Restore the First / AI Rights / An explainer · Sept 13, 2026 · updated Sept 15, 2026
Why AI is a
First Amendment fight.
Because compute is speech infrastructure — the physical layer through which speech is composed and published at scale — and a federal licensing regime for compute is prior restraint on the First Amendment, no different in principle than a federal licensing regime for printing presses.
This essay is the flagship explainer of the AI Rights & Freedom section — the coalition’s live tracker of federal AI legislation, the funders behind it, and the transatlantic drafting pipeline that produced the bills in front of Congress.
Start with the printing press.
In 1791, when the First Amendment was ratified, the printing press was a physical machine that a citizen could own, operate, and modify. Anyone with the capital to buy the type, ink, and paper could publish. The Free Press Clause — six words: “or of the press” — existed specifically to prevent the federal government from deciding who was allowed to own one.
That is not incidental to the amendment. It is the amendment. The Founders had lived through licensing regimes in which the Crown decided which printers could operate, which manuscripts required a license to publish, and which subjects were beyond permitted discussion. The 1662 Licensing of the Press Act in England had done exactly that; the founding generation wrote the Free Press Clause to make sure the new federal government could never do it here.
In 1791, controlling the press was controlling speech at scale, and controlling speech at scale was a First Amendment question. Both halves of that sentence are still true.
Compute is the printing press of the twenty-first century.
Not metaphorically. Structurally. The printing press was the physical infrastructure through which speech was composed, replicated, and distributed at scale in the eighteenth century. Compute — the servers, chips, and language models on top of them — is that infrastructure in the twenty-first.
Every act of American speech now runs through it. Autocomplete finishes your sentences. AI overviews answer the questions you type into a search bar. AI assistants transcribe your meetings, draft your letters to Congress, translate your voice for the person on the other end of a video call. The model is the printing press; the compute is the physical plant that runs the press; and the model weights are the type in the drawer.
This is not a claim about the future. It is a description of what already happened, everywhere at once, over the last three years. If you use a smartphone, an AI-mediated layer is between you and every other person you communicate with, and every question you ask of the internet.
The next First Amendment battle.
Restore the First put it this way in September 2026:
The next First Amendment battle will not simply concern what you may say. It will concern whether you can access the tools needed to think and speak at scale.
The suppression the coalition’s six named plaintiffs experienced from 2021 to 2024 was output-side censorship: their posts were reduced, their accounts were throttled, their livestreams were removed. Painful and unconstitutional, but downstream.
The regime being built right now is input-side. If two or three federally licensed corporations are the only entities legally permitted to build the AI mediation layer, then the layer through which every future American composes speech will already be filtered before the citizen types a word. The filter is not a takedown. It is a completion. It is what the model offers you when you begin to write. It is the answer the model gives when you ask a question.
Controlling who is allowed to build the model is controlling the answer. Controlling the answer is controlling the speech. And a federal agency with discretionary authority to decide who may build is, by any honest reading, a prior-restraint licensing regime. It is the 1662 Licensing Act with newer chips.
The other bill in Congress right now.
On September 3, 2026, Senators Bernie Sanders and Greg Casar introduced the Ban Artificial Superintelligence Act. Sold in its own release as banning “artificial superintelligence” and creating a cabinet-level federal agency to enforce the ban, the bill defines a regulated AI system as one that:
“exhibits or can easily be modified to exhibit capabilities that match or exceed human cognitive performance and capabilities across a broad range of domains or tasks.”
The bolded five-word phrase is the entire policy. A closed-weights model — the kind you get through Anthropic’s or OpenAI’s API — cannot be modified by anyone outside the company. An open-weights model — the kind you can download, run on your own laptop, fine-tune, fork, or build a competing product from — can be modified by definition. That is what “open source” means.
Under the bill’s language, any open-source AI project of any capability level can be classified as regulated at the discretion of a cabinet-level federal agency, and its developers subjected to what the release summary itself calls the “corporate death penalty” — corporate dissolution — and “not more than 20 years in prison.”
The bill does not regulate what AI does. It licenses who is allowed to build it. And the definition is written so that only two or three companies — the incumbents shipping closed-weights systems through APIs — can continue building at all. Everyone else, from a nonprofit lab to a solo developer to a university research group, is either licensed by the new agency or criminalized.
The transatlantic prototype.
Five days after Sanders–Casar was introduced in the US Senate, Labour MP Feryal Clark introduced the UK Sobel Bill in the House of Commons. Its architecture — independent-evaluator language, shutdown authority, explicit extraterritorial scope — matches Sanders–Casar and the existing UK Online Safety Act line for line. The documented pipeline runs the same drafting shop through both capitals.
