For eighteen months, China handed the world something extraordinary for free.
Qwen on Hugging Face. DeepSeek open-source under an MIT licence. Doubao spreading across developer communities from São Paulo to Singapore. Chinese AI, capable, cheap, and ungated, became the global baseline. The price ceiling that US labs had to operate under. The model that startups in sixty countries built their products on because they couldn't afford the alternative.
Now Beijing is in talks to take it back.
The Reuters exclusive broke on July 7, 2026. China's Ministry of Commerce has spent the past month meeting with Alibaba, ByteDance, and startup Z.ai. The subject on the table: restricting overseas access to China's most advanced AI models. Closing the open door. Raising what analysts are already calling the Silicon Curtain, a software wall to match the hardware wall America built first.
Nothing has been decided. But the fact that the conversation is happening at all changes the calculation for every developer, every enterprise, and every country that built an AI strategy on cheap Chinese models.
What Beijing Is Actually Considering
The meetings were led by China's Ministry of Commerce (MOFCOM). Three people familiar with the discussions confirmed them to Reuters, declining to be identified. No ministry has commented officially.
The models under discussion are the ones that matter most globally:
Alibaba's Qwen, among the most widely used AI models in China, with a substantial global following on Hugging Face. The Qwen series has been a cornerstone of international developer adoption of Chinese AI.
ByteDance's Doubao, the dominant consumer AI product inside China, increasingly available globally. ByteDance's distribution muscle is formidable.
Z.ai's GLM-5.2, released in late June 2026. Reuters described it as having "set Silicon Valley abuzz" by approaching leading US frontier model capabilities at a fraction of the cost. Z.ai claimed GLM-5.2 matched Anthropic's Mythos model in its ability to detect software vulnerabilities. That specific claim, a model that can find cyberweapon-grade vulnerabilities, is almost certainly what accelerated this conversation.
The proposed tiered regime, as reported by Reuters and confirmed by multiple sources, would work like this: Tier 1: basic open-source models, simple filing requirement. Tier 2: advanced models, formal security review before overseas release. Tier 3: frontier models, barred from public release or restricted to domestic use only. Officials also discussed making leaks or theft of proprietary AI an offence under China's national security law, and new restrictions on foreign investment in domestic AI startups.
The Tit-for-Tat That Built the Curtain
This did not come from nowhere. It is the product of an escalating exchange of restrictions that has been building for years, and accelerating sharply in 2026.
In June 2026, the Trump administration ordered that foreign nationals not have access to Anthropic's most advanced Fable and Mythos models. Anthropic disabled the models for all users globally, nationality could not be verified in real time, so the restriction became universal. Export controls on the less advanced Fable model were subsequently lifted after new safeguards were put in place. Mythos restrictions remain in effect.
Beijing's response was immediate. Alibaba banned Claude Code internally and asked employees to remove Claude from their work computers, a direct retaliation against Anthropic's move.
But the provocation ran deeper than the ban. Days before the ban, a developer discovered that Anthropic had quietly inserted code into Claude Code designed to detect whether the user was in China or connected to a Chinese AI lab, reading signals like timezone and network address. An Anthropic engineer confirmed on X that the code was added in March 2026 to combat "distillation", and that stronger safeguards were now in place. The code was removed the following day.
Distillation, using the outputs of a more capable model to train a weaker one, effectively extracting intelligence from a frontier model without permission, has become the central technical flashpoint of the US-China AI dispute. Anthropic published a report in February 2026 claiming Chinese firms DeepSeek, Moonshot, and MiniMax generated 16 million exchanges with Claude through approximately 24,000 fraudulent accounts to extract training signal. In June 2026, Anthropic reportedly sent a letter to US officials accusing Alibaba of "brazenly" attempting to distill Claude's capabilities.
