if a model fails the test, you don't give the public access. you let the government have it for 10-100x the usual token cost of course!