[ai-control] Re: -04 drafts for evaluation

Erin Simon <erinsimon@google.com> Tue, 04 November 2025 15:46 UTC

Return-Path: <erinsimon@google.com>
X-Original-To: ai-control@mail2.ietf.org
Delivered-To: ai-control@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 7C00F829A927 for <ai-control@mail2.ietf.org>; Tue, 4 Nov 2025 07:46:04 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -17.5
X-Spam-Level:
X-Spam-Status: No, score=-17.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=unavailable autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UVxPj1rs2Qd1 for <ai-control@mail2.ietf.org>; Tue, 4 Nov 2025 07:46:03 -0800 (PST)
Received: from mail-pf1-x433.google.com (mail-pf1-x433.google.com [IPv6:2607:f8b0:4864:20::433]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id CE845829A920 for <ai-control@ietf.org>; Tue, 4 Nov 2025 07:46:03 -0800 (PST)
Received: by mail-pf1-x433.google.com with SMTP id d2e1a72fcca58-7aae5f2633dso2378372b3a.3 for <ai-control@ietf.org>; Tue, 04 Nov 2025 07:46:03 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20230601; t=1762271157; x=1762875957; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=PMm3CwAeuBjJQhOF90cb2JxnEFbyneukNSUQ4H6G4Lk=; b=tiUsqsT+42YckyoWkoVSL1ZvTb6u/BKC6G+3AEVjZyJukQPu5zekCDblzhiw8vnKNo 0wg0n40i68zr05ykn08K0ifsMqZBDADn9K2FrN1MgAIHEkMCxSsibaM8dmFMctJaeCMl Y869F8CHOmrfBJrEQ5sd9QBiGlLsCZqE0WmrpX0oVcgA9Y/E1LEcu8PKJYdAgwmqTsiW nIy55WSfhlBFxyIsRjUasWDnal0Cf207fG4befsjFPs7mk1zZe0UutP1SrTc3c6Asn2K TkU9+8GJ9TI+EGRIMZAAW1FSkaqwvA/TJvwpZmxPcwG4cQ1Fqw50FrWMuCoQDEZKk8SJ KzaQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1762271157; x=1762875957; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=PMm3CwAeuBjJQhOF90cb2JxnEFbyneukNSUQ4H6G4Lk=; b=uuFiElE6wS9SsCGTSLYivaXKo8easvOIkcBfwEs6AqldhvWdF5SSj2fyvuy2AitwaT QQcjFc3Hg8PTu4DV49sO761fajApS/R80AYfpmlzKLFGECAmGkNIOAY0IZ3IvR518ueA M56TpWF6LnTVfnY0DYwDBuWRtwbndwIuHDlRjk387y3/b0vLz68KvZsm6RquzQyhVdMG 7pg6YV02GA8ZCbP96/DmA2WPoAF3TgDnjiwFjrg2FXRoNwDjFv1+BOcYgTWMZ15nzYTu RAOyP+tMLqE5/jcGbF3LcPPp0cII130rcz60uvoeHqiVvv57m12DG9ELoFWL7R2H4Emt hhPg==
X-Forwarded-Encrypted: i=1; AJvYcCWaernGgZiB0TBf6i9g7oOmGn6kgs3PJ27C4ppFxXgru9gtngsduqjRoyKyjq53IDjg060gAzCdTQSY@ietf.org
X-Gm-Message-State: AOJu0YwyWeijG4lYEXjJwYNvbLwA1xGxK4V2bwWmu7viOEoIzYgIC+iL p+h+JVvPDwPwEoOAUMQglPHfozLkc9xI//Xp++baz74RyMxS9QRy34ptsZWohQxikY6NWCHs/ir JJJD7StqxGA5p6mny9wdBjktqdy4Wr8cMBd5RVOmd
X-Gm-Gg: ASbGncvCwrnfQFMaA4qwqp7joQ2xzzeNx5TYuPmNBThP8awXJCIAIQro1AiqOrkc5Y0 rKXJLbxwKnppwyjsGkpnKSt3Pmp0YaDUfHnyTmeIIB1pB3qZyLnkn0mGbiTmgKm1TVUhMjxdXpT eRaN1TeXwpp1wH19IgirzgB5Glowgu675/xkz3ZwBcJgNDVHn63fCHwbzSeNJobG9qE2V3HTvUo 9Mvt4i1VLu+t4WttIvkOd2+kemzSVUTzPmdCTWd52g2PoG654X+wZDCeHottY9P5HqgazhHI5eq ZKCXcEWdZQQpOAgSYDA1tWfPPKY=
