As of this week, every public school district in Ohio is legally required to have an artificial intelligence policy. Three years ago, the largest school district in the country was busy blocking the same technology on its own networks. New York City banned ChatGPT in January 2023 and reversed itself by May. Ohio wrote a mandate into law. That is the whole arc of AI education policy in one country, compressed into three years: from banned to required. I wrote recently about what the research actually shows, that AI tends to improve the work while hollowing out the learning underneath it. This is the part I left out. While the evidence was still arguing with itself, the rulemaking raced ahead, and it is worth asking what all that policy actually governs. The short answer is that it governs access, and almost never learning. The first instinct was prohibition, and it collapsed almost immediately. New York City’s ban lasted four months before the chancellor called it a knee-jerk reaction and stood up an AI policy lab instead. The reasons it failed are the reasons every ban failed. The tool ran on any phone, the detectors could not reliably tell who had used it, and the thing was too useful to wish away. By the 2024 school year most districts had quietly swapped prohibition for guidance, and the question shifted from whether students could use AI to how everyone should. Then the federal posture flipped. The Department of Education’s 2023 report on AI was cautious and advisory, all humans-in-the-loop and shared responsibility. By March 2025 the office that wrote it, the Office of Educational Technology, had been eliminated. A month later the administration signed an executive order titled Advancing Artificial Intelligence Education for American Youth, which set up a White House task force, a Presidential AI Challenge for students, and grant guidance steering federal money toward AI in classrooms. In two years the government went from telling schools to be careful to telling them to move faster. The states moved the same direction, only with more force. Ohio is the first to make an AI policy a statutory duty rather than a suggestion, with a model policy the state released at the end of 2025 and a deadline that lands this week. Others reached into the curriculum itself. California passed a law directing its curriculum board to consider building AI literacy into the frameworks for math, science, and history. A cluster of states passed AI-related education bills in their 2026 sessions, and a few have started writing AI into the computer-science courses they require to graduate, phased in over the coming years. The pendulum did not stop at neutral. It swung from prohibition to something close to compulsion. Europe took the opposite stance and wrote it down. Under the EU AI Act, systems that decide school admissions, score exams, or monitor students during tests are classified as [[high-risk AI system::Under the EU AI Act, a high-risk system is one used in a domain where mistakes carry serious consequences, like education, hiring, or medical devices. It is not banned, but it carries binding obligations: risk assessments, bias controls, human oversight, and documentation.]], which means binding obligations rather than friendly advice. On paper it is the strictest regime in the world for education technology. In practice even Europe is slipping its own schedule. The compliance deadline for these high-risk systems, originally set for August 2026, was pushed to December 2027 in a broader simplification package. Two philosophies, then: America promoting adoption, Europe constraining it, and both moving slower than the classroom they are trying to govern. Strip away the geography and the rules converge on a narrow pair of concerns. The first is access: who is allowed to use these tools, at what age, with whose permission. The second is data: what student information can be fed to a model and where it goes, governed in the US by [[FERPA::The Family Educational Rights and Privacy Act, a 1974 US law protecting the privacy of student education records. It predates AI by half a century and was not written with model training in mind.]] and children’s-privacy rules the Federal Trade Commission tightened in 2025 to require separate parental consent before a child’s data is handed to outside companies to train AI. Both are real. Neither touches the thing that actually determines whether AI helps or harms a student, which is whether the tool does the work or makes the student do it. Almost no framework distinguishes an AI that tutors from an AI that answers, even though that distinction is the entire ballgame in the research. Policy is arguing about the on-switch. The detectors that were supposed to police misuse turned out to be unreliable and biased against non-native English writers, so even the one enforcement lever aimed at behavior mostly broke. We have built elaborate rules about who may flip the switch and almost none about what happens after it is on. There is one exception, and it is the quietest corner of the landscape. A handful of policies aim at assessment instead of access, and those are the only ones that touch learning directly. England’s exam regulator ruled in January that AI cannot be the sole basis for a student’s mark. Princeton reinstated proctored, in-person exams after 133 years on the honor system. Neither is a ban on the technology. Both are decisions about what the test is supposed to measure, and the logic is the same underneath: if you want to know what a student can do unaided, you have to watch them do it unaided. That is the move that actually engages the problem, because it acts on what gets measured instead of who gets in. South Korea shows the cost of getting this backward. It mandated AI textbooks across the country, spent more than a trillion won, on the order of a billion dollars, and walked the policy back within a year after accuracy problems and teacher revolt, downgrading the books from official status to optional supplements as adoption collapsed. Mandating the tool ahead of the evidence is its own kind of error, the mirror image of banning it. The ban was a category error, and the mandate is the same error wearing the opposite coat. Both treat AI as a thing to be permitted or required, when the only question that matters is whether a given use builds a skill or replaces it. Policy has been remarkably busy and remarkably beside the point, governing the speed of adoption while the substance goes unmeasured. The rules worth watching are the ones being written about assessment, because that is the only place the system checks for learning instead of counting logins. You can ban the tool or you can require it. Neither decides what a student walks away able to do. That still gets settled the old way, at the moment the work has to stand on its own.