Executive signal. Artificial intelligence is no longer travelling internationally as a neutral software product. It is moving as a packaged system of chips, data centres, cloud contracts, foundation models, cyber controls, finance and diplomatic alignment. A fresh Reuters report says Washington intends to press partner countries to choose between the American and Chinese AI ecosystems. That reported ultimatum makes explicit what policy documents and infrastructure programmes have been signalling for months: the global AI market is hardening into competing stacks.
This is not a conventional standards contest. The strategic unit is now the entire operating environment. The United States is organising full-stack export packages backed by federal finance and diplomacy. China is promoting open-weight models, infrastructure partnerships and a new multilateral cooperation organisation. Governments in the middle want sovereign capability and bargaining power, not permanent dependency. Enterprises must therefore treat AI architecture as geopolitical architecture. A model endpoint, accelerator lease or data-centre agreement can carry jurisdictional, security and continuity consequences that outlive the technology cycle.
1. The reported demand to choose sides changes the threat model
Reuters reported on 14 August that the United States plans to tell partners they must choose sides in the AI race with China. The report places this pressure against two rival initiatives: a US-led framework and the World Artificial Intelligence Cooperation Organization launched by Chinese President Xi Jinping in July. Kazakhstan is reportedly the only country known to have joined both, a position that has already attracted attention in Washington.
The important signal is not the diplomatic language but the compression of technical procurement into strategic allegiance. Until now, a government could plausibly buy American accelerators, run a Chinese open-weight model, use European governance controls and finance local data-centre capacity through several channels. A binary alignment policy attacks that modularity. It seeks to make the origin of each layer mutually reinforcing: American hardware with American cloud, American models, American security controls and American standards, or an alternative ecosystem anchored by China.
That creates a new class of concentration risk. Organisations have spent years reducing dependency on a single cloud region or software vendor. They now face stack-level dependency enforced not only by commercial contracts but also by export controls, sanctions, investment screening and diplomatic commitments. A workload can be technically portable while remaining politically stranded. A model may be replaceable, yet the accelerator allocation, encrypted networking, identity layer, safety evaluation regime and financing covenants around it may not be.
The cyber dimension makes the divide sharper. Reuters noted that rapidly improving models include systems capable of increasingly autonomous hacking. Once offensive cyber capability enters the strategic calculation, model access is treated less like ordinary software licensing and more like controlled dual-use infrastructure. That increases the probability of release conditions, approved-user regimes, telemetry requirements and restrictions on cross-border collaboration. For security leaders, the relevant question is no longer only whether a model can be attacked. It is whether geopolitical controls can abruptly alter who may operate it, where it may run and which incident data may be shared.
2. Washington is exporting an industrial system, not an API
The architecture of the American approach is unusually clear in its own documents. Executive Order 14320 established the American AI Exports Program to support full-stack packages. The required components include AI-optimised hardware, servers and accelerators; storage, cloud and networking; data pipelines and labelling systems; models; cybersecurity measures; and sector-specific applications. Proposals must identify target countries or regional blocs and explain who will build, own and operate associated data centres.
That specification matters because it closes the gap between model diplomacy and industrial policy. A frontier model without power, fibre, cooling, secure data pipelines and deployment expertise is a demonstration. A packaged stack is a durable dependency network. It determines maintenance channels, developer ecosystems, compliance patterns, local skills and the location of operational control. By coordinating those layers, Washington is trying to make adoption of American AI economically coherent rather than merely politically desirable.
The Commerce Department moved the programme into a proposal phase beginning on 1 April 2026, giving industry-led consortia a 90-day window to submit packages. The stated scope again included optimised compute, data-centre storage, models, cybersecurity and applications. This is a procurement machine designed to join private capability to public leverage. It can turn a fragmented collection of US vendors into a national offer capable of competing with state-supported infrastructure deals.