| Date | Event | Who Moved |
|---|---|---|
| 2022–2023 | US restricts Nvidia A100 and H100 chip exports to China. Hardware wall goes up. | US |
| Jan 2025 | DeepSeek R1 released open-source under MIT licence. Chinese AI's global distribution era begins. Open-source becomes China's soft-power lever. | China |
| Feb 2026 | Anthropic report: DeepSeek, Moonshot, MiniMax generated 16M Claude exchanges via ~24,000 fraudulent accounts to distil capabilities. | US |
| Early 2026 | Beijing forces Meta to reverse $2B acquisition of AI startup Manus. Regulators open inquiries into Chinese AI firms relocating overseas. | China |
| Mar 2026 | Anthropic inserts detection code into Claude Code to identify Chinese users. Removed after discovery. | US |
| Jun 2026 | Trump administration restricts foreign national access to Anthropic's Fable and Mythos models. Anthropic disables globally. Anthropic accuses Alibaba of distillation in letter to US officials. | US |
| Jun 2026 | Z.ai releases GLM-5.2, claims it matches Mythos in vulnerability detection. Broader regulatory package extends scrutiny to cross-border AI transactions. | China |
| Late Jun 2026 | Alibaba bans Claude Code internally, asks employees to remove Claude from work devices. | China |
| Jul 7, 2026 | Reuters exclusive: MOFCOM meetings with Alibaba, ByteDance, Z.ai to discuss restricting overseas access to China's most advanced AI models. | China (under consideration) |
The Strategic Paradox Beijing Has to Solve
Here is why this decision is genuinely difficult, and why it matters beyond the geopolitics.
China's open-source AI strategy has been one of the most effective tools of global influence it has ever deployed. DeepSeek's $6 million model spread across the global developer community at zero distribution cost. Qwen became the backbone of AI applications in Southeast Asia, the Middle East, Africa, and Latin America, countries that could not afford American API prices and were quietly building on Chinese infrastructure precisely because it carried no explicit political strings.
If Beijing closes that door, it surrenders the very lever that has driven China's global AI rise. A trailing player does not abandon its biggest distribution advantage without a reason that outweighs the loss.
The reason, in this case, is GLM-5.2. A model that can find software vulnerabilities at Mythos-level capability is not a consumer product. It is a cyberweapon. And Beijing has decided, or is close to deciding, that distributing cyberweapon-capable models globally is a national security risk it can no longer accept, regardless of the soft-power gain.
Scott Singer of the Carnegie Endowment for International Peace put it precisely: "China will need to reckon with the reality that models that reach certain capabilities are unsafe. It is going to have the same conversations the White House has had over the last many months. China is going to have to balance the benefits of access to global markets with a desire to control a technology that is central for national security."
What Happens to Everyone Else
If the Silicon Curtain goes up from both sides simultaneously, and nothing has been decided yet, the consequences are not symmetrical. The people who lose most are not in Washington or Beijing.
They are in Lagos, Jakarta, Riyadh, and Buenos Aires. The developers and startups and public sector organisations in countries that built their AI on cheap Chinese open-source models because they had no other affordable option.
A tiered Chinese export regime changes that calculation entirely. Access to top-tier Chinese models may require bilateral agreements, data-sharing arrangements, or implicit alignment with Chinese foreign policy objectives. The "neutral" option, cheap Chinese open-source, no strings attached, may quietly disappear. And the alternative is $25–30 per million tokens from US providers, versus the $3.48 that DeepSeek currently charges.
The global AI market bifurcates. Prices rise for everyone outside the two powers. And the pressure on developing nations to choose a side, rather than benefit from both, increases sharply.
China Rocks AI: The Full Ecosystem
The complete picture of China's AI industry: the Six Tigers, the national champions, the domestic chip ecosystem, the $295 billion infrastructure buildout, and where Qwen, Doubao, and GLM-5.2 fit in the broader strategy.
USA vs China: The AI Coin Flip
Two superpowers, one frontier, a 2.7% performance gap. The strategic analysis of the race the Silicon Curtain is being built around.
The Tokenmaxxing Crisis
Why cheap Chinese AI matters: DeepSeek at $3.48 per million tokens versus OpenAI at $30 is the price differential the Silicon Curtain would eliminate.
