Export controls run on bottlenecks. The chip rules bit because advanced fabrication funnels through a handful of fabs and one lithography supplier, so a single license denial ripples outward. Model weights have no equivalent choke. Moonshot AI launched Kimi K3 through its hosted API in mid-July and committed to releasing the full weights by July 27 (Moonshot AI). Once those weights are public, the file can spread across thousands of drives within days. After that, there is no server to unplug and no license to revoke.

That timing makes the reported plan awkward. On July 20-21, the Trump administration was described as reviving efforts to restrict US access to Chinese open-weight models (HPCwire). Read the toolkit closely and every lever points inward: procurement rules for federal buyers, Entity List threats aimed at the supplier's US commercial relationships, and breach-liability pressure on anyone who deploys the model (artificialintelligence-news). None of these touch the weights. They touch you.

So a policy framed as national security arrives on the operator's desk as a vendor-risk line item. Can the government wall off Kimi K3? No. It can make a US company carry the liability for choosing it: a data-handling exposure, a procurement disqualification, a clause your GC now has to price.

The asymmetry cuts against the enforcement, not for it. OpenAI's public worry about open weights (TechCrunch) is really a worry about substitution: a free, near-frontier Chinese model that any team can fine-tune locally, with the compliance cost pushed onto the adopter rather than the code. Coercing buyers works on regulated defense contractors. It does the least against the startup running the weights on rented GPUs offshore, which is exactly the adopter policymakers say they fear.

Watch for actual deployment language defining a prohibited model and assigning liability to operators.


The Signal is the public edge of a private practice. Sherpa points the same intelligence engine at one owner's business — competitors, suppliers, regulators, watched daily, graded and sourced. Work with a Sherpa →