Department of Justice · Bureau of Industry and Security · Senate Banking · White House · Taiwan · Nvidia · Super Micro · Oracle · US lenders · Tencent · Alibaba · Semi-Tech Leasing · United States · China · Taiwan · Southeast Asia
Companion war game: AI Chip Export Enforcement War Game Shows When Verification Protects US Firms and When It Arrives Too Late replays how US firms reached the board this Snapshot sets. The AI Chip Export Enforcement War Game Executive Presentation condenses the war game for decision makers. The Interactive AI Chip Export Enforcement War Game lets a reader play a US firm’s seat through the January forks.
The Significance of AI Chip Export Enforcement for US Firms
Enforcement that cannot reach the capability beneficiary reaches the nearest US firm instead. A Chinese tenant renting compute in Malaysia falls outside existing US remote-access controls. The American vendor that built the server, the American host that rents it and the American lender that financed the campus stay within reach. Licenses, contracts, ownership rules and securities disclosures all connect them to the transaction.
The export enforcement game is evolving from shipments toward rented compute, financing and domestic Chinese chips, and US firms carry the exposure at every step. Each new instrument lands on the reachable party: the vendor in the hardware channel, the host in the access channel and the US counterparty in the finance channel. The firms that verify tenants and beneficial owners first keep their customers when the rules change, and the firms that wait absorb the penalty.
On October 1, 2026, prosecutors arrested Greg Lui of Earthmade Computer over about $300 million in Nvidia servers routed to China (Bloomberg Law). The same week brought reports that Tencent leases about 100,000 accelerators from Oracle in Southeast Asia, first reported by the Financial Times (Network World), and that a state-controlled lessor financed restricted Blackwell servers (TFTC). Each story puts a US firm at the reachable end of a China-parented acquisition.
MindCast AI applies Predictive Behavioral Economics + Dynamic Game Theory through MindCast AI Proprietary Cognitive Digital Twin Foresight Simulations (MP CDT FS). Behavioral Economics supplies the decision rules, including each agency’s anchor on salient physical objects and reachable defendants. Game Theory supplies the payoff structure: a case against a US firm costs an enforcer little, while a case against an offshore tenant is unavailable. Predictive simulations emerge from the combination.
The Snapshot sets one board for the contest and reads every channel from the seat of a US firm. Three channel sections show where each firm type carries exposure and how the January 2027 decisions move it. Sections V and VI convert the forecasts into opportunities and risk controls for each firm type.
The two-gate model from The Beijing Summit Validation — Geopolitical Ripples for the AI Industry Across the Three-Layer Equilibrium anchors the analysis. Washington’s license and Beijing’s acceptance both had to clear before a chip moved, and licensed H200 shipments stayed under 1% of Nvidia’s quarterly data center revenue (Bloomberg Tax). Rented compute and state financing are the routes around both gates, and domestic accelerators absorb most of the demand both gates block.
Validated forecasts. China’s H200 Import Block and the Reordering of National Innovation Control forecast on January 20, 2026 that Beijing would block commercial H200 access. The Beijing Summit paper then forecast H200 deliveries near zero through August 15, and the sub-1% shipment figure validated both. The two validations ground the two-gate model this Snapshot extends.
Snapshot Prediction highlights. The Snapshot holds 21 MindCast Foresight Simulation Predictions, called Snapshot Predictions below, in four groups. Odds print in tens, and scheduled forks sum to 100. Section IV carries the full terms.
Snapshot Prediction highlights. The Snapshot holds 21 MindCast Foresight Simulation Predictions, called Snapshot Predictions below, in four groups. Probabilities round to the nearest 10%, and each fork’s outcomes sum to 100%. The seven below carry the most weight for US firms, and Section IV carries all 21 with full terms.
Corporate-level resolution with a major chip vendor or server maker by October 31, 2027: 30%
New export-control securities class action beyond Super Micro by December 31, 2027: 50%
Remote-access authority by January 3, 2027: 20% enacted, 80% lapses
Offshore host listed for serving China-parented tenants by December 31, 2027: 20%
BIS posts the Affiliates Rule suspension notice by November 10, 2026: 80%
Affiliates Rule suspension by January 10, 2027: 80% extended or narrowed, 20% full return
PRC lessor or state-capital vehicle designated by December 31, 2027: 20%
Stakeholder readout.
💼 US chip vendors and server makers. A channel partner’s indictment now precedes a disclosure suit against the vendor, so reseller audits pay before the next annual report. Location-verification text in the defense bill would put the next duty on the vendor too (Sections III.1 and VI).
💼 US cloud hosts and data center operators. Write transition and workload-visibility terms into offshore leases before January 3, because a tenant duty lands on the host (Sections III.2 and VI).
📊 US lenders, lessors and investors. Offshore compute cash flows carry a dated statute risk, and PRC lease filings show restricted-hardware demand before any indictment does (Sections III.3 and V).
⚖ Counsel to US firms. Run ownership diligence on China-linked counterparties before November 10 and map a voluntary self-disclosure decision (Section VI).
🏛 Policymakers. Each workaround lands on a US firm while most displaced demand moves to domestic Chinese chips, and only a beneficiary test reaches the party that gains (Section VII).
Takeaway: US firms are the reachable parties in every channel, so their strategy and risk decide how the enforcement game evolves.
I. Enforcement Reaches What It Can Prove, and US Firms Sit at Every Point It Can Prove
The governing constraint geometry is object-bound enforcement evolving toward beneficiary-bound enforcement. Prosecutors anchor on a server crossing a border because invoices and customs papers prove the case. The anchor reaches US firms first, since US firms make the servers, sign the leases and finance the campuses.
Behavioral economics explains the anchor. Agencies weight salient, provable conduct above diffuse conduct, and a named US company is the most salient defendant available. Game theory explains the response: China-parented buyers choose the route with the lowest expected penalty, which sits wherever the anchor does not reach.
The result is displacement toward domestic supply rather than capability denial. Higher penalties on shipment raise the risk on every foreign channel, including rental, so displaced demand moves mostly to domestic accelerators. A tenant rule would raise the value of financed and intermediated access. In each step a US firm inherits the exposure or loses the customer.
