Third-party evaluators will be allowed inside companies to monitor the models. But how much access, and influence, will they really have?