Three Governments Invented the Same Body in 90 Days. Why They Didn't Reuse the One That Already Exists Is the Real Story.

On June 2, Connecticut announced the country's first pilot for Independent Verification Organizations (IVOs) of AI models: the law, SB5 (Public Act 26-15), had been signed a few days earlier. Two days later, a bipartisan discussion draft in the U.S. House of Representatives, the Great American AI Act by Obernolte and Trahan, proposed that NIST license those same independent verification organizations through its CAISI program. On July 7, the European Commission committed to building its own evaluation capacity for frontier AI.Sources: SB5 / Public Act 26-15 (Connecticut) · Great American AI Act (discussion draft) · EU Action Plan (COM(2026) 577 final)

Three governments, three jurisdictions, zero visible coordination between them, and the same institutional invention in barely ninety days: someone external, licensed, who verifies whether an AI system does what it claims to do.

The interesting part is not that they arrived at the same idea. It is that none of the three seems to have paused to ask whether that idea already exists somewhere else.

It has been solved for decades, at least for almost anything else that needs independent verification. It is called accreditation, and it has an entire body of standards devoted to it, the ISO 17000 series. It answers exactly the question these three governments are separately reinventing, who verifies the verifier, through mechanisms that are already mature: peer evaluation, mutual recognition, competence review, independence requirements. It is the same machinery that certifies that a laboratory can measure the strength of a construction material, that an auditor can certify quality systems, that a certification body can trust the word of another certification body in another country.Sources: ISO/IEC 17011 (accreditation bodies)

So the obvious question is why Connecticut, the U.S. Congress, and the European Commission, each on its own, are building something new from scratch instead of simply connecting AI verification to that already-existing infrastructure.

The easy answer is that regulators did not know about the tool. That may be part of it. But there is a better reason, and it is the one that really matters for anyone building in this space right now.

Traditional accreditation works because the thing being verified stays still. A laboratory is accredited once to run a specific test method, and that method remains valid for years, because steel does not change what it can bear from one review to the next. Accreditation is, at bottom, certifying that someone knows how to correctly repeat something that does not change.

An AI model does not stay still. The same provider, the same product name, can be a materially different system from one version to the next, new weights, new fine-tuning, capabilities that appear or disappear between one release and the next. A verifier competent to audit a model in March may be auditing in June something that no longer behaves the same way, without anything in the original accreditation process having anticipated it.

That changes the question that has to be answered. It is not only whether a verifier is competent, that is what traditional accreditation already knows how to certify. It is whether that verifier is competent to keep re-establishing its own competence at the pace at which the thing it is verifying changes. That is continuous accreditation, not periodic accreditation, and it is a problem the ISO 17000 series, as it exists today, was never designed to solve.

Seen this way, the reinvention by Connecticut, Congress, and Brussels stops looking like pure bureaucratic ignorance. It is a symptom of a real gap, even if none of the three has named it in those terms yet. Each is patching around the problem with different designs, licensing, oversight, in-house evaluation capacity, instead of solving the piece that is actually missing.

When these three regimes mature, and everything suggests they will converge because they are solving the same problem from different angles, those who win approval will not only be the ones who arrive with traditional-style accreditation discipline. They will be the ones who can demonstrate something harder, that their own competence to verify is reviewed and renewed at the same pace at which the thing they verify changes.

Three governments inventing the same thing in ninety days is not a coincidence. It is the clearest signal we are going to get, for a while, that the need is real. What no one has said out loud yet is that the model they are using to meet it, borrowed from a world where things stay still, does not fit what they are trying to verify.