developed under subsection (a). (c) Notice.--Upon implementation of the frontier AI frameworkFrontier AI framework"Frontier AI framework." Documented technical and organizational protocols to manage, assess and mitigate a catastrophic risk.Section 102 developed under subsection (a), the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 shall clearly and conspicuously publish the frontier AI frameworkFrontier AI framework"Frontier AI framework." Documented technical and organizational protocols to manage, assess and mitigate a catastrophic risk.Section 102 on its publicly accessible Internet website. (d) Compliance.--Each large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 shall comply with the frontier AI frameworkFrontier AI framework"Frontier AI framework." Documented technical and organizational protocols to manage, assess and mitigate a catastrophic risk.Section 102 that the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 implemented in accordance with this section.

(e) 2 Update.-- (1) At least once each year, a large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 shall review and, as appropriate, update its frontier AI frameworkFrontier AI framework"Frontier AI framework." Documented technical and organizational protocols to manage, assess and mitigate a catastrophic risk.Section 102. (2) If a large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 makes a material modification to its frontier AI frameworkFrontier AI framework"Frontier AI framework." Documented technical and organizational protocols to manage, assess and mitigate a catastrophic risk.Section 102, the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 shall, within 30 days of the modification, clearly and conspicuously publish on its publicly accessible Internet website the modified frontier AI frameworkFrontier AI framework"Frontier AI framework." Documented technical and organizational protocols to manage, assess and mitigate a catastrophic risk.Section 102 and a justification for the modification.

(a) 3 Report requirements for all frontier developersFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102.--Subject to subsection (b), before, or concurrently with, deploying a new frontier modelFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102 or a substantially modified version of an existing frontier modelFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102, a frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102 shall clearly and conspicuously publish on its publicly accessible Internet website a transparency report containing all of the following: (1) The website of the frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102. (2) A mechanism that enables an individual to communicate with the frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102. (3) The release date of the frontier modelFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102. (4) The language supported by the frontier modelFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102. (5) The modalities of output supported by the frontier modelFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102. (6) The intended uses of the frontier modelFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102. (7) Any generally applicable restrictions or conditions on uses of the frontier modelFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102.

(b)-(c) 4 Additional report requirements for large frontier developersLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102.--In addition to the required contents enumerated under subsection (a), the transparency report of a large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 shall include summaries of all of the following: (1) Each assessment of catastrophic riskCatastrophic risk"Catastrophic risk." As follows: (1) A foreseeable and material risk that a frontier developer's development, storage, use or deployment of a frontier model will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property arising from a single incident involving a frontier model doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct without meaningful human oversight, intervention or supervision that: (A) is a cyberattack; or (B) if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developer or user. (2) The term does not include a foreseeable and material risk from any of the following: (i) Information that a frontier model outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation model. (ii) Lawful activity of the Federal Government. (iii) Harm caused by a frontier model in combination with other software if the frontier model did not materially contribute to the harm. (3) For purposes of this definition, the loss of equity shall not be considered as part of the damage to or loss of property.Section 102 from the frontier modelFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102 conducted pursuant to the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102's frontier AI frameworkFrontier AI framework"Frontier AI framework." Documented technical and organizational protocols to manage, assess and mitigate a catastrophic risk.Section 102. (2) The results of each assessment under paragraph (1). (3) The extent to which a third-party evaluator was involved in each assessment. (4) Other steps taken to fulfill the requirements of the frontier AI frameworkFrontier AI framework"Frontier AI framework." Documented technical and organizational protocols to manage, assess and mitigate a catastrophic risk.Section 102 with respect to the frontier modelFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102. (c) Summaries.--Each summary required under subsection (b) shall be provided in a machine-readable format to facilitate verification of model claims.

(d)-(e) Compliance.--A frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102 that publishes the information required under subsection (a) or (b) as part of a larger document, including a system card or model card, shall be deemed in compliance with this section. (e) Best practices.--A frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102 is encouraged, but not required, to make disclosures described in this section that are consistent with, or superior to, industry best practices.

5 Beginning on January 1, 2028, or 90 days after a developer first qualifies as a large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102, whichever is later, a large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 shall annually retain a third party to perform an independent audit of compliance with the requirements of this act.

6 A third party: (1) Shall conduct an auditAudit"Audit." An audit required under Chapter 7.Section 102 consistent with generally accepted auditing standards and best practices. (2) Must possess demonstrated competence to perform an auditAudit"Audit." An audit required under Chapter 7.Section 102, including experience employing or contracting with individuals who possess technical expertise in the safety of frontier modelsFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102.

7 A large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 may not retain a third party to perform an auditAudit"Audit." An audit required under Chapter 7.Section 102 if the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 has a financial interest in the third party or the third party has a financial interest in the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102.

