Executive Order 14409’s 60-day design deadline expired on August 1, 2026, giving the Center for AI Standards and Innovation (CAISI) and the NSA a finalized voluntary framework for reviewing frontier AI models up to 30 days before they reach enterprise customers. President Trump signed the order, titled “Promoting Advanced Artificial Intelligence Innovation and Security,” on June 2, 2026, and directed agencies to complete the framework within 60 days. OpenAI, Anthropic, and Google received the draft framework before the deadline. The framework’s design goal is flagging risks of advanced AI being exploited by China or Russia before public access, according to legal analysis published by Lexology.
How the CAISI Review Framework Works
The framework gives the US government pre-release access to “covered frontier models” for a window of up to 30 days before release to other trusted partners. CAISI, housed in the Commerce Department, and the NSA conduct the reviews. The classification criteria for covered models involves classified benchmarking; the specific compute threshold is not yet public, according to Norton Rose Fulbright’s analysis. The executive order also creates an AI cybersecurity clearinghouse for sharing AI vulnerability information across federal agencies. The order preserves its voluntary framing in explicit terms: “Nothing shall be construed to authorize creation of any mandatory governmental licensing, pre-clearance, or permitting requirement for the development, publication, release or distribution of AI models,” the order states.
Why “Voluntary” Carries Practical Weight
The GPT-5.6 precedent shows how voluntary review became practical pressure before the framework existed. OpenAI delayed GPT-5.6’s broader rollout on June 26, 2026 after a US government request — an informal arrangement that predated the formal standards, as WithO2 covered when GPT-5.6’s government-influenced rollout reshaped OpenAI’s model lineup. Labs seeking US government contracts have little room to opt out of a review process the government administers. The framework formalizes that dynamic with a defined reviewer, a defined access window, and a circulated draft that OpenAI, Anthropic, and Google have already seen.
What This Means for Business AI Buyers
Three consequences follow for companies buying enterprise AI tools, such as ChatGPT, Claude, and Gemini. First, new frontier model releases may now be sequenced by government security review rather than pure commercial roadmaps, so feature launches can arrive later than vendor announcements suggest. Second, models flagged during review may be restricted or modified before enterprise release. Third, the framework lands in the same week as EU AI Act Article 50 enforcement (August 2) — a two-hemisphere squeeze in which businesses serving both markets face simultaneous new AI compliance regimes on opposite sides of the Atlantic.
Our Take
“Voluntary” until it isn’t. Labs that want US government contracts and cleared the June GPT-5.6 review can’t really opt out — the CAISI framework just gives an existing dynamic teeth and a process. For businesses buying AI tools, the question isn’t whether models get reviewed. It’s whether that review slows down the features you’re waiting for.
For Context
WithO2 covered this framework at the drafting stage in July, when the White House circulated its voluntary AI standards plan to frontier labs, and reported OpenAI’s GPT-5.6 lineup changes that followed the government’s June review request. For the European side of this week’s regulatory shift, see our coverage of EU AI Act Article 50 chatbot disclosure rules, enforceable from August 2, 2026.
