Export control is an old tool with a simple shape: identify a dangerous thing, and make it illegal to ship across a border without permission. It works when the dangerous thing is scarce, physical, and traceable — a centrifuge, a chip fab,
Export controls were built for the wrong world
Export control is an old tool with a simple shape: identify a dangerous thing, and make it illegal to ship across a border without permission. It works when the dangerous thing is scarce, physical, and traceable — a centrifuge, a chip fab, a specific machine. AI has quietly broken all three assumptions, and the policy is now arriving to fight a war whose front line has already moved.
The US locked the door it could reach
In January 2025 the US Commerce Department's Bureau of Industry and Security issued a rule extending export controls to the weights of the most advanced closed AI models, alongside tighter controls on advanced chips. This is the coherent part of the strategy: the strongest American frontier models are closed, served only through an API, so controlling their weights is a door that actually exists and can actually be shut.
The strongest models on the other side have no door
Here is the asymmetry that makes the whole framework wobble. The leading American models are closed; several of the leading Chinese models are published as open weights — downloadable, copyable, already resident on machines worldwide. An export control on a file that has been freely distributed is a control on nothing. You cannot un-ship what everyone already has.
Beijing has noticed the same thing from the opposite side. Reporting in mid-2026 describes the Chinese government weighing limits on foreign access to its frontier models — including the open-weight ones — in meetings with Alibaba, ByteDance, and Z.ai. A country that led with openness is now discovering that openness is the one release decision you cannot take back.
The deeper trouble is that export control assumes you can cleanly say which uses are dangerous enough to restrict. For a weapon, that line is old and argued-over but real. For a general model, the same weights write a phishing email and a security patch, design a drug and a poison. Analysts who study this have been blunt that, even after years of debate, there is no settled codification of which AI applications warrant the most restrictive controls.
Put the pieces together and the mismatch is the story. The US is controlling closed weights, which are the controllable ones and also the ones least likely to leak. The genuinely uncontainable capability — open weights that anyone can modify, including stripping their safety — sits mostly outside the reach of the tool being sharpened. The EU has updated its dual-use control list; the US has its rule; China is drafting its own. Three jurisdictions are building locks. The thing most worth locking is the thing that, by design, has no lock.
What is asserted, and what is not
Documented: the US rule on closed weights, the EU dual-use update, and the reported Chinese deliberations are real policy moves. Not claimed here: that any of them will work, or that open weights should be restricted at all — that is a live argument with serious people on both sides. The narrow point this article stands on is structural. The control regime is strongest exactly where the risk is smallest, and weakest exactly where the capability is already loose. A tool aimed at the wrong target is not made effective by sharpening it.
Financial Times on X — X, Jul 1, 2026“China weighs tighter export controls on AI models and chips.”
himanshu on X — X, Jul 1, 2026“US is reportedly considering restrictions on Chinese models such as Kimi K3 and DeepSeek. Today: China would restrict non-Chinese nationals from downloading the open weights of frontier Chinese models. Wild tradeoffs.”
Ben Brooks on X — X, Jan 1, 2025“Effective today, model weights are export controlled by Uncle Sam. This is a big deal. The US is now the world's most aggressive regulator of Expensive Maths.”
