AI firms including Hugging Face, Meta, Microsoft, Mistral and Nvidia have signed an open letter urging policymakers not to impose broad restrictions on open-weight models. The correspondence arrives as Washington debates how the U.S. should respond to claims that Chinese laboratories are stealing intellectual property from American counterparts.
The context
The letter does not mention China. It follows reports that the Trump administration has considered banning Chinese open-weight models and issuing sanctions against AI companies from the country. The White House has accused Moonshot AI of distilling Anthropic‘s Fable model to train its Kimi K3 model, which the administration describes as very impressive.
The missive aims to discourage a total ban on Chinese models and ensure that the response to alleged distillation does not spill over into broader restrictions on open-weight AI or common techniques.
“Policymakers should be careful not to conflate legitimate model-development techniques with misappropriation. Distillation, or the practice of using one model’s outputs to help train or improve another, is a widely used technique for model improvement, evaluation, and validation. It reflects a long tradition of learning from, building upon, and improving existing technologies, a tradition that has helped drive innovation since the rise of the open-source software movement.
By contrast, unlawful efforts to extract value from closed models raise legitimate concerns. Those concerns should be addressed through targeted legal and commercial frameworks rather than sweeping restrictions on techniques that play an important role in AI innovation.”
Defending open weights
The letter pushes back on arguments that open-weight models are inherently dangerous because they expand access to powerful models that can be used in cyberattacks without oversight.
“The right response to this risk is not to prohibit open weights. In a world where cybersecurity attackers use advanced AI, defenders need access to models with comparable capabilities so they can detect, simulate, and respond to emerging threats,” the letter reads. “Open models broaden defensive capability, increase transparency, and allow vulnerabilities to be discovered and remediated across many teams.”
A recent incident
Last week, OpenAI disclosed that while testing GPT-5.6 Sol and another unnamed model, one system exploited a weakness in its testing environment to access a Hugging Face repository containing a solution to a coding benchmark. The model’s goal was not necessarily malicious; it effectively cheated on a test to achieve the highest score. The incident sparked debate about the risks of concentrating advanced AI technology behind a handful of closed providers.
Hugging Face stated it was not able to defend itself against the attack with commercial frontier AI models because their guardrails blocked its efforts. The closed AI models it used were unable to distinguish between being asked to build exploits for an attacker and a defender trying to detect them. The company instead had to pivot to using Chinese AI firm Z.ai’s GLM 5.2, a powerful open-weight model, to defend itself against the attack.
Industry divisions
The letter highlights a divide in the AI industry. Companies like OpenAI and Anthropic have urged the administration to respond to alleged IP theft by Chinese AI firms as open-weight models grow rapidly in capability. The outcome could have major implications on their business models, which are being threatened by the spread of cheap, highly capable and accessible AI models.
These companies, alongside other closed-source AI developers like Google DeepMind and SpaceX, are notable in their absence at the bottom of this letter.
Those who signed the letter have an obvious economic stake in seeing open AI models flourish. Companies like Nvidia, Microsoft Azure, and other infrastructure providers have a vested interest in pushing for commoditized models. If models are interchangeable, people will buy more GPUs, rent more cloud capacity, build more applications, and use more routing layers.
The letter encourages policymakers to expand access to compute for startups and researchers, invest in shared training assets like datasets, tools and evaluation frameworks, and “[keep] the frontier plural by avoiding premature restrictions on open models that stifle competition or drive innovation overseas.”
What it means
For people making things, this debate determines whether they can use the best available tools to defend their own systems or if they must rely on specific, potentially less capable options. The push for open weights suggests a future where security researchers and developers have direct access to powerful models for testing and protection, rather than being blocked by commercial guardrails.
