For all the attention being paid to AI legislation, some of the most consequential rules governing the technology may end up coming from a truly unexpected place: procurement departments. Like many regulatory beginnings in the United States, California offers an early example: the state has built specific requirements for buying products and services that use generative AI. State entities must assess the risk associated with GenAI purchases, with moderate- and high-risk uses receiving…