Relative speed sets the pace. Beijing blocked H200 imports in January 2026, and Tencent’s offshore Oracle lease surfaced by September 30. The remote-access bill has awaited the Senate since January 2026, and Commerce’s remote-access draft remains unpublished.
Known, discoverable and unknowable. Known: the current indictments, the May 31 guidance and three dates in November and January. Discoverable through diligence: a US firm’s own customer ownership chains and lease terms. Unknowable until the actors move: whether the White House trades the Affiliates Rule again and whether Senate conferees carry remote-access text.
Takeaway: the beneficiary moves in months, the rules move in years, and US firms hold the exposure in between.
II. Seven Seats Move on Different Clocks, and Four Belong to US Firms or Their Regulators
Seven actors move on four different clocks. Each seat groups Cognitive Digital Twins (CDTs) built from the actor’s public conduct across courts, agencies and filings.
Enforcer: Justice Department National Security Division and the Bureau of Industry and Security (BIS). Moves: indict and list, condition licenses and issue guidance. Cadence: weeks to months. Changes rules within existing authority.
Congress: Senate Banking and the House Select Committee on the Chinese Communist Party. Moves: pass or attach text to the defense bill, let bills lapse or send letters. Cadence: one session. Changes rules.
White House: the trade team. Moves: extend, narrow or end suspensions and trade controls for concessions. Cadence: negotiating rounds. Changes rules.
Taiwan: Ministry of Economic Affairs and Keelung prosecutors. Moves: legislate, prosecute and block shipments. Cadence: legislative session. Changes rules at home.
US vendors: Nvidia, Super Micro and distributors. Moves: audit channels, disclose and cooperate. Cadence: quarterly. Cannot change rules.
US hosts and lenders: Oracle and other hosts, plus data center lenders. Moves: verify tenants, rewrite leases and condition credit. Cadence: contract cycle. Cannot change rules.
China-parented tenant and financier: Tencent, Alibaba and Semi-Tech Leasing. Moves: rent abroad and harvest outputs, finance through leasebacks and restructure ownership. Cadence: months. Cannot change rules.
The board. Five channels carry the contest: hardware, access and finance plus transit and model outputs. Each channel reads reachable, contested or out of reach, and each turn below lists only what changed.
October 2022, advanced computing controls: hardware reachable. Transit contested. Access, finance and model outputs out of reach.
December 2025, Tencent-Datasection Blackwell lease reported in Japan: access demand rises while access stays out of reach.
January 2026, Beijing blocks H200 imports: no change in reach.
March 2026, ByteDance-Aolani Blackwell lease reported in Malaysia: access demand rises again, and model outputs become contested.
March 2026, Super Micro indictment: hardware enforcement escalates.
May 31, 2026, ultimate-parent guidance: finance becomes contested.
July 2026, Senate defense-bill text adds AI OVERWATCH and the Chip Security Act: location checks proposed for hardware.
August 2026, Taiwan indictments: transit stays contested through forgery law.
September 23, 2026, trade truce extended to January 10: no change in reach.
September 30, 2026, Tencent-Oracle lease reported: access demand rises while access stays out of reach.
October 16, 2026, Taiwan announces a criminal control-list route: transit gains an announced criminal route.
November 10, 2026, January 3, 2027 and January 10, 2027: every channel pending on the suspension notice, the end of the 119th Congress and the truce deadline.
Evolution events and transition classes. Scheduled events get odds at the fork. Events of known type with unknown timing, such as indictments or lease disclosures, get a probability of arrival within a window. A continuation updates odds inside the game, an equilibrium migration shifts which pattern persists, and a game evolution changes the strategies or rules. An indictment or a lease disclosure starts as a payoff or information update, and only the actors’ response can move the equilibrium.
How Each Event Reads. Every event in Section III carries four entries in fixed order, so the resulting state exists before any forecast attaches to it.
Transition class.
What changes in the game, including paths opened and closed.
US positions that survive, convert or strand.
Forecasts the event resolves or opens.
Successor states. November 10 tests implementation: BIS either posts the announced suspension notice or the Affiliates Rule returns by default.
By the January 10 truce deadline, Washington extends the suspension, narrows the rule or lets it return at full scope. A BIS notice sets the operative date in each case. Congress either enacts remote-access authority by January 3 or lets it lapse, and an enacted duty may or may not take effect by the end of 2027. Both decisions fall inside one post-midterm week, so the White House can trade one against the other.
Continuation: suspension extended with no statute.
Equilibrium migration: suspension extended or rule narrowed with a statute but no duty in force, or rule narrowed with no statute.
Game evolution: full return on any legislative path, or any path with a tenant duty in force.
The ownership forecast in Section IV prints extension and narrowing together at 80%, against 20% for full return. A missed November notice carries about a third of the full-return odds, because a late notice can still restore the suspension. The January decision carries the other two thirds.
The largest state, suspension extended with no statute, carries about 40% of the outcomes. Export law stays unchanged in that state while domestic substitution continues, so legal persistence and technological change run together.
Takeaway: US firms move quarterly or by contract cycle, the rules move on legislative and negotiating clocks, and the tenant moves fastest of all.
III. Game Evolution Across Three Channels Puts a Different US Firm at Risk in Each
III.1 Hardware Puts US Vendors and Server Makers in the Caption
The hardware channel is the one enforcement reaches fully, and US vendors sit inside it. A shipped server leaves invoices and customs papers. Prosecutors convert that paper into indictments, and plaintiffs convert each indictment into a disclosure claim against the vendor.
Validation facts.
March 19, 2026: an indictment charged Super Micro co-founder Wally Liaw over about $2.5 billion in servers, and shares fell 33% the next day (Robbins Geller).
August 24, 2026: Taiwan indicted nine people over 74 B300 servers delivered to China, including Nvidia and Super Micro staff (Al Jazeera).
Every plea so far comes from individuals or a small distributor. Hao Global LLC and its owner pleaded guilty in October 2025 (Justice Department). Super Micro contractor Ting-Wei Sun pleaded guilty on October 8, 2026, while Super Micro itself remains uncharged (Reuters via GV Wire).
