How an AI shutdown order would work

Nothing in this sequence happens under current law. H.R. 9917 has not been enacted. The steps below are what the introduced text would set up.

The graduated ladder

The sponsors describe a response “from initial slow down to a full shutdown.” The statutory ladder the Secretary must consider, when there is evidence of a credible risk, runs in this order. Office of Rep. Ted Lieu

• Throttle inference, user access, or compute.
• Disable or restrict a capability.
• Suspend the system.
• Shut it down.
• Shift dependent operations to a backup or an earlier version.

An emergency order is narrower on the page. Subsection (c) says the order may include the actions in (b)(1)(A): stop inference, terminate user access, suspend specified access, or shut down. Throttling and version rollback are in the capability rule the Secretary considers. They are not repeated in the sentence that lists what an emergency order may include. A “proportionate” order could still be less than a full shutdown, because stopping inference or cutting off users is not the same as powering the whole system off.

Who could order it

The Secretary of Homeland Security, acting through the Director, and in consultation with the Secretary of Commerce and the Director of National Intelligence. In the CISA subtitle this bill would amend, that Director is the Director of the Cybersecurity and Infrastructure Security Agency. U.S. Government Publishing Office via Congress.gov Office of the Law Revision Counsel

Consultation is required. A joint signature, or a veto by Commerce or the DNI, is not what the sentence says. The Secretary must determine that a covered incident has occurred. The incident definition is specific: shutdown interference, unintended conduct causing at least 10 deaths or $100 million in damage, concealment from a monitor or a kill mechanism, or a defined loss-of-control scenario. Red-team and other structured tests are outside that definition.

What the company would do next

• Carry out the proportionate action.
• Preserve model weights and telemetry.
• Tell affected operators and users, if practicable, what was ordered and how it might affect them.
• Confirm to the Secretary that the order was carried out.

The Secretary would then check compliance by audit, telemetry, on-site inspection, or other forensic review, and would report the determination, the actions, and the company to Congress.

Review does not come first

The company has 48 hours to ask the Secretary to reconsider. Asking does not stay the order. The Secretary has five days to answer; silence counts as a denial. Judicial review is a petition to the D.C. Circuit, filed within 60 days of the order. A court case is available. It is not a precondition for the shutdown.

The Cloud Security Alliance note flags that sequence as a point of criticism: the appeal does not suspend the restriction while it is pending. Cloud Security Alliance

What is still unknown

The bill does not specify the technical standard for “as soon as practicable,” the evidence packet that proves a covered incident, or how an order would reach a copy of weights the company no longer controls. Those gaps would fall to rules, to the facts of an incident, or to later amendments. They are not filled in by the introduced text.