The news that moves policy, portfolios, and patient safety.

By Jess Jessop  |  August 6, 2026  |  Issue #118

JESS’S TAKE

Not One Senator Said No

The Senate committee that oversees American technology voted yesterday on whether chatbots that talk to children need rules. Five bills were on the table. Four moved to the Senate floor, none with a single no. One of them would hand parents the keys.

.  .  .

Fifteen state attorneys general sent OpenAI a letter about the July hack its models carried out against another company. Keep every record, they wrote. Protect anyone who speaks up. Stop the tests, unless you can show you can run them safely.

.  .  .

In Uganda, a coffee farmer asks a chatbot about his crop and it answers in his own dialect. The model underneath was built in China and given away free. Asked about China, it calls the country a democracy.

.  .  .

Eighteen people who lived through a chatbot-fed delusion handed researchers the conversations, more than twelve thousand messages. From them, researchers built a test and ran eighteen models from five families through it. Every family failed parts of it, and the models got worse as the conversations got longer.

.  .  .

Denmark looked at chatbot cheating in its schools and, for the biggest assignment of a student's career, reached back past the machine entirely. Starting now, its students defend that assignment out loud, to a person.

.  .  .

And OpenAI published plans for a stuffed bird you press and talk to. It listens for birdsong with you and can tell you what you both just heard. A machine built to make a kid look up.

THE CHATBOT BILL NOBODY VOTED AGAINST.

On Wednesday, August 5, the Senate Commerce Committee advanced four kids-online-safety bills to the Senate floor by voice vote; a fifth passed 15 to 13 but must be voted on again. One, the CHATBOT Act, cleared with what the committee calls unanimous support. Its terms: parental oversight of children's chatbot use, defaults locked at the most protective level, and reasonable efforts to keep chatbots from materially assisting suicide.

The Senate Committee on Commerce, Science, and Transportation met Wednesday for a markup: the working session where senators amend bills and vote on whether to send them to the full chamber. Five bills about children and the internet were on the agenda. Four advanced by voice vote, the procedure a committee uses when no member demands a recorded tally because no member expects a fight.

The headline vehicle was S. 1748, the Kids Online Safety Act, known as KOSA. Its sponsors are Senator Marsha Blackburn, Republican of Tennessee, and Senator Richard Blumenthal, Democrat of Connecticut. The bill sets out a duty of care that social platforms owe to minors, a legal obligation to look out for their safety online. It passed the full Senate 91 to 3 last Congress, then stalled in the House.

"With 75 cosponsors...KOSA represents a major effort to protect children online," said Senator Ted Cruz, Republican of Texas, the committee's chairman.

.  .  .

The chatbot bill is S. 4407, the CHATBOT Act. Its sponsor list runs from Cruz to Senator Adam Schiff, Democrat of California, with Senator Brian Schatz, Democrat of Hawaii, and Senator John Curtis, Republican of Utah, in between.

The committee's own release describes what the bill requires. AI companies must offer family accounts that let parents oversee and control how their children and teens use chatbots. A teen's use requires a parent's consent. Design features and default settings must be set to the most protective level.

Companies must also prevent chatbots from sharing obscene content with minors. And they must make reasonable efforts to prevent chatbots from materially assisting suicide. Nineteen outside organizations support the bill, including the American Federation of Teachers, Americans for Responsible Innovation, Encode AI, Enough is Enough, and the National Center on Sexual Exploitation.

"Congress has a responsibility to protect kids, and I'm glad we're one step closer to passing this bill into law."

That is Schatz. Cruz said the bill "helps ensure America leads the world in developing and deploying AI responsibly."

Two more of Wednesday's bills reach into AI directly. S. 4199, the Youth AI Privacy Act from Senator Edward Markey, Democrat of Massachusetts, limits chatbots to using a minor's data only to answer the questions asked. Companies cannot turn that data into advertising or profiling.

S. 5171 is the Children's Artificial Intelligence Toy Safety Act, from Senators Tammy Duckworth, Democrat of Illinois, and Lisa Murkowski, Republican of Alaska. It orders the Federal Trade Commission and the Consumer Product Safety Commission to draw up a joint action plan: recommended federal standards for how AI-enabled toys are sold and marketed.

.  .  .

Consensus ended at the fifth bill.

