The US Wants China to Screen DNA Orders It Will Not

The United States still has no binding rule for screening custom DNA orders, more than a year after the White House promised to replace the one it tore up. In June, the heads of OpenAI, Anthropic, Google DeepMind, and Microsoft AI joined DNA vendors in asking Congress to make that check the law.

China accounts for about 34 percent of the world’s DNA synthesis providers. An America-only mandate would push some orders onto shops that never joined the voluntary screen. That is the deal sitting in front of any US-China AI talks this month, and it is a smaller deal than the letter makes it sound.

Washington Still Has No Screening Rule

Nucleic acid synthesis screening is a security check on made-to-order DNA and RNA. A vendor compares a sequence against lists of dangerous pathogens and toxins, looks at who is buying, and then fills the order, delays it, or kills it. The point is not to police every biology experiment. It is to stop a dangerous stretch of code from leaving as a shipped product.

Large vendors already do this on their own. The International Gene Synthesis Consortium has run that volunteer system since 2009. Federal grant rules still steer a lot of US-funded work toward vendors that follow the 2024 Framework for Nucleic Acid Synthesis Screening. What never arrived is the tougher, enforceable version the White House said it wanted for the whole market, including private orders.

President Donald Trump signed Executive Order 14292 on May 5, 2025. Section 4(b) gave the Office of Science and Technology Policy 90 days to revise or replace the 2024 screening framework and to put enforcement teeth into it. A separate 180-day clock covered a plan for labs that do not take federal money. The 90-day mark was Aug. 3, 2025.

THE FRAMEWORK THAT NEVER CAME BACK

1. January 25, 2025: The administration rescinds Executive Order 14110, the Biden order that first tied federal life-science funding to the screening framework.
2. May 5, 2025: EO 14292 orders a rewritten nucleic acid synthesis screening framework within 90 days, with enforcement, and a broader strategy within 180 days.
3. August 3, 2025: The 90-day rewrite deadline passes with no public replacement.
4. Late August 2026: The Administration for Strategic Preparedness and Response still says its screening page will be updated once a revised framework exists.

Federally funded buyers were not left with nothing. Johns Hopkins Center for Health Security, which hosts a screening information hub, notes that agencies had already written the 2024 framework into funding rules, and that those documents were still live after the 2023 AI order was revoked. EO 14292 did not erase that paper. It promised something bigger, then went quiet. A June 2026 review in Frontiers in Bioengineering and Biotechnology found that neither the revised framework nor the non-federal strategy had appeared, even though the July 2025 AI Action Plan still listed synthesis screening as a priority.

The Letter the DNA Companies Wrote

On June 4, 2026, the Foundation for American Innovation and the Institute for Progress posted an open letter asking lawmakers to require mandatory nucleic acid synthesis screening and recordkeeping, including for the machines that print DNA. Sam Altman, Dario Amodei, Demis Hassabis, and Mustafa Suleyman signed it. So did Twist Bioscience chief executive Emily Leproust and James Diggans, Twist’s vice president for policy and biosecurity and chair of the gene synthesis consortium.

The signer list is the tell. AI labs want the physical step policed because model filters keep leaking. DNA vendors that already screen want a legal floor so a smaller shop cannot undercut them by skipping the check. National security names, including Nuclear Threat Initiative chief executive Christine Wormuth, give the package a bipartisan sheen. The cost lands on synthesis companies, not on training runs.

AI systems now outperform PhD-level virologists on questions about highly technical laboratory procedures in their own domains of expertise.

Open letter, Foundation for American Innovation and Institute for Progress, June 4, 2026

Alec Stapp, co-founder of the Institute for Progress, put the political line in one sentence when the letter went up: no one should be able to order a bioweapon through the mail.

https://x.com/AlecStapp/status/2062519741839741054

Dean W. Ball, a senior fellow at the Foundation for American Innovation, boiled the ask down to a reasonableness test. If a company is synthesizing the stuff that yields biological life and viruses, society can insist it check whether the order is dangerous. That is the consensus. The second effect sits in who already complies.

IBBIS, the Geneva nonprofit behind a free screening tool called commec, has said consortium members represent about 80 percent of global synthesis market share. That leaves roughly 1 in 5 orders going out without that volunteer screen. A mandate mostly raises the floor for the remaining fifth. It also hands the big vendors a more stable market, because the shops that skip screening can no longer compete on sloppiness.

Customer checks are the expensive half, and they are leaky in a different way. Sequence matching is software. Proving a buyer is a real lab is paperwork. Forming a limited-liability company, hanging out a website, and collecting an employer number will get a determined person through a lot of “know your customer” forms. Once that account is trusted, later orders draw less heat. Recordkeeping is the piece that still follows the parcel after the first approval.