8 A large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 may compensate a third party for services associated with performing an auditAudit"Audit." An audit required under Chapter 7.Section 102 but may not condition payment, or the amount of payment, for services on the results of the third party's auditAudit"Audit." An audit required under Chapter 7.Section 102.

(a)-(b) 9 General rule.--Except as provided in subsection (b), a third party shall be granted access to all materials reasonably necessary to comply with the third party's obligations to perform an auditAudit"Audit." An audit required under Chapter 7.Section 102, including all unredacted versions of materials published in accordance with this act. (b) Exception.-- (1) A large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 may impose security protocols on a third party that performs an auditAudit"Audit." An audit required under Chapter 7.Section 102, in order to: (i) protect the trade secrets, confidential business information or cybersecurity of the frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102; (ii) protect public safety or the national security of the United States; or (iii) comply with Federal or State law. (2) The security protocols under paragraph (1) include: (i) Restrictions on note taking, copying, retaining or removing materials. (ii) Requirements for on-premise review. (iii) Confidentiality requirements.

(a) 10 Preparation.--A third party shall prepare a report on the third party's auditAudit"Audit." An audit required under Chapter 7.Section 102, which includes all of the following: (1) A description of whether the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 has substantially complied with the requirements of this act. (2) If a material deviation from the requirements of this section has been made: (i) A description of material deviation. (ii) An explanation of and rationale for the material deviation. (iii) Any recommendation for how the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 can improve its policies and processes for ensuring compliance with the requirements of this section. (3) A detailed assessment of the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102's internal controls, including the designation and empowerment of senior personnel responsible for the implementation of the internal controls by the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102, its employees and its contractors. (4) A list of the personnel involved in the auditAudit"Audit." An audit required under Chapter 7.Section 102. (5) The third party's procedures for managing conflicts of interest, including any conflicts of interest of any personnel involved in the auditAudit"Audit." An audit required under Chapter 7.Section 102. (6) The methodology of the auditAudit"Audit." An audit required under Chapter 7.Section 102 and the nature of the information reviewed by the third party to conduct the auditAudit"Audit." An audit required under Chapter 7.Section 102. (7) The signature of the lead auditor certifying the results of the auditAudit"Audit." An audit required under Chapter 7.Section 102.

(b) 10 Retention.--A large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 shall retain an unredacted copy of each auditAudit"Audit." An audit required under Chapter 7.Section 102 report under this chapter for as long as a frontier modelFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102 is deployed plus five years.

11 No later than 30 days after receiving an auditAudit"Audit." An audit required under Chapter 7.Section 102 report from the third party that performed the auditAudit"Audit." An audit required under Chapter 7.Section 102, the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 shall: (1) Clearly and conspicuously publish on its publicly accessible Internet website a high-level summary of the findings contained in the auditAudit"Audit." An audit required under Chapter 7.Section 102 report and a copy of the auditAudit"Audit." An audit required under Chapter 7.Section 102 report with appropriate redactions. (2) Transmit a copy of the redacted auditAudit"Audit." An audit required under Chapter 7.Section 102 report to the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 and the Attorney General.

12 Upon request, a large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 shall grant the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 and the Attorney General access to an auditAudit"Audit." An audit required under Chapter 7.Section 102 report of the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102, with redactions as permitted under section 709.

(a)-(b) 13 Purposes.--When a frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102 publishes a document to comply with this chapter, the frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102 may make redactions to the document that are necessary for the purposes enumerated under section 705(b). (b) If a frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102 redacts information in a document in accordance with subsection (a), the frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102 shall: (1) Describe the character and justification of the redaction in any published version of the document to the extent permitted by the concerns that justify redaction. (2) Retain the unredacted information for at least five years.

