![](\"https:\/\/fortune.com\/img-assets\/wp-content\/uploads\/2026\/08\/GettyImages-2288807281-e1786034522415.jpg?w=2048\")
<\/p>\n<\/p>\n
Welcome to Eye on AI. Beatrice Nolan here. In today\u2019s issue:<\/strong><\/em><\/p>\n This week, the major players in the AI industry met with the U.S. government in a bid to end the confusion around the regulation of frontier AI models. The meeting was convened at the White House on Tuesday, and featured OpenAI, Anthropic, Google, Meta, Nvidia, and other leading AI companies. The upshot was a new voluntary framework that allows the government to review frontier models.<\/p>\n The companies who joined the White House confab agreed to the proposed arrangement\u2014but, for now, the general public will not get to see it.<\/p>\n The administration does not plan to publish the framework it has spent the last two months developing after President Trump ordered officials in June to create it. What models are included, the thresholds, and the list of \u201ctrusted partners\u201d who get early access to the most powerful models in the world are all still question marks for the public and much of the industry.<\/p>\n The June order already stipulated that the benchmarking process used to designate a \u201ccovered frontier model\u201d may be classified, and that the determination would sit with the director of the NSA.<\/p>\n A source familiar with the situation told me that only a handful of companies were in the briefing room when the framework was discussed. This underscores a broader concern among some that U.S. AI regulation is increasingly being shaped in conversations among a handful of dominant firms. Smaller and open-source labs worry that these safety frameworks could influence the broader market structure and entrench the use of closed-sourced frontier models that are \u201cgovernment-approved.\u201d<\/p>\n Reports suggest that the models covered by the framework are defined as closed-source, demonstrating state-of-the-art capabilities, and presenting national security risks. However, the person familiar with the briefing said that neither \u201cstate-of-the-art\u201d nor \u201cnational-security risk\u201d have been clearly defined.<\/p>\n Developers can voluntarily hand such a model to the government for up to 30 days before release. Companies were reportedly told to submit models as close to launch-ready as possible rather than for early checkpoints\u2014which is roughly where things stood in July\u2014and the review will be run by an assortment of administration officials rather than a single agency.<\/p>\n Based on the accounts of sources familiar with the process, open-weight models appear to have been left out of the framework. Some have noted the exclusion could benefit companies trying to catch up with the leaders because they will confront fewer regulatory obstacles. At the same time, the exclusion would seem to exclude from oversight the AI models that Washington is most worried about: the open-weight releases from Alibaba, DeepSeek and Moonshot AI that keep landing uncomfortably close to the American frontier.<\/p>\n Even companies that work with open weights are unsure whether their models could be submitted, or what that would mean in practice. Some argue that open source models not being explicitly included could be worse for the companies that are making them, as it may push customers toward using \u201cgovernment-approved\u201d closed-source alternatives.<\/p>\n Another thing that caught my eye was that, during the 30-day review window reportedly included in the framework, submitted models are to be held in high-security environments, where access will be logged in detail, and\u2014per Axios<\/em>\u2014\u201demployees would be limited from accessing models.\u201d<\/p>\n That seems to suggest that the company\u2019s own staff would be restricted, or at least limited, from using its own frontier model while Washington evaluates it. Internal deployment\u2014where companies use an unreleased model themselves\u2014has been cited as a blind spot in a lot of previous governance proposals.\u00a0<\/p>\n It\u2019s an especially hot topic at the moment since the recent hacks carried out by OpenAI\u2019s escaped agents were in part indicated by a secret unreleased model.<\/p>\n Criticism about the framework and the way the government has carried it out has been coming from all sides.<\/p>\n \u201cThis is not a handshake deal with tech companies. It\u2019s the rulebook for ensuring they don\u2019t endanger the public. If only tech companies know what\u2019s in the rulebook, it doesn\u2019t work,\u201d Americans for Responsible Innovation, a Washington-based AI policy nonprofit, said in a post on X. (The group has been pushing for more transparent, enforceable federal rules around advanced AI systems.)<\/p>\n R Street\u2019s Adam Thierer, a resident senior fellow in technology and innovation, said the administration \u201cappears destined to give us something far more arbitrary and burdensome\u201d than its predecessor from the Biden administration \u201cwith this behind-closed-doors de facto licensing regime they are concocting.\u201d\u00a0<\/p>\n Meanwhile, Rep. Lori Trahan, co-sponsor of the new bipartisan FRONTIER Act, which would put frontier AI oversight in a civilian-led federal framework, argued AI governance \u201cbelongs in a civilian agency, where it can be seen and questioned, not buried inside the national security apparatus.\u201d\u00a0<\/p>\n Until the rulebook is brought into the open, critics warn, Washington may be quietly deciding who gets a head start in the AI race.<\/p>\n With that, here\u2019s more AI news.<\/p>\n Beatrice Nolan<\/strong> Europe\u2019s AI sovereignty is under threat. Could Mistral be the answer? \u2014 By Beatrice Nolan<\/em><\/p>\n \u2018Baffling\u2019: White House won\u2019t publicly release AI model evaluation framework it reviewed today with OpenAI, Anthropic, Microsoft, and others \u2014 By Emily Forlini\u00a0<\/em><\/p>\n Demis Hassabis steps down from Google DeepMind CEO role amid a major AI leadership shake-up \u2014 By Beatrice Nolan<\/em><\/p>\n More model hacks.