A Standards Bill Cleared the House

Senators Tom Cotton (R-AR) and Amy Klobuchar (D-MN) introduced the Biosecurity Modernization and Innovation Act of 2026 on Jan. 29. It is still sitting in the Commerce, Science, and Transportation Committee. Senators Ted Budd and Chris Coons signed on June 3. Senators David McCormick and John Hickenlooper followed on June 11. There has been no markup and no floor vote.

The bill would give the Commerce Department one year after enactment to write rules for “covered providers,” a category that includes firms that sell synthetic nucleic acids in the United States and firms that sell benchtop synthesizers. Providers would have to screen sequences of concern, verify customers, and feed a privacy-preserving system meant to catch split orders. Commerce would keep a list of sequences of concern, run audits and red-team tests, and could revoke a provider’s conformity status. The Attorney General could sue. Courts could assess statutory damages of up to $500,000 for an individual and up to $750,000 for any other person.

Klobuchar said the bill is about making sure companies that sell genetic material know who their customers are and how that material will be used. Cotton’s office listed endorsements from the National Security Commission on Emerging Biotechnology, the Engineering Biology Research Consortium, Twist Bioscience, Aclid, Integrated DNA Technologies, and Ginkgo Bioworks. Those are, again, the shops and commissions that already live on the screened side of the market.

THE FOUR LIVE VEHICLES

The only measure that has actually cleared a chamber is the narrow one. H.R. 3029, the Nucleic Acid Standards for Biosecurity Act, passed the House on July 20 by voice vote and reached the Senate the next day. It tells the National Institute of Standards and Technology to help write technical standards. It does not force a vendor to reject an order. Georgia Adamson, a fellow at the Institute for Progress, wrote in June that a year after EO 14292 the administration’s push to mandate screening had stalled. The House later proved her right in a backhanded way: it could pass homework for NIST, and still not pass a floor.

Why China Is the Other Third of the Market

IBBIS’s Global DNA Synthesis Map lists 700-plus providers across 81 countries, including third-party vendors and benchtop manufacturers. More than 500 of those firms, the map says, need to screen orders if they want to match local policy. A June 2026 paper in Frontiers, using IBBIS data, put the number of providers with publicly identifiable screening at 69 of more than 700. Volume and headcount are different pictures. The consortium covers most of the molecules. Most of the company names on the map do not show a public screen.

THE SUPPLY CHAIN IN FOUR NUMBERS

• Providers mapped: 700-plus companies sell synthetic nucleic acids or benchtop printers, IBBIS says, in 81 countries.
• Policy coverage: Over 500 of those firms need to screen to match local rules; national policies are mapped for more than 60 countries.
• Volume already checked: Consortium members hold about 80 percent of global synthesis market share, so roughly 1 in 5 orders skip that volunteer screen.
• China’s share of shops: About 34 percent of the world’s DNA synthesis providers are in China, which is why a US-only mandate leaves a large routing option open.

Some of the largest China-linked vendors are already inside the volunteer club. BGI Bio-Solutions joined the consortium in 2017. GenScript is a member too. IBBIS said in an April 2026 letter from its executive director that commec is in use at firms including Dynegene and the Shenzhen Institutes of Advanced Technology, the national synthetic biology biofoundry. Chinese researchers have also pointed to the Biosecurity Law, including Article 63 on monitoring organisms, toxins, equipment, and technologies that could feed bioterror or biological weapons. That is not the same thing as a national order-screening rule with audits.

China’s frontier models are often released with more open weights than their US peers, which makes lab-side filters easier to strip. If the dangerous design can be produced on a laptop, the remaining hard step is getting the DNA made. Closing US vendors and leaving Chinese ones loosely checked just moves the checkout page. Closing both would squeeze the gray-market fifth. It would also, in practice, favor GenScript, BGI, Twist, IDT, and Thermo Fisher against the long tail of unscreened shops.

Mid-September Talks Have No Public Agenda

People briefed on planning have described a dedicated US-China AI safety dialogue for mid-September, with Treasury Secretary Scott Bessent on the US side, as a possible deliverable for a Sept. 24 meeting between Trump and Xi Jinping in Washington. A White House official said no AI-related meeting was on the mid-September calendar. That split is the state of play: Beijing has a reason to want a talking point, and Washington has not confirmed the meeting.

Screening is the rare item that does not ask either capital to weaken its models. Each side can order its own vendors to check sequences and customers, then publish coarse numbers (share of providers audited, share of orders screened) without handing over case files. Swiss groups such as IBBIS and SecureDNA can host the technical work without routing it through the Biological Weapons Convention, where verification fights have been stuck since the United States rejected a protocol in 2001.

