White House keeps frontier AI review rules private as Nvidia joins talks
The voluntary process offers selected developers and partners early access while leaving excluded labs, researchers and U.S. allies without its operating rules.
By Ryan Merket · Published
Why it matters
The framework could decide which labs, infrastructure providers and foreign partners see powerful models early. Keeping its rules private gives participants clarity and access that excluded developers cannot evaluate or challenge.
Jensen Huang's Nvidia had staff inside the White House's August 4th industry meetings on frontier AI security, while developers excluded from the talks were left without the framework that could determine how the government reviews powerful models before release.
The White House does not plan to publish the completed framework, three people familiar with the discussions told Axios. Its contents will instead be shared with companies participating in the voluntary process.
That decision turns a national AI security policy into a private operating agreement between the government and a selected group of technology companies. The classified material includes the cyber-capability benchmark and the threshold that determines which systems qualify as "covered frontier models." The White House is also withholding the surrounding framework, which the executive order itself does not designate as classified.
The result is a two-tier policy process. Participating developers can learn how to approach the government, protect model intellectual property during testing and help select "trusted partners" for early access. Developers outside the room cannot assess how the same process may apply to their next model.
A voluntary review with consequential access
President Donald Trump signed Executive Order 14409 on June 2nd. It directed federal agencies to build the framework within 60 days, putting the deadline around August 1st. The White House said on August 3rd that it had finished the work on time, according to earlier Axios reporting.
The order allows developers to ask whether a model under development falls within the government's classified frontier threshold. A developer can then provide federal officials with access for as long as 30 days before releasing that model to other trusted partners.
The government must protect confidentiality, cybersecurity, intellectual property and model access during that window. Developers also collaborate with federal officials on deciding which trusted partners may receive the model early.
The order expressly bars the framework from becoming a mandatory licensing, preclearance or permitting system for AI development and release. Participation remains voluntary under the text Trump signed.
Voluntary status does not make the process commercially trivial. Early access to a capable model can give cybersecurity agencies and critical-infrastructure operators time to test defenses before broader distribution. It can also give selected companies, researchers or foreign governments an earlier view of capabilities that rivals and excluded partners have not seen.
The unanswered operational question is who qualifies for that access. Axios reported that the framework does not publicly identify the trusted partners or establish whether foreign governments can join the group. The European Union and United Kingdom therefore lack a public basis for determining whether their agencies or researchers could participate.
Nvidia brings the open-model argument into the room
Axios reported that open-source models were discussed during the August 4th meetings and that Nvidia staff participated. The reporting does not establish what Nvidia proposed or whether the White House adopted any of its positions.
Nvidia has a direct interest in how Washington treats open models. At its March conference, Nvidia argued that open and proprietary systems would develop together, quoting Huang as saying, "It's proprietary and open." Open models widen the pool of developers that can train, modify and deploy AI software on Nvidia's hardware and software stack.
Huang, who co-founded Nvidia in 1993 after working at AMD and LSI Logic, has spent his entire tenure pushing Nvidia into the next large computing market. That strategy turned a graphics-chip maker into a central supplier for model training and inference. Nvidia reported $215.938 billion in fiscal 2026 revenue, including $193.737 billion from data-center products.
Huang met President Trump and Commerce Secretary Howard Lutnick (@howardlutnick) in Washington during the week before the framework meeting, Axios reported. The timing places Nvidia close to the administration as officials confront the tension between distributing American AI technology widely and limiting access to models with advanced cyber capabilities.
Nvidia's presence also reflects how far Huang's influence extends beyond selling chips. RuntimeWire reported in July that Nvidia invested in Safe Superintelligence and provided access to Vera Rubin compute. Separate reporting indicated Nvidia was considering a financial backstop tied to an OpenAI data-center lease. Policy participation adds another channel through which Nvidia can shape the conditions surrounding frontier AI development, though attendance at the White House meetings alone does not prove policy control.
Secrecy may weaken the consistency developers requested
Frontier labs have publicly asked for predictable federal testing. In a July 15th policy post, OpenAI said the cyber-evaluation process needed to be consistent and repeatable across state and federal systems. OpenAI also said it was discussing the framework with the administration, peer companies and business groups.
Axios previously identified OpenAI, Anthropic and Google as labs that supplied feedback on a draft. The White House said it was engaging with additional industry partners, without publishing a participant list.
A private framework can still produce consistent treatment among participating developers. It cannot demonstrate that consistency to companies outside the process. Those developers will not know whether comparable models receive comparable scrutiny, how intellectual-property protections work in practice or whether access decisions favor established labs with existing government relationships.
Researchers and policymakers face a related problem. Keeping dangerous benchmark details classified can prevent adversaries from using the government's tests as a capability roadmap. Withholding the administrative rules surrounding those tests also blocks outside examination of who receives access, how disputes are handled and whether the voluntary process operates as written.
The White House has chosen confidentiality as the price of getting model developers and national-security agencies into the same review process. The framework now depends on a smaller circle of companies trusting the government with unreleased models, while everyone outside that circle must trust a system they cannot inspect.