The timeline is clear once you read the order itself.
The June 2 Executive Order on Promoting Advanced Artificial Intelligence Innovation and Security sets two distinct cybersecurity deadlines, and several early legal summaries conflated them. The order separates a 60-day classified benchmarking mandate from a 30-day cyber directive. They are not the same requirement, and they do not run on the same clock.
The classified benchmarking process carries the longer window. Within 60 days of the June 2 signing, the Secretary of the Treasury, the Secretary of War acting through the Director of the NSA, and the Secretary of Homeland Security acting through the Director of CISA must develop and maintain a classified process to assess the advanced cyber capabilities of AI models and set the threshold at which a model is designated a “covered frontier model.” That puts the benchmarking deadline at roughly August 1, 2026.
The Binding Operational Directive runs on a separate 30-day clock. Within 30 days of signing, DHS through CISA must issue Binding Operational Directives to prioritize the cyber defense of civilian federal systems and expand agency access to defensive AI tools, including covered frontier models for agencies, state and local authorities, and critical-infrastructure operators. That deadline lands on July 2, 2026. A parallel 30-day requirement directs the Treasury to stand up an AI cybersecurity clearinghouse with voluntary industry participation.
Where the confusion came from: several early legal analyses grouped every deadline in the order under the prominent 30-day DHS directive. The classified benchmarking provision sits in a different section with its own 60-day window. Compliance teams building internal timelines should treat July 2 as the federal cyber-directive deadline and August 1 as the classified benchmarking deadline, and read the operative sections directly rather than rely on a single summary.
Verification
Confirmed White House Presidential Actions text (primary), corroborated by A&O Shearman and Roll Call Deadlines computed from the June 2 signing date; the order's benchmarking and BOD provisions sit in separate sections.None of this changes the order’s voluntary core. It explicitly bars any mandatory governmental licensing, preclearance, or permitting requirement for the development, publication, release, or distribution of AI models.