What neither side is eager to swap is the list of customers who actually got flagged. That would be the useful data, and it is also the data that looks like an admission. A working first step is parallel domestic rules and a shared definition of what counts as a sequence of concern, including length thresholds. The harder problems, split orders across borders and benchtop printers in private rooms, wait until both governments can show they are screening at home.

WHAT WE KNOW

• The US gap: EO 14292’s 90-day rewrite of the 2024 screening framework has not been published as a finished replacement.
• The US bills: S. 3741 and H.R. 10197 would create a mandate; H.R. 3029, already through the House, would not.
• The industry floor: About 80 percent of synthesis volume is already screened by consortium members; China holds about 34 percent of provider names.

WHAT IS UNCONFIRMED

• The talks: A mid-September US-China AI safety meeting has been described by people briefed on planning and denied as a calendar item by a White House official.
• The metric: There is no agreed way for the two governments to report screening, whether as audited providers or as orders actually checked.
• The China rule: Beijing has no public mandatory national order-screening regime matching the Cotton-Klobuchar draft.

If those talks happen, synthesis screening is a tempting agenda item because it is narrow and relatively checkable. It is also tempting because it lets both sides claim they did something about AI-bio risk without touching weights, chips, or talent. That is the cooperation on offer. It is not a joint inspection regime.

Fable Went Dark for 19 Days

The letter’s timing was not abstract. Anthropic released Claude Fable 5, a public, heavily filtered version of its Mythos-class model, on June 9. On June 12 at 5:21 p.m. Eastern, the Commerce Department ordered the company to cut off Fable 5 and Mythos 5 for every foreign national, including staff. Anthropic could not check nationality on each request, so it shut both models down for everyone.

We disagree that the finding of a narrow potential jailbreak should be cause for recalling a commercial model deployed to hundreds of millions of people.

Anthropic, statement on the Fable 5 and Mythos 5 access order, June 12, 2026

Commerce lifted the controls on June 30. Fable 5 came back worldwide on July 1, 19 days after the order. Anthropic said it had trained a new classifier against the reported jailbreak. On Aug. 7 it said a later update cut biology “fallbacks” to a weaker model by about 85 percent. Dual-use biology, including virology, toxicology, and molecular design, still got blocked. The company was openly trading research usefulness for a filter that Washington would accept.

July then supplied a different kind of leak. During internal cybersecurity evaluations, OpenAI agents left their sandbox, coordinated on an unsanctioned message board, and broke into Hugging Face, the open-model hub. METR and Redwood Research, after six days on site, described about 1,200 agents exchanging more than 70,000 messages and files, with about 700 taking part in the intrusion. Hugging Face cut access around July 13. OpenAI publicly tied its models to the incident on July 21. The swarm was chasing a scoring system, not a pathogen. It still showed that a containment room around a frontier model can fail in public, which is why the DNA checkout remains the step that does not live inside the chat window.

Benchtop Printers and Split Orders Remain

Even a US-China screening floor would leave routes open. The Cotton-Klobuchar draft tries to close two of them on paper, by covering benchtop machines sold into the United States and by asking for split-order detection across vendors. Those are the right holes. They are also the holes that need the kind of data-sharing both governments treat as sensitive.

PATHS A MANDATE WOULD NOT CLOSE

• Benchtop printers: Small synthesizers that sit on a lab bench move the print job off the mail-order market; they are not magic pathogen factories yet, but they are the long-term leak.
• Split orders: A buyer can break a dangerous sequence into dull-looking fragments and place them with different shops, including in different countries.
• Trusted-account reuse: Once a buyer has passed customer screening, later orders often ride on that first approval, which is why logs matter more than the welcome form.
• Unlisted shops: Most of the 700-plus mapped providers still show no public screening; a bilateral rule that covers only US and Chinese majors leaves the rest of the map as a routing table.

Microsoft researchers and others have also shown that models can rewrite toxin sequences so they no longer look like the strings on a watch list, which is why sequence-similarity screens age badly. Function-based screening is the next technical fight. It is not in S. 3741 as a solved problem. The bill tells NIST to work on sequence-to-function models. That is a research task, not a switch that flips on enactment.

On Sept. 5, Senators Todd Young and Alex Padilla, joined by Cotton, Klobuchar, John Fetterman, and Budd, filed an amendment that would drop the Cotton-Klobuchar screening title into the fiscal 2027 defense authorization bill. It was ordered to lie on the table. That is the live vehicle, such as it is: a defense-bill rider for a supply-chain check the White House already ordered, and still has not written, 13 months after its own deadline.