When the UK bill passes — and it probably will — the US bill is next. That is not a prediction. That is the point of a transatlantic drafting operation. The UK Online Safety Act was the working prototype for the American censorship push of 2021–2024; the UK Sobel Bill is the working prototype for the American AI-licensing push of 2026–2027. Same institutional pipeline, same funders, seven years apart.
The Gates paradox.
The most instructive single actor to watch in the AI regulatory push is Bill Gates — because he holds four positions at once, all documented, all disclosed, all simultaneous.
He is a funder of the AI labs: the Gates Foundation announced a $200 million partnership with Anthropic on May 14, 2026, and a combined $50M OpenAI Horizon partnership earlier in the year. He is a warner about the risk: his August 26, 2026 essay declared that governments are “way behind” and that a new global institution for AI is needed. He is a regulator-advocate: nineteen days after the essay he pledged $1 billion for AI at the Goalkeepers 2026 event and told Reuters governments must move faster. And he is the deployer of the philanthropic capital that will fund the “AI safety” organizations pushing the rules that determine who else is allowed to build.
Reasonable people disagree about which of those positions is problematic in isolation. The pattern — funder / warner / regulator-advocate / deployer, in the same actor, on the same policy terrain, within a nineteen-day window — is the pattern the coalition’s Piece 7 documents. It is the operating model of institutional AI-safety advocacy in 2026.
The constitutional equivalent.
The clearest way to see the shape of the problem is to translate it into an analogy the courts have already litigated.
Imagine Congress passed a statute giving a federal agency the power to decide which companies were permitted to manufacture printing presses in America. Not what those presses could publish — only who was allowed to make them. The agency’s stated concern would be public safety; its stated method would be technical review; its stated standard would be that some presses were “too easily modified” to print material the agency deemed dangerous.
Every First Amendment attorney in the country would recognize that as a prior-restraint licensing regime. It does not matter that the statute never mentions speech, never bans a specific publication, never removes a specific work from circulation. The regulation of the infrastructure through which speech is composed and published at scale is itself a regulation of speech — the courts have said so, repeatedly, for two centuries.
The Sanders–Casar bill is that statute, applied to compute. The mechanism is identical. The constitutional question is identical.
“Isn’t this a partisan issue?”
No. And the receipt is in the sponsorship. The Ban Artificial Superintelligence Act is co-sponsored by two of the most progressive members of Congress. The First Amendment coalition organizing against it includes plaintiffs whose original 2021 suppression was directed by a Democratic White House. Both facts are true simultaneously because the underlying question — whether the federal government may license who is allowed to build the infrastructure of speech — is upstream of partisan alignment.
The 1662 Licensing Act was written by a monarchy; the American Free Press Clause was written by revolutionaries. Federal licensing of compute would be enforced by whichever administration held the executive branch when it passed. The person you least want to have that authority is the person the other party elects.
Why this is the sixth pillar.
Restore the First’s original blueprint was organized around the five textual guarantees of the First Amendment: religion, speech, press, assembly, petition. Every one of those five now runs through the AI mediation layer. Religion runs through it when a citizen looks up a scripture reading. Speech runs through it when a citizen drafts an email. Press runs through it when a citizen types a question into a search bar. Assembly runs through it when a group chat uses AI to summarize what people have been saying. Petition runs through it when a citizen signs a document that was drafted by a model whose refusal behaviors were tuned in San Francisco.
If the mediation layer is captured, all five original pillars are captured, silently, at once. That is why, on September 12, 2026, the coalition added a sixth pillar: Speech Infrastructure. Six specific policy asks — from “Keep open source legal” to “Establish a Speech Infrastructure Subcommittee within House Energy & Commerce” — that name what is being protected rather than what happens to be threatening it this quarter.
The pillar is called Speech Infrastructure and not “AI” deliberately. AI is a technology; speech infrastructure is a constitutional category. When the next mediation substrate arrives — neural interfaces, ambient computing, whatever comes after AI — the pillar still stands. The pillar defines what is being protected, not the tool of the moment.
Don’t tread on my compute.
A meme appeared on X on September 12, 2026: the Gadsden flag with the coiled rattlesnake, but the snake was made of stacked circuit boards, and the motto read “Don’t tread on my compute.” It is a joke, and jokes travel; but underneath it is the exact constitutional intuition the Free Press Clause was written to protect.
