California Shows Government AI Path Between Ban and Risk

California's Poppy—a state-built AI assistant for 2,600 employees across 66 departments—operates only on secure networks and pulls data exclusively from CA.gov sites. The architecture eliminates major attack vectors: data leakage, prompt injection, hallucination from unreliable sources. By demonstrating useful AI within tight data boundaries, California offers other government entities a third way beyond outright prohibition or unrestricted commercial deployment, addressing long-standing security and compliance concerns that have stalled public sector AI adoption.