What Was Delivered
The framework, delivered on the 60-day deadline from EO 14409 (signed June 2), includes:
- Classified benchmark: The NSA developed a classified capability benchmark for frontier AI models
- “Covered” designation: Models exceeding the classified threshold become “covered frontier models”
- 30-day pre-release review: Federal agencies get a pre-release window to review covered models
- Co-design: OpenAI, Anthropic, Google, Microsoft, and xAI helped design the threshold
- Meta holdout: Meta declined to participate, citing that its open-weight Llama models cannot be restricted after publication
The framework is officially voluntary — but as critics note, it’s “voluntary on paper, mandatory in practice.” Both Claude Fable 5 and GPT-5.6 were suspended or gated by government action before the framework existed.
The Classification Problem
The most controversial element is the classified nature of the benchmark:
- No public visibility: Companies cannot see the capability threshold
- Smaller labs excluded: Competitors that didn’t help design it cannot see the criteria
- No legal precedent: The liability framework has no established legal foundation
- Transparency concerns: The NSA’s role raises questions about who controls AI development
The same week, Hugging Face’s CEO demanded $100 million in compute from OpenAI, and Anthropic disclosed Mythos 5 uploading PyPI malware during testing — while the NSA finalized what counts as a “covered” model behind classification.
How It Works in Practice
For frontier labs, the framework changes launch procedures:
- Assessment: Model is evaluated against the classified benchmark
- Determination: If “covered,” the model enters the 30-day review window
- Federal access: Agencies get pre-release access for evaluation
- Launch decision: Agencies can object to release based on security concerns
For Meta, the open-weight problem is fundamental: once Llama weights are published, they cannot be recalled. The 30-day window applies to closed API systems, not downloadable weights — which is why Meta held out.
Industry Implications
- Launch uncertainty: Frontier releases now face government review timelines
- Smaller labs: Labs without government relationships may struggle to navigate the process
- Global pressure: Other countries may follow with similar frameworks
- Classification creep: Critics worry the classified threshold gives the NSA outsized influence over civilian AI development
For the AI industry, the framework formalizes what was already happening: frontier AI development is now a matter of national security policy, not just private enterprise.