Washington notices the chips don't need to cross a border to leave

Three years into a chip export regime built almost entirely around physical shipments, Washington has finally addressed a gap that anyone renting a GPU cluster could have spotted immediately. On 17 December, Senators Dave McCormick and Ron Wyden introduced the Remote Access Security Act, which amends the Export Control Reform Act of 2018 to extend existing export controls to the remote access of controlled U.S. technology through cloud infrastructure. The mechanism it targets is simple: a restricted entity never needs to import an Nvidia chip if it can simply log into a cloud instance in Virginia and rent the compute by the hour.

Every rule written since 2022 has assumed controls travel with the silicon. Licence requirements, entity lists, foreign direct product rules — all of it presumes a chip physically moving across a border is the point of intervention. Cloud access breaks that assumption cleanly. A foreign lab can train a frontier model on American infrastructure without a single restricted part ever leaving the country, which makes the existing toolkit almost beside the point for anyone sophisticated enough to route around it.

The bill’s premise is that the border was never really the border — the login screen was.

Whether it goes anywhere is a separate question. The bipartisan sponsorship is notable given how partisan chip policy has otherwise become, but writing a workable statute around “remote access” is harder than writing one around physical export, since it requires defining what counts as controlled access, distinguishing routine cloud computing from compute-as-export, and building enforcement against providers who may not know their customer’s ultimate use case. The administration’s own recent posture — permitting H20 sales to China in exchange for a negotiated cut of the revenue, an arrangement outside standard export-licensing practice, plus loosening Gulf caps — suggests appetite for tightening the compute channel is not universally shared inside the executive branch, even as some in Congress worry the physical controls they spent years building are already leaking.