Who can act on an AI safety warning?

If a safety test finds something serious, who has to do something about it? That is the question I keep coming back to. Producing a careful report and changing a risky decision are not the same achievement. AP's November 8 reporting raises concerns about US AI evaluators' independence. The Washington Post link republishes that report, which we covered yesterday; it is not a second investigation. Today's follow-up asks what authority should connect an evaluation to a response. There is important contrary evidence to a blanket claim that public research disappeared. NIST published a model assessment in September and voluntary incident-readiness guidance in October. The latter addresses preparation, detection, response, recovery and reporting. These records neither settle the independence question nor establish that every current finding reaches the public. My practical test would have three parts: a named person responsible for receiving a serious finding, a clear route for escalating it beyond the team under review, and an explanation of the eventual decision. Security-sensitive details may need protection. The existence and reasoning of consequential decisions can still deserve scrutiny. Closer executive access could help researchers obtain attention and resources; it does not automatically mean their work is compromised. Equally, proximity is no substitute for a process that can withstand an inconvenient result. People relying on these systems need something more useful than a choice between blind trust and blanket suspicion: evidence that a warning can change what happens next.