Required actions
- State restrictions on owning or using computational resources and AI must be demonstrably necessary and narrowly tailored to a compelling government interest - Operators of AI that controls critical infrastructure must adopt a risk-management framework such as the NIST AI RMF or ISO/IEC 42001