The rattlesnake on the 1775 Gadsden flag was a warning that certain kinds of interference with certain kinds of freedoms would be met with resistance. The freedom in question at the time was the political liberty of colonies unwilling to be governed by a distant crown. The freedom in question now is the ability of a citizen to think and speak at scale, using tools she is legally permitted to build, modify, and understand.
Both are, at bottom, questions about who owns the infrastructure of self-government. That is what makes them First Amendment questions. That is what makes them the same fight.
Don’t tread on my compute may become the defining civil-liberties slogan of the AI age. It is the twenty-first century restatement of the whole First Amendment.
What to do about it.
Four things, in ascending order of effort:
- Call both of your U.S. Senators about the JAWBONE Act (S.4749). The Senate Commerce Committee reported it favorably, 18–10, on September 16 — and rejected an amendment to remove AI from the bill. The next vote is the full Senate, and there is no date. Ask both Senators to cosponsor and to press leadership for floor time. The action page has direct DC numbers, a thirty-second script, and a one-page email. Two minutes.
- Sign the coalition petition. Congress must preserve the records of the last censorship regime, hold public hearings under oath, and create a private right of action so any American penalized by government-directed platform pressure has standing to sue. Under two minutes.
- Read the sixth pillar in the Policy Blueprint. The six asks are drafted so a congressional office can co-sponsor them. Take them to your representative.
- Endorse the coalition publicly, on the record. The Endorsement Kit includes a live card generator with a “Don’t tread on my compute” reason preset, a ready-to-send email template, social copy for X, Instagram, and LinkedIn, and three video-selfie scripts. Under two minutes.
The fight for the last censorship regime is not over — it sits, unruled on, in the Finn docket. The fight for the next one is being built into the infrastructure right now — and the bipartisan JAWBONE Act, which cleared Senate Commerce 18–10 on September 16, is the first serious federal bill that reaches this problem where it actually happens. This coalition is the one positioned to shape both fights.
Further reading.
The AI Rights section on this site
- AI Rights & Freedom — live tracker hub. The thesis, four stat blocks, the standard disclaimers.
- September 2026 convergence timeline — sixteen dated events. Every claim source-linked.
- Bill matrix — JAWBONE (support), Sanders–Casar (oppose), Kennedy kill-switch (watching), UK Sobel (oppose — UK prototype).
- The investigation — seven adversarially-audited pieces on the transatlantic drafting operation.
- Take action: call your Senators about JAWBONE — DC numbers, phone script, email backup for all 50 states.
The seven pieces (in reverse chronological order)
- Piece 7 — Bill Gates and the Billion-Dollar AI Paradox · Sept 15, 2026 · nineteen days from “there is no plan” essay to $1B pledge. Same actor. Four positions.
- Piece 6 — Act Five: The Elite Ratification Stage · Sept 14, 2026 · King Charles’s Dumfries House AI summit and the transatlantic elite convening layer.
- Piece 5 — The Eight-Year Influence Operation · Sept 13, 2026 · 2018 UK DCMS report to September 2026 convergence — one continuous pipeline.
- Piece 4 — Exclusive: The AI Bill Bernie Sanders Introduced Was Drafted in London · Sept 13, 2026 · side-by-side bill text and the money graph.
- Piece 3 — Obama Just Endorsed a Manufactured Panic · Sept 13, 2026 · the DealBook endorsement one day after his Downing Street visit.
- Piece 2 — Bernie’s “Anti-Oligarch” Bill Was Written by the Oligarchs · early Sept 2026 · ControlAI, Tallinn, and the drafting money trail.
- Piece 1 — The CCDH Rebrand Nobody Noticed · early Sept 2026 · the disinformation infrastructure becomes the AI-safety infrastructure with the same legal entity.
Coalition materials
- The Next Censorship Won’t Look Like Censorship — the full coalition statement, Sept 12, 2026. Peer-reviewed evidence base (SEME, ABE, DPE), the funding graph, the operational template.
- Policy Blueprint § 6: Speech Infrastructure — six specific policy asks, drafted for legislative uptake.
- Sayer Ji’s personal endorsement of the JAWBONE Act — the full six-paragraph statement.
- What Is a Private Right of Action? — sibling explainer on the coalition’s central legislative ask.
The bills themselves
- JAWBONE Act (S.4749) — Cruz and Wyden. Bipartisan. Coalition supports.
- Sanders–Casar Ban Artificial Superintelligence Act — read the definition section first.
Addendum · September 2026
Two weeks that proved the argument.
