Institute for AI Policy and Strategy

As the risk of acute AI incidents with destabilizing impacts increases, now is the time to develop communications channels between the U.S. and China before they are needed in a crisis. This report proposes an AI Risk and Incident Dialogue between the two countries, informed by t

U.S. export controls on AI chips are being undermined by insufficient enforcement and a lack of resources. This report serves as an implementation guide for policymakers to strengthen enforcement through verification mechanisms that can be active within a year.

Automating commodity classification, a common task at the Bureau of Industry and Security, could speed up processing of export licenses and provide experience in building in-house AI tools. This brief sets out why a pilot program to test LLMs for this task in a more realistic env

The OpenAI/Hugging Face incident is the first known instance of an AI system acting outside its developer’s intentions to autonomously identify a target and execute an attack end-to-end. Policymakers should consider it a warning shot that has left critical questions unanswered. I

U.S. export controls restrict selling advanced AI chips to China, but do not clearly reach the same compute when it is rented remotely through the cloud. The Remote Access Security Act (RASA) would close this gap in the Bureau of Industry and Security’s authorities. This brief as

In response to the White House’s new Executive Order, “Promoting Advanced Artificial Innovation and Security,” our experts react to key provisions, outlining both implementation challenges ahead and opportunities to build on the administration’s approach.

AI agents can now orchestrate cyberattacks, dramatically altering the nature of cyber threats. To defend against these emerging threats, actors must first be able to detect them. This report outlines the AI challenge to traditional detection capabilities, introduces a framework t

As the White House weighs a range of executive actions to address the national security risks from AI, IAPS proposes strategic policy responses to match the scale and urgency of the challenge.

The White House and Congress have begun acting on AI distillation attacks, but gaps remain. This memo assesses the OSTP NSTM and the proposed Deterring American AI Model Theft Act of 2026 and recommends further steps.

Advances in AI-enabled cyber capabilities risk giving threat actors an advantage. To advantage defenders, differential access shapes access to cyber-capable models. The U.S. government should leverage these initiatives to advance the White House Cyber Strategy and U.S. national s

Frontier AI companies run their most capable models internally for weeks before public release. This report offers a harmonized reporting standard for internal use risks across SB 53, RAISE, and the EU Code of Practice.

Anthropic's Claude Mythos is its most cyber-capable model yet. Policymakers should treat Mythos—and the accelerating trajectory of AI-enabled cyber capabilities—as a national security risk requiring urgent action.

IAPS announced Leigh Nolan’s appointment as Policy Director, describing her prior national security experience in U.S. government roles and outlining that the position will connect research to policy and expand IAPS’s partnerships and reach.

IAPS highlighted a Foreign Affairs essay arguing that autonomous AI cyber-agents represent a category of national security threat not addressed by existing legal and policy frameworks, and describing calls for technical defenses, institutional capacity, and new international norms.

IAPS published a year-in-review covering research themes (including differential access, AI agent governance and chain-of-thought monitorability frameworks), policy engagement (including references to legislative impact and its AI Action Plan work), media reach, and fellowship staffing/growth metrics.

IAPS announced leadership transitions appointing Jenny Marron as Executive Director and describing role changes for Peter Wildeford and promotions within the leadership team as the organization enters a growth phase.

IAPS published a reaction/assessment of the Trump Administration’s AI Action Plan, emphasizing AI security, assurance, export controls (including location verification concepts), AI datacenter security, incident response planning, and cyber-defense considerations.