When a federal contractor builds a custom application on a foundation model, the working assumption is that the legal risk sits with the weights. That assumption expired this week. Between October 15 and October 20, three governance regimes reached the same layer at once: not the model files themselves, but the implementations deployers build on top of them.
The most immediate pressure comes from the Department of Homeland Security. Published October 20 in the Federal Register (FR Doc 2026-21447, filed October 19), the Secretary of Homeland Security’s order does two things under the Federal Acquisition Supply Chain Security Act of 2018. It excludes IT products and services developed by Hangzhou DeepSeek Artificial Intelligence Co. and its affiliates from federal civilian agency procurements. And it orders the removal of all DeepSeek products, plus “third-party products and services developed using DeepSeek implementations,” from civilian agency information technology. The part that gets hidden is that second clause. The order does not stop at the vendor’s own catalog. It follows the model into anything a third party built on it.
For the integrators and agencies holding those products, the clock is real. The notice’s machine-readable text carries the operative scope; the accompanying signed order sets the compliance window, reported at 60 days to complete removal or file an exception request. Fine-tuning or distillation does not insulate a product. If the foundation is covered, the implementation is covered. And it lands the same week DeepSeek monetized its agent retrieval layer at $0.75 per 1,000 calls: commercial expansion into a closing perimeter. Beijing is building the mirror image. On October 16, China’s Ministry of Commerce and Ministry of Science and Technology issued Announcement No. 48, proposing to add 40 technologies to the Catalogue of Technologies Prohibited or Restricted from Export, 23 of them in the AI stack. The registration requirement is already live: cross-border technology transfers, IP licensing, and changes of ownership to overseas entities must be registered before they close, with transactions already underway but incomplete pulled into scope. Our earlier analysis framed the proposal as a bidirectional squeeze on the agent infrastructure stack. What matters for deployers is where the draft stops. Technologies already in the public domain through open-source releases are exempt. API and SaaS access is exempt. The regime reaches what you transfer and what you own, not what you consume.
The third regime needs no legislature. Four labs have converged on the same number in their private terms: $20 million. StepFun’s Model License 1.0 gates Model-as-a-Service operations above $20M in combined revenue over any consecutive 12-month period, and gates hardware embedding outright. Meta’s Muse Model License applies the same $20M over 12 months. Kimi K3 sets $20M in annual MaaS revenue. Mistral’s Modified MIT terms trigger at $20M in monthly revenue, a clock that catches volatile businesses faster than a rolling aggregate. As our licensing coverage has tracked, the number is the same and the clocks are not. What matters here is the reach. These licenses define Derivative Works to include fine-tuned, distilled, merged, and quantized versions. The terms follow the model into the deployer’s own code.
Three regimes, three authors, one target. A federal exclusion that reaches third-party implementations. An export regime that reaches cross-border transfers and ownership. A contract layer that reaches commercial scale and derivative builds. The open-weights era was supposed to move power toward whoever could run the model. What arrived instead is a compliance map with three columns, and the deployer is standing in all three. Government contracts can be invalidated by the provenance of a base model. Cross-border deals can be frozen by a registration step that did not exist on Monday. Revenue growth can trigger a license negotiation that was never on the roadmap. The weights were the easy part. The implementation is where the accounting now lives.