At the center of the order is a pre-release review process that relies on industry cooperation rather than legal compulsion.
AI developers are asked — not required — to submit their most advanced “frontier” models for pre-release testing. Companies like Anthropic, OpenAI, and Google were among those expected to participate voluntarily. The text explicitly states that nothing in the order creates new binding obligations, a point industry groups had pressed hard during the drafting phase .
The operating timeline is tight by design. Participating companies submit their models up to 30 days before public release. The government then has that 30-day window to test and evaluate the systems for cybersecurity threats, risks to critical infrastructure, financial systems, and national security .
An earlier leaked draft of the order, circulated in late May 2026, had proposed a review period of up to 90 days. After industry officials called that timeline too onerous, the final text was cut to 30 days. Some companies had pushed for a window as short as two weeks .
Federal agencies are directed to design the specific mechanics of this voluntary coordination framework by August 1, 2026, giving the government roughly two months to build out the operational details .
The executive order creates two additional security mechanisms, both structured as voluntary partnerships with the private sector.
The order calls for the development of a classified benchmarking process against which industry can assess the cyber capabilities of their models. This effectively gives the government a way to define thresholds for what constitutes a “covered frontier model” without publicly disclosing sensitive evaluation criteria .
Within 30 days of the order, the Treasury Secretary — in coordination with the National Cyber Director, NSA, and CISA — must form an AI cybersecurity clearinghouse. This body, built through voluntary collaboration with AI companies and critical infrastructure operators, is meant to coordinate the scanning, discovery, and remediation of software vulnerabilities at scale .
The executive order marks the Trump administration’s most significant AI policy action, and its most visible departure from a previously hands-off philosophy.
Throughout his second term, President Trump had largely maintained a deregulatory posture toward AI, stating he did not want to do anything that would “get in AI firms’ way.” The draft order that leaked in May 2026 was itself described as the product of months of internal tension between national security aides who wanted stronger safeguards and economic advisers who opposed anything that might slow U.S. companies relative to Chinese competitors .
The final signed text reflects that tension. It formally invites government pre-release review of advanced models for the first time — a genuine shift toward oversight — but keeps participation entirely voluntary and the review window short. The framework stops well short of the mandatory approval process some security advocates had sought, and narrower than the earlier draft that administration officials had prepared .
References to the U.S.-China AI race are threaded throughout the policy rationale. The South China Morning Post characterized the order as seeking “security safeguards without slowing the race with China,” noting that the administration deliberately chose a voluntary model over mandatory review regulations .
By making the framework fast, flexible, and voluntary, the White House aimed to mitigate the most severe cybersecurity risks from frontier models — the kind that could threaten financial systems or critical infrastructure if models fell into the wrong hands — without imposing compliance costs that could cede competitive ground to Chinese AI labs. In effect, the order attempts to have it both ways: inviting government scrutiny while explicitly avoiding anything that could be construed as regulatory drag on American innovation .
Comments
0 comments