Skip to newsletter content
Will Lassalle
The Governance Gap

Issue #10

The Geopolitical Weaponization of AI Access

The sudden federal suspension of frontier AI access proves that your technology stack isn’t just vulnerable to hackers—it’s vulnerable to geopolitical shockwaves.

Editor's note — September 12, 2026: Removed an unverified breaking-news export-control claim and the assertion that multi-model redundancy is universally mandatory.

The take

Model access is a supplier dependency. A provider outage, product change, contractual restriction or applicable export control can disrupt an AI-dependent workflow.

My recommendation is to map that dependency before treating a model as critical infrastructure. An SLA does not address every contractual or legal constraint.

Choose recovery proportionate to the workflow

  • Identify which services stop if the model is unavailable.
  • Define acceptable downtime and a human or non-AI fallback.
  • Test an alternate provider only where the value justifies integration, evaluation and ownership costs.
  • Ask counsel to assess the actual jurisdictions, users and restrictions involved.

Multiple providers are an architectural option, not a universal legal requirement. A simpler manual fallback may be more reliable for a low-volume process. What matters is a recovery plan that management has exercised.

Source and further reading: Primary reference. Framework guidance is not a statement that a particular law applies to every organization.