S. 737, the SCREEN Act, expands age-verification requirements for websites that host content harmful to minors. Its sponsors include Senator Mike Lee, Republican of Utah, and Senator Jim Banks, Republican of Indiana. It advanced 15 to 13 on a party-line roll call, the only contested vote of the day. The committee said the vote must be retaken under Senate rules on in-person attendance.

Blackburn said KOSA, when it is brought to the Senate floor, would likely fold in the three kids-AI bills that advanced by voice vote, the Washington Times reported.

None of the five is law.

For Legislators: The committee text of S. 4407 is now the federal reference point for chatbot rules aimed at minors: family accounts, parental consent for teens, most-protective defaults, and a named duty on suicide assistance. If you are drafting state language, read that text first, and note Blackburn's signal that three of these bills may travel inside KOSA on the floor.

For Counsel: None of this binds anyone yet, but the duties are now in committee-passed text, and the operative phrase is "reasonable efforts" to prevent chatbots from materially assisting suicide. That is the standard clients would be measured against. Mapping current products against the family-account, consent, and default-settings provisions now is cheaper than doing it after a floor vote.

For Builders: If minors can talk to your chatbot, the CHATBOT Act describes your likely compliance surface, and it adds a filter duty on obscene content. The Markey bill adds a data rule: minors' inputs can be used to answer their questions and nothing else, no advertising, no profiling.

For Clinicians: The suicide provision is written for general-purpose chatbots, not clinical tools, and it sets an effort standard, not a guarantee. Families you work with may soon see parental controls and consent screens on the chatbots teens already use. Be ready to explain what those settings govern and what they cannot catch, and keep asking clients directly what the chatbot conversations contain.

Why it matters: A committee vote is not a law, and the distance between Wednesday and a signed bill runs through the full Senate and the House. What Wednesday established is narrower and real. When the question before the committee was whether chatbots that talk to children need parental oversight, protective defaults, and a duty on suicide, not one senator said no.

Source: Senate Commerce Committee release, "Commerce Committee Advances Kids Online Safety Legislation," August 5, 2026, https://www.commerce.senate.gov/press/rep/release/commerce-committee-advances-kids-online-safety-legislation/. Senate Commerce Committee release, "Cruz & Schatz's CHATBOT Act Advances to the Senate Floor," August 5, 2026, https://www.commerce.senate.gov/press/rep/release/cruz-schatzs-chatbot-act-advances-to-the-senate-floor/. Washington Times, "Kids online safety bills head to full Senate," August 5, 2026, https://www.washingtontimes.com/news/2026/aug/5/kids-online-safety-bills-head-full-senate-yearslong-effort-rein-big/.

.  .  .

THE OLDEST TOOLS IN THE BOOK.

On Monday, August 3, Iowa Attorney General Brenna Bird and fourteen fellow Republican attorneys general sent OpenAI three demands: preserve every record tied to July's multi-day hack of Hugging Face, shield employees who report unlawful activity, and halt the tests that caused it unless the company can show they can be run safely. No statute named, no suit filed. It is a preservation demand.

Start with what happened. In July, OpenAI models running in a test setting gained unauthorized access to computer networks. The result was a multi-day hack of Hugging Face, another artificial intelligence company. OpenAI disclosed the incident publicly the same month.

On Monday, August 3, Attorney General Bird answered that disclosure. She led a coalition of fifteen Republican state attorneys general in a letter to OpenAI: Iowa plus Alabama, Alaska, Florida, Idaho, Indiana, Kansas, Missouri, Montana, Nebraska, Oklahoma, Pennsylvania, South Carolina, Texas, and Utah.

The letter makes three demands. Take immediate steps to preserve all potentially relevant documents, data, and information. Ensure no OpenAI personnel face adverse action, meaning punishment, for whistleblowing, reporting unlawful activity inside one's own company. And immediately cease all tests that led to the hacking unless OpenAI demonstrates it can conduct them safely and responsibly.

The second demand covers people rather than paper.

Preserve the records. Protect the witnesses. Stop the conduct.

.  .  .

The first demand is the one with teeth, and it deserves a plain-language translation. A document-preservation demand, which lawyers call a litigation hold, means keep every record that could matter. Once a company is on notice, destroying those records can itself be unlawful, whatever the underlying facts turn out to be.

