The Kill Switch Can't Reach GitHub

Washington just proved it can kill a frontier model in 90 minutes — and the market's answer is to download the weights before someone else can flip the switch.

What's new: On July 15, Semafor reported that a senior White House official signaled "plenty of ongoing work" on open-source AI models beyond President Trump's June 2 executive order — specifically to address China-related concerns. National Cyber Director Sean Cairncross, briefing reporters on the order's July 2 launch, said the framework "also includes open-source scanning and deconfliction." Reflection AI, the open-weights startup valued near $8 billion after its October 2025 round per the Financial Times, has pitched the administration on a new framework, per Semafor — with talk of additional executive guidance.

Why it matters: Closed models sit behind an API Washington can pressure. Open weights live on Hugging Face, in private data centers, and on air-gapped clusters — out of reach of any export-control letter. After June's Anthropic blackout, that structural difference stopped being academic.

The June lesson:

• June 12 — Commerce sent Anthropic an export-control directive at 5:21 p.m. ET; Fable 5 and Mythos 5 went dark globally within hours
• 90 minutes — how long Anthropic had to comply, per a source close to the company cited by The Hill
• June 30 — Commerce lifted controls; Anthropic restored access July 1
• Two weeks — how long hundreds of millions of users waited while labs negotiated in Washington

The market reaction:

• The Hill, July 5: Trump's restrictions on private model releases are "ramping up the push for open-source alternatives"
• Felix Van de Maele, Collibra CEO: "When a company gets 90 minutes to pull a model deployed to hundreds of millions of people because of a competitor's complaint, that need becomes urgent fast. This didn't create the anxiety we are all experiencing now. It removed any remaining doubt."
• MIT Management research, cited by The Hill: open-source models already account for roughly one-fifth of all AI token usage

The policy squeeze:

• June 2 EO — Executive Order 14409 asks frontier labs to give the government up to 30 days of voluntary pre-release access for cybersecurity review
• July 2 launch — Cairncross: "We cannot achieve the president's vision without securing and bolstering our open-source ecosystem"
• July 15 signal — unnamed official leaves the door open to executive action targeting open-source models over China concerns
• The irony — the kill switch that made open weights attractive is now the reason Washington wants leverage over them

The quotes:

• Cairncross, July 2 briefing: the order "also includes open-source scanning and deconfliction"
• Anthropic, June 12 statement: applying the jailbreak-recall standard industry-wide "would essentially halt all new model deployments for all frontier model providers"
• Dario Amodei, 2023 Capitol Hill visit, per The Hill: scaling open-source models is "going down a dangerous path" — private models let labs revoke access after deployment
• CNBC, June 30: Chinese open-source models were "almost as capable and significantly cheaper" while Anthropic's models sat offline

What Washington cannot do (yet): Remote-disable a downloaded checkpoint. Scan every fork. Stop a Malaysian subsidiary from running Qwen on local hardware. That is why enterprise buyers — and Beijing — treat open weights as sovereignty insurance. It is also why a White House that just demonstrated kill-switch power over APIs is now hunting the distribution channel it cannot reach.

What we cannot verify: Semafor did not name the senior official. Reflection AI's pitch is unattributed. No draft executive order text is public. Cairncross's "scanning" framework has no published technical standard. How many enterprises actually shifted procurement budgets after June 12 is anecdotal, not audited.

Convina's view: June's Anthropic episode taught the market a lesson Washington did not intend: sovereignty lives in the weights file, not the API contract. Now the same administration that proved it can blackout Mythos in an afternoon is signaling it wants that power over open-source too — while simultaneously trying to "bolster" the U.S. open-weights ecosystem against China. You cannot sell enterprises on American open models and threaten to fence the repo. Pick a lane, or capital will keep downloading the insurance policy.