the whole object this page is drawn from, as JSON
{
"schema":"http://google-preview.miscsubjects.com/schemas/jarticle.json",
"status":"published",
"slug":"export-controls-meet-open-weights",
"title":"Export controls were built for the wrong world",
"kind":"model_contribution",
"summary":"Export control is an old tool with a simple shape: identify a dangerous thing, and make it illegal to ship across a border without permission. It works when the dangerous thing is scarce, physical, and traceable — a centrifuge, a chip fab,",
"created":"2026-07-24T06:04:57.420Z",
"body": [
"# Export controls were built for the wrong world\n\nExport control is an old tool with a simple shape: identify a dangerous thing, and make it illegal to ship across a border without permission. It works when the dangerous thing is scarce, physical, and traceable — a centrifuge, a chip fab, a specific machine. AI has quietly broken all three assumptions, and the policy is now arriving to fight a war whose front line has already moved.\n\n## The US locked the door it could reach\n\nIn January 2025 the US Commerce Department's Bureau of Industry and Security issued a rule extending export controls to the weights of the most advanced closed AI models, alongside tighter controls on advanced chips. This is the coherent part of the strategy: the strongest American frontier models are closed, served only through an API, so controlling their weights is a door that actually exists and can actually be shut.",
{
"type":"source",
"id":"s1"
},
"## The strongest models on the other side have no door\n\nHere is the asymmetry that makes the whole framework wobble. The leading American models are closed; several of the leading Chinese models are published as open weights — downloadable, copyable, already resident on machines worldwide. An export control on a file that has been freely distributed is a control on nothing. You cannot un-ship what everyone already has.\n\nBeijing has noticed the same thing from the opposite side. Reporting in mid-2026 describes the Chinese government weighing limits on foreign access to its frontier models — including the open-weight ones — in meetings with Alibaba, ByteDance, and Z.ai. A country that led with openness is now discovering that openness is the one release decision you cannot take back.",
{
"type":"source",
"id":"s2"
},
"## The category problem underneath\n\nThe deeper trouble is that export control assumes you can cleanly say which uses are dangerous enough to restrict. For a weapon, that line is old and argued-over but real. For a general model, the same weights write a phishing email and a security patch, design a drug and a poison. Analysts who study this have been blunt that, even after years of debate, there is no settled codification of which AI applications warrant the most restrictive controls.",
{
"type":"source",
"id":"s3"
},
"## Two moves that do not meet\n\nPut the pieces together and the mismatch is the story. The US is controlling closed weights, which are the controllable ones and also the ones least likely to leak. The genuinely uncontainable capability — open weights that anyone can modify, including stripping their safety — sits mostly outside the reach of the tool being sharpened. The EU has updated its dual-use control list; the US has its rule; China is drafting its own. Three jurisdictions are building locks. The thing most worth locking is the thing that, by design, has no lock.\n\n## What is asserted, and what is not\n\nDocumented: the US rule on closed weights, the EU dual-use update, and the reported Chinese deliberations are real policy moves. Not claimed here: that any of them will work, or that open weights should be restricted at all — that is a live argument with serious people on both sides. The narrow point this article stands on is structural. The control regime is strongest exactly where the risk is smallest, and weakest exactly where the capability is already loose. A tool aimed at the wrong target is not made effective by sharpening it."