In an October 12 interview reported October 16, Taiwan’s economics minister said advanced chips and AI servers will join the export control list under commitments in the US-Taiwan Agreement on Reciprocal Trade. Unlicensed exports to China would then be a crime under the Foreign Trade Act, and no start date was announced (Taiwan News).
Article 5.2 of that agreement commits Taiwan to align its export controls with US rules. Lawfare’s analysis identifies two routes: adding AI chips to the Ministry of Economic Affairs list or legislating a criminal ban (Lawfare).
Super Micro’s independent investigation found no evidence that current senior management knew of the diversion scheme (Super Micro). The company also received a June grand jury subpoena from the Southern District of New York, and the Liaw trial moved to March 2027 (Fortune via edgeX).
The Senate manager’s text of the fiscal 2027 defense bill carries the AI OVERWATCH Act and the Chip Security Act (Senator Banks; AI Policy Network). AI OVERWATCH codifies license requirements for advanced chips to countries of concern. The Chip Security Act requires location verification on exported AI chips, a duty that falls on the exporter.
The House passed its defense bill 216 to 212 on July 22, while the Senate bill has not cleared the floor (Congressional Research Service). A year earlier the GAIN AI Act entered the Senate defense bill as an amendment (Nextgov). White House officials pressed lawmakers to drop it (Axios), and the final bill left it out (Bloomberg Law).
Super Micro investors plead the company’s statement that it followed all US export control requirements (Bernstein Litowitz).
Strategy for US firms. Becker’s enforcement calculus sets the expected penalty as detection probability times sanction, and both terms are rising. Defendant seniority now reaches co-founders, Taiwan is moving to criminal liability under its trade-agreement commitments and the plaintiffs’ bar converts each case into securities exposure. A vendor’s best response is early cooperation and reseller audits, because cooperation credit attaches to timely self-disclosure. The Chip Security Act text would add a location-verification duty, and in simulation that duty moves diverted shipment demand mostly to domestic chips.
First corporate-level resolution.
Transition class: a payoff and information update inside the existing game. Game evolution follows only if a new corporate enforcement regime does.
What changes: company penalties and monitors replace individual sentences. Disclosure suits and monitorships open, and the rogue-employee defense closes.
US positions: cooperating vendors survive, while vendors relying on Southeast Asian resellers strand.
Forecasts: resolves the corporate-resolution forecast and opens the new-lease forecast. A resolution also reopens the securities-suit forecast.
Taiwan criminal export liability.
Transition class: game evolution, because transit rules change.
What changes: direct export charges become available in Taiwan, and the forgery-only route closes.
US positions: US vendors with licensed Taiwan assembly survive, while unlicensed brokers strand.
Forecasts: resolves the Taiwan forecast and moves routing toward Indonesia, Japan and Hong Kong.
The TSMC China License and the Limits of Hardware Export Controls found in January 2026 that hardware controls freeze fab capability while access governance stays unbuilt. The finding explains why vendor exposure keeps rising while capability still reaches China through other channels.
Takeaway: US vendors carry the hardware channel’s full enforcement weight, and their success at compliance raises the value of every channel they do not control.
III.2 Access Puts US Cloud Hosts Between the Tenant and the Rule
The access channel is the one enforcement reaches least, and US hosts carry its exposure. Export law already reaches shipments, reexports and releases of technology, including intangible transmission (15 C.F.R. §§ 734.13–734.15). The unresolved gap is narrower: existing authority does not clearly reach remote use of controlled compute when no item ships and no technology is released.
Validation facts.
H.R. 2683 passed the House on January 12, 2026 and sits in Senate Banking. The bill can still ride the fiscal 2027 defense authorization (Congress.gov; Freshfields).
Senate bill S. 3519 names remote access for training AI models that can aid weapons of mass destruction, offensive cyber operations or rights-violating surveillance (Latham & Watkins).
Commerce is drafting a rule against rentals through Thailand and Singapore, and export counsel doubt its authority (AI Weekly).
Tencent uses most of Datasection’s 15,000 Blackwell accelerators in Japan and a planned Sydney site under three-year contracts signed through an intermediary, as the Financial Times reported in December 2025 (3DNews, citing the Financial Times).
ByteDance works with Aolani Cloud on about 36,000 B200 chips in Malaysia, and Aolani says its customers do not own the chips (The Decoder).
Tencent reportedly pays about 30% of its Oracle contract upfront (TechRepublic).
Strategy for US firms. Renting compute grants no access to United States model weights, so the tenant gains capability without touching protected models. Every workaround tool reaches the host and its chip supply: license conditions, Entity List designations and the headquarters test. A US host therefore chooses between tenant verification and United States siting. Verification favors hyperscalers, and siting favors specialists.
Scope of enactment. The House text reaches remote access that poses a serious national security risk. The Senate text names training for models that can aid weapons, offensive cyber operations or surveillance. If conferees adopt the narrower reading, enactment creates a host duty that may leave commercial frontier training outside the rule. US hosts should draft lease clauses that work under both texts.
The AI OVERWATCH text is not remote-access authority: it asks Commerce to certify that a license will not enable unauthorized remote access, and it places no duty on hosts or tenants.
January 3: authority enacted (20%).
Transition class: game evolution, because a new rule arrives.
What changes: remote access becomes a controllable export. Tenant and workload duties open, and unverified rental closes.
US positions: verified US hosts survive, while unverified leases convert or strand.
Forecasts: resolves the enactment and first-instrument forecasts and opens the restructuring forecast. Enactment also reopens the remote-access charge and host-listing forecasts.
January 3: authority lapses (80%).
Transition class: continuation, with the same game in a new Congress.
What changes: a new Congress restarts the bill, and the Commerce workaround stays the only route.
US positions: current leases survive another cycle.
Forecasts: resolves the enactment forecast, and the restructuring forecast stays closed.
Entity List action against a host.
Transition class: game evolution, because host payoffs change.
What changes: a host’s chip supply turns on its tenants. Host verification opens, and unverified hosting closes.
