For the EU, it’s 24 months. For AI, it’s 64×.
Last Wednesday the EU pushed the AI Act’s hardest deadlines back. Sixteen months for one piece. Twenty-four months for another. Read in regulatory time, that’s a reasonable phased rollout. Read against AI’s own pace of change, it’s something different.
What the EU just decided
The AI Act is the world’s most demanding rulebook for artificial intelligence. It applies to any company that sells AI to European users — based in Europe or not. It was passed in 2024. Most of it was supposed to start applying in August 2026.
Last Wednesday, the Council and Parliament agreed to push two of the heaviest pieces back.
The “high-risk” category is the part most companies care about. It covers biometrics, hiring software, medical AI, AI in critical infrastructure — anything where a bad model output can hurt someone. Under the old timeline, these systems had to be fully compliant by August 2026. Under the new timeline, that becomes December 2027 (sixteen months later) for standalone systems, or August 2028 (twenty-four months later) for AI built into machinery, medical devices, and connected cars.
What didn’t change matters too. The outright bans (social scoring, manipulative AI, untargeted face scraping) have been live since February 2025. The rules for big AI models — what most people call “frontier AI” — have been live since August 2025. The transparency obligations actually got tighter: providers of generative AI now have three months instead of six to ship watermarking. And a new ban on non-consensual sexual deepfakes lands hard on 2 December 2026.
So the substance is intact. The triage is on the timeline.
What METR actually measures
METR is a research group that measures one specific thing about AI systems: how long they can keep working on a task before the workflow falls apart. Not how smart they are. Not how creative. How long they can stay on track without a human stepping in.
The way they test it is straightforward. Give a model a real-world task — write a piece of code, run an analysis, debug a system — and measure the time-equivalent of work it can complete on its own. GPT-2 could chain together a few seconds of useful work. Claude 3 Opus held a few minutes. The frontier 2026 generation pushes past an hour.
Plotted against time, that line is a clean exponential. From 2024 through early 2026, the time-horizon roughly doubled every four months.
Other measures point the same way. Reasoning depth, tool use, multi-step planning, software-engineering benchmarks — every adjacent curve has bent the same way over the same window. METR’s number is the cleanest single proxy I’ve seen, but it’s not an outlier.
What 64× actually means
If the doubling holds, the math on the EU’s new deadlines is uncomfortable:
- 16 months — four doublings — 16× more capable systems by the December 2027 deadline
- 24 months — six doublings — 64× more capable systems by the August 2028 deadline
64× is not a metaphor. It’s the order-of-magnitude estimate of how much more autonomous task length AI can sustain by the time the EU’s heaviest rules apply.
To put that in plain terms: if a 2026 model can do a one-hour task on its own, a 2028 model on the same trend can do a 64-hour task. A system that holds a workflow together for 64 hours is a different kind of object than the one the AI Act was drafted to regulate.
That’s not an argument the rules are wrong. It’s an argument the gap between what the rulebook describes and what the system can actually do widens fast — faster than any 2-3 year drafting cycle can keep up with.
My read
My read on this: the headlines called May 7 a Brussels cave to industry pressure. I don’t think that’s the right frame. The substance of the Act is intact — the Commission could have used the simplification to weaken the high-risk classification or gut the impact-assessment requirement. They didn’t. They tightened transparency and added a new prohibition. The triage is on the timeline, not the rules.
By 2028, the AI Act could be regulating systems 64× more capable than what existed when its rules were written.
My expectation is that the August 2026 cliff was always going to slip. What’s more interesting is what the slip exposes: regulators and AI now run on incompatible clocks, and there’s no obvious mechanism to reconcile them. The Act assumed a 2-3 year drafting cycle would land on systems recognisably similar to the ones it described. That assumption broke somewhere between GPT-4 and the agentic generation that followed.
Three things I’m watching
- The 2 August 2026 deadline for national authorities. That date didn’t move. If most countries still don’t have working AI authorities by August, December 2027 becomes the next deadline at risk.
- The European technical standards. Without finalised standards from the standards bodies, “high-risk” is a definition without a benchmark. Whether the Commission publishes them before the new deadline is the gating item.
- The EU-US-UK divergence. The same week the EU softened its timeline, the US signed pre-launch testing agreements with the five frontier labs through CAISI. These two regulatory paths now point in different directions, and that gap is where the next year of this story plays out.
One last thought
Sixteen months. Twenty-four months. In any other regulatory context, those numbers feel reasonable. In AI they feel like an era. That’s not a problem the Commission can solve in a single omnibus.
To be clear I am not asking for more regulation, I am asking for more decision speed!