X-Google-Smtp-Source: AGHT+IFlVgzvCiey/H+DNfNObacFjIPLgmohqd20GUkjcjiKkYSNf6TiPkTP/JP/AHBJoTqeRtVOsNF0/j5Rm8atN4I=
X-Received: by 2002:a05:6a20:4305:b0:343:4b46:dec0 with SMTP id adf61e73a8af0-348cc2dca04mr22004049637.45.1762271156393; Tue, 04 Nov 2025 07:45:56 -0800 (PST)
MIME-Version: 1.0
References: <4E680D06-900A-4ACF-9BBE-D62491F50907@mnot.net> <DM6PR12MB4975FAF18C82F42F2FCA5153A5FBA@DM6PR12MB4975.namprd12.prod.outlook.com> <CAGJaBrC-Yi+000JVaJqozigX4iBSFqiSNuT6Xyz1=VY7Yca5vQ@mail.gmail.com> <9E959A79-00EA-4492-BA71-21DD3B4DB56E@gmail.com> <DM6PR12MB4975CEF40AFA9708506C2650A5F8A@DM6PR12MB4975.namprd12.prod.outlook.com> <47CCABE2-9260-4B0E-B74F-2234ADC33042@gmail.com> <C9F7052A-F559-4989-9EBA-02C29C515547@mnot.net> <CABcZeBNnviL3=DeDgebzZ9xsfGhmb=rNi__ThLrtc16SWv-Deg@mail.gmail.com> <CABQM+AzbgnNQERdF8KUN540syAuDNoRd1V9zyAVrNc+UBco2ZA@mail.gmail.com> <CAE+sOjkrg6F8RvJ__f-p75tnewdcf=hCLY-KXoVYHv2qY3PWjA@mail.gmail.com> <37FD7CED-8EE9-4300-8FF6-BD0F2D7FABAD@openfuture.eu> <CAE+sOjktdEw4LZ-m8vmrX4kX0YechTX8-2dWGQNU3MW+PKjB+w@mail.gmail.com> <F82C957D-7B08-427B-BFE1-E1ECA1E53FA9@openfuture.eu> <CAE+sOjmXHmRViv3iv17QSHT4dVbP2pO86pCjTiAjR1WT5xa_WQ@mail.gmail.com> <IA1PR02MB10983576CB154E0C03A2FAA2FCDC7A@IA1PR02MB10983.namprd02.prod.outlook.com> <CAMxa0CEAKPdHzLkHVXeY1W=_como9hs2DzsOKhChdCQAF816dA@mail.gmail.com> <3E0AE857-459E-4961-B171-37C2709689A0@openfuture.eu> <CH2PR01MB91025E808771BA6B0CF4B1DCBAC4A@CH2PR01MB9102.prod.exchangelabs.com>
In-Reply-To: <CH2PR01MB91025E808771BA6B0CF4B1DCBAC4A@CH2PR01MB9102.prod.exchangelabs.com>
From: Erin Simon <erinsimon@google.com>
Date: Tue, 04 Nov 2025 10:45:19 -0500
X-Gm-Features: AWmQ_bms3okcc0ORkNBg5s4VNpPjv7owsRnlalmQK_65GvcbSwaZShXk4CjmoWg
Message-ID: <CAMxa0CG5uurM8wg3LZvvPDDM4Ypy7ir+USEUZAqfU3A0iN4M3g@mail.gmail.com>
To: Bradley Silver <BSilver=40advance.com@dmarc.ietf.org>
Content-Type: multipart/alternative; boundary="0000000000004732220642c6ba48"
Message-ID-Hash: CNTKD4EHUZN6M6VSILKR7V5BEO3THOZO
X-Message-ID-Hash: CNTKD4EHUZN6M6VSILKR7V5BEO3THOZO
X-MailFrom: erinsimon@google.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Paul Keller <paul@openfuture.eu>, "ai-control@ietf.org" <ai-control@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [ai-control] Re: -04 drafts for evaluation
List-Id: AI Control <ai-control.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/ai-control/5-Esk3rxP4KhGRaNTPuwZU0Fd4Y>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ai-control>
List-Help: <mailto:ai-control-request@ietf.org?subject=help>
List-Owner: <mailto:ai-control-owner@ietf.org>
List-Post: <mailto:ai-control@ietf.org>
List-Subscribe: <mailto:ai-control-join@ietf.org>
List-Unsubscribe: <mailto:ai-control-leave@ietf.org>