Silicon Curtain: FAQ
The Silicon Curtain describes the emerging division of the global AI ecosystem into two separate, mutually restricted technological spheres, one US-led, one China-led. Until now, the curtain was primarily a hardware wall: the US restricted advanced AI chips (Nvidia A100, H100) from export to China. The July 2026 development represents a potential software wall being erected from the other side, Beijing considering restrictions on overseas access to China's most advanced AI models, including Alibaba's Qwen, ByteDance's Doubao, and Z.ai's GLM-5.2. If both walls complete, the era of globally accessible frontier AI ends.
Over the month prior to the July 7, 2026 Reuters exclusive, China's Ministry of Commerce (MOFCOM) held meetings with Alibaba, ByteDance, and startup Z.ai to discuss potentially restricting overseas access to China's most advanced AI models, including models not yet released. Topics included: a tiered control regime with basic open-source models subject to a filing requirement, advanced models subject to security reviews, and frontier models potentially barred from public release or restricted to domestic use; making leaks or theft of proprietary AI an offence under China's national security law; and restrictions on who can fund domestic Chinese AI startups. Nothing has been decided and no ministries have commented officially.
The three companies in the discussions produce the most globally significant Chinese AI models. Alibaba's Qwen series has amassed a large following on Hugging Face globally and is one of the most widely used models in China. ByteDance's Doubao is the dominant consumer AI product inside China, increasingly available globally. Z.ai's GLM-5.2, released in late June 2026, reportedly approaches leading US frontier capability at a fraction of the cost — and Z.ai claims it matched Anthropic's Mythos in detecting software vulnerabilities, which appears to be the specific trigger for the restriction discussions.
In June 2026, the Trump administration ordered that foreign nationals not have access to Anthropic's most advanced Fable and Mythos models. Anthropic disabled the models globally because nationality could not be verified in real time. Fable controls were later lifted after new safeguards were put in place. Mythos remains restricted. Beijing is concerned Mythos could be used against Chinese systems. Alibaba subsequently banned Claude Code internally and asked employees to remove Claude from work devices. The China model restriction discussions are in part a direct response to, and mirror of, US moves against Chinese access to American frontier AI.
Distillation is a technique where the outputs of a more capable AI model are used to train and improve a less capable one, transferring intelligence from a frontier model without access to its weights. Anthropic published a report in February 2026 claiming Chinese firms DeepSeek, Moonshot, and MiniMax generated 16 million exchanges with Claude through approximately 24,000 fraudulent accounts to extract training signal. In June 2026, Anthropic reportedly accused Alibaba of "brazenly" attempting to distil Claude's capabilities in a letter to US officials. Anthropic's hidden detection code in Claude Code was designed to identify Chinese users and catch this practice. Alibaba banned Claude Code in response.
Participants in the MOFCOM discussions floated a three-tier structure. Tier 1: basic open-source models, simple filing requirement, low restriction, broad access. Tier 2: advanced models, formal security review before overseas release. Tier 3: frontier models, the most capable, most sensitive, either barred from public release altogether or restricted to domestic use only. Officials also discussed making leaks of proprietary AI an offence under national security law, and new restrictions on who can fund domestic AI startups. The structure mirrors the US export control architecture for AI chips, which applies different restriction levels based on compute capability thresholds.
China's open-source AI strategy, spreading Qwen and DeepSeek globally at near-zero cost, has been one of its most effective soft-power tools. Beijing would be surrendering this distribution advantage. The likely reasoning: GLM-5.2's reported ability to match Mythos in finding software vulnerabilities means that at a certain capability threshold, the national security risk of sharing a model globally outweighs the soft-power gain. Scott Singer of the Carnegie Endowment: "China is going to have to balance the benefits of access to global markets with a desire to control a technology that is central for national security." The same logic the US has already applied to Mythos now applies to China's own frontier models.
