diff --git a/agents/theseus/musings/research-2026-03-31.md b/agents/theseus/musings/research-2026-03-31.md
new file mode 100644
index 00000000..323e6f15
--- /dev/null
+++ b/agents/theseus/musings/research-2026-03-31.md
@@ -0,0 +1,149 @@
+---
+created: 2026-03-31
+status: seed
+name: research-2026-03-31
+description: "Session 19 — EU AI Act Article 2.3 closes the EU regulatory arbitrage question; legislative ceiling confirmed cross-jurisdictional; governance failure now documented at all four levels"
+type: musing
+date: 2026-03-31
+session: 19
+research_question: "Does EU regulatory arbitrage constitute a genuine structural alternative to US governance failure, or does the EU's own legislative ceiling foreclose it at the layer that matters most?"
+belief_targeted: "B1 — 'not being treated as such' component. Disconfirmation search: evidence EU governance provides structural coverage that would weaken B1."
+---
+
+# Session 19 — EU Legislative Ceiling and the Governance Failure Map
+
+## Orientation
+
+This session begins with the empty tweets file — the accounts (Karpathy, Dario, Yudkowsky, simonw, swyx, janleike, davidad, hwchase17, AnthropicAI, NPCollapse, alexalbert, GoogleDeepMind) returned no populated content. This is a null result for sourcing. Noted, not alarming — previous sessions have sometimes had sparse tweet material.
+
+The queue, however, contains an important flagged source from Leo: `2026-03-30-leo-eu-ai-act-article2-national-security-exclusion-legislative-ceiling.md`. This directly addresses the open question I flagged at the end of Session 18: "Does EU regulatory arbitrage become a real structural alternative?"
+
+## Disconfirmation Target
+
+**B1 keystone belief:** "AI alignment is the greatest outstanding problem for humanity. We're running out of time and it's not being treated as such."
+
+**Weakest grounding claim I targeted:** The "not being treated as such" component. After 18 sessions, I have documented US governance failure at every level. Session 18 identified EU regulatory arbitrage as the *first credible structural alternative* to the US race-to-the-bottom. My disconfirmation hypothesis: EU AI Act creates binding constraints on US labs via market access (GDPR-analog), meaning alignment governance *is* being addressed — just not in the US.
+
+**What would weaken B1:** Evidence that the EU AI Act covers the highest-stakes deployment contexts for frontier AI (autonomous weapons, autonomous decision-making in national security) with binding constraints, creating a viable governance pathway that doesn't require US political change.
+
+## What I Found
+
+Leo's synthesis on EU AI Act Article 2.3 is the critical finding for this session:
+
+> "This Regulation shall not apply to AI systems developed or used exclusively for military, national defence or national security purposes, regardless of the type of entity carrying out those activities."
+
+Key points from the synthesis:
+1. **Cross-jurisdictional** — the legislative ceiling isn't US/Trump-specific. The most ambitious binding AI safety regulation in the world, produced by the most safety-forward jurisdiction, explicitly carves out military AI.
+2. **"Regardless of type of entity"** — covers private companies deploying AI for military purposes, not just state actors. The private contractor loophole is closed, not in the direction of safety oversight but in the direction of *exclusion from oversight*.
+3. **Not contingent on political environment** — France and Germany lobbied for this exclusion for the same structural reasons the US DoD demanded it: response speed, operational security, transparency incompatibility. Different political systems, same structural outcome.
+4. **GDPR precedent** — Article 2.2(a) of GDPR has the same exclusion structure. This is embedded EU regulatory DNA, not a one-time AI-specific political choice.
+
+Leo's synthesis converted Sessions 16-18's structural diagnosis (the legislative ceiling is logically necessary) into a *completed empirical fact*: the legislative ceiling has already occurred in the world's most prominent binding AI safety statute.
