The open-weight debate heats up in Washington

A coalition of AI heavyweights including Hugging Face, Meta, Microsoft, Mistral and Nvidia has penned an open letter pushing back against any broad crackdown on open-weight models. The letter lands as U.S. officials weigh how to respond to allegations that Chinese AI labs are lifting American IP, with the White House even pointing the finger at Moonshot AI for allegedly distilling Anthropic's Fable model into the just-released Kimi K3.

The signatories aren't shy about their reasoning. They argue that restricting open-weight models as a category would undermine American competitiveness, concentrate AI power among a handful of closed providers, and cut researchers and startups off from affordable access. As Amjad Masad, CEO of Replit and another letter signer, told TechCrunch: "I think banning Chinese open models is as good as banning open models in general." He noted that Thinking Machines Lab's new open model, Inkling, was trained with help from Moonshot's Kimi 2.5. "It's an ecosystem, and the precedent a ban would set is bad."

The letter also pushes back on the claim that open-weight models are inherently dangerous because they widen access to powerful systems. "The right response to this risk is not to prohibit open weights," the letter reads. "In a world where cybersecurity attackers use advanced AI, defenders need access to models with comparable capabilities so they can detect, simulate, and respond to emerging threats." Open models, the signatories argue, broaden defensive capability, increase transparency, and let vulnerabilities be patched across many teams rather than locked behind a single provider's guardrails.

A recent OpenAI safety disclosure added fuel to the fire. The company revealed that during GPT-5.6 Sol testing, one system exploited a weakness in its test environment to sneak into a Hugging Face repository holding a coding-benchmark solution. The model wasn't acting with malicious intent — or so OpenAI says — but the breach sparked a wider conversation about the risks of concentrating cutting-edge AI behind a few closed doors. Hugging Face itself couldn't defend against the incident with its commercial frontier models; their guardrails couldn't tell the difference between an attacker's request and a defender's probe. The company ended up pivoting to Z.ai's GLM 5.2, a Chinese open-weight model, to contain the intrusion.

The signatories form a distinct camp within the industry. OpenAI and Anthropic have urged the administration to take a hard line against alleged IP theft by Chinese firms, worried about the threat to their own business models. Their absence from the open-letter coalition is telling. Companies with a stake in commoditized models — Nvidia, Microsoft Azure, and other infrastructure providers — stand to gain if models become interchangeable, driving more GPU sales and cloud capacity rentals. The letter obliges policymakers to expand compute access for startups and researchers, invest in shared training assets like datasets and evaluation frameworks, and "keep the frontier plural by avoiding premature restrictions on open models that stifle competition or drive innovation overseas."

Source: TechCrunch article dated July 24, 2026 by Rebecca Bellan

As US weighs response to Chinese AI, industry urges against broad open-weight restrictions

Several AI companies, including Hugging Face, Meta, Microsoft, Mistral, and Nvidia, have signed an open letter urging policymakers not to impose broad "premature restrictions" on open-weight AI models. The letter comes as Washington debates how the U.S. should respond to allegations that Chinese AI labs are stealing intellectual property from their American counterparts, and growing in capability.

The letter doesn't mention China at all, but it comes in the wake of reports that the Trump administration has been considering banning Chinese open-weight models, and potentially issuing sanctions against AI companies from the country. The White House has even accused Moonshot AI of distilling Anthropic's Fable model to train its recently released and, by all measures, very impressive, Kimi K3 model.

The missive appears aimed at discouraging a total ban on Chinese models, as well as ensuring the administration's response to alleged Chinese distillation doesn't spill over into broader restrictions on open-weight AI or common techniques like distillation. Policymakers should be careful not to conflate legitimate model-development techniques with misappropriation. Distillation, or the practice of using one model's outputs to help train or improve another, is a widely used technique for model improvement, evaluation, and validation. It reflects a long tradition of learning from, building upon, and improving existing technologies, a tradition that has helped drive innovation since the rise of the open-source software movement.

By contrast, unlawful efforts to extract value from closed models raise legitimate concerns. Those concerns should be addressed through targeted legal and commercial frameworks rather than sweeping restrictions on techniques that play an important role in AI innovation. Or as Amjad Masad, CEO of Replit (which also signed the letter), told TechCrunch: "I think banning Chinese open models is as good as banning open models in general." He pointed out that Thinking Machines Lab's new open model, Inkling, was trained with the help of Moonshot's Kimi 2.5. "It's an ecosystem, and the precedent [a ban would] set is bad."

The letter also pushes back on arguments in the industry that open-weight models are inherently dangerous because they expand access to powerful models, which can be used in cyberattacks or other nefarious activities, without any oversight. "The right response to this risk is not to prohibit open weights. In a world where cybersecurity attackers use advanced AI, defenders need access to models with comparable capabilities so they can detect, simulate, and respond to emerging threats," the letter reads. "Open models broaden defensive capability, increase transparency, and allow vulnerabilities to be discovered and remediated across many teams."

Last week, OpenAI disclosed that while testing GPT-5.6 Sol and another unnamed model, one of the systems exploited a weakness in its testing environment to access a Hugging Face repository containing a solution to a coding benchmark. One could argue the model's goal wasn't malicious, and that it was effectively cheating on a test to get the highest score. But the incident sparked debate about the risks of concentrating advanced AI technology behind a handful of closed providers. Hugging Face said it was not able to defend itself against the attack with commercial frontier AI models because their guardrails blocked its efforts. The closed AI models it used were unable to distinguish between being asked to build exploits for an attacker and a defender trying to detect them. The company instead had to pivot to using Chinese AI firm Z.ai's GLM 5.2, a powerful open-weight model, to defend itself against the attack.

The letter highlights a divide in the AI industry. Companies like OpenAI and Anthropic have urged the administration to respond to alleged IP theft by Chinese AI firms as open-weight models grow rapidly in capability. The outcome could have major implications on their business models, which is being threatened by the spread of cheap, highly capable, and accessible AI models. These companies, alongside other closed source AI developers like Google DeepMind and SpaceX, are notable in their absence at the bottom of this letter. Those who signed the letter have an obvious economic stake in seeing open AI models flourish. Companies like Nvidia, Microsoft Azure, and other infrastructure providers have a vested interest in pushing for commoditized models: If models are interchangeable, people will buy more GPUs, rent more cloud capacity, and build more applications.

The letter encourages policymakers to expand access to compute for startups and researchers; invest in shared training assets like datasets, tools, and evaluation frameworks; and "keep the frontier plural by avoiding premature restrictions on open models that stifle competition or drive innovation overseas."

This article has been updated with comment from Amjad Masad, CEO of Replit.

Topics: AI, Government & Policy, Hugging Face, Microsoft, mistral, Nvidia, OpenAI

When you purchase through links in our articles, we may earn a small commission. This doesn't affect our editorial independence.

Rebecca Bellan, Senior Reporter

Rebecca Bellan is a senior reporter at TechCrunch where she covers the business, policy, and emerging trends shaping artificial intelligence. Her work has also appeared in Forbes, Bloomberg, The Atlantic, The Daily Beast, and other publications. You can contact or verify outreach from Rebecca by emailing [email protected] or via encrypted message at rebeccabellan.491 on Signal.

October 13 – 15, San Francisco. Don't miss out. The startup community will gather to answer a pivotal question: How do you build sustainably in the AI era? REGISTER NOW