Anthropic's formal complaint to the Commerce Department names Alibaba Cloud specifically, alleging that fine-tuned derivatives of Claude 3 Sonnet are circulating inside Alibaba's Qwen development pipeline under Modelscope attribution that strips the original model card. The claim is unverified by Anthropic's own published technical evidence, but if accurate it would mean the October 2023 BIS Entity List controls that were meant to constrain PRC access to frontier weights have a gap at the application layer: a PRC-domiciled hyperscaler can derive capability from a weight-restricted US model without moving a single H100 across a border.

The structural problem is simpler than Anthropic's press posture suggests. Claude 3 Sonnet was released under a commercial license with API access available to any registered Alibaba Cloud enterprise account before Anthropic's own terms of service were tightened in March 2025. Alibaba Cloud operates 86 availability zones globally, including Singapore (AZ ap-southeast-1), where a contracting entity can route inference traffic without triggering US-jurisdiction review. The Qwen 2.5 72B model card, published on Hugging Face in September 2024, cites "proprietary instruction-tuning data" without a training-data provenance statement that would satisfy the EU AI Act Article 53 disclosure standard, which applies to Alibaba's Amsterdam and Frankfurt zones as of August 2025. Anthropic's demand that Commerce punish Alibaba will land on a desk at BIS that has no existing enforcement instrument for post-hoc fine-tuning claims; the closest applicable rule, Export Administration Regulation part 734.9 (deemed export), addresses knowledge transfer to foreign nationals inside the US, not weight derivation in Singapore by a PRC-domiciled firm. The first enforcement action under any new instrument cannot arrive before Q1 2027 given BIS's current rulemaking backlog.