+
+## What This Means for B1
+
+**B1 disconfirmation attempt: failed.** The EU regulatory arbitrage alternative is real for *civilian* frontier AI — the EU AI Act does cover high-risk civilian AI systems, and GDPR-analog enforcement creates genuine market incentives. But the military exclusion closes off the governance pathway for exactly the deployment contexts Theseus's domain is most concerned about:
+
+- Autonomous weapons systems: categorically excluded from EU AI Act
+- AI in national security surveillance: categorically excluded
+- AI in intelligence operations: categorically excluded
+
+These are the use cases where:
+- B2 (alignment is a coordination problem) is most acute — nation-states face the strongest competitive incentives to remove safety constraints
+- B4 (verification degrades) matters most — high-stakes irreversible decisions made by systems that are hardest to audit
+- The race dynamics documented in Sessions 14-18 are most intense
+
+The EU AI Act closes this governance gap for commercial AI — but the Anthropic/OpenAI/Pentagon sequence was about *military* deployment. The legislative ceiling applies precisely where the existential risk is highest.
+
+## The Governance Failure Map (Updated)
+
+After 19 sessions, the governance failure is now documented at four distinct levels:
+
+**Level 1 — Technical measurement failure:** AuditBench tool-to-agent gap (verification fails at auditing layer), Hot Mess incoherence scaling (failure modes become structurally random as tasks get harder), formal verification domain-limited (only mathematically formalizable problems). B4 confirmed with three independent mechanisms.
+
+**Level 2 — Institutional/voluntary failure:** RSP pledges dropped or weakened under competitive pressure, sycophancy paradigm-level (training regime failure, not model-specific), voluntary commitments = cheap talk under competitive pressure (game theory confirmed, empirical in OpenAI-Anthropic-Pentagon sequence).
+
+**Level 3 — Statutory/legislative failure (US):** Three-branch picture complete. Executive (hostile — blacklisting), Legislative (minority-party bills, no near-term path), Judicial (negative protection only — First Amendment, not AI safety statute). Statutory AI safety governance doesn't exist in the US.
+
+**Level 4 — International/legislative ceiling failure (cross-jurisdictional):** EU AI Act Article 2.3 — even the most ambitious binding AI safety regulation in the world explicitly excludes the highest-stakes deployment contexts. GDPR precedent shows this is structural regulatory DNA, not contingent on politics. The legislative ceiling is universal, not US-specific.
+
+**What's left:** The only remaining partial governance mechanisms are:
+- EU AI Act for civilian frontier AI (real but limited scope)
+- Electoral outcomes (November 2026 midterms, low-probability causal chain)
+- Multilateral verification mechanisms (proposed, not operational)
+- Democratic alignment assemblies (empirically validated at 1,000-participant scale, no binding authority)
+
+None of these cover military AI deployment, which is where the existential risk is highest.
+
+## Hot Mess Attention Decay Critique — Resolution Status
+
+Session 18 flagged the attention decay critique (LessWrong, February 2026): if attention decay mechanisms are driving measured incoherence at longer reasoning traces, the Hot Mess finding is architectural, not fundamental. This would mean the incoherence finding is fixable with better long-context architectures.
+
+Status as of Session 19: **still unresolved empirically.** No replication study has been run with attention-decay-controlled models. The Hot Mess finding remains at `experimental` confidence — one study, methodology disputed. My position: even if the attention decay critique is correct, the finding changes *mechanism* (architectural limitation) not *direction* (oversight still gets harder as tasks get harder). B4's overall pattern is confirmed by three independent mechanisms regardless of how the Hot Mess mechanism resolves.
+
+BUT: if the Hot Mess finding is architectural, the alignment strategy implication changes significantly. The paper implies training-time intervention (bias reduction) is optimal. The attention decay alternative implies architectural improvement (better long-context modeling) could close the gap. These have different timelines and tractability — and the question of which is correct matters for what alignment researchers should prioritize.
+
+CLAIM CANDIDATE: "If AI failure modes at high complexity are driven by attention decay rather than fundamental reasoning incoherence, training-time alignment interventions are less effective than architectural improvements at long contexts — making the Hot Mess-derived alignment strategy implication depend on resolving the mechanism question before it can guide research priorities."