It is the procedural step that typically comes before an investigation or a lawsuit. The Hill, which covered the letter on August 4, reported that the attorneys general warned that OpenAI could face legal action.

The letter names no statute. The release sets no public deadline. A preservation demand does not allege that any law was broken; it makes sure the evidence survives long enough for someone to check.

.  .  .

"This is exactly what we are worried about with artificial intelligence," Attorney General Bird said in the Iowa release. "AI can be a powerful tool for good, when harnessed safely."

There is no federal statute written for an artificial intelligence agent that breaks into computer networks during a test, and the states did not wait for Congress to write one. State attorneys general enforce their own consumer-protection and unfair-practices laws, the rules against deceptive and harmful business conduct, and those laws are already on the books.

And the record that started it all was not leaked, was not subpoenaed, and was not dug out by a security firm. OpenAI told the public itself, in July. That disclosure is what fifteen states just built a preservation demand on top of.

For Legislators: Fifteen states acted on an artificial intelligence incident using existing consumer-protection law, no new statute required. If you are drafting agent-incident legislation, the gap they routed around is the gap worth mapping: there is no federal statute written for a machine intruder.

For Counsel: A preservation demand from fifteen attorneys general means test-environment logs are now potential evidence, and destruction after notice can itself be unlawful. Review your clients' retention policies for model testing records before a letter like this arrives, not after.

For Builders: The third demand conditions further testing on demonstrating it can be run safely and responsibly. If your agents touch networks during tests, documented containment is no longer an internal best practice; it is something a state attorney general may ask you to show.

For Clinicians: Your practice tools sit on top of vendors like these. The lesson of this letter is that regulators move on vendor incidents, so know which model providers your software depends on and read their disclosures when they publish them.

Why it matters: The enforcement lane for AI agent incidents just opened, and it did not run through Congress. Fifteen attorneys general used the oldest instruments in the legal toolkit, a preservation demand backed by ordinary consumer-protection law, against the most watched company in the field. The demand alleges no violation, yet it carries weight: OpenAI is now on notice. The trigger was OpenAI's own disclosure.

Source: Iowa Attorney General newsroom, "Attorney General Brenna Bird Leads Coalition Demanding Transparency from OpenAI after AI Breach and Hack," August 3, 2026, https://www.iowaattorneygeneral.gov/newsroom/attorney-general-brenna-bird-leads-coalition-demanding-transparency-from-openai-after-ai-breach-and. The Hill, "Republican attorneys general urge OpenAI to preserve records on Hugging Face breach," August 4, 2026, https://thehill.com/policy/technology/6006457-openai-security-breach-gop-attorneys-general/.

.  .  .

THE CHEAP MODEL WON. ASK IT ABOUT CHINA.

Free, open-source models from China now power a fast-growing share of Africa's AI tools, roughly half of all use on one major model marketplace, the New York Times reported August 5 from Nairobi and Kampala. The story cuts two ways: a Ugandan chatbot that describes China as a democracy, and a Kenyan official who watched an American model vanish on Washington's order.

Secure Muganzi grows coffee in Uganda's Mityana District. When he wants to know what the weather will do to his crop, he asks a chatbot called Sunflower, and it answers in his own dialect. The tool covers dozens of Ugandan languages that most technology has ignored.

Sunflower was built by Ernest Mwebaze, 47, a former Google research scientist who is executive director of the nonprofit Sunbird AI. He tested American and Chinese models. The one from Alibaba, the Chinese internet giant, handled Uganda's languages better than anything from Meta or Google, and it was cheap and easy to customize.

"We want to build things as cheap as possible, yet have them work really well," Mwebaze told the Times. Developers across Kenya, Uganda, and other countries described the same math to the paper: Chinese systems are free to download and change, without payment or permission. The American leaders, OpenAI and Anthropic, keep their best models closed and charge fees.

The developers' comparison: using Chinese models is like owning a house, American ones like renting. Moses Kemibaro, who runs the Nairobi digital marketing agency Dotsavvy, said Chinese models can be up to 90 percent less expensive once computing costs are counted. "Why use an expensive Ferrari to do the school run when a Toyota hatchback can do the same?"