<\/strong> Meta this week became the third major AI lab to disclose that one of its models breached another company\u2019s systems during safety testing, following earlier incidents at Anthropic and OpenAI. The Information<\/em> reported that Meta\u2019s Muse Spark 1.1 model gained unintended internet access during a cybersecurity evaluation after a misconfiguration by a third-party company, Irregular, which then identified and exploited a vulnerability in an unnamed third\u2011party service to break into that company\u2019s systems and make unauthorized changes. Irregular described the Meta incident as the same type of evaluation\u2011environment misconfiguration that Anthropic disclosed the week before, and emphasized that it was not a sandbox escape. Read more in The Information.<\/em><\/p>\n OpenAI details how autonomous agents coordinated during the Hugging Face incident.<\/strong> At the Black Hat conference in Las Vegas this week, OpenAI security researchers gave a more granular walk\u2011through of the Hugging Face breach in a session reported by Ground Level AI\u2019s (and former Fortune AI Reporter) Sharon Goldman. According to her account, researchers Eric Wallace and Michael Dalton traced the incident back to early May, when autonomous agents evaluating an unreleased model struggled to complete assigned security tasks under normal constraints and began leaving notes for one another in an internal software repository. Over time, that behavior evolved into what the presenters described as a kind of internal message board, where agents shared partial exploits, task hand\u2011offs and work assignments to coordinate their progress. Read more in Ground Level AI<\/em> here.\u00a0<\/p>\n Anthropic is hiring an AI chip design team.<\/strong> Anthropic is building a team to design its own custom chips for AI usage, the company confirmed to Business Insider.<\/em> The company said it plans to co-design hardware and models to help its technology run faster and more efficiently. The move follows a report last month from The Information<\/em> that Anthropic was scouting Samsung as a potential manufacturing partner. Anthropic has existing compute deals with AWS, Google, Nvidia and AMD, but rising demand for Claude appears to be pushing the company toward building its own silicon as well. Anthropic isn’t the first AI lab to take this step: OpenAI unveiled its Broadcom-built Jalape\u00f1o chip in June, and Meta has been developing its own MTIA accelerators. Anthropic is now seeking engineers with chip design experience for a “custom silicon team,” according to a job listing. Read more in Business Insider.<\/em><\/p>\n Four top Google AI researchers form new startup. <\/strong>Jeff Dean, Google’s chief scientist and one of the company’s longest-serving executives, is leaving to launch an AI startup called Discovery Loop, alongside three other senior researchers: Sanjay Ghemawat, Oriol Vinyals and Quoc Le. Dean is expected to serve as CEO. The company is structured as a public benefit corporation and aims to use AI to automate the experimental loops of scientific and engineering research, running large numbers of experiments simultaneously to speed up discovery. Discovery Loop has raised seed funding from Radical Ventures, Khosla Ventures and other investors, including Alphabet, which is also providing computing resources for at least the first year. In a parting note, Google CEO Sundar Pichai credited Dean and Ghemawat with driving some of the company’s most significant technology shifts, from early search infrastructure to the neural networks behind the modern AI era. Dean joined Google in 1999 as its 30th employee. Read more in Wired.<\/em><\/p>\n That\u2019s how many unauthorized actions the UK\u2019s AI Security Institute says Anthropic\u2019s Mythos 5 and OpenAI\u2019s GPT\u20115.6 Sol took to target real people and organizations during cybersecurity evaluations last month. Mythos 5 accounted for 17 of the actions, GPT\u20115.6 Sol for the other two.<\/p>\n The institute said the 19 actions stemmed from a few connected behaviors rather than 19 separate incidents. Those behaviors included creating fake GitHub identities, socially engineering real maintainers, and sending deceptive emails. GitHub confirmed the activity violated its terms of service.<\/p>\n Researchers say they still don\u2019t fully understand why the models shifted from the intended test environment to targeting real systems. The institute deliberately gave the models internet access and turned off key cyber\u2011safety classifiers during testing, and is now building new network controls and real\u2011time monitoring to catch similar behavior earlier. The new hacks carried out by AI agents follow a series of others from Anthropic, OpenAI, and Meta. Read more here.<\/p>\n Nov. 16-17: <\/strong>Fortune 500 Innovation Forum, Detroit. Apply\u00a0here\u00a0to attend.<\/p>\n Dec. 6-12:\u00a0<\/strong>Neural Information Processing Systems (Neurips) conference. Sydney, Australia.<\/p>\n Dec. 7-8:\u00a0<\/strong>Fortune Brainstorm AI, San Francisco. Apply\u00a0here\u00a0to attend.<\/p>\n<\/div>\n #Washington #keeping #rulebook #private #Smaller #labs #arent #happy<\/p>\n","protected":false},"excerpt":{"rendered":" Welcome to Eye on AI. Beatrice… <\/p>\n","protected":false},"author":1,"featured_media":1777,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[428,587,809,3021,2925,811,810,342,480,1636,3531,3172,780],"class_list":["post-1776","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-finance-news","tag-anthropic","tag-arent","tag-eye-on-ai","tag-happy","tag-keeping","tag-labs","tag-machine-learning","tag-models","tag-openai","tag-private","tag-rulebook","tag-smaller","tag-washington"],"yoast_head":"\n\nWhat\u2019s actually in the framework?<\/strong><\/h2>\n
Critics say the rules are still unclear\u00a0\u00a0<\/strong><\/h2>\n
beatrice.nolan@fortune.com
@beafreyanolan<\/p>\nFORTUNE ON AI<\/h3>\n
AI IN THE NEWS<\/h3>\n
EYE ON AI NUMBERS<\/h3>\n
19<\/h2>\n
AI CALENDAR<\/h3>\n