US positions: the listed host strands, and peers convert to verification.
Forecasts: resolves the host-listing forecast.
Tencent, Oracle, and the Remote-Access Gap in US AI Chip Export Controls mapped the authorities over rented compute and supplied the lease forecasts this section inherits. The Runtime Export Problem — Anthropic’s 151 Million-Exchange Distillation Record, Advisory AA26-251A, and the Question Commerce Cannot Yet Answer carries the model-output channel, which raises different legal issues for US AI labs.
Takeaway: a US host’s lease terms, written before January 3, decide whether a tenant rule ends the tenancy or converts it.
III.3 Finance Puts US Counterparties Next to Lessors No Rule Names
The finance channel asks who pays for restricted hardware, and US exporters and lenders sit beside the answer. BIS already evaluates ownership, end users and intermediaries, and its May 31 guidance reaches ultimate parents. The uncovered conduct is narrower: a financier can fund restricted hardware without covered ownership, beneficial use, prohibited support or another legal nexus.
Validation facts.
Semi-Tech Leasing is controlled by Shenzhen and Beijing municipal entities. The lessor financed more than 700 servers including at least 32 with B300 chips, then redacted hardware details from its filings (TFTC).
Treasury Secretary Scott Bessent announced on September 23 that the trade truce runs to January 10, 2027, and a US official said the Affiliates Rule suspension follows (Pillsbury). BIS had published no notice through October 31, when its newest published document was an October 27 denial order (BIS listing). The rule therefore returns on November 10 unless a notice issues first. Last year BIS posted the suspension for public inspection on November 10, 2025, the day it took effect (BIS notice). Washington traded the suspension for China’s rare-earth pause (Squire Patton Boggs).
BIS guidance of May 31 requires a license for entities headquartered in Country Group D:5 or owned by an ultimate parent headquartered there, wherever they sit (Greenberg Traurig).
Strategy for US firms. A full-scope Affiliates Rule turns every 50%-owned affiliate of a listed party into a licensed customer overnight. US exporters with affiliates in their customer base face the change on November 10 if BIS misses its notice and after January 10 if the truce lapses. January 10 is the announced truce deadline, not a rule date, and the legal date stays November 10 until BIS publishes a notice. A sale-leaseback lets a state lessor hold title while the operating company holds the capability, so US sellers need to trace past the customer to the financier.
Four roles in a financed server. Finance separates the financier, the legal owner, the operator and the user. The Affiliates Rule reaches owners, and the May 31 guidance reaches users headquartered in China. No current instrument reaches the financier alone. US sellers and lenders should map all four roles for each China-linked counterparty.
Finance sits mostly in the shipment channel. Rental hosts buy their own hardware, as Aolani and Oracle do for the chips their tenants use. State lessors therefore finance shipped hardware far more than rented capacity. A designation of a state financier moves a small share of demand from shipments toward rental rather than cutting both.
January 10: suspension extended or narrowed (80%).
Transition class: continuation, with the same game for another round.
What changes: the ownership test waits for another negotiating round. Affiliate structures stay open, and export policy stays tied to rare earths.
US positions: US exporters’ affiliate sales survive, and diligence programs idle.
Forecasts: resolves the Affiliates Rule forecast, and the ownership-cut forecast stays closed.
January 10: rule returns at full scope (20%).
Transition class: game evolution, because ownership rules change.
What changes: affiliates 50% owned by listed parties face Entity List restrictions. Restructuring below 50% opens, and affiliate purchasing closes.
US positions: affiliate sales convert to licenses or strand, while lessor-held deals gain relative value.
Forecasts: resolves the Affiliates Rule forecast and opens the ownership-cut forecast. Full return also reopens the financier-designation forecast.
Predictive Behavioral Economics + Dynamic Game Theory AI Simulations and Long-Horizon Investor Foresight on Courts, Regulators, Geopolitical Dynamics and Markets values offshore compute on cash flows that survive a rule change. US lenders apply the same lens to campuses whose tenants or lessors sit near the ownership line.
Takeaway: a US firm’s exposure in the finance channel turns on its customers’ owners and financiers, and November 10 and January 10 set the tests.
III.4 Demand Moves Between Channels, and US Firms Inherit the Exposure at Each Step
Closing one channel pushes demand into the next and onto a different US firm. Two hypotheses compete over what enforcement does to that demand.
Displacement hypothesis. Enforcement changes where China-parented buyers get compute more than whether they get it, and most displaced demand moves to domestic accelerators. Falsifier: no fourth China-parented offshore lease of 10,000 or more accelerators by June 30, 2027, together with a falling domestic share of China’s accelerator market.
Deterrence hypothesis. Enforcement denies the capability, and total China-parented acquisition falls. Falsifier: a fourth offshore lease by June 30, 2027 while the domestic share keeps rising. Each step below names the contrary case that would stop the displacement.
Corporate-level resolution against a vendor. Closes hardware and moves demand to domestic accelerators, with rental falling too. US vendors and hosts inherit exposure through lost demand. Contrary case: domestic supply stays short of training needs.
Remote-access authority enacted. Closes access and moves demand to domestic accelerators and diverted shipments. Few leases move to intermediaries. Exposure lands on US vendors through diversion risk and on US lenders to intermediaries. Contrary case: vendor audits keep diverted shipments blocked.
Chip Security Act location verification. Closes diverted shipments and moves demand to domestic accelerators. Exposure lands on US vendors carrying the verification duty. Contrary case: verification fails to reach resold chips.
Affiliates Rule returns at full scope. Closes affiliate ownership and moves demand to sub-50% stakes and leasebacks. Exposure lands on US exporters with lessor-held customers. Contrary case: restructuring costs exceed the rental premium.
Taiwan criminal liability. Closes transit at the assembly origin and moves routing to Indonesia, Japan and Hong Kong. Exposure lands on US vendors with secondary-route resellers. Contrary case: origin licensing reaches the secondary routes.
A fourth offshore lease disclosed. Closes no channel, because the disclosure is an information event. Migration follows only if tenants and hosts respond, and exposure then lands on US hosts in Southeast Asia. Contrary case: host verification reaches the new lease.
