"The government should have the power to block or deter deployment of the model if it is determined, in light of third-party assessment, to present unacceptable risks."