I'm thinking: how can this be exploited? Can someone just say they're building a new way to shorten urls and need two years in the country to build their business to fruition? And what defines success or progress?
Step 1. Pay lobbyist to add the following clause to the rules: "Treasury will provide 20:1 non-recourse loans to participating investors" -- to attract the 'hot money' and foreign capital, of course. Just copy the clause right from PPIP, in case you think it's not possible.
Step 2. Wealthy foreign investor: send random minion on 2-year luxury vacation to the U.S. Invest in minion's "startup" through some convoluted channel (perhaps a Wall St. Bank's unofficial immigrant startup investment fund).
Step 3. Sell "consulting services" to minion's startup using your U.S. shell company.
Step 4. Free Money.
Obviously there are good and easy ways to prevent this absurd little tinfoil hat scenario I've constructed in the bat-filled cavern where my brain should be. But considering the recent track record of our government botching up finance-related issues, I wouldn't expect anything less...