After months of model-access battles, U.S. AI policy is turning toward disclosure, third-party review, whistleblower protection and liability for high-impact systems.