Who Actually Governs AI? Not the People With the Titles.

When Trump's AI chief issued an Iran threat assessment and the intelligence community ignored it, the reaction wasn't outrage. People who track this beat just nodded. They'd already concluded that the U.S. has assembled an AI policy apparatus with all the right titles — czars, portfolios, executive orders — and none of the actual authority. The episode confirmed a suspicion that's been hardening for months: American AI governance is a set of organizational charts that stops short of anyone having to do anything.

The place where governance is actually happening, by default, is everywhere the federal government isn't. Foundry VTT's new AI content policy — it permits AI-assisted code but bans AI-generated campaign content — became a genuine flashpoint in tabletop gaming and creative communities on Bluesky, with the argument splitting not along the usual "AI good/AI bad" lines but over whether Foundry's distinction was coherent at all. That's a more sophisticated quarrel than most congressional hearings manage. And it's a quarrel being replicated in miniature across every institution that got tired of waiting: the college educator circulating a draft acceptable-use policy to a faculty working group, the company sending an "acceptable use" email while its own browser simultaneously upsells AI features, the VTuber clipper whose livelihood got flagged by an automated system that has no appeals process. These aren't marginal cases. They're where people actually experience what "AI regulation" means, and right now what it means is: whatever your employer or your platform decided last Tuesday.

The policy-literate end of Bluesky is tracking the EU AI Act with the kind of sustained attention that American regulatory conversation rarely receives — the EU AI Act Newsletter just published its 97th issue to a committed readership that has largely given up on Washington as a reference point. That divergence is starting to matter in practical ways. The most technically serious conversation about enforcement architecture is happening in reference to a framework that most U.S. platforms are only partially subject to, and the gap between what "AI regulation" means in Brussels versus what it means in a community college faculty meeting is growing wider, not narrower. There's no translation layer. Each conversation assumes the other one doesn't exist.

On the edges, a handful of voices are pushing the idea that AI and crypto policy should become litmus-test questions for the next election cycle — not as an organized campaign but as an instinct that candidates' positions should be public before industry money makes those positions irrelevant. It's a reasonable instinct that currently lacks a hook. It'll find one.

The volume of conversation right now isn't being driven by a single galvanizing event. There's no landmark ruling, no major legislation, no defining executive action. The pressure is distributed — faculty senates, gaming forums, newsletter inboxes, intelligence community post-mortems all running hot simultaneously. The center of gravity that would normally pull these threads together is absent, and nothing suggests it's arriving soon. Which means the micro-policy layer — the Foundrys, the faculty working groups, the acceptable-use emails — isn't a stopgap. It's the regulation. The institutions that were supposed to govern AI didn't get there in time, and the decisions are already being made without them.