(a)-(b) Establishment.--The agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102, in consultation with the Attorney General, shall establish a mechanism to be used by a frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102 or a member of the public to report a critical safety incidentCritical safety incident"Critical safety incident." Any of the following: (1) Unauthorized access to, modification of or exfiltration of the model weights of a frontier model that results in death or bodily injury. (2) Harm resulting from the materialization of a catastrophic risk. (3) Loss of control of a frontier model causing death or bodily injury. (4) The use by a frontier model of deceptive techniques against a frontier developer to subvert the controls or monitoring of the frontier developer, outside of the context of an evaluation designed to elicit this behavior, in a manner that demonstrates materially increased catastrophic risk.Section 102. (b) Information.--The mechanism described in subsection (a) must include the ability to provide the following information: (1) The date of the critical safety incidentCritical safety incident"Critical safety incident." Any of the following: (1) Unauthorized access to, modification of or exfiltration of the model weights of a frontier model that results in death or bodily injury. (2) Harm resulting from the materialization of a catastrophic risk. (3) Loss of control of a frontier model causing death or bodily injury. (4) The use by a frontier model of deceptive techniques against a frontier developer to subvert the controls or monitoring of the frontier developer, outside of the context of an evaluation designed to elicit this behavior, in a manner that demonstrates materially increased catastrophic risk.Section 102. (2) The reasons that the incident qualifies as a critical safety incidentCritical safety incident"Critical safety incident." Any of the following: (1) Unauthorized access to, modification of or exfiltration of the model weights of a frontier model that results in death or bodily injury. (2) Harm resulting from the materialization of a catastrophic risk. (3) Loss of control of a frontier model causing death or bodily injury. (4) The use by a frontier model of deceptive techniques against a frontier developer to subvert the controls or monitoring of the frontier developer, outside of the context of an evaluation designed to elicit this behavior, in a manner that demonstrates materially increased catastrophic risk.Section 102. (3) A short and plain statement describing the critical safety incidentCritical safety incident"Critical safety incident." Any of the following: (1) Unauthorized access to, modification of or exfiltration of the model weights of a frontier model that results in death or bodily injury. (2) Harm resulting from the materialization of a catastrophic risk. (3) Loss of control of a frontier model causing death or bodily injury. (4) The use by a frontier model of deceptive techniques against a frontier developer to subvert the controls or monitoring of the frontier developer, outside of the context of an evaluation designed to elicit this behavior, in a manner that demonstrates materially increased catastrophic risk.Section 102. (4) Whether the critical safety incidentCritical safety incident"Critical safety incident." Any of the following: (1) Unauthorized access to, modification of or exfiltration of the model weights of a frontier model that results in death or bodily injury. (2) Harm resulting from the materialization of a catastrophic risk. (3) Loss of control of a frontier model causing death or bodily injury. (4) The use by a frontier model of deceptive techniques against a frontier developer to subvert the controls or monitoring of the frontier developer, outside of the context of an evaluation designed to elicit this behavior, in a manner that demonstrates materially increased catastrophic risk.Section 102 was associated with internal use of a frontier modelFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102.

(a)-(b) 14 Duty to report.--Subject to subsection (c), within 72 hours of the frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102 learning facts sufficient to establish a reasonable belief that a critical safety incidentCritical safety incident"Critical safety incident." Any of the following: (1) Unauthorized access to, modification of or exfiltration of the model weights of a frontier model that results in death or bodily injury. (2) Harm resulting from the materialization of a catastrophic risk. (3) Loss of control of a frontier model causing death or bodily injury. (4) The use by a frontier model of deceptive techniques against a frontier developer to subvert the controls or monitoring of the frontier developer, outside of the context of an evaluation designed to elicit this behavior, in a manner that demonstrates materially increased catastrophic risk.Section 102 has occurred pertaining to a frontier model of the frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102, the frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102 shall report the critical safety incidentCritical safety incident"Critical safety incident." Any of the following: (1) Unauthorized access to, modification of or exfiltration of the model weights of a frontier model that results in death or bodily injury. (2) Harm resulting from the materialization of a catastrophic risk. (3) Loss of control of a frontier model causing death or bodily injury. (4) The use by a frontier model of deceptive techniques against a frontier developer to subvert the controls or monitoring of the frontier developer, outside of the context of an evaluation designed to elicit this behavior, in a manner that demonstrates materially increased catastrophic risk.Section 102 to the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 and the Attorney General. (b) Disclosure of information.--As part of the reporting under subsection (a), a frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102 shall disclose the information enumerated under section 901(b).

(c) 14 Imminent risk of death or serious physical injury.--If a frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102 discovers that a critical safety incidentCritical safety incident"Critical safety incident." Any of the following: (1) Unauthorized access to, modification of or exfiltration of the model weights of a frontier model that results in death or bodily injury. (2) Harm resulting from the materialization of a catastrophic risk. (3) Loss of control of a frontier model causing death or bodily injury. (4) The use by a frontier model of deceptive techniques against a frontier developer to subvert the controls or monitoring of the frontier developer, outside of the context of an evaluation designed to elicit this behavior, in a manner that demonstrates materially increased catastrophic risk.Section 102 poses an imminent risk of death or serious physical injury, the frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102 shall disclose the critical safety incidentCritical safety incident"Critical safety incident." Any of the following: (1) Unauthorized access to, modification of or exfiltration of the model weights of a frontier model that results in death or bodily injury. (2) Harm resulting from the materialization of a catastrophic risk. (3) Loss of control of a frontier model causing death or bodily injury. (4) The use by a frontier model of deceptive techniques against a frontier developer to subvert the controls or monitoring of the frontier developer, outside of the context of an evaluation designed to elicit this behavior, in a manner that demonstrates materially increased catastrophic risk.Section 102 within 24 hours to an appropriate authority, including a law enforcement agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 or public safety agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 with jurisdiction, based on the nature of the critical safety incidentCritical safety incident"Critical safety incident." Any of the following: (1) Unauthorized access to, modification of or exfiltration of the model weights of a frontier model that results in death or bodily injury. (2) Harm resulting from the materialization of a catastrophic risk. (3) Loss of control of a frontier model causing death or bodily injury. (4) The use by a frontier model of deceptive techniques against a frontier developer to subvert the controls or monitoring of the frontier developer, outside of the context of an evaluation designed to elicit this behavior, in a manner that demonstrates materially increased catastrophic risk.Section 102 and as required by law.

