Signed weeks after Project Glasswing, the order also set 30-day deadlines for hardening federal systems and asked for the framework by 1 August. It explicitly disclaims mandatory licensing and does not address open-weight models publicly. Analysts read it as formalising the trusted-access model in which cyber-capable variants reach vetted defenders early.
What to do: if you are a frontier developer, prepare for the benchmarking process; if you run critical infrastructure, position for early defensive access through the framework's partner selection.