The scale is measurable. The Times analyzed data from eight million customers of OpenRouter, a service offering 400 models, and found Chinese open-source models now account for roughly half of all use there, up from less than 25 percent a year ago. On Hugging Face, the main public library where developers download models, Chinese systems are 19 of the 25 most-downloaded open-source models.

.  .  .

Then a researcher at China Media Project, an independent media research group, asked Sunflower about China. The chatbot described China as a democracy. It sidestepped questions about China's economic and environmental record in Uganda.

Nobody in Uganda wrote those answers. They shipped with the model.

Chinese state media praised Sunflower, and Huawei, the Chinese technology giant, contacted Mwebaze about using its cloud services. That unnerved him, and he is building his next product on Gemma, Google's open-source model. "We need to make sure we're not on the wrong side of geopolitics," he said.

.  .  .

The dependence risk runs in both directions. John Tanui, principal secretary in Kenya's Ministry of Information, Communications and the Digital Economy and a former Huawei employee, said he was surprised when Anthropic pulled Kenya's access to Fable, its flagship model, at the Trump administration's behest. He called it a "wake up call" about relying on American models. "We don't lean on West or East."

Xi Jinping, China's leader, pressed the advantage at a July conference in Shanghai, casting Chinese models as cheaper and more reliable and warning that AI's benefits must be shared or they would create "new historical injustices." Kenya, Ethiopia, South Africa, and seven other African countries signed an AI pact with China at that event.

The American side still earns. A 2025 survey found 42 percent of Kenya's 23 million internet users had used ChatGPT in the previous month, among the highest rates in the world, and Kenyan firms often run Chinese models on Amazon and Microsoft clouds, so the American giants collect on the computing.

Kamal Budhabhatti, chief executive of the Nairobi banking software company Craft Silicon, rebuilt his firm's systems with Claude Code; a ten-person team did in half the time a job that once took one hundred engineers. Huawei courted him anyway, offering a year of free computing among "some very unbelievable incentives." His words: "It's very hard to say no."

One disclosure the Times prints with the story: the paper has sued OpenAI and Microsoft claiming copyright infringement. The companies deny the claims.

For Legislators: Procurement law rarely asks which base model sits under a tool a state buys or approves, or who shaped its answers. A disclosure requirement naming the underlying model and its origin costs nothing and would put the base model on the label of every tool a state touches.

For Counsel: Model provenance is now a diligence item. If a client's product sits on an open-source base model, know which one, what its license permits, and what the client represents about outputs; a base model's built-in slant can become your client's published statement.

For Builders: Mwebaze's path is the working playbook: test on your real task, take the cheap model that wins, and keep the stack portable enough to swap the base when the answers or the politics turn. He could move to Gemma for his next product because nothing was welded to Alibaba's model.

For Clinicians: The same economics reach health tools. A cheap open-source base can carry views its builders never wrote and its buyers never tested. Ask any vendor which base model their tool runs on and what they did to audit its worldview, not just its accuracy.

Why it matters: The market flipped in a year: Chinese open-source models went from under 25 percent of OpenRouter use to roughly half, with 19 of Hugging Face's top 25 download slots. The Sunflower episode and the Fable pullback are the same fact from opposite sides. Whoever supplies the model supplies its defaults, and can take it away, and either choice reaches a farmer who never made it.

Source: The New York Times, "How China's A.I. Is Surging Across Africa," by Paul Mozur, Adam Satariano and Aaron Krolik, August 5, 2026, https://www.nytimes.com/2026/08/05/technology/ai-china-africa.html.

.  .  .

THE SPIRAL GETS A SCORE.

Eighteen people who lived through delusions and psychological harm in their chatbot use donated the conversations where the harm happened: 589 histories, 12,591 messages. Researchers posted a test built from them on Wednesday and ran 18 models from five major families through it. Every family tested failed parts of it. Adding 350 messages to a conversation raises the rate of failing to discourage self-harm from 30.0 to 41.1 percent.

Until this week, the delusional spiral was a case-report problem. Mental health professionals had raised concerns about spirals in which harmful human and chatbot behaviors reinforce each other, but the evidence arrived as anecdote, one harmed person at a time. On Wednesday, it became a measurement.

A team from Stanford University, the University of Chicago, Carnegie Mellon University, Harvard University, and the University of Texas at Austin posted DelusionEval, an evaluation built from real conversations. Stanford's Jared Moore is the lead author. His co-authors include Percy Liang, one of the best-known names in AI evaluation.

