On July 22, 2026, US Treasury Secretary Scott Bessent said the federal government is preparing to investigate Chinese open-weight AI models for evidence of stolen US intellectual property, with sanctions against their developers potentially landing within weeks. Hours later, Nvidia chief executive Jensen Huang publicly contradicted that posture, describing Chinese models as excellent and insisting American companies should be free to deploy them. The split puts chip buyers, cloud customers, and the wider AI supply chain on notice that policy, not just performance, now shapes model selection.
What Bessent actually said
Bessent laid out the new line in a television interview reported by Bloomberg. He framed the policy as protection of US innovation rather than opposition to open source. “This administration supports open source models, but what we do not support is IP theft,” he said. The technical evidence he cited is a specific training behavior called distillation, where a smaller model is trained on the outputs of a larger one.
“We are finding watermarks of our US large language models on many Chinese models,” Bessent said, framing the practice as theft and promising enforcement action in a matter of weeks. For companies tracking US-China policy risk, the practical question is which models will remain legally available on US infrastructure over the next quarter.
Why Kimi K3 lit the fuse
The trigger was the release of Kimi K3, an open-weight model from Chinese lab Moonshot AI. According to reporting on the announcement, Kimi K3 matches or beats leading US models from OpenAI and Anthropic on several benchmarks while running at a fraction of the cost. The release drove a selloff in chip stocks and sharpened concern in Washington that the frontier gap is closing faster than expected.
For technical SEO and infrastructure teams, the pricing delta matters for any stack that runs inference at scale. If a Chinese open-weight model offers comparable benchmark performance at meaningfully lower cost, it pressures US providers to reprice, which in turn changes the calculus on GPU selection, hosting commitments, and reserved capacity.
Huang’s counterargument
Speaking to Axios at a new chip facility in Texas, Huang rejected the framing that open Chinese models are a security threat. “These Chinese models are excellent,” he said, and added that “open-source models that are excellent should be used.” He went further, saying American firms should “absolutely” be allowed to run them.
His argument is grounded in Nvidia’s commercial position. Cheaper models widen the base of AI users, and a larger user base pulls more demand through Nvidia’s chips, data-center systems, and power-generation business. “Free AI should be great for chips,” he said. Huang also rejected the “backdoor” worry, noting that firms can isolate downloaded models inside secure sandboxes rather than expose production systems.
The complication Bessent did not address
Not every major AI figure treats distillation as theft. Hugging Face chief executive Clem Delangue told TechCrunch that the practice is a minor and widely shared technique. “We know distillation to be a very small factor,” he said, adding that it is “a practice that everyone is doing, including companies in the US.” That framing complicates any enforcement effort, because the line between competitive learning and IP theft is contested inside the US industry itself.
There is an additional wrinkle. Anthropic, among the loudest accusers of Chinese distillation, recently had a $1.5 billion settlement approved over pirated books used to train Claude, described as the largest copyright settlement in US history. Anthropic was also named in a separate lawsuit by the University of Tennessee over neural network patents, and publisher Bloomsbury is among those in line for a payout. Huang extended the same permissive logic to Anthropic’s upcoming Mythos model, telling the government to “let Anthropic run.”
What site owners and SEO teams should watch
The policy dispute is not abstract for anyone running models in production. A few practical checkpoints are worth running now:
- Model provenance log. Document which open-weight models each service depends on, the license under which they were downloaded, and the chain of custody. If a Chinese model is sanctioned mid-quarter, you need a defensible record of when it was introduced.
- Inference cost monitoring. Track tokens-per-dollar for each provider and for any self-hosted alternative. Kimi K3’s price gap is a natural signal to retest cost benchmarks across your stack.
- Sandboxing review. If you already run downloaded models, verify that they sit inside an isolated environment without outbound network access, the same posture Huang described.
- Vendor contracts. Review terms with hosted inference providers for indemnity language covering model origin and IP claims.
- Schema and content pipelines. If any AI-generated content is published through a model that later lands on a sanctions list, downstream search visibility and reputational risk both move. Audit the model behind each publishing pipeline.
What happens next
Bessent will lead the US delegation at AI talks with China scheduled for September, and the distillation dispute is expected to be on the agenda. The near-term direction is clear: the executive branch wants to wall off Chinese models from US workloads, while the world’s most valuable chipmaker wants them integrated. Anyone making model-purchase decisions through the end of 2026 should assume the policy can shift between those two poles.
FAQ
What did Bessent announce about Chinese AI models?
Bessent said the US Treasury will scrutinize Chinese open-weight models for stolen US intellectual property, citing watermarks from US large language models detected on Chinese systems. He described distillation as theft and said sanctions on the developers could follow within weeks.
Why is Jensen Huang defending Chinese AI models?
Jensen Huang, the chief executive of Nvidia, told Axios that Chinese open-weight models are “excellent” and that US firms should “absolutely” be allowed to run them. His case is commercial: wider AI adoption drives more demand for Nvidia chips, data centers, and power infrastructure, a point he summed up as “free AI should be great for chips.”
What is distillation in AI, and is it considered theft?
Distillation trains one model on the outputs of another, so the student model inherits behavior from the teacher. Bessent and some US labs call it intellectual property theft. Hugging Face’s Clem Delangue told TechCrunch it is “a practice that everyone is doing, including companies in the US” and described it as a “very small factor” in competitive outcomes.