
Loading summary
Marissa Wong
A better help ad. Hold on one second. I just need to. What if you had a room where no one interrupts, no notifications, no expectations, just space to talk with. BetterHelp therapy happens in a space that's yours. Visit betterhelp.com randompodcast for 10% off your first month of online therapy. Your production needs flexibility software. Define it with automation, built to adapt, and the best of it to boost your ot.
Aram Gavor
Transform the everyday with Siemens.
Marissa Wong
I'm Marissa Wong, intern at Lawfare, with an episode from the Lawfare archive for April 12, 2026. On March 26, a federal judge in California issued a ruling temporarily blocking the Department of Defense from labeling Anthropic as a security risk. The ongoing legal challenges filed by Anthropic against the Defense Department may shape how the federal government implements AI tools in the future, especially in the military and and the national security apparatus. For today's archive, I chose an episode from October 28, 2024, in which Kevin Fraser and Aram Gavor discuss the first ever National Security Memo on AI and what its provisions mean for the future of AI policy in the federal government.
Kevin Fraser
It's the lawfare podcast. I'm Kevin Fraser, Senior Research Fellow in the Constitutional Studies at the University of Texas at Austin and a Tarbell Fellow at lawfair, joined by Aram Gavor, Associate Dean for Academic affairs at GW Law.
Aram Gavor
The structural changes that I think is the sleeper in all of this is the procurement. The fact that there's going to be streamlined procurement is going to send some waves, and that's a big policy call.
Kevin Fraser
Today we're talking about the first ever National Security Memo on AI. This long awaited document provides a chance to analyze how the US Aims to position itself in a competitive and perhaps combative race to lead in AI. Aram, we're talking the day after the release of the National Security Memo on AI, or to impress my friends in Washington, the nsm. It didn't emerge out of thin air, though. I think there's a sort of temptation to always see these new documents as pathbreaking, as emerging from thin air and from the new policy thinking. But instead, there's a long history of AI policy building towards this moment. So before we dive into the actual content of the NSM and its significance for AI policy and national security, Aram, can you give us a sense of how this all came to be? How did we end up with this really important document?
Aram Gavor
Sure. And thanks so much Lawfare for for having me on and really appreciate Kevin, this conversation. So I guess the Big backdrop zooming out a little bit is there is no federal statute directly on key that regulates AI. There's a whole bunch of other federal statutes that regulate other subject matter for which AI is just a manifestation. And Congress has been pretty good at funding things or requiring certain types of training, et cetera. But this has been a dominant executive branch policymaking model with regard to the advancement of policy for quite some time. The Obama administration laid out A couple General EOs, President Trump as well. The latest from President Trump executive order 13960 actually is a holdover that was not rescinded but indeed adopted by President Biden. In the Biden administration, the big policy products are these. In 2022, Office of Science and Technology Policy, OSTP for Beltway people issued the blueprint for an AI Bill of Rights which introduced not just AI principles and safety and security, but also a significant integration of Biden administration civil rights component type weaving in then the President on October 30th of last year, so almost a year ago, five days shy of a year ago, signed Executive Order 14110 which laid out the broad enunciation of AI policymaking which did include a significant amount of civil rights. I mentioned the civil rights aspect because that's part of what I think is on the political line right now. There's a lot of common sense and there's a lot of tautological even and some of the advanced policy making that talks about keeping the technology within American supremacy, fostering it, utilizing it within government. That's all within the the cone of what I would view as relatively non political. And then the application of civil rights principles is really where there's a bit of a disagreement on how it's played out. So Following Executive Order 14110 and the build outs of it, the Office of Management and Budget promulgated an M memo M2410 on April 26 if I recall of this year to all the non national security intelligence community agencies laying out a pretty predominant model of strictures, in part borrowing from the GDPR for data privacy with regard to high impact high use cases. The M2410 lays out if there's civil rights impacting or safety impacting AI, especially GAI generative AI, that there has to be a higher level of scrutiny and red teaming. Then in September I think 26th M2418 was promulgated by the Ops of Management and Budget which really lays out procurement particulars with regard to AI. And then we have the instant product or series of products that we're talking about today. The National Security Memorandum that was rolled out yesterday as required by Executive Order 14110, Section 4.8 and associated with it is a framework to advance AI governance and risk management in national security. So the National Security Memorandum is really meant to be a doctrinal document laying out US Military intelligence community national security doctrine for how AI is to be used, adopted, kept safe and kept responsible. The framework to advance AI is meant to be a somewhat modular document that is updated with regard to AI use restrictions, risk management, cataloging and monitoring, AI use and training and accountability. And then the last of the policy products for which we do not have access is a high side, so subject to classification document that I understand relates to export controls. So that's how we get to today.
