US Department of Justice Establishes Dedicated AI Enforcement Body, but a Legal Loophole Leaves It Handicapped from the Start

The U.S. Department of Justice has created DOJ-SITF, its first dedicated AI enforcement body holding both criminal and civil authority. However, because ex

On November 5, 2026, the U.S. Department of Justice formally announced the establishment of the Superintelligence Enforcement Task Force, abbreviated DOJ-SITF, based on a memo signed by Attorney General Todd Blanche. This is the first dedicated AI body in U.S. history to hold both criminal and civil enforcement authority, jointly led by Assistant Deputy Attorney General Stanley Woodward and Acting Assistant Deputy Attorney General Stephen Weiss.

The memo was signed on October 13, and the public announcement came three weeks later. The unit has already been operating internally within the DOJ for at least nearly a month, and corporate compliance teams were stopped at the door by the new body without any warning.

From "Setting Rules" to "Making Arrests": What This Shift Means

Over the past few years, AI governance at the U.S. federal level has mainly remained at the level of executive instructions and guidance documents—the White House issued executive orders, departments and agencies set frameworks, and companies complied voluntarily. The emergence of DOJ-SITF is a qualitative change: it no longer merely tells companies "what they should do," but explicitly states that it will prosecute actors who "did it wrong."

DOJ-SITF's responsibilities cover four levels: organizing the DOJ's criminal and civil enforcement actions in the AI field; recommending enforcement priorities to the Attorney General; developing actionable prosecutorial guidance for various types of illegal AI conduct; and serving as the liaison hub with the White House "Superintelligence Force" task force.

This White House-level task force is chaired by Jay Clayton, the Director of National Intelligence and former SEC Chairman. It held its first meeting on October 15 and reached a preliminary consensus on an "early warning mechanism" for AI companies to provide the government when they encounter intrusions, hacker attacks, and jailbreak attacks. DOJ-SITF will coordinate with it on the federal enforcement side.

DOJ-SITF has also absorbed the AI Litigation Task Force established in January 2026 under former Attorney General Pam Bondi. This is not starting from scratch, but merging and expanding existing litigation experience with new criminal enforcement functions.

The Legal Loophole That Cannot Be Ignored: Whose "Intent"?

Between announcing the establishment and actually being able to prosecute lies a key legal gap.

Legal scholar Paul Ohm points out that the body has not created any new criminal offense, and the existing enforcement basis remains pre-AI-era laws such as the Computer Fraud and Abuse Act (CFAA). These laws face a fundamental obstacle when prosecuting cases involving AI: determining intent.

The CFAA requires prosecutors to prove that the violation involved deliberate human operation. When a victim is breached by an autonomous AI agent, prosecutors need to prove that a specific human had subjective intent for the attack—an almost insoluble evidentiary problem in an era when AI agents can independently plan and execute attacks. Under the same technical facts, if the "AI agent" is replaced with an "employee," "a federal crime would be almost certain"; but in the case of an AI agent, "even OpenAI and its employees may not have committed a crime."

This means that what DOJ-SITF can most easily prosecute is precisely traditional crimes carried out with AI under clear human instructions—AI-assisted phishing, AI-generated fraud content, and human-controlled AI attack tools. But for the boundary-crossing behavior of autonomous AI systems that truly worries all parties, the existing legal framework has almost no way to address it.

Corporate Compliance: The Biggest Risk Is the Absence of Standards

What troubles corporate compliance departments even more than the legal loophole is the standards vacuum. Assistant Deputy Attorney General Weiss stated explicitly in the announcement that the DOJ will require companies to have "strict internal controls," ensure that AI technology "operates as intended," and strengthen regular reporting on AI risks.

The problem is: what counts as "strict"? What counts as "as intended"? What reporting frequency and format meet the standard? At present, the DOJ has not provided any specific standards, nor has it published any enforcement timetable.

This ambiguity is itself an enforcement tool—it places all companies in a state of potential noncompliance and gives prosecutors broad discretion. For AI companies operating in the U.S. market, this means they must begin proactively building recordable and auditable internal control systems rather than waiting for regulators to define the compliance threshold.

Current regulatory signals are not isolated. In the same week that DOJ-SITF was announced, the Office of the Comptroller of the Currency (OCC) released the first AI regulatory framework for banking; the U.S. Securities and Exchange Commission (SEC) also included "superintelligence" in its 2027 examination priorities. Multiple departments tightening in sync shows that this is not a single-agency action, but a coordinated shift in the federal regulatory system.

The Term "Superintelligence" Conceals a Political Signal

The entire DOJ-SITF system deliberately avoids the term "artificial intelligence" (AI) and uniformly uses "superintelligence" (SI). This stems from an executive order signed by President Trump on September 29, 2026, requiring federal agencies to rename AI as SI in non-regulatory documents.

From a technical perspective, this is a semantic regression—"superintelligence" has a clear definition in academia (philosopher Nick Bostrom defined it as "an intellect that greatly exceeds human cognitive performance in virtually every field"), far exceeding the capability boundary of current AI systems. Using this term to refer to today's GPT or Claude is an obvious conceptual mismatch.

But the political logic is clear: using the term "superintelligence" helps elevate the U.S. AI competition narrative to the same strategic height as nuclear weapons and the space race, providing a legitimizing narrative basis for greater state intervention. DOJ-SITF's mission statement explicitly says it will "advance American superintelligence dominance"—this exceeds the mandate boundary of a traditional law enforcement agency and carries a distinct industrial policy flavor.

Independent Judgment: Prosecutorial Capacity Remains Untested, Compliance Pressure Has Already Arrived

Overall, DOJ-SITF's strategic significance exceeds its current enforcement capacity. In the short term, it is more likely to play a deterrent role than to be a large-scale prosecutor: there are no new offenses, no supporting standards, and legal "intent" determination is difficult, so prosecutions truly targeting autonomous AI behavior will be hard to advance in judicial practice.

But this does not mean companies can wait and see. Once the "prosecutorial guidance" DOJ-SITF is expected to issue lands, it will become a de facto industry compliance benchmark; the joint coordination mechanism with the FTC also means civil penalties and criminal prosecutions may be applied in parallel. Companies that cut corners on internal controls, risk reporting, and AI behavior records are accumulating traceable compliance risk.