The name arrived before the definition. On Nov 5 the Justice Department stood up something called the Super Intelligence Task Force, staffed with federal prosecutors working alongside the FBI, and gave it two jobs: pursue people who use frontier AI to commit fraud, break into systems or steal secrets, and keep American AI technology from being taken by foreign governments or their proxies.
The department said it will prosecute individuals and organizations that use superintelligence unlawfully. It is the first federal enforcement body created specifically around frontier models, and it arrived the week after a midterm election in which AI was a background issue in most races and a foreground issue in almost none.
The definitional problem is not small. No federal statute defines superintelligence, no technical body has agreed on a threshold, and the tools the task force will actually encounter in its first cases are ordinary large models doing ordinary things: writing a convincing phishing email, cloning a voice from thirty seconds of audio, drafting a fake invoice with the right letterhead. Those are crimes whether or not the model behind them is super, and they are already chargeable under wire fraud, computer intrusion and trade secret statutes that predate the technology by decades.
That mismatch is the honest way to read the announcement. A new unit with an old statutory toolkit is not a contradiction. Prosecutors reorganize when a category of case starts consuming attention faster than the existing structure can absorb it, and AI-enabled fraud has been doing that. What a task force buys is coordination: one place where an assistant U.S. attorney in Ohio can find out whether another district has already seen the same synthetic-identity pattern, and a standing relationship with the bureau’s cyber division instead of an ad hoc one.
What it does not buy is a theory of liability. If a case turns on the word in the unit’s name, the defense has an opening. A lawyer can ask a jury to decide what superintelligence means, and no expert can answer that in a way that survives cross-examination, because the term describes a capability nobody has demonstrated. The smarter prosecutions will avoid the word entirely and charge the conduct, which is what the department’s career lawyers would do with or without a task force.
The second mandate is the one to watch. Protecting American AI technology from foreign theft overlaps heavily with economic espionage enforcement, and it points at a boundary that has never been clean: the difference between a researcher who takes a job at a foreign lab, a professor who consults for a foreign-funded institute, and an employee who copies model weights onto a drive. The first is normal. The third is a felony. The middle is where cases get made and where universities will start asking their compliance offices questions they did not ask last month.
That boundary is also where the deterrence argument gets uncomfortable. A task force that announces itself loudly is trying to shape behavior before cases are filed, which is the point of announcing it. But a unit whose second job is protecting a domestic industry from foreign acquisition will, over time, be asked to treat competitive pressure as a security matter. Every advanced economy is making that request of its law enforcement agencies right now, and none of them has produced a test that distinguishes a threat from a rival.
There is a staffing question underneath the strategy. Frontier model forensics is not a skill the FBI has in reserve. Determining whether a given piece of text came from a specific model, or whether an intrusion was automated, requires access to the model or to telemetry the developer holds. Prosecutors will be negotiating evidence-sharing arrangements with companies that are also the subject of a separate set of policy fights in Washington. The department has not said how those arrangements will work.
The companies, for their part, have an incentive to cooperate that has nothing to do with civic duty. A task force that depends on their logs and their model access is a task force that will describe the threat landscape in their vocabulary, which tends to emphasize sophisticated attacks on well-defended systems rather than the low-grade scams that account for most of the dollar losses.
Consider what the unit will not do. It will not write rules for model release. It will not set evaluation standards, audit training runs, or decide whether an open-weights release is reckless. Those questions sit with Congress, which has not legislated on them, and with the commerce and science agencies, which have proceeded by guidance. A prosecution shop is the wrong instrument for any of it, and the risk in the announcement is that it reads as a substitute for the parts of AI policy that require legislation.
For now the practical reading is narrow. There is a real enforcement gap around AI-enabled fraud, the department has put prosecutors and agents in one room to close it, and the cases that follow will be built on statutes written for a world of telephones and filing cabinets. Whether the unit becomes a permanent feature of federal law enforcement or a name on an org chart will depend on the quality of about a dozen prosecutions nobody has filed yet. The press release is the easy part. The indictments are where a task force earns its budget, and the first one will arrive long before anyone agrees on what the words in its title mean.
Until then, the more useful signal is structural. After an election in which neither party campaigned on AI enforcement, the executive branch created a dedicated unit anyway. That is how a technology becomes a permanent subject of federal policing: not through a vote, but through an office, a budget line and a set of agents who now have something specific to look for.