(d)-(e) 14 Amended reports.--A frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102 that discovers information about a critical safety incidentCritical safety incident"Critical safety incident." Any of the following: (1) Unauthorized access to, modification of or exfiltration of the model weights of a frontier model that results in death or bodily injury. (2) Harm resulting from the materialization of a catastrophic risk. (3) Loss of control of a frontier model causing death or bodily injury. (4) The use by a frontier model of deceptive techniques against a frontier developer to subvert the controls or monitoring of the frontier developer, outside of the context of an evaluation designed to elicit this behavior, in a manner that demonstrates materially increased catastrophic risk.Section 102 after filing the initial report required under this section may file an amended report. (e) Discretion to report.--A frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102 is encouraged, but not required, to report critical safety incidentsCritical safety incident"Critical safety incident." Any of the following: (1) Unauthorized access to, modification of or exfiltration of the model weights of a frontier model that results in death or bodily injury. (2) Harm resulting from the materialization of a catastrophic risk. (3) Loss of control of a frontier model causing death or bodily injury. (4) The use by a frontier model of deceptive techniques against a frontier developer to subvert the controls or monitoring of the frontier developer, outside of the context of an evaluation designed to elicit this behavior, in a manner that demonstrates materially increased catastrophic risk.Section 102 pertaining to foundation modelsFoundation model"Foundation model." An artificial intelligence system that is all of the following: (1) Trained on a broad data set. (2) Designed for generality of output. (3) Adaptable to a wide range of distinctive tasks.Section 102 that are not frontier modelsFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102.

The agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 and the Attorney General: (1) Shall review critical safety incidentCritical safety incident"Critical safety incident." Any of the following: (1) Unauthorized access to, modification of or exfiltration of the model weights of a frontier model that results in death or bodily injury. (2) Harm resulting from the materialization of a catastrophic risk. (3) Loss of control of a frontier model causing death or bodily injury. (4) The use by a frontier model of deceptive techniques against a frontier developer to subvert the controls or monitoring of the frontier developer, outside of the context of an evaluation designed to elicit this behavior, in a manner that demonstrates materially increased catastrophic risk.Section 102 reports submitted by frontier developersFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102. (2) May review critical safety incidentCritical safety incident"Critical safety incident." Any of the following: (1) Unauthorized access to, modification of or exfiltration of the model weights of a frontier model that results in death or bodily injury. (2) Harm resulting from the materialization of a catastrophic risk. (3) Loss of control of a frontier model causing death or bodily injury. (4) The use by a frontier model of deceptive techniques against a frontier developer to subvert the controls or monitoring of the frontier developer, outside of the context of an evaluation designed to elicit this behavior, in a manner that demonstrates materially increased catastrophic risk.Section 102 reports submitted by members of the public.

(a)-(b) Authorization.--The agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 or the Attorney General may transmit reports of critical safety incidentsCritical safety incident"Critical safety incident." Any of the following: (1) Unauthorized access to, modification of or exfiltration of the model weights of a frontier model that results in death or bodily injury. (2) Harm resulting from the materialization of a catastrophic risk. (3) Loss of control of a frontier model causing death or bodily injury. (4) The use by a frontier model of deceptive techniques against a frontier developer to subvert the controls or monitoring of the frontier developer, outside of the context of an evaluation designed to elicit this behavior, in a manner that demonstrates materially increased catastrophic risk.Section 102 to any of the following: (1) The Federal Government. (2) The Governor. (3) An appropriate State agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102. (4) The General Assembly. (b) Considerations.--When transmitting a report in accordance with subsection (a), the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 and the Attorney General shall strongly consider the risks related to the following: (1) Trade secrets, confidential business information or cybersecurity of the frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102. (2) Public safety or the national security of the United States. (3) Noncompliance with Federal or State law.

The agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 and the Attorney General shall take all necessary precautions to protect information reported under this chapter or related to the internal use of a frontier modelFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102 by: (1) limiting access to only personnel with a specific need to know the information; and (2) preventing unauthorized access to the information.

The agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102, in consultation with the Attorney General, shall establish a mechanism to be used by a large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 to confidentially submit a summary of an assessment of the potential for a catastrophic riskCatastrophic risk"Catastrophic risk." As follows: (1) A foreseeable and material risk that a frontier developer's development, storage, use or deployment of a frontier model will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property arising from a single incident involving a frontier model doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct without meaningful human oversight, intervention or supervision that: (A) is a cyberattack; or (B) if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developer or user. (2) The term does not include a foreseeable and material risk from any of the following: (i) Information that a frontier model outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation model. (ii) Lawful activity of the Federal Government. (iii) Harm caused by a frontier model in combination with other software if the frontier model did not materially contribute to the harm. (3) For purposes of this definition, the loss of equity shall not be considered as part of the damage to or loss of property.Section 102 resulting from internal use of a frontier model of the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102.

15 A large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 shall transmit to the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 each summary of an assessment of catastrophic riskCatastrophic risk"Catastrophic risk." As follows: (1) A foreseeable and material risk that a frontier developer's development, storage, use or deployment of a frontier model will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property arising from a single incident involving a frontier model doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct without meaningful human oversight, intervention or supervision that: (A) is a cyberattack; or (B) if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developer or user. (2) The term does not include a foreseeable and material risk from any of the following: (i) Information that a frontier model outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation model. (ii) Lawful activity of the Federal Government. (iii) Harm caused by a frontier model in combination with other software if the frontier model did not materially contribute to the harm. (3) For purposes of this definition, the loss of equity shall not be considered as part of the damage to or loss of property.Section 102 resulting from internal use of the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102's frontier modelsFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102 every three months or pursuant to another reasonable schedule specified by the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 and communicated in writing to the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 and the Attorney General with written updates, as appropriate and agreed upon by the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102.

(a)-(c) 16 Catastrophic riskCatastrophic risk"Catastrophic risk." As follows: (1) A foreseeable and material risk that a frontier developer's development, storage, use or deployment of a frontier model will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property arising from a single incident involving a frontier model doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct without meaningful human oversight, intervention or supervision that: (A) is a cyberattack; or (B) if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developer or user. (2) The term does not include a foreseeable and material risk from any of the following: (i) Information that a frontier model outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation model. (ii) Lawful activity of the Federal Government. (iii) Harm caused by a frontier model in combination with other software if the frontier model did not materially contribute to the harm. (3) For purposes of this definition, the loss of equity shall not be considered as part of the damage to or loss of property.Section 102.--A frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102 may not make a materially false or misleading statement about catastrophic riskCatastrophic risk"Catastrophic risk." As follows: (1) A foreseeable and material risk that a frontier developer's development, storage, use or deployment of a frontier model will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property arising from a single incident involving a frontier model doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct without meaningful human oversight, intervention or supervision that: (A) is a cyberattack; or (B) if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developer or user. (2) The term does not include a foreseeable and material risk from any of the following: (i) Information that a frontier model outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation model. (ii) Lawful activity of the Federal Government. (iii) Harm caused by a frontier model in combination with other software if the frontier model did not materially contribute to the harm. (3) For purposes of this definition, the loss of equity shall not be considered as part of the damage to or loss of property.Section 102 from its frontier modelsFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102 or its management of catastrophic riskCatastrophic risk"Catastrophic risk." As follows: (1) A foreseeable and material risk that a frontier developer's development, storage, use or deployment of a frontier model will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property arising from a single incident involving a frontier model doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct without meaningful human oversight, intervention or supervision that: (A) is a cyberattack; or (B) if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developer or user. (2) The term does not include a foreseeable and material risk from any of the following: (i) Information that a frontier model outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation model. (ii) Lawful activity of the Federal Government. (iii) Harm caused by a frontier model in combination with other software if the frontier model did not materially contribute to the harm. (3) For purposes of this definition, the loss of equity shall not be considered as part of the damage to or loss of property.Section 102. (b) Frontier AI frameworkFrontier AI framework"Frontier AI framework." Documented technical and organizational protocols to manage, assess and mitigate a catastrophic risk.Section 102.--A large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 may not make a materially false or misleading statement about its implementation of, or compliance with, its frontier AI frameworkFrontier AI framework"Frontier AI framework." Documented technical and organizational protocols to manage, assess and mitigate a catastrophic risk.Section 102. (c) Applicability.--This subsection does not apply to a statement that was made in good faith and was reasonable under the circumstances.

The agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102, in consultation with the Attorney General, shall enforce this act.