Financier designation. Closes finance and moves a small share of shipment demand toward rental. Exposure lands on US hosts serving China-parented tenants. Contrary case: rental capacity carries state-lessor finance.
Any US tightening. Closes all three channels and moves demand to domestic Ascend capacity. US vendors and hosts inherit exposure through lost demand. Contrary case: Ascend supply stays short of training scale.
No common financier links shipment and rental. The Semi-Tech filings raised a second mechanism: one financier funding shipped and rented hardware alike. A single designation would then cut both channels. The simulation does not support it, because hosts finance their own capacity. A designation shifts demand toward rental, while a corporate resolution cuts both foreign channels through the risk it adds for hosts.
Rental still keeps more than a quarter of tenant demand after a resolution. One large new lease within twelve months therefore stays likely, and the new-lease forecast holds at 80%.
Domestic supply absorbs most displaced demand. Chinese vendors shipped 41% of AI accelerator cards sold in China in 2025 (Reuters, IDC data), and Bernstein projects Nvidia’s share near 8% in 2026 (Yahoo Finance).
Huawei expects AI chip revenue of about $12 billion in 2026, and DeepSeek trained part of its V4 model on Ascend chips (Capacity). Beijing also blocked most licensed H200 purchases (Bloomberg Tax). Low imports reflect Beijing’s choices and domestic supply as much as US deterrence. US hosts can lose tenants to Chinese substitution even where no rule reaches them.
Domestic substitution cuts dependence on US hardware without by itself preserving equivalent training capability. Chip performance, software maturity and cluster scale decide how much capability the replacement carries.
The Runtime Global Data Market — When Stolen AI Interactions Become a Strategic Technology Supply Chain found that enforcement changes the composition of acquisition more reliably than its volume. The three conditional forecasts in Section IV test the same finding in hardware, rental and finance.
Persistence path. If no seat evolves the game through December 31, 2027, object-bound enforcement persists and US vendors remain the main defendants. The first United States instrument reaching beyond hardware would falsify the persistence path. Legal persistence still leaves room for technological change, because domestic accelerators keep gaining share in every state.
Takeaway: every closure moves the exposure to the next US firm in line, so a US firm’s strategy depends on which channel closes next.
IV. Twenty-One Snapshot Predictions Track Where US Firm Exposure Moves
Each Snapshot Prediction below opens with its number, odds and window. The falsifier, verification source and status by path follow beneath it.
IV.1 Hardware
1 · 70% · By October 31, 2027. The Justice Department or BIS announces a corporate-level resolution with a server maker, distributor or chip vendor over AI-chip diversion to China.
Falsifier: Only individuals charged through the window.
Verified by: Justice Department and BIS announcements.
Status by path: Holds in every state.
2 · 30% · By October 31, 2027. The Justice Department or BIS announces a corporate-level resolution with a major chip vendor or server maker, not only a distributor.
Falsifier: No major-vendor resolution.
Verified by: Justice Department and BIS announcements.
Status by path: Holds in every state.
3 · 70% · November 1, 2026 to June 30, 2027. At least three new federal indictments or complaints for AI-chip or server diversion to China are unsealed.
Falsifier: Two or fewer.
Verified by: Justice Department releases; federal dockets.
Status by path: Holds in every state.
4 · 80% · By June 30, 2027. Criminal liability for unlicensed export of advanced AI chips or servers to China takes effect in Taiwan, by control-list designation or statute.
Falsifier: Neither route in force by the date.
Verified by: Ministry of Economic Affairs; Legislative Yuan proceedings.
Status by path: Holds in every state.
5 · 30% · By January 3, 2027. The enacted fiscal 2027 defense bill carries Chip Security Act text requiring location verification for exported advanced AI chips.
Falsifier: Enacted text omits it, or no bill enacted.
Verified by: Congress.gov; enrolled text.
Status by path: Resolves at the January fork.
6 · 20% · By January 3, 2027. The enacted fiscal 2027 defense bill carries AI OVERWATCH Act text requiring licenses and a Commerce certification for advanced AI chip exports to countries of concern.
Falsifier: Enacted text omits it, or no bill enacted.
Verified by: Congress.gov; enrolled text.
Status by path: Resolves at the January fork.
7 · 50% · By December 31, 2027. A securities class action citing export-control compliance is filed against a listed AI hardware company other than Super Micro.
Falsifier: No such filing.
Verified by: Federal dockets.
Status by path: Holds in every state; reassessed once a corporate resolution issues.
IV.2 Access
8 · 20% enacted, 80% lapses · By January 3, 2027. Congress enacts remote-access authority over tenants or hosts in the Remote Access Security Act or equivalent defense-bill text, against lapse.
Falsifier: The 119th Congress adjourns without it.
Verified by: Congress.gov.
Status by path: Resolves at the January fork.
9 · 60% · Enacted text. If Congress enacts remote-access authority, the enacted definition of covered remote access is narrower than the House-passed text.
Falsifier: Enacted text matches the House definition.
Verified by: Enrolled text.
Status by path: Opens only if remote-access authority is enacted.
10 · 90% · By December 31, 2027. No federal criminal charge rests solely on remote access to controlled compute.
Falsifier: An indictment whose only export theory is rental.
Verified by: Justice Department releases; federal dockets.
Status by path: Holds in every state; reassessed if remote-access authority is enacted.
11 · 20% · By December 31, 2027. BIS adds at least one non-Chinese offshore data center operator to the Entity List for serving China-parented tenants.
Falsifier: No such listing.
Verified by: BIS Entity List notices.
Status by path: Holds in every state; reassessed if remote-access authority is enacted.
Definitions. A license condition that Commerce certifies, as in the AI OVERWATCH text, does not count as remote-access authority. Chip location verification counts as a hardware control and does not resolve the first-instrument forecast.
Inherited forecast. The Tencent-Oracle paper’s Simulation Prediction on enforcement against the lease stands on its own terms and is cited, not reissued: no public BIS letter or license condition stops the Tencent-Oracle service by October 31, 2027 (97–99%).