Finance is the binding agent. The executive order directs the mobilisation of loans, loan guarantees, co-financing, political-risk insurance, credit guarantees, technical assistance and feasibility studies. CSIS notes that the US International Development Finance Corporation sees AI data-centre investment as a leading request from partner governments, with telecommunications, fibre, cloud infrastructure, generation and grids forming part of the stack. In other words, AI diplomacy reaches all the way down to electricity. The winning model may be the one attached to the bankable substation.
This structure gives US companies a powerful route into markets that could not independently fund frontier-scale infrastructure. It also creates governance obligations. When public finance supports a stack, security baselines, end-user conditions, procurement rules and strategic restrictions can travel with the capital. Enterprise buyers should expect contractual controls to become more specific over time, particularly around beneficial ownership, remote access, model fine-tuning, sensitive datasets and the onward transfer of compute.
3. China is weaponising openness and institutional reach
China does not need to mirror the American package layer for layer. Its strongest current lever is the distribution of increasingly capable open-weight models. Reuters reported this week that Chinese open-weight systems have gained rapidly against proprietary American products. Open weights can be adapted, hosted locally and integrated without permanent dependence on a foreign API. For countries that equate sovereignty with operational possession, that is a compelling proposition.
Beijing is pairing that technical route with institution-building. Brookings describes a summer of AI summits that widened the US–China divide and records the formation of China’s World Artificial Intelligence Cooperation Organization. The United States, meanwhile, has expanded its own coalition, with ten new partners joining an initiative and bringing the reported total to 24 signatories. These are not decorative diplomatic clubs. They are venues where interoperability, safety language, supply-chain expectations and access relationships can become normalised.
The open-weight issue also exposes tension inside the American strategy. A separate Reuters report on 14 August says Senator Jim Banks urged the administration to create incentives for US companies to develop open-weight models, as Chinese systems become more popular inside the United States. The policy dilemma is real. Closed models preserve provider control and may support stronger central safeguards. Open models diffuse more quickly, create local ecosystems and can become the default substrate for researchers, start-ups and governments that cannot afford premium proprietary services.
Washington therefore faces a distribution paradox. It wants trusted American systems adopted globally, but the commercial leaders of its frontier market often operate controlled services. China can gain influence by offering models that users can possess, modify and run on varied infrastructure. If the United States treats open-weight development mainly as a security liability, it may surrender the layer through which technical communities build long-term affinity. If it subsidises openness without robust security engineering, it may expand access to dual-use capability. There is no frictionless answer.
4. The non-aligned states will negotiate, not simply comply
A forced binary is strategically neat and commercially untidy. The Institute for Progress identifies countries including Brazil, Indonesia and Nigeria as swing states with strong incentives to hedge between Washington and Beijing. Their objective is not indecision. It is leverage: obtain capital, skills, local compute and model access while avoiding a permanent external choke point.
These governments will evaluate offers through domestic priorities. Can the stack run national-language models? Who owns the data centre? Where are encryption keys held? Can local companies fine-tune and resell services? What happens if export policy changes after an election? How much electricity and water will the facility consume? Does financing create public debt or foreign ownership of critical infrastructure? A technically superior model can lose if its surrounding package provides weak answers.
Attempts to prohibit mixed stacks may also accelerate local abstraction layers. Governments and large enterprises can invest in model gateways, hardware-independent orchestration, portable retrieval systems and open data formats precisely because they anticipate geopolitical volatility. Sovereignty will increasingly mean the ability to replace a model provider without rebuilding identity, policy, evaluation and data infrastructure. The most valuable local companies may be those that insulate users from the rival blocs rather than those that merely resell one bloc’s products.
Europe occupies a distinct but exposed position. Its regulatory power can shape safety and accountability, yet its dependence on foreign frontier models and accelerator supply limits complete strategic autonomy. European buyers may prefer diversified sourcing, but extraterritorial controls and alliance politics can narrow practical options. The result could be a third governance layer sitting above largely American compute and a mixed open-model ecosystem. That arrangement can work, but only if portability and audit evidence are designed in from the beginning.
