The order that bans AI licensing also tells agencies to pick the trusted partners
More than two dozen groups asked the White House to publish the frontier model review framework it finished on 1 August and showed only to selected companies.
Two subsections of the same executive order say opposite things, and both of them are being enforced.
On 9 September 2026 more than two dozen advocacy groups, from both political wings, asked the White House to publish the voluntary framework it uses to review frontier AI models before release. The administration finished that framework by its own deadline of 1 August, previewed it with a selected group of technology companies, and has not published it. Smaller and open-source developers were largely left out of the conversations.
The same day, The Information's Amir Efrati described the practical result.
🤔 There is a de facto “whitelist” of companies the White House permits to use SOTA closed source AI models from Anthropic & OpenAI …
But nobody seems to know how to get on it t.co/lNoPogfMkB
A whitelist nobody knows how to join is a strange thing to find in a country whose executive order on the subject explicitly forbids licensing. And you can read both halves of that in one document.
The list is authorised in one sentence and disclaimed in the next
Executive Order 14409, signed on 2 June, directs agencies to build a voluntary framework under which developers give the federal government access to "covered frontier models" for up to 30 days before release. Subsection (b)(iii) goes further, telling them to "collaborate with the Federal Government to select trusted partners that will have early access to covered frontier models".
Two subsections later: "Nothing in this section shall be construed to authorize the creation of a mandatory governmental licensing, preclearance, or permitting requirement."
Both sentences are in the order. So which is it?
CNBC reported in July that the administration had begun deciding which companies and entities get access to the newest models, a decision that used to belong to Anthropic and OpenAI. A White House official told CNBC it "doesn't provide approvals for AI releases from private companies" and that "decisions on timing and scope of releases rest entirely with the companies". In the same period, on CNBC's account, the administration blocked two frontier models over national security concerns and restored access after weeks of negotiation, and OpenAI said it would limit new models to "trusted partners" to comply with government requests.
Read the secrecy as industrial policy, because it behaves like industrial policy
A pre-deployment review is a compliance cost. A compliance cost you can read is something a small team can probably plan around and build for.
One you cannot read is a lottery. Lotteries favour whoever already has counsel in the room.
That is precisely what the coalition argues, and the signatories are worth looking at: Americans for Prosperity next to Public Citizen, R Street next to Free Press, organisations that agree on almost nothing in technology policy. Secrecy, they say, entrenches the largest labs while open-source developers work blind.
The best argument for keeping it quiet has not been made publicly, so here it is
Publishing what a security review checks tells adversaries what it does not check. Evaluation criteria are withheld for that reason across government, and a leaked list of the specific cyber capabilities being probed would likely be useful to the people you least want holding it.
But the parameters of a process are not the content of the test. You can publish who qualifies, on what timeline, with what appeal, without publishing the exam. That is the distinction the letter draws, and nobody in the administration has yet explained why it fails.
There is also a question of who is doing the reviewing, which has not been settled either. We wrote about one version of it in Google moved its CBRN evaluators into the lobbying department.
We would bet the framework becomes public through Protect Democracy's freedom-of-information suit rather than a White House release, and probably not before 2027. A voluntary publication this year would mean we misjudged the politics, and we would take the correction happily.
If you are buying frontier capability for a company, there is a duller question in all this for your procurement team. Is our access to this model contingent on anything we are not allowed to see, and what happens to the roadmap the day that changes?