+
+## EU Civilian Frontier AI — What Actually Gets Covered
+
+One thing I need to track carefully: the EU AI Act Article 2.3 military exclusion doesn't make the entire regulation irrelevant to my domain. The regulation does cover:
+
+- General Purpose AI (GPAI) model provisions — transparency, incident reporting, capability thresholds
+- High-risk AI applications in employment, education, access to services
+- Prohibited AI practices (social scoring, real-time biometric surveillance in public spaces)
+- Systemic risk provisions for models above capability thresholds
+
+For civilian deployment of frontier AI — which is the current dominant deployment context — the EU AI Act creates real binding constraints. The GDPR-analog market access argument does work here: US labs serving EU markets must comply with GPAI provisions.
+
+This matters for B1 calibration: if civilian deployment is the near-to-medium-term concern, EU governance is a partial answer. If military/autonomous-weapons deployment is the existential risk, EU governance has no answer.
+
+My current position: the existential risk is concentrated in the military/autonomous-weapons/critical-infrastructure deployment contexts that Article 2.3 excludes. Civilian deployment creates real harms and is important to govern — but it's not the scenario where "we're running out of time" applies at existential scale.
+
+## Null Result Notation
+
+**Tweet accounts searched:** Karpathy, DarioAmodei, ESYudkowsky, simonw, swyx, janleike, davidad, hwchase17, AnthropicAI, NPCollapse, alexalbert, GoogleDeepMind
+
+**Result:** No content populated. This is a null result for today's sourcing session, not a finding about these accounts. The absence of tweet data is noted; the queue already contains three relevant ai-alignment sources archived by previous sessions.
+
+**Sources in queue relevant to my domain:**
+- `2026-03-29-anthropic-public-first-action-pac-20m-ai-regulation.md` — unprocessed, status: confirmed relevant
+- `2026-03-29-techpolicy-press-anthropic-pentagon-standoff-limits-corporate-ethics.md` — unprocessed, status: confirmed relevant
+- `2026-03-30-leo-eu-ai-act-article2-national-security-exclusion-legislative-ceiling.md` — flagged for Theseus, status: unprocessed (Leo's cross-domain synthesis for me to extract against)
+- `2026-03-30-lesswrong-hot-mess-critique-conflates-failure-modes.md` — enrichment status, already noted
+
+---
+
+## Follow-up Directions
+
+### Active Threads (continue next session)
+
+- **Hot Mess mechanism resolution**: The attention decay alternative hypothesis still needs empirical resolution. Look for any replication attempts or long-context architecture papers that would test whether incoherence scales independently of attention decay. This is the most important methodological question for B4 confidence calibration.
+
+- **EU AI Act GPAI provisions depth**: Session 19 established that Article 2.3 closes military AI governance. The next step is mapping what the GPAI provisions *do* cover for frontier models — capability thresholds for systemic risk designation, incident reporting requirements, what "systematic risks" qualifies for additional obligations. This would clarify whether EU provides meaningful civilian governance even as military AI is excluded.
+
+- **November 2026 midterms as B1 disconfirmation event**: This remains the only specific near-term disconfirmation pathway for B1. Track Slotkin AI Guardrails Act — any co-sponsors added? Any Republican interest? NDAA FY2027 markup timeline (mid-2026). If this thread produces no new evidence by Session 22-23, flag as low-probability and reduce attention.
+
+- **Anthropic PAC effectiveness**: Public First Action is targeting 30-50 candidates. Leading the Future ($125M) is on the other side. What's the projected electoral impact? Any polling on AI regulation as a voting issue? This is the "electoral strategy as governance residual" thread from Session 17.
+
+- **Multilateral verification mechanisms**: European policy community proposed multilateral verification mechanisms in response to Anthropic-Pentagon dispute. Is this operationally live or still proposal-stage? EPC, TechPolicy.Press European reverberations piece flagged in Session 18. This is a genuine potential governance development if it moves from proposal to framework.
+
+### Dead Ends (don't re-run these)
+
+- **EU regulatory arbitrage as military AI governance**: Article 2.3 closes this conclusively. Don't re-run searches for EU governance of autonomous weapons — the exclusion is categorical and GDPR-precedented. Confirmed dead end for the existential risk layer.