(a) 17 Disclosure of information.--If a covered employee of a frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102 has reasonable cause to believe that the activities of the frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102 pose a specific and substantial danger to the public health or safety resulting from a catastrophic riskCatastrophic risk"Catastrophic risk." As follows: (1) A foreseeable and material risk that a frontier developer's development, storage, use or deployment of a frontier model will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property arising from a single incident involving a frontier model doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct without meaningful human oversight, intervention or supervision that: (A) is a cyberattack; or (B) if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developer or user. (2) The term does not include a foreseeable and material risk from any of the following: (i) Information that a frontier model outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation model. (ii) Lawful activity of the Federal Government. (iii) Harm caused by a frontier model in combination with other software if the frontier model did not materially contribute to the harm. (3) For purposes of this definition, the loss of equity shall not be considered as part of the damage to or loss of property.Section 102 or that the frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102 has violated this act, the covered employeeCovered employee"Covered employee." An employee responsible for assessing, managing or addressing the risk of a critical safety incident.Section 102 may disclose the information to any of the following: (1) The agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102. (2) The Attorney General. (3) An appropriate Federal authority. (4) A person with authority over the covered employeeCovered employee"Covered employee." An employee responsible for assessing, managing or addressing the risk of a critical safety incident.Section 102. (5) Another covered employeeCovered employee"Covered employee." An employee responsible for assessing, managing or addressing the risk of a critical safety incident.Section 102 who has authority to investigate and take steps to mitigate the circumstances that are the subject of the disclosed information.

(b) 17 Internal process.-- (1) A large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 shall provide: (i) A reasonable internal process through which a covered employeeCovered employee"Covered employee." An employee responsible for assessing, managing or addressing the risk of a critical safety incident.Section 102 may anonymously or otherwise disclose information to the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 if the covered employeeCovered employee"Covered employee." An employee responsible for assessing, managing or addressing the risk of a critical safety incident.Section 102 has reasonable cause to believe that the activities of the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 pose a specific and substantial danger to the public health or safety resulting from a catastrophic riskCatastrophic risk"Catastrophic risk." As follows: (1) A foreseeable and material risk that a frontier developer's development, storage, use or deployment of a frontier model will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property arising from a single incident involving a frontier model doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct without meaningful human oversight, intervention or supervision that: (A) is a cyberattack; or (B) if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developer or user. (2) The term does not include a foreseeable and material risk from any of the following: (i) Information that a frontier model outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation model. (ii) Lawful activity of the Federal Government. (iii) Harm caused by a frontier model in combination with other software if the frontier model did not materially contribute to the harm. (3) For purposes of this definition, the loss of equity shall not be considered as part of the damage to or loss of property.Section 102 or that the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 has violated this act. (ii) A monthly update to the covered employeeCovered employee"Covered employee." An employee responsible for assessing, managing or addressing the risk of a critical safety incident.Section 102 who made the disclosure under subparagraph (i), if known, regarding the status of the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102's investigation of the disclosure and the actions taken by the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 in response to the disclosure. (2) Except as provided in paragraph (3), each disclosure and response under paragraph (1) shall be shared with officers and directors of the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 at least once on a quarterly basis. (3) If a covered employeeCovered employee"Covered employee." An employee responsible for assessing, managing or addressing the risk of a critical safety incident.Section 102 has alleged wrongdoing by an officer or director of the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 in a disclosure or response under paragraph (1), paragraph (2) shall not apply with respect to that officer or director.

(c) 18 Prohibitions.--A frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102 may not: (1) Make, adopt, enforce or enter into a rule, regulation, policy or contract that prevents a covered employeeCovered employee"Covered employee." An employee responsible for assessing, managing or addressing the risk of a critical safety incident.Section 102 from making a disclosure in accordance with subsection (a). (2) Retaliate against a covered employeeCovered employee"Covered employee." An employee responsible for assessing, managing or addressing the risk of a critical safety incident.Section 102 for making a disclosure in accordance with subsection (a).

(d) 19 Notice of rights.--A frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102 shall provide a clear notice to all covered employees of the frontier developer of their rights and responsibilities under this section by one of the following methods: (1) Displaying the notice at all times in a conspicuous location or manner at the workplace of the frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102 and ensuring that: (i) Each new covered employeeCovered employee"Covered employee." An employee responsible for assessing, managing or addressing the risk of a critical safety incident.Section 102 receives an equivalent notice. (ii) Each covered employeeCovered employee"Covered employee." An employee responsible for assessing, managing or addressing the risk of a critical safety incident.Section 102 who works remotely periodically receives an equivalent notice. (2) At least once each year, providing the notice in writing to each covered employeeCovered employee"Covered employee." An employee responsible for assessing, managing or addressing the risk of a critical safety incident.Section 102 and ensuring that each covered employeeCovered employee"Covered employee." An employee responsible for assessing, managing or addressing the risk of a critical safety incident.Section 102 acknowledges receipt of the notice.

(e) Whistleblower Law.--This section does not impair or limit the applicability of the act of December 12, 1986 (P.L.1559, No.169), known as the Whistleblower Law, including the rights of employees who are not covered employeesCovered employee"Covered employee." An employee responsible for assessing, managing or addressing the risk of a critical safety incident.Section 102.