5. Enterprise architecture is now foreign policy in executable form
Boards should resist treating this contest as distant statecraft. The stack split reaches ordinary technology decisions through availability, price, support, liability and compliance. A multinational that standardises on one model family may discover that a subsidiary cannot access it. A locally hosted open model may become unacceptable to a regulated customer because of provenance concerns. A data-centre region may receive abundant accelerator capacity only after its government accepts strategic conditions that affect cross-border operations.
The immediate response is not to abandon leading platforms. It is to build an exit-aware control plane. Enterprises should maintain a current bill of AI materials covering model origin, weights or API status, accelerator dependency, cloud region, data residency, critical libraries, evaluation tooling and identity integration. Every high-impact workflow needs a documented substitution path. Portability tests should measure behavioural and security equivalence, not merely whether another endpoint accepts the same prompt.
Procurement teams should add geopolitical change clauses to major AI contracts. These should address export-control disruption, loss of regional service, mandatory migration support, retrieval of fine-tuning assets, access to logs and evidence, and the treatment of prepaid compute. Security teams should separate policy enforcement from individual models wherever possible. Authentication, authorisation, data-loss prevention, tool permissions and audit records belong in an independent layer that can survive a provider swap.
Model risk committees also need a jurisdiction map. The map should identify where inference occurs, who can administer the service, which government may compel access, and whether incident artefacts can cross borders. Open weights do not automatically solve this problem: they introduce their own patching, provenance and supply-chain duties. Proprietary services do not automatically worsen it: some provide stronger monitoring and rapid mitigation. The correct comparison is operational control under failure, not an ideological label.
Finally, organisations should run a geopolitical failover exercise. Assume that a preferred model becomes unavailable in one market with 30 days’ notice; that new chips cannot be delivered; or that a regulator disallows a model origin for sensitive workloads. Measure how quickly the organisation can preserve service, controls and evidence. This turns an abstract rivalry into a recoverability target. In the emerging AI order, resilience is the capacity to change stacks without losing institutional memory or security posture.
What to watch next
- Partner-country declarations: watch whether governments join only one initiative, seek observer status, or explicitly defend multi-stack procurement.
- Selected US export consortia: the composition of priority packages will reveal which cloud, chip, model, energy and cyber providers are being fused into national offers.
- Financing conditions: loan guarantees and political-risk insurance may carry the most consequential alignment terms, even when public statements remain flexible.
- American open-weight incentives: policy support would signal that distribution and ecosystem reach are being treated as strategic capabilities, not merely product choices.
- Interoperability barriers: restrictions on mixed-origin models, accelerators, datasets or orchestration tools would show that the rivalry is moving from persuasion to technical separation.
- Swing-state bargaining: Brazil, Indonesia, Nigeria, India and Gulf economies will test whether sovereignty can remain compatible with access to both blocs.
Closing assessment. The first phase of the AI race rewarded model capability. The second rewarded deployment scale. The next phase will reward the power to assemble an entire stack and make it the default infrastructure of another country. Washington is bringing finance, diplomacy and export policy into that contest; Beijing is combining infrastructure reach, open-weight distribution and new institutions. The danger for enterprises is not that one stack immediately defeats the other. It is that systems built during a period of apparent interoperability become trapped when the geopolitical border hardens. Architecture teams should design for that border now.
Sources
- Reuters — US to tell partners they must pick sides in AI race with China
- Reuters — US senator urges support for American open-weight AI models
- US Department of Commerce — American AI Exports Program proposal phase
- White House — Executive Order 14320 on exporting the American AI technology stack
- Brookings — A summer of AI summits reveals a widening US–China divide
- CSIS — Tokenpolitik and competition to build the global AI stack
- Institute for Progress — America’s AI Exports Program
Leave a Reply