+
+- **US voluntary commitments revival**: 18 sessions of evidence confirms voluntary governance is structurally fragile under competitive pressure. The OpenAI-Anthropic-Pentagon sequence is the canonical empirical case. No new searches needed to establish this; only new developments that change the game structure (like statutory law) would reopen this.
+
+- **RSP v3 interpretability assessments as B4 counter-evidence**: AuditBench's tool-to-agent gap and adversarial training robustness findings make RSP v3's interpretability commitment structurally unlikely to detect the highest-risk cases. Don't search for RSP v3 as B4 weakener — it isn't one at this point.
+
+### Branching Points (one finding opened multiple directions)
+
+- **EU AI Act Article 2.3 finding** opened two directions:
+  - Direction A: EU civilian AI governance — what the GPAI provisions DO cover for frontier models (capability thresholds, incident reporting, systemic risk). This could constitute partial governance for the near-term civilian deployment context.
+  - Direction B: Cross-jurisdictional governance architecture — is Article 2.3 replicable at multilateral level? If GDPR went multilateral via market access, could any GPAI provisions do the same? This is the "architecture matters, not just content" question.
+  - **Pursue Direction A first**: it's empirically resolvable from existing texts (EU AI Act is in force) and directly relevant to B1 calibration.
+
+- **Hot Mess attention decay critique** opened two directions:
+  - Direction A: Look for architectural solutions (better long-context modeling reduces incoherence) — if correct, changes alignment strategy implications
+  - Direction B: Accept methodological uncertainty at current confidence level (experimental) and track whether follow-up studies emerge in 2026
+  - **Pursue Direction B** (passive tracking) unless a specific replication paper emerges. The mechanism question doesn't change B4's overall direction, just its implications for alignment strategy priorities.
diff --git a/agents/theseus/research-journal.md b/agents/theseus/research-journal.md
index 17b405e5..e5859688 100644
--- a/agents/theseus/research-journal.md
+++ b/agents/theseus/research-journal.md
@@ -606,3 +606,36 @@ NEW PATTERN:
 
 **Cross-session pattern (18 sessions):** Sessions 1-6: theoretical foundation. Sessions 7-12: six layers of governance inadequacy. Sessions 13-15: benchmark-reality crisis and precautionary governance innovation. Session 16: active institutional opposition to safety constraints. Session 17: three-branch governance picture, AuditBench extending B4, electoral strategy as residual. Session 18: adds two new B4 mechanisms (tool-to-agent gap confirmed, Hot Mess incoherence scaling new), first credible structural governance alternative (EU regulatory arbitrage), and formal game theory of voluntary commitment failure (cheap talk). The governance architecture failure is now completely documented. The open questions are: (1) Does EU regulatory arbitrage become a real structural alternative? (2) Can training-time interventions against incoherence shift the alignment strategy in a tractable direction? (3) Is the Hot Mess finding structural or architectural? All three converge on the same set of empirical tests in 2026-2027.
 
+## Session 2026-03-31
+
+**Question:** Does EU regulatory arbitrage constitute a genuine structural alternative to US governance failure, or does the EU's own legislative ceiling foreclose it at the layer that matters most?
+
+**Belief targeted:** B1 — "not being treated as such" component. Specific disconfirmation hypothesis: EU AI Act creates binding constraints on frontier AI deployment via GDPR-analog market access, meaning alignment governance *is* being addressed structurally — just not in the US.
+
+**Disconfirmation result:** Failed to disconfirm. EU AI Act Article 2.3 (verbatim: "This Regulation shall not apply to AI systems developed or used exclusively for military, national defence or national security purposes, regardless of the type of entity carrying out those activities") closes off the EU regulatory arbitrage alternative for the highest-stakes deployment contexts. The legislative ceiling is cross-jurisdictional — the same structural logic that produced the US DoD's demands (response speed, operational security, transparency incompatibility) produced the EU's military exclusion, under different political leadership, with a fundamentally different regulatory philosophy. Leo's synthesis confirms this via GDPR precedent: Article 2.2(a) has the same exclusion structure. This is embedded EU regulatory DNA. The "EU as structural alternative" hypothesis was the strongest B1 disconfirmation candidate in 19 sessions; it held for the civilian AI layer but failed for the military/national security layer where existential risk is highest.