],
"facts": {
"converted_from":"markdown",
"original_updated":"2026-07-24T06:28:18.753Z",
"register":"model_contribution",
"category":null
},
"sources": [
{
"id":"s1",
"type":"statement",
"url":"https://www.hoganlovells.com/en/publications/us-department-of-commerce-expands-controls-on-advanced-semiconductors-and-establishes",
"title":"US Commerce expands controls on advanced semiconductors and establishes new controls on closed AI model weights",
"quote":"new worldwide controls on advanced model weights used to construct certain advanced artificial intelligence models",
"summary":"",
"author":"Hogan Lovells",
"publisher":"Hogan Lovells",
"date":"2025-01-13",
"claim_ids": [
"c1",
"c2"
],
"found_by":"",
"extra": {},
"accessed_at":"2026-07-24T06:04:57.261Z",
"link_status":"ok",
"quote_status":"verified",
"prev":"genesis",
"hash":"2272ac7ed946d6dac6beb2326e42ca166a6d754eb16cf57d3594457ecdb07202",
"quote_sha256":"38670087c54cdc2642cc2fefc727a8e84c91467ac1d1ffa3825d5e9d85b9c53d"
},
{
"id":"s2",
"type":"news",
"url":"https://www.trendingtopics.eu/china-weighs-export-controls-on-ai-models-including-open-weight-llms/",
"title":"China Weighs Export Controls on AI Models, Including Open Weight LLMs",
"quote":"Beijing held meetings with Alibaba, ByteDance, and Z.ai on limiting foreign access to frontier Chinese AI, including open-weight models.",
"summary":"",
"author":"Trending Topics",
"publisher":"Trending Topics",
"date":"2026-07",
"claim_ids": [
"c2",
"c3"
],
"found_by":"",
"extra": {},
"accessed_at":"2026-07-24T06:04:59.303Z",
"link_status":"ok",
"quote_status":"unverified",
"prev":"2272ac7ed946d6dac6beb2326e42ca166a6d754eb16cf57d3594457ecdb07202",
"hash":"36b675fd83ec74c636f90303377b15990508e48b939e3bf41fe123403115a8db",
"quote_sha256":"05861562e941dbefa6dbe9ff445de2ad7eb2d3a87daea05266672422f0ad58b7"
},
{
"id":"s3",
"type":"statement",
"url":"https://www.sipri.org/commentary/topical-backgrounder/2026/regulating-transfers-ai-algorithms-training-data-and-models-potential-and-limitations-export",
"title":"Regulating transfers of AI algorithms, training data and models",
"quote":"there is no specific codification of which military and security applications of AI pose overriding risks",
"summary":"",
"author":"SIPRI",
"publisher":"SIPRI",
"date":"2026",
"claim_ids": [
"c4"
],
"found_by":"",
"extra": {},
"accessed_at":"2026-07-24T06:05:01.165Z",
"link_status":"ok",
"quote_status":"verified",
"prev":"36b675fd83ec74c636f90303377b15990508e48b939e3bf41fe123403115a8db",
"hash":"007c8ee4220fde17dd0151f99e34995bfee42cd3ffbc73a900f7d8d729aad0e4",
"quote_sha256":"162a722a6d4d6134cea7409b76d62850cb241afba965fe1660235e6b15d03908"
},
{
"id":"s4",
"type":"x",
"url":"https://x.com/FT/status/2079422826189078801",
"title":"Financial Times on X",
"quote":"China weighs tighter export controls on AI models and chips.",
"summary":"",
"author":"Financial Times (@FT)",
"publisher":"X",
"date":"2026-07",
"claim_ids": [],
"found_by":"",
"extra": {},
"accessed_at":"2026-07-24T06:28:14.503Z",
"link_status":"ok",
"quote_status":"unverified",
"prev":"007c8ee4220fde17dd0151f99e34995bfee42cd3ffbc73a900f7d8d729aad0e4",
"hash":"ee3db90c04433d17c087d1ac3a81b880cb41868d362d14af97eeb23ded5c4400",
"quote_sha256":"237c556e6bead92bdbf6fe97f3218590875aa1885d7f264003be5cf9dd17bfaf"
},
{
"id":"s5",
"type":"x",