This essay was published on September 13, 2026. In the two days since, and the ten days before, the drafting pipeline it warned about became a chronology. What follows is a dated update ledger — the events that landed as this essay was being written and immediately after, in the order they landed. Nothing above has been silently rewritten; everything below is new.
June 11, 2026 · The good bill lands first
Cruz and Wyden introduce the JAWBONE Act.
Three months before Sanders–Casar, a bipartisan Senate pair introduced S.4749 — a viewpoint-neutral federal cause of action against government coercion of platforms, broadcasters, and AI systems. Endorsed at introduction by the ACLU and the Knight First Amendment Institute. Referred to Senate Commerce. Scheduled for markup Sept 16, 2026.
September 3, 2026 · The bad bill lands second
Sanders and Casar introduce the Ban Artificial Superintelligence Act.
Analyzed in the body of this essay. The bolded “or can easily be modified” clause is the entire policy. Piece 2 and Piece 4 later documented that the bill’s architecture traces to ControlAI, a Tallinn-funded UK organization also connected to Anthropic’s cap table.
September 8, 2026 · The transatlantic prototype confirms
UK Sobel Bill introduced by Feryal Clark MP.
Same drafting shop. Same architecture. Independent-evaluator language, shutdown authority, extraterritorial scope. When it passes, Sanders–Casar is next. See Piece 4.
September 9–15, 2026 · The whistleblower pipeline
Two DeepMind researchers resign to Open Philanthropy-funded orgs.
Josh Engels resigns Sept 9 to METR — the evaluator written by name into US AI-safety bill drafts, and whose board includes Dustin Moskovitz. Bilal Chughtai (interpretability lead) resigns Sept 15 to BlueDot Impact — recipient of ~$30M+ from Open Philanthropy 2023–2025. Both post public warnings on X. The whistleblowers may be sincere; the pipeline paying them isn’t neutral.
September 10, 2026 · Elite endorsement stage
Barack Obama endorses AI existential-risk framing at DealBook.
One day after his September 9 UK Downing Street visit. Documented in Piece 3. Same day: House AI Task Force report calls for “sector-specific” federal AI framework — the framing that lets federal AI regulation proceed without a First Amendment threshold analysis.
September 14, 2026 · The Gates paradox lands as a headline
Goalkeepers 2026 announces $1B AI pledge over two years.
Nineteen days after Gates’s August 26 essay declaring there is “no plan” for the AI era. Same actor. Same policy terrain. Same window. Documented in Piece 7.
September 14, 2026 · The cultural amplification layer runs live
Netflix drops The AI Doc. TIME100 dinner. Gordon-Levitt’s ultimatum.
Joseph Gordon-Levitt, at the TIME100 AI Impact Dinner, tells followers not to vote for any politician backing “anything less than strong regulation, now.” His Creators Coalition on AI co-founder Daniel Kwan produced The AI Doc, released the next day. Tristan Harris featured. The cultural amplification layer is running parallel to the legislative one, on the same timing.
September 15, 2026 · The cascade
Gates video reaches 392K views. OpenAI endorses three biothreat bills. FOIA drops.
Bill Gates tells Reuters governments are “way behind” and posts video: “It’s not the role of the industry to self-regulate.” OpenAI publicly endorses three bipartisan biothreat-AI bills — the Web of Biological Data Act, the AI-Ready Bio-Data Standards Act, the SCALE Biology Act. Gary Marcus and Protect Democracy release the OSTP AI FOIA: 132 pages, near-total (b)(5) presidential-communications-privilege redactions. Michael Kratsios and Ethan Klein named. All on the same day.
September 16, 2026 · The vote
Senate Commerce reports the JAWBONE Act, 18–10. The first amendment offered against it was an amendment to take AI out.
Item #5 cleared. Ranking Member Cantwell offered a substitute removing AI models as covered entities and striking the transparency portal, on the argument that because there is “essentially no federal law governing AI,” a government safety conversation with an AI company could be called coercion. Chairman Cruz opposed it — the amendment, he said, was meant to “neuter the protections with respect to AI so the government has the ability to dictate the content” — and reached for the precedent this essay is built on: “the last time we saw censorship in public health it was at the height of COVID.” Cantwell #1 failed 13–15. The bill was reported 18–10, with at least three Democrats in favor. Cruz committed to “harmonize” the bill with a catastrophic-risk AI bill before the floor; that is where the carve-out will try again. Quotations are from the committee’s live captions and should be checked against the video before republication. The next ask is cosponsors and floor time.
This addendum is a living document. New dated entries will land here as they land in Congress, on Substack, and in the record.