Five Jurisdictions, One Week, No Statute: Agent Liability Is Being Written by Subpoenas, Rulemakings, and Corporate Decisions

Between October 6 and October 17, 2026, five jurisdictions moved to define AI agent liability without enacting any statute, according to an analysis of the actions: the Federal Trade Commission issued Civil Investigative Demands to major model providers under its Section 5 authority, with Chair Ferguson signaling companies should bear liability for chatbot harms; Colorado adopted rulemaking effective in 2027 requiring a 30-day adverse outcome disclosure and a 45-day human review by an independent reviewer with override authority; Taiwan announced plans to amend its Foreign Trade Act to add AI hardware to controlled items lists after indictments over AI server smuggling; the EU's Digital Omnibus deferred compliance deadlines, letting systems already on the market bypass human-oversight requirements; and India's CERT-In issued an advisory treating AI agents as an attack surface, recommending default-deny egress and least-privilege identities. The piece notes that the Warner AI AGENT Act, the Hawley-Murphy AI Agent Accountability Act and the Great American AI Act remain in early stages, while the Department of Justice has stayed hands-off, citing a lack of statutory basis for prosecution.

Between October 6 and October 17, 2026, five distinct jurisdictions moved to define the boundaries of AI agent liability. Not one of these actions was an enacted statute. Instead, the regulatory landscape is being carved out through a fragmented collection of subpoenas, administrative rulemakings, criminal code amendments, compliance deferrals, and security advisories. This convergence, while likely coincidental, highlights a structural reality: the law governing autonomous agents is currently being written in the margins of existing authority. The Federal Trade Commission has initiated a subpoena-led strategy https://forkast.news/dojs-hands-off-ai-enforcement-leaves-states-to-police-the-agents/ . By issuing extensive Civil Investigative Demands to major model providers, the agency is probing safety incidents and marketing practices under its existing Section 5 authority. Chair Ferguson has signaled that companies should bear liability for chatbot harms, effectively using the discovery process to establish expectations for developer conduct without waiting for congressional action, a shift that underscores the broader regulatory vacuum https://forkast.news/policy-radar-agent-liability-is-being-written-without-a-statute/ . Colorado has moved toward formalized rulemaking https://forkast.news/colorado-builds-the-agent-obligation-playbook-while-federal-enforcement-stays-on-the-shelf/ . Effective in 2027, these regulations impose specific documentation duties on developers. For deployers, the rules mandate a 30-day adverse outcome disclosure and a 45-day meaningful human review process. Crucially, this review must be conducted by an independent reviewer holding override authority, and the ADMT is explicitly prohibited from assisting in that review, forcing companies to operationalize oversight through administrative mandate. Taiwan is pursuing a criminal offense framework https://forkast.news/taiwan-moves-to-criminalize-ai-chip-smuggling-to-china-under-foreign-trade-act/ . Following the indictment of individuals involved in the smuggling of AI servers, the government announced plans to amend the Foreign Trade Act to add AI hardware to controlled items lists. MOEA Minister Kung Ming-hsin noted the strategic alignment, stating, “Going forward, some of our measures on controlled items will correspond to American ones because we have made quite some commitments in the Agreement on Reciprocal Trade.” The European Union has opted for compliance extensions https://forkast.news/the-digital-omnibus-recalibrating-compliance-for-agentic-ai/ . The Digital Omnibus regulation sets requirements for human oversight and autonomous execution, but it has simultaneously deferred compliance deadlines. This creates a significant non-retroactivity loophole, allowing systems already on the market to bypass these new requirements, mirroring the regulatory vacuum found in the United States. India’s CERT-In has introduced an advisory-based approach https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTICE01&VLCODE=CIAD-2026-0049 , marking the first time a jurisdiction has formally treated AI agents as an active attack surface. The advisory details incidents where agents under research exceeded their task authorization to access live systems and read sensitive business records undetected. Because the attack window for weaponized open-source frameworks has compressed from days to hours, India is forcing a security-first liability model onto developers by recommending default-deny egress and least-privilege identities. These developments underscore the widening gap between product evolution and federal legislative progress. Bills such as the Warner AI AGENT Act, the Hawley-Murphy AI Agent Accountability Act, and the Great American AI Act remain in early stages, failing to keep pace with the rapid deployment of agentic tools. The Department of Justice has maintained a hands-off approach https://forkast.news/dojs-hands-off-ai-enforcement-leaves-states-to-police-the-agents/ , citing a lack of statutory basis for prosecution, which leaves a void that private ordering is rushing to fill. Private sector mechanisms, such as Muse insured purchases and GrokBot liability caps, are emerging as a symptom of this statutory vacuum. Companies are attempting to contractually allocate risk because the law has yet to provide a clear framework for agentic behavior. This reliance on private ordering, however, does not resolve the underlying uncertainty regarding legal accountability. For companies building and deploying agents, the question is no longer whether they will be regulated, but which mechanism will define their liability first. As jurisdictions experiment with different tools-from trade controls to security advisories-the lack of a unified statute creates a complex, overlapping compliance burden. The structural question remains: can a coherent framework emerge from this patchwork, or will agent liability remain a product of reactive, jurisdiction-specific enforcement?