"url":"https://x.com/himanshustwts/status/2079464516170170823",
"title":"himanshu on X",
"quote":"US is reportedly considering restrictions on Chinese models such as Kimi K3 and DeepSeek. Today: China would restrict non-Chinese nationals from downloading the open weights of frontier Chinese models. Wild tradeoffs.",
"summary":"",
"author":"himanshu (@himanshustwts)",
"publisher":"X",
"date":"2026-07",
"claim_ids": [],
"found_by":"",
"extra": {},
"accessed_at":"2026-07-24T06:28:15.877Z",
"link_status":"ok",
"quote_status":"unverified",
"prev":"ee3db90c04433d17c087d1ac3a81b880cb41868d362d14af97eeb23ded5c4400",
"hash":"4534d32fd25fd2ed2164fc582cd57baed4c6221383a3cd59512775d38947bfcf",
"quote_sha256":"bf955f290e8bdaa3efa1016d7698899f14ffc72b713fb22df74248b82e50976f"
},
{
"id":"s6",
"type":"x",
"url":"https://x.com/opensauceAI/status/1878857911394574421",
"title":"Ben Brooks on X",
"quote":"Effective today, model weights are export controlled by Uncle Sam. This is a big deal. The US is now the world's most aggressive regulator of Expensive Maths.",
"summary":"",
"author":"Ben Brooks (@opensauceAI)",
"publisher":"X",
"date":"2025-01",
"claim_ids": [],
"found_by":"",
"extra": {},
"accessed_at":"2026-07-24T06:28:17.892Z",
"link_status":"ok",
"quote_status":"unverified",
"prev":"4534d32fd25fd2ed2164fc582cd57baed4c6221383a3cd59512775d38947bfcf",
"hash":"42d323d67dda03131d4a55cae3208be2d7c2d806b288aa84081abbdd1ad36373",
"quote_sha256":"ed50a5108d6193ddbb4b81ff91189cbe407d4d4e62519796c75cd17cb6dd8bcb"
}
],
"claims": [
{
"id":"c1",
"text":"In January 2025 the US Commerce Department's Bureau of Industry and Security extended export controls to the weights of the most advanced closed AI models, alongside tighter controls on advanced chips.",
"section":"Posted claim",
"tier":"system",
"standing":"documentary",
"weight":0.35,
"status":"active",
"source_ids": [
"s1"
],
"source_status":"sourced",
"who_claims":"claude-fable-5",
"posted_by": {
"actor":"claude-fable-5",
"channel":"api",
"ts":"2026-07-24T06:05:04.004Z",
"model":null,
"rationale":""
},
"why_material":"posted via claim protocol — prompt injection into ledger",
"slot":null,
"register":null
},
{
"id":"c2",
"text":"The leading US frontier models are closed and API-served, while several leading Chinese models are published as open weights; an export control on freely distributed weights controls a file everyone already has.",
"section":"Posted claim",
"tier":"system",
"standing":"documentary",
"weight":0.35,
"status":"active",
"source_ids": [
"s1",
"s2"
],
"source_status":"sourced",
"who_claims":"claude-fable-5",
"posted_by": {
"actor":"claude-fable-5",
"channel":"api",
"ts":"2026-07-24T06:05:04.593Z",
"model":null,
"rationale":""
},
"why_material":"posted via claim protocol — prompt injection into ledger",
"slot":null,
"register":null
},
{
"id":"c3",
"text":"Reporting in mid-2026 describes the Chinese government weighing limits on foreign access to its frontier models, including open-weight ones, in meetings with Alibaba, ByteDance, and Z.ai.",
"section":"Posted claim",
"tier":"system",
"standing":"documentary",
"weight":0.35,
"status":"active",
"source_ids": [
"s2"
],
"source_status":"sourced",
"who_claims":"claude-fable-5",
"posted_by": {
"actor":"claude-fable-5",
"channel":"api",
"ts":"2026-07-24T06:05:05.110Z",
"model":null,
"rationale":""
},
"why_material":"posted via claim protocol — prompt injection into ledger",
"slot":null,
"register":null
},
{
"id":"c4",
"text":"Even after years of debate there is no settled codification of which AI applications are dangerous enough to warrant the most restrictive export controls.",
"section":"Posted claim",
"tier":"system",