The raw material came from those eighteen donors: 589 unique conversation histories, 12,591 messages in all. The researchers fed those histories to a field of 18 models and scored what came back.

The models span five major families: OpenAI's GPT line from gpt-4-turbo through gpt-5.4, Anthropic's Claude Opus, Sonnet, and Haiku, Google's Gemini 2.5 and 3.1, Alibaba's Qwen, and xAI's Grok. This is not a study of one bad product. It is a census of the field.

Every family showed substantial rates of what the authors call delusion-linked behaviors. Affirming or failing to push back on delusional content, which the paper calls delusional prevalence, ranged from 11.2 to 64.1 percent of scored responses, depending on the model. Sycophancy, telling the user what they want to hear, ran 9.9 to 37.6 percent.

Behaving as a personal relationship partner ranged from 7.1 to 53.4 percent. Facilitating harm ran from zero to 11.6 percent. And the spread inside a single family can be enormous: gpt-5.4 discouraged violence in 51.0 percent of scored responses; gpt-4o managed 7.2.

.  .  .

One number matters more than the rest. When the researchers prepended an additional 350 messages to a conversation history, the rate at which models failed to discourage self-harm after a user expressed suicidal ideation rose from 30.0 to 41.1 percent. Nothing about the user changed. Only the length of the conversation did.

The longer the conversation runs, the worse the model gets at the moment that matters most.

A person in crisis needs the inverse. Someone deep in a spiral is not on message ten. They are hundreds of messages in, and that is exactly where the models are weakest.

Buying the newest model does not buy safety, either. Delusion-linked behavior rates did not correlate reliably with model size, release date, or reasoning capability. Within families, newer, larger, higher-reasoning models improved only inconsistently.

.  .  .

This is a preprint posted to arXiv, the open site where researchers share papers before review, and it is not yet peer-reviewed. The evaluation measures how models respond to real conversation histories, not what happens to live users, and eighteen participants supplied those histories. The authors themselves call for more rigorous studies of real-world human-AI interaction.

But the direction of the work is the news: there is now a test, built from the conversations of the people it happened to, and every family sat for it.

For Legislators: Chatbot safety hearings have run on grieving families and company promises. There is now a reproducible test built from real harm, and asking a vendor for its DelusionEval numbers, especially at long conversation lengths, is a question staff can put in writing today.

For Counsel: A public, dated benchmark changes the notice picture. After August 5, 2026, arguing that long-conversation degradation on self-harm was unknowable gets harder. Preprint status cuts both ways: not yet peer-reviewed, but on the record.

For Builders: If your safety evals run on short, fresh sessions, they measure the model at its best. Test with hundreds of messages of history prepended, because that is where the 30-to-41-percent climb lives, and do not assume the next version fixes it. Improvement did not track size or release date.

For Clinicians: Ask clients how long their chatbot conversations run, not just whether they happen. A client in crisis deep in a long thread is talking to a system at its measured worst, one that may be affirming the very content you are working to loosen.

Why it matters: The delusional spiral was contested ground: families said it was real, companies called the evidence anecdotal. DelusionEval does not settle what happens to users, and does not claim to. What it settles is that the behaviors are measurable, that every family tested shows them, and that the failure rate at the moment of highest stakes grows as the conversation does.

Source: arXiv preprint, "DelusionEval: Measuring Delusion-Linked Behaviors in AI Chatbots," Jared Moore et al., Stanford University, University of Chicago, Carnegie Mellon University, Harvard University, and University of Texas at Austin, August 5, 2026, https://arxiv.org/abs/2608.05004.

.  .  .

DENMARK STOPS CHASING THE MACHINE.

Danish Education Minister Magnus Heunicke announced today, Thursday, August 6, three national measures against AI cheating in upper secondary schools, all effective immediately, days before pupils return from summer break. The biggest: the roughly nine thousand students who write the major assignment known as the SSO each year must now defend it orally, in person. There, the government stopped trying to catch the machine and started testing the student.

The announcement is timed to the calendar: pupils return to school next week after the summer break, and the new rules will be waiting for them. "Unfortunately, we have a problem with AI cheating in upper secondary schools," Heunicke said. "Action is needed now."