Kevin Fraser
Procedurally, I can't resist the temptation because we're a mere, I think, 12 days away from the election. So there's an election sized elephant in the room, which begs the question, why does this even matter? Not to sound too cynical, but we're emerging, we're on the precipice of some change in administration. And so a lot of the conversation around this NSM has been is this actually a sort of NSC 68, the historic document that changed our policy approach in the Cold War, or is this just a nice, hey, we care about AI and it has national security implications. How can we think about that before we dive into the weeds of the actual document?
Aram Gavor
Sure. So to unpack that a little bit, there's I think three components I want to lay out. One is from the Biden administration perspective, at least from what I saw, because I was at the War College yesterday when National Security Advisor Jake Sullivan rolled it out and I got the vibe in the room, had a lot of different side conversations. And also this in one respect is the delivery of a promised product that was promised last year. And there was a 270 day time frame for which the National Security Memorandum draft had to be provided to the White House, which triggered sometime I think in mid to late June. And then given the breadth and the reach and the depth of the National Security Memorandum, the framework, and then the high side document, which I haven't seen, makes sense for it might take up until around now for it to be issued. Will it survive? Well, that's highly probabilistic. In part based on the election President Trump at least laid on candidate Trump for the Republican Party platform. I'll read you the text. Artificial intelligence. We will repeal Joe Biden's dangerous Executive order that hinders AI innovation and imposes radical left wing ideas on the development of this technology. In its place, Republicans support AI development rooted in free speech and human flourishing. So that's quite critical to Executive Order 14110, for which this National Security Memorandum is a follow up document. So there's some non zero risk of this going away if President Trump is successful in the election that's taking place in a couple weeks. However, I think if you look a little bit deeper, there's a lot of policy in here that undoubtedly will survive, although some of it would be within that classification of at least political disagreement. The civil rights emphasis and components that I think is at least one of the main areas of contention between the political line in terms of the longevity also in the presidential election, if Vice President Harris is successful, I think there's some likelihood of all of this surviving and perhaps in a Harris presidency, based on the political rhetoric, she may lean into the civil rights component even more. Right. So I think this takes time to pressure test. It takes time to work through. And the longer this policy, or at least aspects of it remain stable, that's when we'll be able to tell what this means. Because ultimately, if the Executive branch changes a lot of its functionality and there are some significant structural changes that we can get into, and also if the private sector takes this as a demand signal, which in some respects at least, Jake Sullivan yesterday said this was asked for by significant aspects of the private sector, then you do have your durable change. I think really the big premise that I want to talk about is the nature of the technology and how it's developed versus other transformative national security technologies.
Kevin Fraser
And that sounds excellent in terms of getting into the weeds. Now, looking at the specific national security memo provisions, what are we seeing this suggests about policy? We see some big headlines in the memoir, Doubling down on AI, focusing on AI, channeling AI, directing AI. It really is emphasizing that no longer are we taking perhaps a wait and see approach to AI and national security, but instead using the weight of the government's procurement power, as you were hinting at, to really direct AI in a specific direction. And that direction is making sure that the US maintains its supremacy, especially vis a vis rivals like China. So what are the core provisions that you want to call out here that listeners should be attentive to?
Aram Gavor
Sure. So with the AI itself as a technology, let's look back to the pages of history and see other transformative technologies that were fostered by the US Government and its research, arms and spending and Funding nuclear physics led by the US Government, information technology, significant advances in computing, rocketry, stealth submarines, any kind of really advanced communication technologies. Many of those were at least funded, developed, if not conceived in the context of government investment. This is the first technology where it's the private sector that led the way and laid out a completely new model for the national security infrastructure of the country to take a technology that it itself did not develop and is looking to apply and then further advance within the executive branch. So that's why this is a little bit different. All of the government structures leading up to this point were based on that prior model that I laid out here. I think there's a significant change and there is a big press I think in this National Security Memorandum to not just encourage the adoption or the responsible adoption of AI, but to encourage the adoption and development of frontier models. This is the advanced stuff that is not publicly available to us. This isn't about taking, let's say like an earlier model of GPT and then applying it in the context of a national security application where it's already inferior by time, it's ready to go, housed in secured data, et cetera, you know, secure data facilities. And for utilization on the high side, this is something much more advanced and sophisticated. So for example, Jake Sullivan yesterday gave an example of a precision missile system. Well, the model that we currently have is we have static weapon platforms, right? It typically takes, you know, some level of before you have additional variants of them and then you build upon the platform, usually in a combination of hardware and software. The model that the National Security Council is thinking about and that is looking to advance, especially with frontier AI models is something very different. So let's go back to that static platform, a precision guided missile. So the hardware might be static for a longer period of time, but it's entirely possible that for it to be most effective, the software might be updated on a far faster interval, maybe monthly, especially to keep up with and perhaps beyond any sort of battlefield adversaries electronic warfare capability. So to do that that requires a completely different mindset that is much more agile, much more flexible. And also the goal is kind of building off of like the post 911 counterterrorism CT ODNI level cross siloing. So getting rid of silos but having cross cutting mechanisms. The goal also I think is for this NSM to foster sharing of these frontier technologies across agencies, sharing potentially even data sets, although that gets a little bit trickier with regard to the civil rights components and the high impact, high use cases. So that's something that's very different. And if that holds that idea, that concept, that is something that's quite transformational.
