When AI Outruns Accountability: A Governance Vacuum at National Scale

In August 2025, an executive order created the National Design Studio and gave it three years to redesign 27,000 federal websites using AI. The entity is temporary, structured like DOGE, answering only to the president. Its charter, under a program called America by Design, was to rewrite the US Web Design System (USWDS) standards and overhaul every dot-gov property. A year into that mandate, the public record reads as a catalogue of governance failure modes, and the blast radius is a citizenry.

We have argued that governance escapes the engineering department. First when autonomous campaigns pushed it into marketing, then when AI arrived on the design canvas. The National Design Studio is that same thesis arriving in government, unprompted, with sharper evidence than either earlier case. A reader who disagrees with the politics should still recognize their own org chart in what follows.

What a year produced

The visible output is thin. Newly registered domains (live.gov, onlyfarms.gov, aliens.gov, why.gov) mostly redirect to legacy sites. The biggest claimed win, modernizing federal retirement, was already underway before the studio existed. Ars Technica, reporting on 30 June 2026, characterizes the pattern as “false victories and overstated credit.”

The shipped work is heavier than what it replaced. Ethan Marcotte, a former federal designer, measured a single National Design Studio page at close to three megabytes of code. A CIO.gov redesign was pulled after accessibility critics flagged it and after the studio accidentally exposed its own internal design system. A staffer had boasted on X that the CIO.gov design was “almost entirely generated by our internal AI agent system” end to end. TrumpRX.gov shipped an AI-generated image of a child with six toes running toward an American flag with no stars.

Cosmetic errors are not the story. The story is what happens on the surfaces that touch citizen data.

Trackers built to evade privacy tools

Four studio-built sites (ndstudio.gov, trumprx.gov, realfood.gov, trumpaccounts.gov) ran commercial visitor-tracking software that The Guardian, in reporting relayed by Ars Technica, described as “configured to evade the privacy tools many web users install.” None of the four carried the public filings that the Privacy Act of 1974 and the E-Government Act of 2002 have required for exactly this kind of collection. The trackers were removed after the White House was contacted. The White House did not say what happened to the data already collected.

Set that against the frame we drew in compliance as proof: a governance claim you cannot produce evidence for is not a governance claim. A White House spokesperson said “all National Design Studio personnel comply with all legal requirements in their important work.” The specific legal requirement here is a filing. The filings do not exist. That is the compliance-as-narrative failure, running live on federal property.

Building services it has no authority over

The studio built its own versions of services legally assigned to other agencies, including passport.gov and vote.gov. Under the studio’s vote.gov design, a voter would verify identity through Login.gov and have citizenship checked against a Department of Homeland Security database. No privacy impact assessment was performed. The congressional commission that actually owns vote.gov, per The Guardian, “has not decided to formally participate.”

An unelected design team wired a voter-identity flow into a federal immigration database, with no assessment of what that does to the people flowing through it, for a service it has no authority to run. This is the mechanism behind two patterns we have documented. It is how AI deletes accountability: the tooling makes it trivial to build the thing, and nobody in the chain is positioned to say no. And it is the privacy collapse in its purest form, a data-linkage decision made by whoever happened to be holding the AI, not by whoever is answerable for the outcome.

The mandate it quietly dropped

The core assignment was the standards. The USWDS team, created in 2015, was cut to a single full-time employee. As of mid-2023 only 30 percent of government sites used the standard at all. Charles Hall, an accessibility expert, put the waste plainly: “USWDS is solid. Not using it is already a waste. Making something else is exponential waste.”

The standards update, the executive order’s actual core mandate, is “no longer a requirement,” per Ars Technica. Agencies were given until 4 July 2026 to share initial discussion results. None responded to the studio’s outreach. The one deliverable that would have compounded across 27,000 sites, a shared design standard, is the one the studio abandoned. What it produced instead is a set of one-off pages that agencies did not ask for and are not adopting.

No owner on the org chart

The studio is fronted by Joe Gebbia, an Airbnb cofounder serving as chief design officer, who has said he wants government sites to feel like “an Apple Store-like experience,” and by federal CIO Gregory Barbaccia. USAspending, the federal spending database, returns no record of the National Design Studio as a paying agency or a recipient of funds. The Guardian’s summary is the cleanest statement of the problem: “questions remain about who oversees NDS and how it’s funded.”

An entity is redesigning the front door to the federal government, touching voter identity and immigration data, and it does not appear in the system built to track who spends public money. There is no line to audit and no office to escalate to.

The structural lesson, not the political one

Strip out every proper noun and the shape stays intact. An entity with a broad mandate, powerful AI tooling, no authority to compel the agencies it serves, no privacy assessment on the data it touches, and no traceable budget will produce this exact outcome. Not because anyone set out to break the law, but because nothing in the structure was positioned to stop it. The AI made building fast. The missing accountability made building unchecked.

Every one of these failure modes has a twin inside ordinary companies. A marketing team stands up an autonomous campaign engine with no owner for the data it collects. A design group ships an AI-generated flow that reads a customer record it was never authorized to read. A skunkworks project runs on a budget nobody can find. The National Design Studio is the same pattern at a scale where the affected population is everyone.

Do this now

Pick one initiative in your organization that has an AI mandate and moves fast. Ask four questions and write down the answers:

Who authorized it to touch the specific data it touches?
Where is the privacy or impact assessment for that data?
Which budget line funds it, and does that line appear in your financial system of record?
Who has the authority to shut it down, and do they know they have it?

If any answer is missing, you are running a version of the National Design Studio. The scale is smaller. The structure is identical, and the structure is what produces the outcome.

This analysis synthesizes Trump’s plan to redesign every .gov website leads to AI-designed horrors (Ars Technica, June 2026).

Victorino Group helps organizations put owners, assessments, and audit lines under every fast-moving AI initiative before the blast radius finds them. Let’s talk.