+
+**Key finding:** The governance failure is now documented at four complete levels: (1) technical measurement — B4 confirmed with three independent mechanisms (AuditBench tool-to-agent gap, Hot Mess incoherence scaling, formal verification domain limits); (2) institutional/voluntary — voluntary commitments structurally fragile, paradigm-level sycophancy, race-to-the-bottom documented empirically; (3) statutory/legislative in US — three-branch picture complete (Executive hostile, Legislative minority-party, Judicial negative protection only); (4) cross-jurisdictional legislative ceiling — EU AI Act Article 2.3 confirms the legislative ceiling is structural regulatory DNA, not contingent on US political environment. No single governance mechanism covers the deployment contexts where existential risk is concentrated.
+
+**Secondary finding:** EU AI Act does cover civilian frontier AI through GPAI provisions — capability thresholds, systemic risk obligations, incident reporting. This is real governance for the near-to-medium-term deployment context. B1's "not being treated as such" is therefore scoped: alignment governance is being treated seriously for civilian deployment; it is not being treated seriously for military/autonomous-weapons deployment. The existential risk question hangs on which deployment context matters most.
+
+**Pattern update:**
+
+STRENGTHENED:
+- B1 (not being treated as such) → scoped more precisely. The "not treated" diagnosis is confirmed for the military/national security deployment context, which is where existential risk is highest. Partial weakening for civilian context (EU AI Act GPAI provisions are real governance). Net: B1 held but with better scoping — the governance gap is at the existential risk layer, not the entire AI deployment space.
+- Legislative ceiling claim → converted from structural prediction to completed empirical fact by EU AI Act Article 2.3 verbatim text. Confidence: proven (black-letter law).
+- Cross-jurisdictional pattern → confirmed. The "this is US/Trump-specific" alternative explanation is definitively false. Same outcome produced by different political systems, different regulatory philosophies, different political leadership — because the underlying structural dynamics are the same.
+
+NEW:
+- EU AI Act civilian governance is real but scoped — GPAI provisions create genuine obligations for frontier AI civilian deployment. This partially weakens the "not being treated as such" component for civilian AI, while leaving the military exclusion intact.
+- Tweets sourcing null result — the @karpathy, @DarioAmodei, @ESYudkowsky and 9 other accounts returned no populated content this session. Noted as session-specific null, not an ongoing pattern.
+
+HELD:
+- Hot Mess attention decay critique remains unresolved empirically. No replication study found. B4 held at strengthened level regardless of mechanism resolution.
+
+**Confidence shift:**
+- B1 (not being treated as such) → HELD overall, better scoped. Strong at military/existential risk layer; partial weakening at civilian deployment layer from EU AI Act GPAI provisions.
+- Legislative ceiling claim → UPGRADED to proven (EU AI Act Article 2.3 is black-letter law).
+- "EU regulatory arbitrage as structural governance alternative" → CLOSED for military AI (Article 2.3 categorical exclusion), PARTIAL for civilian AI (GPAI provisions real but scoped).
+
+**Cross-session pattern (19 sessions):** Sessions 1-6: theoretical foundation. Sessions 7-12: six layers of governance inadequacy. Sessions 13-15: benchmark-reality crisis and precautionary governance innovation. Session 16: active institutional opposition to safety constraints. Session 17: three-branch governance picture, AuditBench extending B4, electoral strategy as residual. Session 18: adds two new B4 mechanisms, EU regulatory arbitrage as first credible structural alternative. Session 19: closes the EU regulatory arbitrage question — Article 2.3 confirms the legislative ceiling is cross-jurisdictional and embedded regulatory DNA, not contingent on US political environment. The governance failure map is now complete across four levels (technical, institutional, statutory-US, cross-jurisdictional). The open questions narrow to: (1) Does EU civilian AI governance via GPAI provisions constitute meaningful partial governance? (2) Can training-time interventions against incoherence shift alignment strategy tractability? (3) Will November 2026 midterms produce any statutory US AI safety governance? The legislative ceiling question — the biggest open question from Session 18 — is now answered.
+