Kevin Fraser
I think what also stands out with Respect to the NSM's coverage is the fact that this isn't just a national security document in terms of just referring to the Pentagon or just referring to the armed forces, but instead we see a whole panoply of issues being addressed. There's industrial policy here, there's energy policy here, there's administrative law and procurement law. So can you give us a sense of some of those specific provisions and what sort of directions we saw issued to specific agencies in the nsm?
Aram Gavor
Sure. So Kevin, I want to acknowledge I've read everything, I've only read it once and there's all of these different documents and I'm still getting my head together as I'm writing work product on what that might look like in the context of a blog post. So we can walk through this just looking at the title of the document. The document tracks with the subject of the memo. Three distinct advancing the US's leadership in AI, second, harnessing AI to fulfill national security objectives and third, fostering safety and security as well of trustworthiness of artificial intelligence. So the audiences are many audiences are US policymakers, guvies, US listeners on this podcast, strategic partners, strategic competitors, as well as well as industry. So this is meant to be, as Advisor Sullivan described yesterday, a demand signal to industry as well, to indicate here's what the US government wants to do, here's what it's looking for, here's how you should design products and design offerings. And it also provides as a permissioning mechanism for the government to move forward. Now, I think the challenging piece is that if I'm looking at the rollout of M2410, which is that M memo from the Office of Management and budget that applied 14110 to the non national security agencies. The juxtaposition of you should be comfortable using AI, use AI, but then also Red Team a lot is a little bit of a challenge. It's a little bit of a shark I think for some of the agencies. They're trying to figure out how to balance it through. Now this NSM is not just sort of tepid with regard to gai like M2410 is. It's actually saying you need to really reach for the stars here and try to do some very advanced things while still having some of those countermeasures in place. Now keep in mind some of the countermeasures are tautological, comply with the Constitution, comply with civil rights laws, and many of which if it's domestic use, definitely, definitely, definitely apply. If it's foreign use, you're looking at the national security Act of 1947, Executive Order 123 3. That's where that type of U.S. constraint has historically ended. Right? That's how the U.S. government and the President is able to exit order extrajudicial killings abroad in the interest of national security with almost no oversight. Just, you know, there's the, the War powers resolution of 1973 and there's a disclosure to Congress, etc. That type of thing. So that I think is going to be a little bit tricky. But also on top of that, a lot of the agencies have already erected and have been working on privacy considerations and etc. And some level of responsible thinking on all of this. Now, of course, there's a level of opacity with regard to the ic, but at the same time, looking at the pages of history, the US has actually been the world leader in privacy as a concept even, and also many of the civil rights concepts that are sort of adopted in the world today. So if you kind of look back there in some respect, there's something to latch onto. But there's a little bit of a tension there between full supremacy, fully leaning forward on national security, and then also some restraint. But I think also the drafters of this document would be thinking, I'm able to infer it from the broader text, is that because of the private sector lead of all of this and some of the bad examples of where some of the purveyors of the technology in Silicon Valley, some of their employees got cold feet about helping the government on some of the use cases. So it makes sense that this document is aligned in such a way where it doesn't create too much blowback for the private sector where they feel like they can lean in a little bit more without the hesitation, oh, what's this stuff going to be used for? So there's a lot of balancing going on here.
