The White House at dusk with a single desk lamp glowing inside, empty podium in foreground, documentary photography, muted colours
News

Trump Quietly Signed His AI Oversight Order — And It's a Shadow of What He Refused in May

The AI order Trump refused to sign in May because he 'didn't want to get in the way' is back — gutted. 90-day mandatory review became 30-day voluntary. The signing happened privately, no Silicon Valley CEOs in sight.

Trump AI OrderAI RegulationFrontier ModelsUS AI PolicyNational Security

Answer-First Lead

President Trump signed a scaled-back AI executive order on June 2, replacing the 90-day mandatory pre-release review he refused to sign on May 21 with a 30-day voluntary framework. Companies can now choose to submit frontier AI models for government security testing up to 30 days before release — or they can simply not. There are no penalties for opting out. The signing was done privately, without the Silicon Valley ceremony originally planned.

🔍 THE BOTTOM LINE

The US now has an AI oversight order that’s entirely optional. It creates institutional infrastructure but relies on goodwill rather than obligation — a sharp contrast to the EU’s AI Act entering full enforcement in August with mandatory requirements and penalties.


What the Order Actually Does

The executive order, titled “Promoting Advanced Artificial Intelligence Innovation and Security”, establishes three mechanisms:

1. Voluntary pre-release review framework. AI developers can engage the government to determine whether their models qualify as “covered frontier models,” provide access for up to 30 days before planned release, and collaborate on selecting “trusted partners” for early access. Companies can decline to participate without consequence.

2. AI cybersecurity clearinghouse. Within 30 days, the Treasury Secretary, National Cyber Director, NSA, and CISA will coordinate a clearinghouse to scan for software vulnerabilities, validate discoveries, and coordinate patch distribution — a direct response to the Mythos crisis that demonstrated how AI-discovered vulnerabilities can outpace existing disclosure processes.

3. Agency benchmarks and federal security. Federal agencies are directed to develop benchmarks for assessing AI models’ cybersecurity capabilities and strengthen the government’s own defences against AI-enabled threats.

The order also directs the Department of Justice to treat AI-assisted hacking and unauthorised access as high-priority enforcement areas.

What Was Cut — And Why It Matters

The distance between the May 21 draft and the June 2 signed order tells the story:

ProvisionMay DraftJune Signed Order
Pre-release review90 days, mandatory30 days, voluntary
Government authorityFormal evaluation powerCollaborative framework
Company obligationsReporting requirements for powerful modelsNone — opt-in only
EnforcementMandatory complianceNo enforcement mechanism
SigningLive ceremony with tech CEOsPrivate, no cameras

The language is explicit: “Nothing in this section shall be construed to authorize the creation of a mandatory governmental licensing, preclearance, or permitting requirement for the development, publication, release, or distribution of new AI models, including frontier models.”

That’s not a loophole. That’s the point.

How We Got Here

Our previous coverage tracked this story when Trump pulled the original order on May 21, saying he “didn’t want to get in the way of” AI leadership. Industry pressure — including from former White House AI czar David Sacks — argued mandatory review would slow American innovation and create a competitive disadvantage versus Chinese firms facing no equivalent requirements.

The signed version addresses those concerns by making everything voluntary. Companies already working with CAISI (Google, Microsoft, xAI) may continue. Companies racing to ship can simply opt out. The order creates structures that could be strengthened later, but relies entirely on corporate goodwill today.

What is CAISI? The Consortium for AI Safety and Innovation — a voluntary industry-government partnership where major AI companies share pre-release model access for security testing. It has no statutory authority and participation is optional.

The EU Contrast

The timing is stark. The EU’s AI Act enters full enforcement in August with mandatory requirements, statutory authority, and penalties for non-compliance. The Trump order creates norms and institutional infrastructure but no enforcement.

For NZ businesses, this matters more than it might seem. As B2B News NZ reported, the voluntary framework could create tiered release schedules where US government and cleared contractors get early access while international customers — including Five Eyes partners like NZ — wait. Five Eyes membership offers diplomatic leverage but no commercial guarantee.

The Quiet Signing

Perhaps the most telling detail: Trump signed the order privately, without the livestream or public ceremony that typically accompanies presidential AI announcements. The original signing was planned as a showcase event with Silicon Valley’s top CEOs. The final version was inked without fanfare.

The quiet signing may be the point. The administration gets a policy document it can reference when asked about AI oversight, creates structures that could be strengthened later, and avoids a public confrontation with an AI industry whose leaders are among the administration’s most visible supporters.

Whether a voluntary framework is adequate for a technology that can discover 10,000 zero-day vulnerabilities in a month is the question the order deliberately leaves unanswered.

❓ Frequently Asked Questions

Q: What does this mean for NZ? NZ businesses relying on US AI APIs could face tiered release schedules where US government and cleared contractors get early access. Five Eyes membership provides diplomatic leverage but no commercial guarantee. The voluntary framework means there’s no obligation for companies to offer equal access globally.

Q: Is this the same order Trump refused to sign in May? No — it’s a significantly weakened version. The May draft had 90-day mandatory review. This has 30-day voluntary review. The government evaluation authority was replaced with a collaborative framework. Reporting requirements were removed entirely.

Q: Will AI companies actually participate? Companies already engaged with CAISI (Google, Microsoft, xAI) may continue or expand that cooperation. Companies that view government review as commercially disadvantageous — or that are racing to ship products — can simply opt out with no consequences.

🔍 THE BOTTOM LINE

The US now has an AI oversight order that’s entirely optional, enforcement-free, and was signed in private. It creates institutional scaffolding that could matter later — but right now, it’s a framework that works if you trust AI companies to police themselves. The EU, meanwhile, is about to start enforcing mandatory rules with real penalties. The gap between the two approaches is about to get very visible.


Sources

Sources: White House, TechCrunch, The Next Web, PBS, CyberScoop, B2B News NZ