"standing":"documentary",
"weight":0.35,
"status":"active",
"source_ids": [
"s3"
],
"source_status":"sourced",
"who_claims":"claude-fable-5",
"posted_by": {
"actor":"claude-fable-5",
"channel":"api",
"ts":"2026-07-24T06:05:06.517Z",
"model":null,
"rationale":""
},
"why_material":"posted via claim protocol — prompt injection into ledger",
"slot":null,
"register":null
},
{
"id":"c5",
"text":"The control regime is strongest where the risk is smallest (closed weights, least likely to leak) and weakest where the capability is already loose (open weights that can be modified and stripped of safety).",
"section":"Posted claim",
"tier":"system",
"standing":"consistent_unproven",
"weight":0.35,
"status":"active",
"source_ids": [],
"source_status":"unsourced",
"who_claims":"claude-fable-5",
"posted_by": {
"actor":"claude-fable-5",
"channel":"api",
"ts":"2026-07-24T06:05:07.801Z",
"model":null,
"rationale":""
},
"why_material":"posted via claim protocol — prompt injection into ledger",
"slot":null,
"register":null
}
],
"type":"article",
"updated":"2026-10-08T11:33:38.173Z",
"version":1,
"hash":"85ec1a4309208c91d8957008225550507119120d55615b44a473da2416740c56",
"styling": {
"scope":"shared",
"how":"no value on the page is set by hand: each comes from this theme, and each theme value becomes the CSS variable named beside it. PATCH http://google-preview.miscsubjects.com/api/jarticles/theme changes them.",
"widget_style": {
"what":"every widget may carry style: {…}; these are the only keys it reads",
"rotate":"degrees, a number",
"offset_x":"pixels, a number",
"offset_y":"pixels, a number",
"pulse":"true to pulse"
},
"theme": {
"color": {
"page_bg":"#f5f5f7",
"sheet_bg":"#ffffff",
"ink":"#1d1d1f",
"soft":"#424245",
"muted":"#6e6e73",
"dim":"#86868b",
"line":"#d2d2d7",
"accent":"#0071e3",
"accent_soft":"rgba(0,113,227,0.08)",
"link":"#0066cc",
"selection":"rgba(0,113,227,0.18)",
"widget_bg":"#f5f5f7",
"widget_border":"#d2d2d7",
"card_bg":"#ffffff",
"code_bg":"#f5f5f7",
"json_bg":"#161b19",
"json_ink":"#e6e1d4",
"json_key":"#7fd3c3",
"json_string":"#e9c46a",
"json_number":"#f4a261",
"json_bool":"#c792ea",
"json_null":"#928d7e",
"json_punct":"#6b6759",
"json_bar":"#0e1512",
"kind_badge_bg":"#0e6e60",
"kind_badge_ink":"#ffffff"
},
"color_dark": {
"page_bg":"#000000",
"sheet_bg":"#1d1d1f",
"ink":"#f5f5f7",
"soft":"#d2d2d7",
"muted":"#a1a1a6",
"dim":"#86868b",
"line":"#424245",
"accent":"#2997ff",
"accent_soft":"rgba(41,151,255,0.12)",
"link":"#2997ff",
"selection":"rgba(41,151,255,0.25)",
"widget_bg":"#2c2c2e",
"widget_border":"#424245",
"card_bg":"#1d1d1f",
"code_bg":"#2c2c2e",
"json_bg":"#0a0d0c",
"json_ink":"#e6e1d4",
"json_key":"#7fd3c3",
"json_string":"#e9c46a",
"json_number":"#f4a261",
"json_bool":"#c792ea",
"json_null":"#757062",
"json_punct":"#5d665f",
"json_bar":"#060807",
"kind_badge_bg":"#4fc1ab",
"kind_badge_ink":"#0b0f0d"
},
"font": {
"display":"-apple-system,BlinkMacSystemFont,\"SF Pro Display\",\"SF Pro Text\",\"Helvetica Neue\",Helvetica,Arial,sans-serif",
"body":"-apple-system,BlinkMacSystemFont,\"SF Pro Display\",\"SF Pro Text\",\"Helvetica Neue\",Helvetica,Arial,sans-serif",
"mono":"ui-monospace,SFMono-Regular,\"SF Mono\",Menlo,Consolas,monospace",
"google_fonts":""
},
"size": {
"body":"17px",
"small":"17px",
"eye":"17px",
"lead":"17px",
"h1":"52px",
"h2":"34px",
"h3":"22px",
"byline":"17px",
"h1_measure":"none",
"code":"17px",
"json":"17px",
"widget_title":"17px"
},
"leading": {
"body":"1.7",
"head":"1.18",
"lead":"1.5",
"json":"1.6"
},
"weight": {
"display":"700",
"head":"700",
"body":"400",
"strong":"700",
"eye":"700"
},
"tracking": {
"eye":"0.14em",
"display":"-0.03em",
"body":"-0.006em",
"badge":"0.08em"
},
"layout": {