Advertisement Voice
Deleteme makes it easy, quick and safe to remove your personal data online at a time when surveillance and data breaches are common enough to make everyone vulnerable. The New York Times wirecutter has named Deleteme their top pick for data removal services. And let me tell you why. It's easier than ever to find personal information about people online. And having your address, phone number and your family members names hanging out there on the Internet can have real consequences in the real world and make you more vulnerable. You know this already. If the online partisans and the nefarious actors are after you, if you're a civil servant or people have come after you for some reason, they're going to find this data, use it to post nasty things about people, to retaliate against their opinions, and we all know it's going to happen. And I'm telling you, I have had this problem. It won't surprise any of you. Delete Me really helped. I am somebody with an active online presence. I express my opinions pretty freely. I shine lights on foreign embassies, you know, and yet my privacy is important to me. I don't want people coming after me with things that I didn't mean to make public. And you know, once you've been a victim of identity theft and harassment and doxxing, you know, you don't want to make it easy for the bad guys. DeleteMe can help take control of your data and keep your private life private by signing up for Delete Me now at a special discount for Lawfare listeners. Get 20% off your Delete Me plan when you go to JoinDeleteMe.com lawfair20 and use the promo code lawfare20 at checkout. And the only way to get 20% off is to go to JoinDeleteMe.com Lawfare20 and enter Lawfare20 at checkout. That's JoinDeleteMe.com lawfare20 code lawfare20
Marissa Wong
traffic may be locked, but savings isn't. Unlock the savings at Boost Mobile with unlimited wireless for just $25 a month. Forever. No contracts, no no hikes, and you keep your phone. Unlock the savings@boostmobile.com Unlock $25 for ever requires customers to remain active on Boost Unlimited Wireless plan. For full offer details, visit boostmobile.com have you ever been stuck on a weight loss plateau? Trying everything and anything you can to lose that extra weight and reach peak health? We've all been there, but Noom's unlocked the secret to reaching the mountaintop Goin micro the Noom GLP1 microdose program starts at $99 and is delivered to your door in seven days. Start your microdose GLP1 journey today at Noom.com that's N-O-O-M.com Noom micro changes big results Noom GLP1 RX program involves healthy diet, exercise and support. Individual results may vary. Meds and personalization based on clinical need. Not reviewed by FDA for safety, efficacy or quality. No affiliation with Novo Nordisk, Inc. The only US source of FDA approved semaglutide not available in all 50 US states tired of your car insurance rate going up? Even with a clean driving record, you're not alone. That's why there's Jerry, your proactive insurance assistant. Jerry compares rates side by side from over 50 top insurers and helps you switch with ease. Jerry even tracks market rates and alerts you when it's best to shop. No spam calls, no hidden fees. Drivers who save with Jerry could save over $1,300 a year. Switch with confidence. Download the Jerry app or visit Jerry AI Acast today.
Kevin Fraser
I would say so, and I think it's important to call out for listeners as well that when OpenAI, for example, initially was getting a lot of attention for ChatGPT's initial release, there were provisions there that said they did not intend to use their models or to allow their models to be used for military purposes. Over time, we have seen those sorts of provisions disappear or be softened. Similarly anthropic, the arguably more safety oriented AI lab has seemingly been leaning more and more into national security. And so the sort of inevitability of the militarization of AI seems to have finally happened. For better, for worse. What have you. As you pointed out, this is the doubling down moment. This is the moment where the Biden administration, most likely for any future administration, has decided that the US Is going to lead in the national security uses of AI, especially vis a vis China. And I think the provisions that are spread throughout the document that really emphasize the importance of pushing back against rivals. Sometimes China's explicitly named, sometimes they're just inferred. But we see this huge focus on making sure that China isn't able to, for example, steal IP from the labs, not able to interfere with the supply chain with respect to AI development. So seeing the national security ramifications of this, it's hard to miss that this is very much in the context of a greater wave of AI being a somewhat inevitable force for US aims, especially against China. Do you have any, have you picked up any other insights? Did Advisor Sullivan have much to say about that China dynamic?
Aram Gavor
Yes. Yes you did. So the posture of the Biden administration is, and this is pretty consistent, is that of strategic competition. It's not just strategic competition, but also strategic alignment, where there is an alignment between US and any sort of foreign adversary's interest. So one example of this would be the coordination between the US and the PRC to disrupt the supply chain of fentanyl precursors to the United States. So essentially on drugs so that is one example that he enumerated yesterday of where there's an alignment of interests. In another respect, this document, although not stating the PRC and there are other adversaries besides the PRC as well, or at least strategic competitors, I wouldn't even say adversary, it's a strategic competitor, is that the US should vigorously compete where interests are not aligned with any strategic competitor and potentially even strategic allies as well. And that's how US maintains supremacy. But the goal also, and this is in the backdrop, is with a concurrent emphasis on increased communication, having some sort of communication line, even mill to mil communication, PRC US mil to mil communication, so that that vigorous strategic competition does not hinge on conflict. The goal is nobody wants conflict. The plan is strategic competition, open communication where it is appropriate, maintaining some level of connection, searching for ways to have commonality with regard to interests. Because this is also meant designed to be a US export as well, is a vision of a free and democratic world with regard to the responsible and sound adoption of AI. So you know, outside of this document, the US has participated at the Bletchley convening a couple years ago, last year in Seoul as well, laying out that type of a framework and trying to build connections and camaraderie. Yet you're right, there's a significant component with regard to maintaining intellectual property and technology itself. So that's why there's a high side export control. But that's sort of unsurprising. This is not the first time the US has engaged. This is just a manifestation of a long standing US policy on these types of things also in reference to certain types of data. So the US government has done a fair bit to catch up from the types of conversations that we've had years ago where something like 8% of machine learning PhDs find their way into public service. Just because if you can get $800,000 right off the bat at a Bay Area company, you're going to do that. So there's increased amounts of tech industry sponsored fellowships in the U.S. government. Now there's AI officers, chief AI officers, sometimes dual headed with the chief data or Privacy officer like you have with the Department of Defense. So this type of learning process is moving forward. Even with regard to the GSA's 2024 AI Training Series, where a colleague, Jessica Tilleman and I were responsible for one third of them. Of those sessions we handled the procurement with regard to AI and then Stanford and Princeton handled leadership and then technology, the technical aspects of it. This really is, I would say, in the good sense A whole of government approach with regard to the technology. And I think regardless of who wins in the, you know, in the general, a lot of the non controversial stuff, of which there's like a majority of it is in my view just like good old well thought out, well developed policy that many people should agree on and should not be politicized. I think that's going to continue on and then of course, depending on the outcome of the election. It's pretty classic, you know, if you have a cross party Oval Office transition, you know, look, look in the first two weeks for a lot of things being rescinded.