While the Code is notionally voluntary, in the EC's own description
<https://digital-strategy.ec.europa.eu/en/faqs/questions-and-answers-code-practice-general-purpose-ai#:~:text=It%20serves%20as%20guidance%20to%20help%20providers%20meet%20their%20existing%20obligations%20under%20the%20AI%20Act%20without%20creating%20new%20ones%2C%20extending%20existing%20ones%2C%20or%20imposing%20additional%20burdens.>
"It serves as guidance to help providers meet their existing obligations
under the AI Act without creating new ones, extending existing ones, or
imposing additional burdens."  The requirement to follow future evolutions
of the Robots Exclusion Protocol (not just the RFC that documents it) is in
the Commission's view a translation and clarification of the Act and *not* an
additional requirement beyond what the Act itself requires.

But this is an academic dispute if we all agree that neither the vocabulary
nor the attachment mechanism will constitute a new version of the Robots
Exclusion Protocol.

On Tue, Nov 4, 2025 at 9:13 AM Bradley Silver <BSilver=
40advance.com@dmarc.ietf.org> wrote:

> This is an important clarification, Paul.   It will be very difficult to
> achieve consensus without an appreciation of the distinctions between law,
> policy and the notion of communicating preferences - and this is a good
> example of that.
>
>
> ------------------------------
> *From:* Paul Keller <paul@openfuture.eu>
> *Sent:* Tuesday, November 04, 2025 6:03 AM
> *To:* ai-control@ietf.org <ai-control@ietf.org>
> *Subject:* [ai-control] Re: -04 drafts for evaluation
>
> > On 3 Nov 2025, at 19:12, Erin Simon <erinsimon@google.com> wrote:
> >
> > That ship has unfortunately sailed; EU law <
> https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdigital-strategy.ec.europa.eu%2Fen%2Fpolicies%2Fcontents-code-gpai&data=05%7C02%7Cbsilver%40advance.com%7C9718eb87f93a484b221808de1b91e503%7C1fe6294574e64203848fb9b82929f9d4%7C0%7C0%7C638978510637412393%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=y%2BOeQ9pIQcedCXLU4c8juJR73NlwY0mABUs8o1kK%2BCo%3D&reserved=0
> <https://digital-strategy.ec.europa.eu/en/policies/contents-code-gpai>>
> mandates following the Robots Exclusion Protocol (robots.txt) as it exists
> today and "any subsequent version of this Protocol for which the IETF
> demonstrates that it is technically feasible and implementable…” would a
>
> This statement is not correct. There is no EU law in existence (or
> currently under consideration) that "mandates following the Robots
> Exclusion Protocol", nor any “subsequent version of this Protocol for which
> the IETF demonstrates that it is technically feasible and implementable.”
>
> The link Erin shared points to a page on the European Commission’s website
> that hosts the General-Purpose AI (GPAI) Code of Practice. This Code of
> Practice is not law. The European Union has two main types of binding legal
> instruments — Regulations and Directives — and the GPAI Code of Practice is
> neither.
>
> As stated on the linked page:
>
> > The General-Purpose AI (GPAI) Code of Practice is a voluntary tool,
> prepared by independent experts in a multi-stakeholder process, designed to
> help industry comply with the AI Act’s obligations for providers of
> general-purpose AI models.
>
> The key word here is voluntary*. In practice, this means that providers of
> GPAI models may choose to sign up to the Code as a way to demonstrate
> compliance with the AI Act.
>
> To date, 27 organizations (including Google and many others represented in
> this working group) have done so, but at least one major GPAI model
> provider participating in this group has publicly stated that they do not
> intend to sign.  That shows that participation in the Code is not mandatory.
>
> Given this, I do not think it is accurate to suggest that the Code
> constitutes law that mandates adherence to the Robots Exclusion Protocol or
> to the chartered output of this group. If it has any binding effect at all,
> that effect applies only to those organizations that have chosen to sign
> the Code, and only in their capacity as providers of general-purpose AI
> models engaging in “the training of their general-purpose AI models”.
>
> /Paul
>
> * I am fully aware that the GPAI Code of Practice covers much more than
> this single point, and that decisions to sign or not sign were influenced
> by a range of substantive and procedural considerations. My point is simply
> that, regardless of its content or politics, the Code’s legal status is
> voluntary. That the Code directly references the work of this group is, in
> my view, unhelpful, but that does not justify misrepresenting its legal
> effects.
>
> --
> ai-control mailing list -- ai-control@ietf.org
> To unsubscribe send an email to ai-control-leave@ietf.org
> --
> ai-control mailing list -- ai-control@ietf.org
> To unsubscribe send an email to ai-control-leave@ietf.org
>


-- 

Erin Simon |  Product Counsel, Knowledge |  erinsimon@google.com |
 415-736-7276