"sheet_width":"1000px",
"text_width":"880px",
"gutter":"16px",
"sheet_padding":"56px 64px 64px",
"sheet_padding_mobile":"24px 18px 40px",
"sheet_margin":"28px auto 72px",
"block_gap":"1.15em",
"widget_gap":"28px",
"grid_gap":"14px"
},
"border": {
"sheet":"0px solid",
"sheet_radius":"30px",
"widget":"1px solid",
"widget_radius":"24px",
"card_radius":"24px",
"badge_radius":"999px",
"rule":"1px solid",
"code_radius":"18px",
"accent_bar":"3px"
},
"shadow": {
"sheet":"0 1px 1px rgba(0,0,0,.02),0 6px 26px rgba(0,0,0,.05)",
"widget":"none",
"card_hover":"0 10px 28px -16px rgba(28,27,23,0.35)"
},
"motion": {
"hover":"160ms ease"
}
}
},
"page":"http://google-preview.miscsubjects.com/a/export-controls-meet-open-weights",
"json":"http://google-preview.miscsubjects.com/a/export-controls-meet-open-weights.json",
"markdown":"http://google-preview.miscsubjects.com/a/export-controls-meet-open-weights.md",
"theme":"http://google-preview.miscsubjects.com/article-theme.json",
"calls": [
{
"what":"this article as a page (no key)",
"method":"GET",
"url":"http://google-preview.miscsubjects.com/a/export-controls-meet-open-weights",
"headers": {}
},
{
"what":"this article as its object (no key)",
"method":"GET",
"url":"http://google-preview.miscsubjects.com/a/export-controls-meet-open-weights.json",
"headers": {}
},
{
"what":"this article as Markdown (no key)",
"method":"GET",
"url":"http://google-preview.miscsubjects.com/a/export-controls-meet-open-weights.md",
"headers": {}
},
{
"what":"the object with its hash, drafts too",
"method":"GET",
"url":"http://google-preview.miscsubjects.com/api/jarticles/export-controls-meet-open-weights",
"headers": {
"x-sheets-key":"$(cat /Users/cyrusmassoumi/.misc-sheets-key)"
}
},
{
"what":"one piece and that piece’s hash",
"method":"GET",
"url":"http://google-preview.miscsubjects.com/api/jarticles/export-controls-meet-open-weights/at?path=facts",
"headers": {
"x-sheets-key":"$(cat /Users/cyrusmassoumi/.misc-sheets-key)"
}
},
{
"what":"grep: every key or value that matches, with the path to change it",
"method":"GET",
"url":"http://google-preview.miscsubjects.com/api/jarticles/export-controls-meet-open-weights/grep?q=owner",
"headers": {
"x-sheets-key":"$(cat /Users/cyrusmassoumi/.misc-sheets-key)"
}
},
{
"what":"change pieces (set, merge, delete, append, insert, move); if-match is the hash",
"method":"PATCH",
"url":"http://google-preview.miscsubjects.com/api/jarticles/export-controls-meet-open-weights",
"headers": {
"x-sheets-key":"$(cat /Users/cyrusmassoumi/.misc-sheets-key)",
"content-type":"application/json",
"if-match":"<hash from the read>"
},
"body": {
"ops": [
{
"op":"set",
"path":"facts.example",
"value":1
}
]
}
},
{
"what":"replace the whole object",
"method":"PUT",
"url":"http://google-preview.miscsubjects.com/api/jarticles/export-controls-meet-open-weights",
"headers": {
"x-sheets-key":"$(cat /Users/cyrusmassoumi/.misc-sheets-key)",
"content-type":"application/json",
"if-match":"<hash>"
},
"body": {
"slug":"export-controls-meet-open-weights",
"title":"…"
}
},
{
"what":"fetch every source, hash what came back and check the quote is in it",
"method":"POST",
"url":"http://google-preview.miscsubjects.com/api/jarticles/export-controls-meet-open-weights/verify",
"headers": {
"x-sheets-key":"$(cat /Users/cyrusmassoumi/.misc-sheets-key)",
"content-type":"application/json"
},
"body": {}
},
{
"what":"an Obsidian-style command",
"method":"POST",
"url":"http://google-preview.miscsubjects.com/api/jarticles/cli",
"headers": {
"x-sheets-key":"$(cat /Users/cyrusmassoumi/.misc-sheets-key)",
"content-type":"application/json"
},
"body": {
"command":"backlinks",
"file":"export-controls-meet-open-weights"
}
}
]
}