Kevin Fraser
Well, as you pointed out, I think you're one of the few folks who I would call a sort of government AI whisperer. If anyone knew how government was with respect to adopting AI, it's got to be you. And one of the provisions that really stuck out to me was the emphasis on recruiting and retaining AI talent. And so with respect to the idea of perhaps a change in immigration policy or a liberalization of some immigration rules to try to bring in more of that AI talent, is that one of those bipartisan measures you think might withstand the test of either administration, Harris or Trump?
Aram Gavor
Yeah, I think so. You mentioned immigration. I think there's a significant commonality of interest with regard to making certain types of visas, like non immigrant visas in particular, and potentially even immigrant visa categories available for people who have that type of talent and knowledge. Those types of categories already exist. Right. So there's like L visas for specialty knowledge. Exceptional folks can have an O. And certainly this could serve as a mechanism for which there could be commonality and sort of a moment of bipartisan support in immigration with regard to this type of tech and keeping that talent in the United States. And then of course there's F visas, there's stem, opt, there's all these different types of mechanisms for which there's a lot of discretion within the executive branch to be hospitable. And I would be very surprised if that wasn't exercised. Although there's also a national security risk too to that. Right. So I think it has to be
Kevin Fraser
balanced and thinking about the political significance of this nsm for those of us who weren't at the War College listening to Advisor Sullivan and then getting the sort of immediate spin from stakeholders who are in the know. What was sort of the, the vibes in the room, right. Was this regarded as some groundbreaking moment or was there a certain degree of ambivalence about its ramifications? What have you seen from key stakeholders in response to the release of the memo.
Aram Gavor
So there's definitely enthusiasm, definitely among the political ranks, but that's unsurprising. Right. What I was most impressed by was for non political folks throughout the federal government that I've been in touch with, there's a general support for this. I think there is a significant level of almost apprehension, if not some level of fear with regard to the adoption of advanced AI models and algorithms. And this document is a permissioning mechanism in some respect. It's a facilitation mechanism because undoubtedly Silicon Valley Bay Area influence is in this. This is not necessarily like a restrictionist document. It also isn't necessarily like a heavy, heavy competition document either. Right. This is about. There's almost like a pragmatic nature to the document which is, well, if we're talking about the most advanced frontier models, well, there's only a couple players who can produce those. And if you're trying to get into that type of, you know, mass compute, quantum computing, really sophisticated applications that require, let's say, hardware that's in the possession only of the US government, that is in part the audience as well. So what I have not observed, speaking informally and nothing untoward with many agencies, is that there's no adverse. Oh man, this is, this is not, this is gonna suck. That's not the vibe that I'm getting. And my guess is no matter what, the executive branch is going to be focused on a lot of the key principles. I think there is a distinct difference in views between fostering safety as well, like the NIST AI Safety Institute. That's something where there's going to have to be a fair amount of attention as to how successful that is, whether that works right as an entity. If we're taking the text of the Republican platform, the emphasis on free speech, at least what I understand it to mean in that text really is about not really laissez faire, but more of just providing flexibility within the industry itself for the direction that it wants to go in. And that necessarily means fewer direct restrictions.
Kevin Fraser
There was certainly an early win for the ac, the AI Safety Institute, where in the NSM it calls out the AC as the singular point of contact for AI industry stakeholders. And so I really wonder about the longevity of that provision, especially if we see a Trump administration that maybe isn't as willing to embrace the ac, because I can also imagine quite a few agencies are thinking, huh, you know, I was developing a good relationship with Anthropic or OpenAI or what have you, and to now have this upstart Institute become the focal point of their attention I think is going to be a really interesting maneuver. Whether that sort of coordination has any legs or not.