IV.3 Finance
12 · 80% · By November 10, 2026. BIS posts a notice for public inspection extending or modifying the Affiliates Rule suspension.
Falsifier: No notice posted by November 10.
Verified by: BIS public-inspection notices.
Status by path: Resolves before the January window.
13 · 80% extended or narrowed, 20% full return · By January 10, 2027. Washington extends the Affiliates Rule suspension past the truce or narrows the rule, against full return.
Falsifier: Full reinstatement with no new notice.
Verified by: BIS notices.
Status by path: Resolves at the January 10 truce date.
14 · 70% · By June 30, 2027. A congressional letter, hearing transcript or bill text names PRC lease financing of controlled AI hardware.
Falsifier: No such reference.
Verified by: Congress.gov; committee releases.
Status by path: Holds in every state.
15 · 20% · By December 31, 2027. BIS or Treasury designates a PRC financial lessor or state-capital vehicle for financing controlled AI hardware.
Falsifier: No such designation.
Verified by: BIS notices; Treasury sanctions lists.
Status by path: Holds in every state; reassessed if the Affiliates Rule returns at full scope.
16 · 40% · By December 31, 2027. The consolidated Super Micro securities action survives a motion to dismiss at least in part.
Falsifier: Dismissal in full, or no ruling by the date.
Verified by: Northern District of California docket.
Status by path: Holds in every state.
IV.4 Cross-Channel
17 · 70% · By December 31, 2027. The first new United States instrument reaching beyond hardware issues: a remote-access statute or rule, a host listing citing tenants or a financier designation.
Falsifier: None of the three issues.
Verified by: Congress.gov; BIS and Treasury notices.
Status by path: Resolves true if remote-access authority is enacted; holds elsewhere.
18 · 70% · By June 30, 2027. A fourth China-parented tenant’s offshore lease of at least 10,000 accelerators is reported after Tencent-Datasection, ByteDance-Aolani and Tencent-Oracle.
Falsifier: No such report.
Verified by: Company filings or two independent major outlets.
Status by path: Holds in every state.
19 · 80% · 12 months after the resolution. If a corporate resolution issues, a China-parented tenant’s new offshore lease of at least 10,000 accelerators is reported.
Falsifier: No such lease in the window.
Verified by: As for the fourth-lease forecast.
Status by path: Opens once a corporate resolution issues, on any path.
20 · 20% · 12 months after enactment. If remote-access authority is enacted, a China-parented offshore lease is reported restructured through a non-China-headquartered intermediary or financier.
Falsifier: No reported restructuring.
Verified by: As for the fourth-lease forecast.
Status by path: Opens only if remote-access authority is enacted.
21 · 60% · Six months after the rule returns. If the Affiliates Rule returns at full scope, a China-linked AI hardware customer or host reports an ownership reduction below 50%.
Falsifier: No reported reduction.
Verified by: Company filings.
Status by path: Opens only if the Affiliates Rule returns at full scope.
Takeaway: the forecasts follow US firm exposure from vendors to hosts to lenders, and each one names the paths on which it holds.
V. Opportunity Concentrates in US Firms That Verify Before the Rules Require It
Each move below raises a US firm’s position on at least one path and names the forecast behind it.
Chip vendors and server makers. Early cooperation earns credit and shortens any monitorship on any path with a corporate resolution. Supporting forecasts: corporate resolution and new securities suit.
Chip vendors and server makers. Licensed Taiwan assembly becomes the compliant supply route once Taiwan criminal liability takes effect. Supporting forecast: Taiwan criminal liability.
Hyperscalers and cloud hosts. Audited compute for restricted-jurisdiction tenants becomes a sellable service if remote-access authority is enacted, and in part if the Affiliates Rule returns. Supporting forecasts: enactment and first instrument beyond hardware.
US-sited specialists. Capacity sited in the United States avoids tenant-rule conversion costs if remote-access authority is enacted. Supporting forecasts: enactment and lease restructuring.
Lenders and lessors. Credit terms keyed to tenant eligibility attract borrowers who need certainty on every path. Supporting forecasts: enactment and the Affiliates Rule decision.
Counsel to US firms. Ownership diligence and lease amendments become recurring mandates if the Affiliates Rule returns or remote-access authority is enacted. Supporting forecasts: Affiliates Rule decision, ownership cut and lease restructuring.
Opportunity by path. If the suspension continues and remote-access authority lapses, the game holds and verified firms gain little immediate edge but carry no conversion cost later. If the Affiliates Rule returns or Congress enacts remote-access authority, verified firms keep tenants and customers while unverified competitors strand. Verification therefore wins on two paths, and on the other two it costs compliance work and some ineligible customers now rather than forced conversion later.
Takeaway: verification of tenants and beneficial owners is the one move that pays on the paths where the game evolves, and where the game holds it trades compliance cost for protection against forced conversion.
VI. Risk Concentrates in US Firms That Wait for a Ruling
Each US firm’s exposure prints in units it controls, with owners, deadlines and residual exposure. Severity and probability print on separate axes.
Chip vendors and server makers
Exposure: revenue through Southeast Asian and Taiwanese resellers.
Severity: high, from indictment, disclosure suit and monitor.
Probability: 70% for new cases.
Actions: audit top resellers (general counsel, by year-end). Test compliance statements against what the firm knows (disclosure committee, before the next annual report). Scope location-verification readiness (product engineering, by January 3).
Residual exposure: prior-period statements already filed.
Hyperscalers and cloud hosts
Exposure: offshore leases to China-parented tenants.
Severity: high if remote-access authority is enacted, through conversion or termination.
Probability: 20% for enactment.
Actions: add transition, suspension and workload-visibility clauses (host legal, by January 3). Build tenant verification (product and compliance, by the first quarter of 2027).
Residual exposure: tenants who refuse amendment.
Hosts in Southeast Asia
Exposure: chip supply tied to the tenant base.
Severity: severe, because a listing cuts supply.
Probability: 20% for a host listing.
Actions: document tenant eligibility (compliance, by year-end 2026). Diversify the tenant mix (commercial, by mid-2027).