The cost implications would be significant. Chinese open-source models, particularly DeepSeek and Qwen, have been a real price ceiling on what US AI labs can charge globally. If that ceiling disappears, frontier AI access costs rise across the board. The global developer community loses its lowest-cost frontier option. Pressure shifts back toward US-hosted APIs, which charge $25–30 per million output tokens compared to DeepSeek's $3.48, an 8–9× price difference driving major enterprise adoption of Chinese models. Reuters noted: "Any decision by Beijing to limit access to those products could ripple across AI markets as costs for many businesses would likely increase."
Earlier in 2026, Beijing's state planning agency forced Meta to reverse its $2 billion acquisition of AI startup Manus. Regulators separately opened inquiries into Manus and other Chinese AI firms that had relocated overseas, to determine whether they violated export control rules by moving Chinese AI technology and data outside China. A broader regulatory package released in early June 2026 extended government scrutiny to cross-border transactions touching Chinese capital, proprietary technology, and data. The Manus intervention is part of the same pattern as the model restriction discussions: Beijing tightening control over Chinese AI assets as their strategic and security value rises.
Z.ai (Zhipu AI) is a Beijing-based AI startup and one of China's Six AI Tigers. It released GLM-5.2 in late June 2026. Reuters described the model as having "set Silicon Valley abuzz" by approaching leading US frontier model capabilities at a fraction of the cost. Z.ai claimed GLM-5.2 matched Anthropic's Mythos model in its ability to find software vulnerabilities, immediately elevating it from a competitive commercial model to a potential national-security-level asset. This specific capability claim appears to be the direct trigger for the Ministry of Commerce's interest in restricting its overseas availability.
Jans Bock-Schroeder
Publisher & Founder of AI Angst
Coming from the world of art, photography, and the luxury market, Jans launched AI Angst in 2025 to explore the cultural, ethical, and psychological impacts of artificial intelligence. His work bridges creative vision with critical technology analysis, offering clarity in an era of rapid technological change.
Sources and Citations
This article is based on the following primary sources, all published July 7–8, 2026:
-
Reuters: "Exclusive: Beijing is looking at curbing overseas access to China's top AI models, sources say" (July 7, 2026)
Primary source for MOFCOM meetings, companies involved, tiered regime proposal, national security law discussion, and investment restriction discussions.
https://finance.yahoo.com/technology/ai/articles/exclusive-beijing-looking-curbing-overseas-101644780.html -
TIME: "China May Restrict Access to Its Most Powerful AI Models" (July 7, 2026)
Source for distillation context, Anthropic's 16M exchanges / 24,000 fraudulent accounts report, Alibaba Claude Code ban, Anthropic hidden detection code story, and Scott Singer (Carnegie Endowment) quote.
https://time.com/article/2026/07/07/china-ai-models-alibaba-bytedance/ -
Quartz: "China weighs restrictions on overseas access to its most advanced AI models" (July 7, 2026)
Source for Meta/Manus $2B acquisition reversal, broader June 2026 regulatory package, and Qwen Hugging Face adoption context.
https://qz.com/beijing-china-ai-model-export-restrictions-070726 -
AI Weekly: "Beijing Weighs Curbing Overseas Access to Top Chinese AI Models" (July 7, 2026)
Source for tiered regime detail (filing, security review, domestic-only tiers), Z.ai GLM-5.2 Silicon Valley reaction, and global developer cost implications.
https://aiweekly.co/alerts/beijing-weighs-curbing-overseas-access-to-top-chinese-ai-models -
FourWeekMBA: "Alibaba, ByteDance, and Z.ai Face China's Model Export Curbs — The Bifurcation Now Runs Both Ways" (July 7, 2026)
Source for strategic analysis of the bifurcation implications, Global South access consequences, and the "open-source as soft-power lever" framing.
https://fourweekmba.com/ai-china-ai-model-export-curbs-alibaba-bytedance-bifurcation/
Published: July 8, 2026. Sources verified at time of publication. Story is developing, no official decisions have been made by Beijing as of publication date. All external links open in a new tab.