Aram Gavor
Yeah. So I mean I think this sort of remains to be seen. I think you fairly stated sort of the skeptical position. I'll take it one step further. Is it a regulatory agency that is unsupported by a statute or an express authorization of Congress? Especially at a time when there is judicial skepticism for those kinds of things with Axon, Arthrex, Sloper, Bright, Kaiser, even corner posts with regard to the temporality of suit Jarkercy, a number of other doctrinal and judicial realignment of the relationship between executive branch administrative agencies and the regulated public that are in favor of the regulated public. So I think a lot of it remains to be seen. I've gone on record myself thinking, and I did this right after like the big Senate testimony of Sam Altman and Google and actually an IBM in May of 2023 that I do think that there should be some federal regulatory presence, but almost as an advisory mechanism that has a two year reauthorization that has relatively weak powers and is really sort of meant to be a consensus building entity and providing guardrails for really the types of use cases that are pretty significant. So for example, like non consensual deepfake pornography. Right. That's, that's like a good one that. No, nobody thinks the government should have any function doing in any way whatsoever, at least domestically. Right. So this is really just like the wait and see. And of course if the thing is designed without a statutory framework to undergird it, you know, that could survive or it could be like a day one and therefore it is gone type thing.
Kevin Fraser
Before we go our merry ways, before we inevitably get back together again to discuss how this NSM is evolving and being received, I wonder if there's anything that you were surprised was left out. Was there anything you were looking for and anticipating that perhaps you didn't see be explicitly expressed?
Aram Gavor
That's a good one. I haven't. I think I'd have to go through maybe two more iterations of reading all of these materials. Perhaps it's like 14,000 words in all.
Kevin Fraser
So we'll give you like two hours and then if you feel like to really.
Aram Gavor
Yeah, exactly. To really analyze the negative space associated with it. But really I think the structural changes that I think is the sleeper in all of this is the procurement. The fact that there's going to be streamlined procurement is going to send some waves and that's a big policy call. The procurement structures that exist predominantly are meant to foster competition, correctness, thoroughness, all of those other features that are all good policy. And the choice, the intentional choice to focus on a streamlined cross cutting procurement policy certainly is an expression of seriousness for really staying on the cutting edge because you're doing that with a necessarily at least a structurally higher likelihood or lower ability to sort of dissuade concepts like lock in, right, where there's like a couple of vendors and they're just there and it's more difficult for smaller players to get in. But that's the great game that the US is in right now. And that's sort of been consistent with a lot of other major procurement mechanisms in the past. The difference here is, you know, is that the US itself developed the SR71, right, with Lockheed Martin and that was the plan and it wanted to do so for a while. And like other major military technologies, there's always a couple big, big, big players who can bid, you know, in a sealed bidding that's classified, and then ultimately one is selected and it moves forward. But here the technology, again I'm circling back, already exists. So there's a latent capability that is already demonstrably proven with adequate computer mechanisms of adapting to confabulation, et cetera, that really need to have the applied use case. And then also perhaps certain governmental capabilities like the, you know, there's mass compute out there, but then there's real quantum computing capabilities within the US Government's domain as well, and sort of mirroring those up, stitching them together and integrating them in a way that is consistent, integrated and sufficiently sustained to develop fruits of use cases that we don't even know of yet today, right, like still discovering, like, whoa, it'd be really good for this, that type of thing. So like one example, you know, that I gave in the executive branch wide training series on national security AI procurements, when I got a question, like a simple question from the audience, but a good one audience of like 1400 people is like, well, how accurate do these things need to be? Well, we're talking about Gai's, whether they are large language or large graphic models. Well, if you're four days out and it's from, from a hurricane, you know, you're from Florida and if it's for meteorological purposes and you're able to be 5% more accurate than the best model out there, that's awesome. But if you're engaging in utilization of an integrated AI for say theater defense, for an aircraft Carrier battle group. And you need to have pretty clear understanding of targeting in a 200 or even a 300 mile radius, especially to be able to deal with hypersonics. It better be pretty darn accurate. So you're not mistargeting, let's say like an innocent commercial airliner that's like happening to be flying like a couple hundred miles away just on its merry way. So those are the types of like frontier capabilities that I am inferring because obviously they're not going to be saying that in public with no Chatham House rules or classification regime.
Kevin Fraser
Well, and I think too the thing that was maybe missing on my end was, and correct me if I'm wrong, just an appreciation for the amount of resources that are going to have to be allocated towards this effort. I mean when we talk about spending and AI, this is not millions of dollars, hundreds of millions of dollars, billions of dollars, hundreds of billions of dollars. But really to be on the frontier, trillions of dollars. And the magnitude of those resources, in my opinion maybe wasn't fully expressed there. But from my understanding, what I've heard is that Advisor Sullivan for example, did make some pretty astonishing statements about just how much energy development, for example, we're going to have to spin up if we're going to realize frontier AI on a sort of national scale. Seeing perhaps 25% of all energy production go toward AI is not outside the realm of possibility with this new vision of AI as conceived by the nsf.