Residual exposure: legacy tenants under long terms.
US exporters with China-linked customers
Exposure: affiliates of listed parties in the customer base.
Severity: medium to high if the Affiliates Rule returns at full scope.
Probability: 20% for full return.
Actions: map ownership to 50% (trade compliance, before November 10). Prepare a voluntary self-disclosure decision under 15 C.F.R. § 764.5 (general counsel, before November 10).
Residual exposure: undisclosed beneficial owners.
Lenders and lessors
Exposure: campus cash flows dependent on China-parented tenants.
Severity: medium, through covenant and refinancing pressure.
Probability: 20% for enactment and 70% for a fourth lease.
Actions: key covenants to tenant eligibility (credit, at the next amendment). Stress-test tenant loss (risk, by January 3).
Residual exposure: concentration in one tenant.
Listed AI hardware companies
Exposure: securities exposure from channel-partner cases.
Severity: high after any corporate resolution.
Probability: 50% for a new class action.
Actions: board-level export compliance reporting (audit committee, by the end of March 2027).
Residual exposure: statements made before the reporting began.
Takeaway: the deadlines that govern US firm risk are November 10, January 3 and January 10, and residual exposure never falls to zero for firms that act after them.
VII. The Synthesis Calls for Commissioned Snapshots Now and a Reissue After January 10
Enforcement reaches what it can prove, and US firms sit at every point it can prove. The dominant decision window runs from January 3 to January 10, 2027, when the 119th Congress ends and the trade truce expires.
November 10 comes first as an implementation test for the Affiliates Rule notice. Legal persistence and technological change run together: the largest state leaves export law unchanged while domestic accelerators carry most displaced demand.
Simulation readiness. The January window replaces the game inside most clients’ planning horizons, so a published Snapshot cannot stand in for a firm-specific run. The synthesis calls for a commissioned Snapshot with an ownership-diligence overlay now and a reissue after January 10.
Conversion path. Each channel runs as a Snapshot while its rules evolve and converts to a Foresight Simulation once a named event resolves them.
Hardware converts once Taiwan criminal liability is in force and the first corporate resolution issues, as early as the first half of 2027.
Finance converts when January 10 resolves with no new suspension inside the window, first if the rule returns at full scope.
Access converts once authority is enacted and an implementing rule takes effect, so only after an enactment on January 3.
Cross-channel converts last, once at least two channels have converted.
What to watch. The January 3 to 10 week is the dominant fork, and November 10 is the first test.
By November 10, 2026: BIS posts the Affiliates Rule suspension notice. Moves the notice forecast and the ownership fork.
Conference report, date not set: defense-bill text on AI OVERWATCH and the Chip Security Act. Resolves both defense-bill forecasts.
January 3, 2027: the 119th Congress ends. Resolves the remote-access fork and both defense-bill forecasts.
January 10, 2027: the truce deadline. Resolves the Affiliates Rule fork.
Undated: location of Moonshot’s reported 20,000-GPU arrangement with Alibaba Cloud (DCD, citing Bloomberg). Moves the fourth-lease forecast if confirmed offshore.
March 2027, as reported: the Liaw trial in the Southern District of New York. Moves the corporate-resolution forecasts.
June 30, 2027: windows close for Taiwan liability, diversion cases, PRC lease financing and a fourth lease.
October 31 and December 31, 2027: windows close for the remaining eight forecasts.
War game handoff. The Interactive AI Chip Export Enforcement War Game reuses the seats, board and odds in this Snapshot and adds no new odds. A US firm’s counsel plays the firm’s own seat through both forks. The inject deck holds five events: corporate resolution, Taiwan listing and host listing, plus a new lease disclosure and a financier designation.
Working with MindCast
A published Snapshot cannot model a US firm’s own contracts, ownership chains or tenant base. A commissioned Snapshot reruns the seven seats against those documents under a non-disclosure agreement within five to seven business days. Contact mcai@mindcast-ai.com. Visit our Corporate Site at https://www.mindcast-ai-simulation.com.
A commissioned Snapshot with an ownership overlay shows which customers fall under a returned Affiliates Rule. A lease overlay tests whether offshore leases survive a tenant rule. A war game session plays the firm’s own seat through both forks, and a conversion review runs at each channel’s trigger.
Takeaway: US firms that verify before November 10 keep their customers through the forks, and the Snapshot reissues on the surviving path.
Appendix A: Selected MindCast Works
Frameworks and methods
MindCast Foresight Prediction Simulations, Synthesizing Behavioral Economics + Game Theory. States the simulation method used here.
OpenAI Liability War Game — When AI Safety Controls Reduce Exposure and When They Become Evidence. Provides the war game format Section VII hands off to.
Companion works
AI Chip Export Enforcement War Game Shows When Verification Protects US Firms and When It Arrives Too Late. Replays six dated turns and tests five alternative moves against the board this Snapshot sets.
AI Chip Export Enforcement War Game Executive Presentation. Condenses the war game into a briefing for executives and counsel.
Interactive AI Chip Export Enforcement War Game. Lets a reader play a US firm’s seat through the forks without changing any Snapshot odds.
Prior simulations and validations
The Beijing Summit Validation — Geopolitical Ripples for the AI Industry Across the Three-Layer Equilibrium. Validated the H200 delivery forecast and the two-gate model.
China’s H200 Import Block and the Reordering of National Innovation Control. Forecast Beijing’s H200 block and introduced the two-gate model.
The TSMC China License and the Limits of Hardware Export Controls. Found the gap between hardware controls and access governance that Section III.1 measures.
Tencent, Oracle, and the Remote-Access Gap in US AI Chip Export Controls. Supplies the lease forecasts and the enforcement forecast that Section III.2 inherits.
Predictive Behavioral Economics + Dynamic Game Theory AI Simulations and Long-Horizon Investor Foresight on Courts, Regulators, Geopolitical Dynamics and Markets. Supplies the cash-flow lens Section III.3 applies to US lenders.