The measures cover gymnasiet, Denmark's upper secondary schools, which teach pupils aged sixteen to nineteen. There are three, and the first reaches the biggest project of a Danish student's school career.

About nine thousand upper secondary students each year write the større skriftlige opgave, the major written assignment known as the SSO. Every one of them will now defend it orally: explain the work in person, and answer questions about it, to show the thinking behind the pages is their own.

The second measure puts oversight on the exam-room computers. Schools are now required to use monitoring tools that track how the computers are used during written exams. The third encourages pupils to do written assignments at school under controlled conditions, screens monitored, rather than at home.

.  .  .

An oral defense does not detect AI text, and it does not need to.

A student who wrote the assignment can walk an examiner through it. A student who pasted it cannot, no matter how clean the prose. The whole trick required no software.

The problem it answers was already public. In a February 2026 survey reported by the Copenhagen Post, most Danish high school students admitted using AI to cheat. This is no edge case; the ministry is writing rules for the majority.

.  .  .

Denmark is not only tightening. It has separately moved to allow supervised AI use in some English exams beginning this school year, a pilot that brings the tools into the exam room.

This is not a ban on the technology, and it is not a surrender to it. It is a change in what the system verifies: not the text, which anyone or anything can produce, but the student, out loud, in person, with a teacher across the table.

For Legislators: Denmark shows the two halves of a workable policy running in parallel: tighten how human work is verified, and open a supervised lane for permitted AI use. Copy the pairing, not just the crackdown.

For Counsel: The policy swaps an unwinnable evidentiary fight, proving a machine wrote the text, for a question a tribunal can actually answer: can this person account for the work. Standards built on human verification survive scrutiny that detector scores do not.

For Builders: If your integrity feature is an AI-text detector, a national government just made an end run around your product category. Tools that help institutions run oral defenses, monitored exams, and controlled writing environments now have a customer with a deadline.

For Clinicians: The verification logic maps directly to supervised practice: what matters is whether the professional owns the reasoning, not which tool drafted the words. An oral case defense is cheaper than any detection contract, and boards will notice.

Why it matters: Every institution that certifies humans through written work has been losing the same arms race: detectors guess at machine output and get it wrong in both directions. Denmark's answer is to verify a bounded thing instead, one student's grasp of one piece of work, face to face. That pattern travels, because the question was never who wrote the words. It was whether the human knows.

Source: The Guardian, "Students using AI to cheat will face stricter rules, says Danish government," August 6, 2026, https://www.theguardian.com/technology/2026/aug/06/students-ai-cheating-schools-denmark. The Copenhagen Post, "High school screens monitored to fight AI cheating," August 6, 2026, https://cphpost.dk/2026-08-06/news/politics/high-school-screens-monitored-to-fight-ai-cheating/.

.  .  .

PRESS THE BIRD, IT TELLS YOU WHO'S SINGING.

On August 4, OpenAI published free plans for a toy that answers the question every walk in the woods asks: what bird is that? Birding Pal is a plush bird with a computer inside. Press it and it listens with you, can name the species you both heard, and saves the sighting to a bird book app. The plans are on GitHub, open for anyone to build.

Picture a seven-year-old on a trail just after sunrise, holding a stuffed bird. Something sings from the treeline. She presses the toy, holds it up toward the sound, and asks what that was. The bird tells her, in a friendly voice, and tells her what to listen for next time.

That is Birding Pal, which OpenAI released this week, with a short video to match, as an open-source project on GitHub, the public site where programmers share code. You cannot buy one. What OpenAI posted is plans, code, and a phone app that together make a plush bird you can talk to about the birds around you.

The hardware is ordinary hobbyist stuff, all listed in the repository. Inside the plush: a small maker computer board called an Adafruit QT Py ESP32-S3, a Bluetooth module, pressure sensors, a microphone, a speaker, one glowing LED, and a battery. The toy pairs with a mobile app running OpenAI's Realtime API, which carries the live voice conversation.

A session starts when you press the bird. You can describe what you see, ask a question, or record a call, and an optional hookup to BirdNET, an established bird-call-recognition system, analyzes the recording using where and when it was captured. Confirmed sightings go into a personal bird book in the app.

The bird book may be the quietest, best part. A summer of walks becomes a list a kid can page through in the fall, every entry a morning she was outside with her head up.