Aram Gavor
I agree. I mean that's, that's where just in the past couple of weeks, I think the only technology that exists to be able to provide that type of, of energy, especially if you're considering like the rest of the grid that's under pressure from electric vehicle, from EVs and things like that, is nuclear. Right. And I think that actually is, is perhaps the strongest case for the return and reconsideration of nuclear energy that I have seen in my lifetime. And yes, I agree that it probably is some trillions, but, but over a period of time, like maybe 10 years or so. But what I think this NSM does and does well is I think there's a level of cognizance that AI could and perhaps is becoming like the new counterterrorism for those of us in government 20 years ago, and I was like an intern 20 years ago, but I was in government like in 07.
Kevin Fraser
It still counts. Still counts, yeah.
Aram Gavor
I mean the US is still in Iraq and the Green Zone is still active. Was just everything. They're just throwing money at ct, ct, ct. And a lot of it was waste. Some of it was highly effective and there was a lot of structural change, like, you know, the Homeland security Act of 2002, Real ID act of 2005, Patriot act, all these different statutory schemes, you know, amending the National Security act, creating odni, all of these different concepts that laid out different doctrines, as well as structures and investment. I think there's a cognizance that we don't want AI to be the next CT in the sense that you have to use that flash word to get more funding and you can just do random stupid things that you just want in your own sub agency and therefore you get the green light. There has to be more of an intentioned application. So we're not talking. I mean, I'm sure Copilot is very, very useful, but not like for purposes of, you know, helping those aircraft carrier battle groups function. We're not talking about that. So I think this takes steps to sort of learn from some of the mistakes from the war on terror. And again, I don't want to trash that too much because the US was in a very reactive posture. Like you needed to do a lot of things really, really fast. And whenever you do that, you sort of get a certain result that's suboptimal. Like if you look at the massive loan schemes, cash loan schemes, during COVID right, There's a ton of oversight and there's a ton of misapplication. But that was part of the design was just to get the money out fast and the cost was deemed acceptable at the time of decision. So here I think there's a more intentional, structured way to do it. Some of the provisions 3 3C lays out that AI Safety Institute under NIST. NIST getting in the space for this stuff was a Trump administration thing. Now I think again, the policy differences will be with regard to the civil rights things, with regard to even looking, let's say, the framework to advance AI governance. So this is the framework document, page three. So here's like the big no nos use restrictions. Well, some of them are pretty tautological. Right, it's unlawfully suppress or burden the right of free speech or right to legal counsel, especially for U.S. citizens. Well, I'm happy that it's in there because it needs to be in there. Right. And that's just broader constitutional protection. But then there's a couple other ones too, which are pure policy calls. Detect, measure or infer individual's emotional state from data acquired about the person. Except for a lawful and justified reason. So that is something that is clearly a policy call or infer or determine relying solely on biometric data a person's religious, ethnic, racial, sexual orientation, disability status, gender identity or political identity. That's one of the types of things that I'm sure Republicans are looking at. But then there's a lot of other stuff where it's very straightforward. You know, do not remove the human in the loop for actions critical to informing executive decisions by the President to initiate or terminate nuclear weapons deployment. Thank you. That's good. We want that in there, right? Thank you.
Kevin Fraser
Thank you.
Aram Gavor
Thank you.
Kevin Fraser
For the human before the nuke, this
Aram Gavor
is a maintaining the Article 2 like Core Executive Commander in Chief prerogative. I am happy that's written down in a document somewhere. And there it is. There we go.
Kevin Fraser
Well, for the rest of it, we will indeed unfortunately have to wait and see. But Aram, your two cents on this are always worth a nickel, even with inflation. So thank you very much for coming on and I'm sure this is not the last time we'll be talking.
Aram Gavor
Always a pleasure.
Kevin Fraser
The Lawfare Podcast is produced in cooperation with the Brookings Institution. You can get ad free versions of this and other Lawfare podcasts by becoming a Lawfare material supporter through our website, lawfairmedia.org support. You'll also get access to special events and other content available only to our supporters. Please rate and review us wherever you get your podcasts. Look out for our other podcasts including Rational Security, Chatter, Allies and the Aftermath. Our latest Lawfare Presents podcast series on the government's response to January 6th. Check out our written work@lawfaremedia.org the podcast is edited by Jen Pacha and your audio engineer. This episode was Noam Osban of Go Rodeo. Our theme song is from Alibi Music. As always, thank you for listening.
Marissa Wong
Want to turn your timeline into a
Kevin Fraser
fast lane digital twinit to outpace the
Marissa Wong
field with fast and confident decisions?
Aram Gavor
Transform the everyday with Siemens.
