President Trump signed an executive order on Tuesday establishing a voluntary framework for government review of frontier AI models before public release, ending weeks of internal White House conflict over how aggressively to regulate the technology. The order, titled “Promoting Advanced Artificial Intelligence Innovation and Security,” was signed privately without the usual livestream or public ceremony, a contrast with the fanfare that typically accompanies presidential AI announcements.

The final version is substantially narrower than the draft Trump rejected on 21 May, when he scrapped a planned signing ceremony over concerns that the order “could dull America’s edge on AI technology.” The original draft proposed a 90-day mandatory pre-release review period and would have given the government formal evaluation authority over frontier models. The signed version asks companies to voluntarily submit models 30 days before release and participate in a collaborative framework rather than submitting to mandatory testing.

What the order does

The executive order establishes three main mechanisms. First, a voluntary pre-release review framework in which AI developers can engage the government to determine whether models under development qualify as “covered frontier models,” provide access for up to 30 days before planned release, and collaborate on selecting “trusted partners” for early access. The framework is explicitly voluntary, meaning companies can decline to participate without penalty.

Second, the order creates an AI cybersecurity clearinghouse within 30 days, coordinated by the Treasury Secretary, the National Cyber Director, the NSA, and CISA. The clearinghouse will scan for software vulnerabilities, validate discoveries, and coordinate remediation and patch distribution, a direct response to the Mythos crisis that demonstrated how AI-discovered vulnerabilities can outpace existing disclosure and patching processes.

Third, federal agencies are directed to develop benchmarks for assessing AI models’ cybersecurity capabilities and to strengthen the government’s own security defences against AI-enabled threats. The order also addresses AI safety research, though the specific provisions are less prescriptive than what the original draft contained.

What was cut

The differences between the scrapped draft and the signed order reflect the victory of the pro-industry faction within the White House. The 90-day mandatory review was reduced to a 30-day voluntary window. The formal government evaluation authority was replaced with a collaborative framework. The reporting requirements for companies developing powerful models, which would have echoed provisions in Biden’s repealed AI executive order, were softened to avoid what industry allies characterised as regulatory overreach.

Silicon Valley’s objections to the original draft were decisive. AI companies argued that mandatory pre-release testing would slow American innovation, create a competitive disadvantage relative to Chinese firms facing no equivalent requirements, and establish a precedent for government gatekeeping of technology deployment. The signed order addresses those concerns by making participation voluntary and framing the government’s role as collaborative rather than regulatory.

The gap it leaves

The voluntary framework means the order’s effectiveness depends entirely on whether AI companies choose to participate. Companies already engaged in pre-release testing with CAISI, including Google, Microsoft, and xAI, may continue or expand that cooperation. Companies that view government review as commercially disadvantageous or that are racing to ship products can simply opt out.

The EU’s AI Act, entering full enforcement in August, provides a stark contrast: mandatory requirements, statutory authority, and penalties for non-compliance. The Trump order establishes norms and creates institutional infrastructure (the cybersecurity clearinghouse, the benchmark development process) but relies on goodwill rather than obligation.

For the White House, the quiet signing may be the point. The order gives the administration a policy document it can reference when asked about AI oversight, creates structures that could be strengthened later, and avoids a public confrontation with an AI industry whose leaders are among the administration’s most visible supporters. Whether a voluntary framework is adequate for a technology that can discover 10,000 zero-day vulnerabilities in a month is the question the order deliberately leaves unanswered.