(a)-(b) Compliance generally.--Subject to subsection (b), a person commits a violation of this act if the person: (1) Develops, deploysDeploy"Deploy." As follows: (1) To make a frontier model available to a third party for use, modification, copying or combination with other software. (2) The term does not include to make a frontier model available to a third party for the primary purpose of researching, developing or evaluating the frontier model.Section 102 or operates a frontier modelFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102 in this Commonwealth without having met all of the requirements under this act. (2) Submits materially false or misleading information in any disclosure, report or assessment under this act. (3) Fails to otherwise comply with this act. (b) Large frontier developersLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102.--A large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 commits a violation of this act if the large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102: (1) Fails to publish or transmit a compliant document required to be published or transmitted under this act. (2) Fails to comply with its own frontier AI frameworkFrontier AI framework"Frontier AI framework." Documented technical and organizational protocols to manage, assess and mitigate a catastrophic risk.Section 102. (3) Fails to have a third party perform an independent auditAudit"Audit." An audit required under Chapter 7.Section 102 in accordance with Chapter 7. (4) Fails to report a critical safety incidentCritical safety incident"Critical safety incident." Any of the following: (1) Unauthorized access to, modification of or exfiltration of the model weights of a frontier model that results in death or bodily injury. (2) Harm resulting from the materialization of a catastrophic risk. (3) Loss of control of a frontier model causing death or bodily injury. (4) The use by a frontier model of deceptive techniques against a frontier developer to subvert the controls or monitoring of the frontier developer, outside of the context of an evaluation designed to elicit this behavior, in a manner that demonstrates materially increased catastrophic risk.Section 102 in accordance with Chapter 9. (5) Makes a materially false or misleading statement under section 1103.

(a)-(e) Civil penalties, fees and costs.--In addition to any other penalty or liability that may be imposed under this act and other State law: (1) A person that commits a violation described under section 1303(a) shall be subject to the following enforcement actions by the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102, after notice and hearing: (i) The payment of a civil penalty not exceeding $1,000 for each day that the person is in violation of this act. (ii) Fees and other costs incurred by the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 as a result of the violation by the person. (2) A large frontier developerLarge frontier developer"Large frontier developer." A frontier developer that, together with its affiliates, collectively had annual gross revenues in excess of $500,000,000 in the preceding calendar year.Section 102 that commits a violation described under section 1303(b) shall be subject to: (i) A civil penalty in an amount dependent upon the severity of the violation that does not exceed: (A) $1,000,000 per violation for the first violation. (B) $3,000,000 per violation for a subsequent violation. (ii) (Reserved). (b) Injunctive relief.--In addition to the penalties under subsection (a), the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 may seek injunctive relief against the person violating this act in a court of competent jurisdiction. (c) Civil action.--A civil penalty described under subsection (a) shall be recovered in a civil action brought exclusively by the Attorney General. (d) Deposit of civil penalties.--Any civil penalties collected from the enforcement of this act shall be deposited into the General Fund. (e) Private right of action precluded.--Nothing in this act shall be construed to establish a private right of action associated with violations of this act.

The following records are exempt from access under the act of February 14, 2008 (P.L.6, No.3), known as the Right-to-Know Law: (1) Any unredacted version of an auditAudit"Audit." An audit required under Chapter 7.Section 102 report under Chapter 7 in the possession of the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 or the Attorney General. (2) Any materials, work papers, notes or derivative documents prepared by a third party in connection with an auditAudit"Audit." An audit required under Chapter 7.Section 102 under Chapter 7, to the extent that the materials come into possession of the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 or the Attorney General. (3) Reports of a critical safety incidentCritical safety incident"Critical safety incident." Any of the following: (1) Unauthorized access to, modification of or exfiltration of the model weights of a frontier model that results in death or bodily injury. (2) Harm resulting from the materialization of a catastrophic risk. (3) Loss of control of a frontier model causing death or bodily injury. (4) The use by a frontier model of deceptive techniques against a frontier developer to subvert the controls or monitoring of the frontier developer, outside of the context of an evaluation designed to elicit this behavior, in a manner that demonstrates materially increased catastrophic risk.Section 102 under Chapter 9 submitted to the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 or the Attorney General. (4) Reports of an assessment of catastrophic riskCatastrophic risk"Catastrophic risk." As follows: (1) A foreseeable and material risk that a frontier developer's development, storage, use or deployment of a frontier model will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property arising from a single incident involving a frontier model doing any of the following: (i) Providing expert-level assistance in the creation or release of a chemical, biological, radiological or nuclear weapon. (ii) Engaging in conduct without meaningful human oversight, intervention or supervision that: (A) is a cyberattack; or (B) if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion or theft, including theft by false pretense. (iii) Evading the control of its frontier developer or user. (2) The term does not include a foreseeable and material risk from any of the following: (i) Information that a frontier model outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation model. (ii) Lawful activity of the Federal Government. (iii) Harm caused by a frontier model in combination with other software if the frontier model did not materially contribute to the harm. (3) For purposes of this definition, the loss of equity shall not be considered as part of the damage to or loss of property.Section 102 from internal use under Chapter 11. (5) Any covered employeeCovered employee"Covered employee." An employee responsible for assessing, managing or addressing the risk of a critical safety incident.Section 102 report made or required under this act.

