The Trump administration is weighing an executive order that would establish a federal review of new AI models before they reach the public, according to a New York Times report on May 4 and follow-on coverage by Axios on May 5. The plans are early — White House officials briefed executives from Anthropic, Google, and OpenAI on initial concepts last week — and would create a working group of administration officials and industry leaders to design the review procedure. A White House official told reporters that any final decision will come from the president directly.
The immediate catalyst is Anthropic's Mythos preview model, which has surfaced thousands of zero-day vulnerabilities across major operating systems and browsers under a 50-organization early-access program. Mythos has not been released publicly because Anthropic itself flagged the cybersecurity risk. That self-restraint, combined with the administration's earlier opposition to expanding Mythos access, has reframed how the White House views frontier-model release: a powerful enough model can change national-security calculus before any user touches it.
The reversal is the structural story. On Day 1, President Trump rescinded President Biden's AI executive order, which had asked developers to perform safety evaluations and report on dual-use capabilities. The White House also released a National Policy Framework in March that placed federal preemption at the center, blocking states from regulating model development. A pre-release vetting order would move in the opposite direction — adding federal oversight where the administration had previously stripped it. Industry response will hinge on scope: a narrow rule covering only cyber-capable models would land very differently from a broad licensing regime applied to every frontier release.
Takeaway for learners: the policy story to watch is not whether the order ships, but where the line gets drawn between 'capability that requires review' and 'capability that doesn't.' That definition will be argued over in technical detail — what counts as a cyber-offensive model, what counts as a biology-uplift risk — and the specifics will shape the next decade of AI release norms more than any single law. If you want to follow this beat, read the actual evaluation criteria when they appear, not the press releases.