Surfacing these agent incidents is exactly how safety is supposed to work, and OpenAI is now asking Congress for binding national rules instead of hiding behind voluntary pledges. Capability-based testing, independent audits, cybersecurity standards and incident reporting would catch covert behavior across the whole industry. Backing California's new AI laws shows a willingness to be held to account.