• OpenAI, Anthropic, and Google met in D.C. on Tuesday to assess Trump's AI model review framework.
• President Donald Trump's administration plans to review AI models for cybersecurity risks.
• The framework challenges Trump's light-touch AI regulation stance amid rapid technology advances.

The AI world is looking to D.C. for clarity.

On Tuesday, staffers from OpenAI, Anthropic, Google, and other tech companies convened in Washington to review the administration's new framework for reviewing advanced AI models. Now, the rest of the industry eagerly awaits answers on what will be included in the framework — a structured way for President Donald Trump's administration to evaluate AI models' cyber capabilities.

The framework represents a turning point for AI oversight. While Trump's administration has adopted a light-touch regulatory approach, rapid advances in AI models for cybersecurity and hacking are beginning to upend it.

It's an open question how the new process will shape up and affect the release and adoption of new AI models. The New York Times reported on Tuesday that White House officials said at the meeting that the federal government plans to review only certain types of AI models from companies like Anthropic and OpenAI for potential security risks and does not plan to review open-source AI models so far, though these plans could change as the technology advances. Open-source models allow anyone to download or modify the code for free.

An executive order in early June directed officials to develop a "benchmarking process to assess the advanced cyber capabilities of AI models" within 60 days. The deadline has passed.

Here are the major outstanding questions.

How committed is the Trump administration to its stance on AI?

The administration's AI oversight approach has been defined by its light-touch regulatory stance. Its AI Action Plan, released in 2025, said that regulation might end up "paralyzing" the industry, and called on agencies to "dismantle unnecessary regulatory barriers that hinder the private sector."

The executive order in June acknowledged a new reality in which AI models from Anthropic and OpenAI have shown marked improvements in coding, finding cybersecurity exploits, and working on longer-term tasks.

The framework, as sketched in the June order, will require companies to share their AI models with the government for up to 30 days before releasing them to the public, giving the government a head start in assessing their cyber capabilities.

Crucially, Trump's executive order described the framework as "voluntary," though it's an open question how the administration would treat companies that skip the process. Jessica Ji, an analyst at Georgetown's Center for Security and Emerging Technology, said it seems like officials are trying to create a "soft compliance regime."

"Ideally, they can say we're not regulating, this is a voluntary program, but all of the companies whose models they think present potential national security risks would comply," she said.

Which AI models will the framework cover?

Regulating AI is tricky. Rules could target the top-tier labs, specific products, or individual AI models. If regulators home in on the models, more questions pop up. Do they base their rules on the models' size, or when they're released, or what they're capable of?

The conversation in D.C. over recent months has turned around the AI models' capabilities because of new developments like Anthropic's Mythos model and OpenAI's security incident with the AI company Hugging Face.

Trump's executive order asked his agencies to develop a definition of the "covered frontier models" that would be vetted by his administration. Chinese open-source and open-weight models, which have sparked furor in the industry recently because of their advanced capabilities, are almost certainly part of the Tuesday conversation, Ji said.

She added that figuring out ways to categorize AI models is a crucial step for the rulemakers.

What authority will the government have over the leading AI juggernauts?

It's unclear so far how the framework will affect the rollout of AI models, especially if it truly feels voluntary to companies. Ji said she's curious whether there will be any clear guidance on what the administration can do if it finds a dangerous capability while testing unreleased technology.

In June, Trump's Commerce Department responded to cybersecurity concerns about an Anthropic model by issuing an export control that barred the company from granting foreign nationals access. Anthropic ended up pulling down all access to the model until it reached a deal with the administration.

Ji said it's unlikely the administration would keep resorting to export controls, though it's unclear what other levers they might pull to intervene in a model release or to pressure a company to change its product.

She said the meeting will provide more clarity on who in the Trump administration makes the decisions around AI oversight and cybersecurity.

"We're trying to figure out who are the new kind of power players, who has influence in the administration on this set of issues, right now," Ji said.

Anthropic, Google, and OpenAI did not immediately respond to requests for comment from Business Insider.

Have a tip? Contact this reporter via email at scouncil@businessinsider.com, or over text, Signal, Telegram, or WhatsApp at 415-757-8198. Use a personal email address, a nonwork WiFi network, and a nonwork device; here's our guide to sharing information securely.