(a)-(c) Reports required.--Subject to subsection (b), by January 1, 2029, and by each January 1 thereafter, the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102, in consultation with the Attorney General, shall produce a report that includes the following: (1) Anonymized and aggregated information about critical safety incidentsCritical safety incident"Critical safety incident." Any of the following: (1) Unauthorized access to, modification of or exfiltration of the model weights of a frontier model that results in death or bodily injury. (2) Harm resulting from the materialization of a catastrophic risk. (3) Loss of control of a frontier model causing death or bodily injury. (4) The use by a frontier model of deceptive techniques against a frontier developer to subvert the controls or monitoring of the frontier developer, outside of the context of an evaluation designed to elicit this behavior, in a manner that demonstrates materially increased catastrophic risk.Section 102 that have been reviewed by the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 or the Attorney General since the preceding report. (2) Information that the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 deems relevant to frontier modelFrontier model"Frontier model." As follows: (1) A foundation model that was trained using a computing power greater than 1,026 integer or floating-point operations. (2) The quantity of computing power described in paragraph (1) includes computing for the original training run and for any subsequent fine-tuning, reinforcement learning or other material modifications that the developer applies to the foundation model.Section 102 safety. (3) Recommended updates to this act, if any. (4) Any developments relevant to the purpose of this act. (b) Nondisclosure of certain information.--The agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 and the Attorney General may not include information in a report under subsection (a) that would: (1) Compromise the trade secrets, confidential business information or cybersecurity of a frontier developerFrontier developer"Frontier developer." A person who trains, or initiates the training of, a frontier model using computing power that meets the technical specifications specified in the definition of "frontier model."Section 102. (2) Compromise public safety or the national security of the United States. (3) Be prohibited by Federal or State law. (c) Transmittal.--The agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102, in consultation with the Attorney General, shall transmit each report under subsection (a) to the Governor and the General Assembly.

The duties, obligations, rights and remedies under this act are in addition to the duties, obligations, rights and remedies that are under other applicable State law and shall not be construed to: (1) relieve a person from duties or obligations under other applicable State law; or (2) limit any rights or remedies under other applicable State law.

(a)-(c) Authorization.-- (1) Subject to paragraph (2), the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 may adopt or promulgate any rule or regulation that is necessary for the implementation, administration or enforcement of this act. (2) The agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 shall promulgate regulations necessary to implement, administer and enforce section 303, including the amount of the annual fee, which may be in the form of a pro rata assessment fee calculated to cover administrative and oversight costs instead of a fixed flat filing fee. (b) Temporary regulations.-- (1) To facilitate the prompt implementation of this act and in accordance with this act, the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 shall, no later than six months after the effective date of this paragraph, issue temporary regulations as may be necessary and appropriate to implement, administer and enforce section 303 and any other provision of this act. Regulations adopted after this six-month period shall be promulgated as provided by statute. (2) Upon the issuance of the temporary regulations, the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 shall transmit notice of the issuance of the temporary regulations to the Legislative Reference Bureau for publication in the next available issue of the Pennsylvania Bulletin. (3) The agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 shall post the temporary regulations on its publicly accessible Internet website. (4) The temporary regulations shall expire no later than two years following publication of the temporary regulations in the Pennsylvania Bulletin. (5) The temporary regulations shall be exempt from the following: (i) Section 612 of the act of April 9, 1929 (P.L.177, No.175), known as The Administrative Code of 1929. (ii) Sections 201, 202, 203, 204 and 205 of the act of July 31, 1968 (P.L.769, No.240), referred to as the Commonwealth Documents Law. (iii) Sections 204(b) and 301(10) of the act of October 15, 1980 (P.L.950, No.164), known as the Commonwealth Attorneys Act. (iv) The act of June 25, 1982 (P.L.633, No.181), known as the Regulatory Review Act. (c) Permanent regulations.--Prior to the expiration of the temporary regulations, the agencyAgency"Agency." The Pennsylvania Emergency Management Agency.Section 102 shall propose for approval of permanent regulations as provided by statute.

This act shall take effect as follows: (1) The following shall take effect immediately: (i) Section 1504. (ii) This section. (2) The remainder of this act shall take effect one year after the publication of the notice under section 1504(b)(2).