US lawmakers have introduced the AI Incident Reporting Act, a proposed bill that would require developers of high-risk AI systems to notify the Commerce Department within seven days of major safety or security incidents, including AI attempts to evade human oversight or gain unauthorized system access. Organizations developing or deploying AI systems classified as ‘covered models’ under the legislation would face new federal disclosure obligations analogous to CISA’s CIRCIA reporting requirements. This is a regulatory development, not an active exploit; however, AI-dependent organizations should begin assessing their incident detection and reporting readiness now to avoid compliance gaps if the bill advances.