Open versus closed models

Open-weights models that don't have dangerous capabilities are a public good: they don't cost anything besides the compute needed to run them.

Anthropic's CEO formally disavows any ban on open weights and reframes the lab's position around chip export controls, anti-distillation enforcement, and capability-based safety testing that applies to open and closed models alike — a significant repositioning in the 2026 fight.

Restricting open models wouldn't make AI safer. It would simply hide the risks, concentrate power.

Reports that frontier labs lobbied the administration to restrict Chinese open-weight models as a business threat, with Hugging Face's Delangue giving the concentration-of-power counterargument.

The Chinese DeepSeek and a handful of other Chinese models are adopted very widely, far more than American models, which have really fallen behind.

Ng's widely-cited statement of the openness-as-competition case: Chinese open-weight releases winning global adoption and embedding Chinese values in downstream systems while US labs stay closed.

An effective federal approach should therefore scrutinize U.S. companies' reliance on PRC-developed models and strengthen the availability, security, and competitiveness of American open-weight alternatives.

Primary document anchoring the restriction side: a congressional investigation into US companies' integration of Chinese open-weight models, including alleged covert distillation.

State-of-the-art fine-tuning and unlearning algorithms are vulnerable to being undone within dozens of steps of adversarial fine-tuning

Lays out 16 open technical problems for managing open-weight model risk — the research agenda that would have to succeed for 'release safely' to be an option rather than a slogan.

The current golden age of highly capable open-weight models dropping onto the internet every other week is coming to an end.

Argues Washington and Beijing are converging on restricting open weights, and documents concrete uses — including Hugging Face running Chinese open-weight agents to analyze its own breach — that closed, safety-constrained models won't serve.