Episode: Lawfare Archive: Aram Gavoor on the Biden Administration’s AI National Security Memo
Release Date: April 12, 2026
Host: Kevin Fraser
Guest: Aram Gavoor, Associate Dean for Academic Affairs at GW Law
This episode revisits an October 28, 2024 conversation between Kevin Fraser and Aram Gavoor, dissecting the Biden Administration’s first-ever National Security Memorandum (NSM) on Artificial Intelligence (AI). The discussion unpacks the historical context, the strategic rationale, the document’s core provisions, its implications for U.S. national security and industry, and what the future may hold—particularly with an impending presidential election.
(03:19–07:32)
“This has been a dominant executive branch policymaking model... The Obama administration laid out a couple general EOs, President Trump as well. The latest from President Trump executive order 13960 actually is a holdover that was not rescinded but indeed adopted by President Biden.”
— Aram Gavoor (03:21)
(07:32–11:24)
“There’s some non-zero risk of this going away if President Trump is successful in the election... However, if you look a little bit deeper, there’s a lot of policy in here that undoubtedly will survive.”
— Aram Gavoor (08:15)
(11:24–16:43)
“This is the first technology where it’s the private sector that led the way and laid out a completely new model for the national security infrastructure… that is something that’s quite transformational.”
— Aram Gavoor (12:14)
(16:07–21:15)
“The structural changes that I think is the sleeper in all of this is the procurement. The fact that there’s going to be streamlined procurement is going to send some waves, and that’s a big policy call.”
— Aram Gavoor (02:08, reinforced at 40:13)
(25:25–31:43)
“This is the doubling down moment... the US is going to lead in the national security uses of AI, especially vis a vis China.”
— Kevin Fraser (25:25)
“The posture of the Biden administration is... strategic competition... but also strategic alignment, where there is an alignment between US and any sort of foreign adversary’s interest... But the goal also... is with a concurrent emphasis on increased communication.”
— Aram Gavoor (27:18)
(31:43–37:39)
“There’s a general support for this. I think there is a significant level of almost apprehension, if not some level of fear with regard to the adoption of advanced AI models and algorithms. And this document is a permissioning mechanism in some respect.”
— Aram Gavoor (34:11)
(37:39–44:01)
“Is it a regulatory agency that is unsupported by a statute or express authorization of Congress?... A lot of it remains to be seen.”
— Aram Gavoor (37:39)
“The fact that there’s going to be streamlined procurement is going to send some waves, and that’s a big policy call.”
— Aram Gavoor (40:13)
(44:01–49:34)
“Do not remove the human in the loop for actions critical to informing executive decisions by the President to initiate or terminate nuclear weapons deployment. Thank you. That’s good. We want that in there, right? Thank you.”
— Aram Gavoor (49:20)
On the uniqueness of AI as a government challenge:
“This is the first technology where it’s the private sector that led the way and laid out a completely new model for the national security infrastructure…”
— Aram Gavoor (12:14)
On the scale of the challenge:
“Seeing perhaps 25% of all energy production go toward AI is not outside the realm of possibility with this new vision of AI as conceived by the NSM.”
— Kevin Fraser (44:01)
On prohibiting AI from solo control of nuclear weapons:
“Do not remove the human in the loop for actions critical to informing executive decisions by the President to initiate or terminate nuclear weapons deployment. Thank you.”
— Aram Gavoor (49:20)
On the pragmatic vibe in government:
“This is not necessarily like a restrictionist document. It also isn’t necessarily like a heavy, heavy competition document either. Right. This is about–there’s almost like a pragmatic nature to the document…”
— Aram Gavoor (34:11)
| Segment Topic | Timestamp | |--------------------------------------------------------------------|------------| | Introduction & Legal Backdrop | 03:19–07:32| | Political context & policy endurance | 07:32–11:24| | Main provisions, frontier AI, new procurement philosophy | 11:24–16:43| | Multi-domain (industrial, civil, procurement) impacts; balancing | 16:07–21:15| | Industry convergence; militarization & China competition | 25:25–31:43| | Talent, visas, agency reactions, AI Safety Institute status | 31:43–37:39| | Regulatory questions, missing pieces, procurement as “sleeper” | 37:39–44:01| | Learning from counterterror era, intentional structure, big risks | 44:01–49:34| | Prohibitions, explicit safeguards, closing reflections | 49:20–49:34|
This episode delivers a thorough and nuanced exploration of the Biden Administration’s National Security Memorandum on AI—a document representing a fundamental inflection point in U.S. AI policy, procurement, military adoption, and industrial alignment. While the NSM's long-term impact remains uncertain and linked to the outcome of the 2024 election, its balance of innovation, safety, and civil rights sets a template likely to shape AI governance for years to come. The discussion’s candid, pragmatic tone offers rare insight into how theory, practice, and politics will continue to collide at the intersection of AI and national security.