The Wrong Lever
Washington found an off-switch for AI and is using it. The switch grips only the models that obey, and the rest of the field is walking out of the room.
On June 12 the Department of Commerce gave Anthropic ninety minutes. Ninety minutes to cut off Fable 5 and Mythos 5 for every non-US national, its own employees included. The company took both models dark: nineteen days of blackout, until the order was lifted on June 30. The official frame says national security. The mechanism says something plainer. The state learned it had a switch, and it threw it.
An off-switch grips only what obeys. A licensed model on a central server has an owner to call, a login to revoke, an export to block. Open weights do not answer the phone. This is why the move meant to contain capability is pushing capability toward the one form no executive order can reach.
The market priced it last week. When Moonshot released Kimi K3, an open model billed as a rival to the Western frontier, semiconductors got smoked and the Nasdaq shed nearly three per cent on the week on fears the hyperscalers will cut capex. Read the move as a sentence: a free model erased hundreds of billions in a session, so the value never sat in the capex or the silicon. It sat in scarcity. And scarcity, after all, does not survive a free copy.
The honest concession first. The order on Fable 5 was no whim. Amazon’s researchers had found a way past its guardrails, to hunt software flaws and produce exploits. The risk was real. The state exerting control is fair. The question is where it lands. Access control on an artifact is theater once the artifact has left the building. One does not revoke a file that has been copied onto every machine.
Because the control plane has moved. In engineering the useful lever sits one level up, on the protocol everyone runs. That is precisely the layer Washington is ceding. On July 16, twenty-nine countries signed the World Artificial Intelligence Cooperation Organisation into being, headquartered in Shanghai, with the UN Secretary-General at the ceremony. The vocabulary is the commons: cooperation, “the benefit of all humanity,” no solo performance by one country. The most centralized state at the table speaks it, and that is no paradox: whoever builds the institution writes the defaults. It is the old difference between two ways of making rules. On one side the IETF’s “rough consensus and running code,” where the standard is what runs and gets adopted from below. On the other, top-down governance in the ITU style, where the rule descends from an organization. The country that was home to the open internet reaches for the switch while the protocol gets built elsewhere.
The same discretion shows inside the US camp. Dean Ball wrote much of the administration’s AI Action Plan, then joined OpenAI in June to run strategic futures. His warning is that informal state pressure has already become regulation: blocking agencies from Chinese models, heargued, sent a message to regulated companies. A Department of War under-secretary answered with an insult about Ball’s IQ. The architect of the light-touch plan now takes, full in the face, the discretionary power he helped normalize. His own phrase names the machine: control that travels by signal, not by clean law.
Here is what binds the three together. Power over AI has three layers: the model you own, the weights that circulate, the standard everyone adopts. Property, the kill-switch lever, bites only the first, and the first is worth the least and lasts the shortest. The harder the grip, the more the world is pushed toward the other two: weights that will not switch off, and the institution that sets the defaults. The control plane has moved to the standard. Tighten the lever, and the lever grips less.
For anyone who builds on this, the lesson is practical. Choose a vendor because it “looks governed,” because it has an address to call and seems safe, and you are trusting the layer that is sliding out from under everyone. The durable layer is the open one; the commanding layer is the standard, and neither carries a guaranteed US plate right now. Resilience does not come with a contract. It is designed, by knowing which plane the control actually sits on.
Ninety minutes is enough to switch off a model. It is not enough to switch off a protocol. Washington guards the door; the building is already half empty.