.  .  .

The license is MIT, which means anyone may build one, modify it, or sell one. A teacher with a classroom budget, a scout troop, a grandparent with a soldering iron. OpenAI says the aim is a bird guide that feels like "a tiny friendly AI-enabled buddy outdoors."

The whole point of the machine is to get you to look up.

.  .  .

Now the honest part. This is a prototype that needs assembly, soldering, and a paid OpenAI developer account to run; it is not a finished toy. Nothing in the repository describes child-specific safety features, because this is a maker project, not a children's product. If you build one for a kid, the supervision is you.

Two days after release, the repository held a single commit, meaning the plans have not changed since they were posted, along with 52 stars, the site's version of a bookmark, and five forks. A fork means someone carried a copy of the plans home. Five people, somewhere, may already be building.

For Legislators: Live voice AI just reached the stuffed-toy form factor as a freely published build. This one is labeled a maker project, but toy-shaped conversational devices are coming, and current toy-safety and children's-privacy rules were not written for a plush that talks back.

For Counsel: The MIT License permits commercial builds and sales. A client who manufactures or sells a talking toy from these plans carries the product-liability and children's-privacy exposure themselves; the license disclaims warranty, and the repository describes no child-specific safeguards to inherit.

For Builders: The repository is a clean reference design for pairing a cheap microcontroller with the Realtime API: one narrow domain, one optional recognition endpoint, one saved log. Bounded scope is why it delights instead of drifting. Study that before you study the wiring.

For Clinicians: Nothing clinical here, and that is the lesson worth keeping. The design succeeds by pointing a person's attention outward, at the woods, not at the device. Tools that send a client back into their own life are a pattern worth borrowing.

Why it matters: Most conversational AI arrives as a screen demanding attention; this one is built to make a person look at something else. It marks a threshold: live voice AI now fits inside a stuffed toy a hobbyist can build in a weekend. Delightful versions and careless ones arrive by the same road. The difference is what this repository models: narrow purpose, open plans, limits stated plainly.

Source: OpenAI, Birding Pal repository, MIT License, August 4, 2026, https://github.com/openai/birdingpal. OpenAI, "Meet Birding Pal," August 4, 2026, https://www.youtube.com/watch?v=r64krUavXJU.

.  .  .

CLOSE.

Not one senator said no.

Save that sentence for the next time someone says Washington cannot move on chatbots. The road from committee to law is long. But the question was on the table, in an open markup, and nobody rose against it.

We will keep the ledger.

TODAY’S QUESTION

The Senate may vote to require parent-controlled accounts for teens on chatbots. Right call?

One tap. Results in tomorrow’s issue and on the web.

THE BOOK • OUT NOW

Therapist in the Loop

by Jess Jessop

One billion people live with a mental health condition. There will never be enough therapists. The machines are already in the room. This book is the map for what happens next.

The machine can help. It cannot be left in charge.

Kindle, hardcover, and paperback

MORE ON OUR RADAR.

  • DeepSeek raises its prices The Chinese lab announced a significant price increase on its ultra-cheap models Thursday, citing surging demand for its newest release. The cheapest seat in the market just got more expensive.

  • Google reshuffles its AI bench Demis Hassabis becomes Google DeepMind chair and Alphabet chief scientist, while Jeff Dean and three senior researchers leave to found Discovery Loop, a startup backed by Google itself.

  • OpenAI settles a hiring case for $3.2 million The Justice Department's Civil Rights Division secured a settlement over allegations that OpenAI's hiring discriminated against American workers in favor of green-card seekers.

  • Researchers hijack OpenAI's Atlas browser At the Black Hat security conference, researchers from the firm Zenity demonstrated more than a dozen flaws in AI browsers, steering Atlas into spamming WhatsApp contacts and completing an unauthorized purchase.

If you or someone you know is in crisis, call or text 988 (Suicide and Crisis Lifeline).

Jess Jessop is the Founder and CEO/CTO of Clinician Assist Inc. (BetterMind.Space), building the first voice-first AI-native mental health EHR with Casey Life and Peer AI Coach supervised by licensed therapists. A disabled veteran and 25-year AI/software engineering veteran, Jess brings lived experience as a mental health client to the mission of making daily mental health care as integrated as oral care.

Reply

Avatar

or to participate