{"resourceId":"vermont-sibilia-glasswing-testimony-20260930","versions":[{"version":"external-5d12b54f8a2523f71dcc76eef193709bd9ed6cc60eed1a2403ed7cabd7669c26","resource":{"id":"vermont-sibilia-glasswing-testimony-20260930","title":"Vermont Rep. Sibilia testimony (Sep 30): legislators learned of Anthropic cyber-AI deal by accident; $100K credits, $1,000 liability cap, AI ethics code not updated","organization":"Vermont General Assembly, Joint Information Technology Oversight Committee (testimony of Rep. Laura Sibilia)","sector":"State legislative IT oversight / agency use of frontier AI for defensive cybersecurity","geography":"Vermont statewide","publishedAt":"2026-09-30","publicationDate":"2026-09-30","eventDate":"2026-09-30","sourceName":"Vermont General Assembly (JITOC)","sourceLabel":"Testimony of Representative Laura Sibilia, Joint Information Technology Oversight Committee, Project Glasswing, September 30, 2026","sourceUrl":"https://legislature.vermont.gov/Documents/2026/Workgroups/JITOC/Oversight/W~Laura%20Sibilia~Written%20Testimony~9-30-2026.pdf","evidenceClass":"government-evaluation","outcomeClass":"cautionary","topics":["governance-procurement","data-security","developers-agents","operating-model"],"finding":"Rep. Laura Sibilia's written Sep 30 JITOC testimony says she first learned at the Aug 4 Vermont Digital Government Summit that the Agency of Digital Services (ADS) was in Anthropic's public-sector (SLTT) version of Project Glasswing, and that a state official called it fortunate Vermont did not have to go through the Legislature. She reports being twice told participation was not public, being shown an unsigned Anthropic Evaluation Agreement on Aug 28, and never receiving one requested PowerPoint. Legislative Counsel found no general requirement for legislative approval but pointed to existing AI, procurement and reporting laws and a statutorily required AI Code of Ethics that had not been updated annually. She questions using $100,000 in credits to beta test on state infrastructure under an agreement she says carried a $1,000 liability limit, and says a follow-up memo asks about confidential-data protection, contracting review and whether a NIST impact and risk assessment was done.","sledRelevance":"Directly on point for state CIOs and legislatures: a state agency adopted a vendor-subsidized agentic cyber-AI program under existing executive authority, and the oversight committee is now testing whether AI reporting, procurement and ethics-code statutes were followed. Why now: this primary testimony was TLS-inaccessible on our earlier run (legislature.vt.gov host) and opened successfully tonight via legislature.vermont.gov; the archive holds only the Sep 29 Vermont Public news item, not the legislative record.","evidence":"Opened the JITOC PDF over HTTPS (curl, UA SLED-research-bot/1.0) and extracted text with pdftotext; confirmed dates (Aug 4 summit, Aug 28 meeting, Sep 30 hearing), the $100,000 credits and $1,000 liability-limit statements, the unsigned evaluation agreement, the AI Code of Ethics not updated annually, and the three memo focus areas. Cross-checked the Sep 30 agenda (Anthropic SLTT Program briefing by Secretary Reilly-Hughes) and Sen. Plunkett's Sep 25 committee email describing the memo.","architectureImplications":"The program covers tools that scan and can patch state code, so the architecture question is scope: which repositories and systems the vendor tool can read, write and run against, and what leaves the state boundary. Testimony does not describe the technical environment; that remains the agency's to document.","governanceImplications":"Shows the gap between 'no legislative approval required' and compliance with existing AI inventory, reporting, procurement and ethics-code duties. Oversight bodies are asking for the full agreement, approval and procurement records, and evidence of a NIST-style impact assessment before such pilots proceed.","securityPrivacyImplications":"Questions center on confidential information, credentials and security information exposed to a beta frontier cyber tool, and on accountability if something goes wrong under a low liability cap. No incident is alleged.","caveats":"Advocacy testimony by one legislator; ADS's own testimony and documents were not inspected. The $1,000 liability figure refers to the agreement she was shown, not necessarily final signed terms. No measured security outcomes are reported. Vermont-specific statutes limit transferability.","streamIds":["state-government"],"roles":{"sales":"Frame this as a governance-readiness conversation, not a cyber-tool pitch: Vermont's legislature is asking who authorized a vendor-credit AI trial, what it can access, and why the ethics code was stale. Discovery should ask how the prospect discloses AI trials to oversight bodies and whether free-credit pilots get contract review. Value is a bounded AI-agreement review and disclosure playbook. This evidence cannot support claims that such trials are unsafe, or that any governance package prevents legislative conflict.","engineering":"Fit is pre-engagement scoping for any agentic tool that touches state code: document repositories in scope, read, write and execute permissions, data egress and retention, and kill paths before the trial starts. Integrate with the state's AI inventory and risk-assessment workflow so the configuration on file matches what runs. Constraint: testimony gives no technical environment details, so proof of value is a written access map and impact assessment reviewed by oversight staff, not a vulnerability count.","delivery":"Delivery work is a records-and-controls sprint: assemble the agreement, approvals and procurement trail, complete a NIST-style impact and risk assessment, and update the statutory AI ethics code. Ownership sits with the agency secretary and CISO with legislative counsel review. Acceptance criteria: oversight committee receives complete terms and an access map within an agreed window. Risks are proceeding while questions remain open, and liability terms left at vendor defaults."