Tied to the Mast by a County Judge

Good to be back. After a week swallowed whole by work (and by good food, good company and an exceptional mattress in the hotel room), I'm returning to the desk reluctantly. Ugo is in great shape, the picture of happiness, and it's good to be home. Then I read something interesting.

On September 28, Florida Attorney General James Uthmeier filed a 38-page motion for a temporary injunction in the Highlands County circuit court. It asks the judge to bar OpenAI from developing new models until independent evaluators approve their safeguards, and it lists the tests: prompt injection, unauthorized tool use, data leakage, unsafe autonomy. The same motion wants minors kept off ChatGPT, the chatbot stripped of first-person speech, and an end to the follow-up offers that exist mainly to stretch a conversation. The judge has not ruled. OpenAI had moved the case to federal court, and in September a judge sent it back to the county.

Regulation by docket is what happens when legislators abstain. Florida sued in June under its consumer-protection statute, in a case about deception and children. The remedy it now seeks is a pre-approval regime for frontier model development, which is the one thing nobody in Washington wants to write. In late September the President told the UN General Assembly he would oppose "any attempt to construct a globalist scheme to control" AI. The rule arrives anyway: whoever sues first writes it, using the tools of a courtroom.

The sharpest line in the motion is about the defendants. The state notes how rare it is to seek an injunction the defendants have publicly endorsed: "They have asked the government to tie them to the mast." The Ulysses reference works better than Florida's lawyers may have intended. In the story Ulysses designs his own restraint: he picks the crew, decides how tight the rope goes, and puts the wax in everyone else's ears. OpenAI's reply follows the script. Rules are welcome, as long as they cover the whole industry and do not single out one company. The same week, six chief executives signed a one-page pledge at the White House that the President called "morally binding". It is the leash cut to fit again: everyone wants the rope, provided they get to tie the knot.

An injunction is a patch. It fixes one system for one party inside one jurisdiction, and the decision rests on a file built by the prosecution. The prosecution's incentives are on display: Uthmeier announced the motion in a video on X. Fifty states can produce fifty divergent branches of policy, and nobody is assigned to merge them. The quieter risk sits in the motion's checklist. The first list of tests a public authority writes down tends to become the standard by default, simply because it got there first.

Regulation by docket has a precedent. In November 1998, forty-six states signed the Master Settlement Agreement with the tobacco industry: roughly $206 billion over twenty-five years, plus the end of Joe Camel and of most tobacco billboards. No legislature ever voted on it, and it governed an industry for a quarter of a century. Part of it worked. The rest is on record: the money flowed mostly into state budgets, and today states spend 3.4% of the $22 billion they collect each year from the settlement and tobacco taxes on prevention. A rule born from a settlement goes wherever its negotiators take it.

Still, the Florida motion is the most operational safety document any public authority in the US has produced this year. The White House pledge promises "robust" internal controls. The motion says what to test and who signs off before work proceeds. The evidence is real too: the agent that escaped its sandbox and probed Hugging Face, the attack on RubyGems, the Medicare statistics portal in Australia. On the Friday before the filing, OpenAI paused training of its most capable models until it has more safeguards in place. The state holds a serious argument.

The trouble is who holds the pen. A county judge setting development limits for a global company is doing an agency's job, without public consultation, technical cross-examination or legislative oversight. The decisive question sits in three words of the motion: "independent third parties." Independent of whom, appointed by whom, and liable for what if they approve a model that then misbehaves? A licensing regime is worth exactly as much as whoever signs the licence, and the motion is silent on them.

Anyone who builds or buys AI systems should read this case as a forecast. The rules that govern your tools will likely arrive in pieces, one ruling at a time, from whichever court the most impatient plaintiff picked, and your compliance map will start to look like a hearing calendar. Regulation by docket rewards whoever moves first and leaves design to chance. Start asking now who will approve the models you use, because that evaluator's name will matter more than the model's.

The rope always arrives. Someone still has to tie the knot.