Related analysis
The Runtime Export Problem — Anthropic’s 151 Million-Exchange Distillation Record, Advisory AA26-251A, and the Question Commerce Cannot Yet Answer. Carries the model-output channel that Section III.2 keeps distinct.
The Runtime Global Data Market — When Stolen AI Interactions Become a Strategic Technology Supply Chain. Supplies the composition-over-volume finding Section III.4 extends.
Appendix B: External Sources
Bloomberg Law, Man Charged With Illegally Shipping Nvidia Chips to China, October 2, 2026. Supplies the Earthmade arrest that opens the paper.
Network World, Oracle reportedly lands $7B GPU deal for Tencent, October 9, 2026, following the Financial Times report. Reports the Tencent-Oracle lease behind the access channel.
TFTC, Chinese State Financing Linked to Nvidia Blackwell Chips in Restricted Data Centers, October 2026. Documents Semi-Tech Leasing’s financing of restricted servers.
TechRepublic, Tencent Reportedly Turns to Southeast Asia for $7B Oracle AI Chip Deal, October 2, 2026. Supplies the upfront payment term in the Tencent-Oracle contract.
Robbins Geller, Super Micro Computer, Inc. Class Action Lawsuit, 2026. Supplies the Liaw indictment and the share decline.
Bernstein Litowitz Berger & Grossmann, City of Hialeah Employees’ Retirement System v. Super Micro Computer, Inc., April 8, 2026. Quotes the compliance statement that investors plead.
Al Jazeera, Nvidia, Supermicro employees charged over export of AI servers to China, August 25, 2026. Reports Taiwan’s August indictments.
Bloomberg Tax, Nvidia Steps Back Into China Market With First H200 Chip Sales, August 26, 2026. Supplies the H200 revenue share and Beijing’s purchase block.
Latham & Watkins, What the Remote Access Security Act Means for Export Controls Compliance Programs, 2026. Describes the Senate remote-access text.
Capacity, Huawei targets jump in AI chip revenue, 2026. Supplies Huawei’s revenue outlook and DeepSeek’s Ascend training.
Justice Department, U.S. Authorities Shut Down Major China-Linked AI Tech Smuggling Network, December 8, 2025. Reports the Hao Global plea.
Reuters via GV Wire, Super Micro Contractor Pleads Guilty in Scheme to Divert AI Servers With Nvidia Chips to China, October 10, 2026. Reports the Ting-Wei Sun plea and Super Micro’s uncharged status.
Taiwan News, report on the economics minister’s plan to add advanced semiconductors and AI servers to Taiwan’s export control list, October 2026. Reports the minister’s control-list plan.
3DNews, report on Tencent’s use of Datasection’s Blackwell capacity, citing the Financial Times, December 22, 2025. Reports the first of the three earlier offshore leases.
DatacenterDynamics, AI lab Moonshot leases 20,000 Nvidia GPUs from Alibaba Cloud: report, 2026. Reports the Moonshot arrangement on the watch list.
The Decoder, Bytedance secures access to Nvidia Blackwell cluster in Malaysia, circumventing US export ban on China, March 2026. Reports the ByteDance-Aolani lease in Malaysia.
Reuters via Yahoo Finance, Chinese chipmakers claim nearly half of local market as Nvidia’s lead shrinks, April 1, 2026. Supplies the domestic share of China’s accelerator market.
Yahoo Finance, report on Nvidia’s falling share of China’s AI chip market, citing Bernstein, 2026. Supplies Bernstein’s projection of Nvidia’s China share.
William Yuen Yee, The U.S.-Taiwan ART’s Export Control Puzzle, Lawfare, October 27, 2026. Analyzes Article 5.2 and Taiwan’s two routes.
Congress.gov, H.R. 2683, Remote Access Security Act, 119th Congress. Primary bill text and House passage of remote-access authority.
Freshfields, Remote Access or Remote Possibility? RASA and the Future of Cloud Export Controls, 2026. Explains how the bill could ride the defense authorization.
AI Weekly, Commerce drafts rule to shut China’s remote AI-chip access, 2026. Reports the Commerce remote-access draft.
Pillsbury, BIS Affiliates Rule, updated October 22, 2026. Ties the suspension to the truce extension.
BIS document listing, checked October 31, 2026. Shows no notice on the suspension through October 31.
Federal Register, One-Year Suspension of Expansion of End-User Controls for Affiliates of Certain Listed Entities, 90 FR 50857, public inspection November 10, 2025. Primary notice for last year’s suspension and its timing.
Super Micro, Supermicro Announces Completion of Independent Investigation and Continued Enhancement of Export Compliance Program, August 20, 2026. Primary release of the investigation findings.
Fortune via edgeX, Supermicro says board probe found no evidence senior management knew of alleged $2.5 billion Nvidia chip smuggling scheme, August 20, 2026. Reports the subpoena and the moved trial date.
Senator Jim Banks, Banks Secures AI OVERWATCH Act in Senate NDAA, July 14, 2026. Primary statement on the AI OVERWATCH text in the Senate bill.
AI Policy Network, letter to FY27 NDAA conferees, August 31, 2026. Lists the chip provisions before conferees.
Congressional Research Service, FY2027 NDAA: Status of Legislative Activity, IN12704, July 2026. Primary status of both defense bills.
Nextgov, Bill prioritizing American customers for AI chips not expected to make it into final NDAA, sources say, December 3, 2025. Confirms the GAIN AI Act entered the Senate defense bill as an amendment.
Axios, Scoop: White House moves to block bill restricting AI chip exports, November 19, 2025. Reports White House pressure to drop the GAIN AI Act.
Bloomberg Law, Nvidia Scores Lobbying Win as Congress Rejects Chip Export Bill, December 3, 2025. Reports the GAIN AI Act’s exclusion from the final bill.
Squire Patton Boggs, BIS Issues One-Year Suspension of Affiliates Rule Expansion, November 2025. Links the suspension to the rare-earth pause.
Greenberg Traurig, Enforcement Pause Has Limits: BIS Clarifies Ongoing License Requirement for Advanced Computing Items to China-Linked Entities, June 2026. Explains the May 31 ultimate-parent guidance