},"roleDetails":{"sales":{"customerProblem":"State agencies are joining vendor-subsidized AI trials without a disclosure path to oversight bodies, creating legitimacy and contract-risk problems.","stakeholders":["Agency of Digital Services secretary","State CISO","Legislative IT oversight committee","Legislative counsel and Joint Fiscal Office","Procurement office"],"discoveryQuestions":["How are free or credit-funded AI trials reviewed and recorded?","Who tells the legislature about agentic tools on state systems?","Is your statutory AI code of ethics or inventory current?","What liability terms did you accept for beta AI services?"],"valueHypothesis":"A short AI-agreement governance review can reduce oversight friction and surface liability and data-handling gaps before a trial expands.","potentialEngagement":"Two-to-three week review of one AI trial agreement, its approvals and impact assessment, ending in a disclosure package for oversight staff.","unsupportedClaims":["That the Vermont program caused any security incident","That vendor tools reduced vulnerabilities by a measured amount","That legislative approval was legally required","That a governance review guarantees legislative acceptance"]},"engineering":{"fit":"Control design and documentation for agentic cyber tools operating on state code, not deployment of the tool itself.","architectureIntegration":"Map in-scope repositories and systems, permission boundaries, data egress and vendor retention, and log every tool action into the agency SIEM.","prerequisites":["Current application and AI-use inventory","Signed agreement and data-handling terms","NIST AI RMF or equivalent impact-assessment template","Named human approver for code changes"],"constraints":["Testimony lacks technical environment details","Vermont-specific statutory duties","Agreement terms seen were unsigned","Vendor model and terms may change during the trial"],"security":"Treat the vendor tool as a privileged identity: least-privilege credentials, isolated environment, no production secrets in prompts, and human approval before any patch merges.","proofOfValue":["Written access map approved by CISO and shared with oversight staff","Impact assessment matched to the configuration actually running","Audit log sample showing every tool action is attributable"]},"delivery":{"work":"Assemble the AI-trial records, complete an impact and risk assessment, update the AI ethics code, and brief the oversight committee.","dependencies":["Agency legal review of the agreement","Legislative counsel input","Vendor responses on data retention and model versions"],"ownership":"Agency of Digital Services secretary and CISO, with legislative counsel as reviewer.","skillsAdoption":"Agency leaders need training on when AI trials trigger reporting, procurement and ethics-code duties.","governanceCheckpoints":["Pre-trial disclosure to oversight committee","Impact assessment sign-off","Annual AI ethics code update","Liability and indemnity review"],"acceptanceCriteria":["Oversight committee receives full agreement and approvals within 30 days of request","Impact assessment on file before scope expansion","AI ethics code updated within the statutory cycle"],"risks":["Trial continues while oversight questions remain unanswered","Vendor default liability terms left in place","Stale inventory hides other AI agreements"]}},"retrievedAt":"2026-10-04T22:19:52-05:00","enrichedAt":"2026-10-04T22:19:52-05:00","enrichmentBasis":"retrieved source","accessibilityWorkforceImplications":"Limited direct workforce impact; the testimony stresses that legislators and staff lacked visibility, implying training and disclosure duties for agency leaders on AI agreements.","procurementImplications":"Vendor credit and evaluation agreements can bypass ordinary procurement scrutiny. States should route free or credit-funded AI trials through the same review, liability negotiation and records retention as paid contracts.","operatingModelImplications":"Assign a named owner for AI-agreement disclosure to oversight committees, and keep the statutory AI ethics code and inventory current so trials can be measured against them.","sourceVerification":{"responseId":"curl-vt-sibilia-20261004","openedUrl":"https://legislature.vermont.gov/Documents/2026/Workgroups/JITOC/Oversight/W~Laura%20Sibilia~Written%20Testimony~9-30-2026.pdf","referenceExcerpt":"I have serious questions about the State using $100,000 in credits to beta test technology on or against our IT infrastructure for a private company","promptVersion":"sled-research-v4.0","model":null,"basis":"agent-reported inspection"}}}]}