A bipartisan bill would require major AI developers to retain shutdown controls after an OpenAI security evaluation crossed into Hugging Face systems.