Two dozen companies and organisations signed an open letter urging US policymakers to protect open-weight AI models.
The letter, published today (PDF), carries signatures from a list that spans direct commercial rivals and organisations with little obvious overlap in business model: Meta, Microsoft, Nvidia, IBM, Dell Technologies, CrowdStrike, Palantir, ServiceNow, Hugging Face, Perplexity, Mistral, Andreessen Horowitz, Y Combinator, the Linux Foundation, Mozilla and others.
The letter’s argument centres on a comparison between the open-source software movement of the 1980s and the current fight over whether AI model weights should circulate freely or stay locked behind commercial APIs.
Open-weight models are AI systems where the trained parameters get published for anyone to download, inspect, modify and run on their own hardware. That’s distinct from closed models like the frontier products offered by OpenAI or Anthropic through API access only, where the underlying weights never leave the vendor’s infrastructure.
The signatories frame open weights as the mechanism by which AI capability spreads beyond a handful of well-capitalised labs into what the letter calls the workflows of “factories, hospitals, farms, classrooms, and main street businesses.”
Their argument runs on three tracks:
The security argument runs against instinct
The letter’s most pointed section addresses the risk case directly, and it’s worth reading closely because it inverts the usual framing around open models and security.
Once weights are released, the letter concedes, they’re beyond the original developer’s control. Modified versions become difficult to trace or reverse. A fine-tuned or stripped-down version of an open model can circulate with safety guardrails removed, and there’s no recall mechanism.
The signatories argue the answer isn’t prohibition. Their case rests on a comparison to cybersecurity: defenders facing AI-equipped attackers need access to models with comparable capability to detect and simulate threats, which closed, permission-gated systems don’t easily provide.
They extend this into a broader security claim, arguing that closed models aren’t inherently safer because they can be breached, misused, or fail in ways external researchers can’t observe or verify. Concentrating advanced capability behind a small number of closed providers, in this reading, creates single points of failure rather than removing them.
Open models, by contrast, let outside researchers examine behaviour, run red-team exercises, and identify vulnerabilities across many teams rather than relying on one vendor’s internal testing.
The letter draws a direct parallel to the “open-source is more secure than obscurity” argument that shaped decades of software security debate, though it doesn’t cite specific vulnerability-discovery data or incident figures to support the claim as applied to AI systems specifically.
Distillation gets a specific defence
The letter carves out space for one technique that’s become contentious in AI circles: distillation, where one model’s outputs get used to train or improve a second model. This is standard practice in machine learning research and product development, used for evaluation, validation, and capability transfer between models of different sizes.
The signatories draw a line between distillation as a legitimate technique and what they call “unlawful efforts to extract value from closed models,” arguing the former shouldn’t get swept up in restrictions aimed at the latter.
This reads as a direct response to disputes that flared after the rise of Chinese models like DeepSeek and Kimi, when several US labs suggested rival models had been trained by distilling outputs from their own closed systems without authorisation.
The letter’s position: address misappropriation through targeted legal and commercial mechanisms, not blanket restrictions on a technique the entire field depends on.
What this signals for the policy fight ahead
The letter arrives without a specific legislative or regulatory proposal attached. It’s a positioning document ahead of anticipated action on AI policy in Washington, calling on lawmakers to expand compute access for startups and researchers, fund shared training datasets and evaluation frameworks, and avoid what it calls “premature restrictions” on open models.
This should be treated less as a settled policy outcome and more as an indicator of where major infrastructure and chip providers want the regulatory conversation to land. Players like Nvidia, IBM, and Dell have direct commercial reasons to want open-weight ecosystems to flourish since a wider range of deployable models sells more compute and services regardless of which lab produced the weights.
Procurement teams weighing open-weight versus closed-model deployments should factor in that the policy environment favouring one approach over the other remains unresolved, and any restrictions on distillation or open releases could shift the economics of self-hosted AI within a single legislative cycle.
See also: OpenAI pushes ChatGPT into patient health records
Want to learn more about AI and big data from industry leaders? Check out AI & Big Data Expo taking place in Amsterdam, California, and London. The comprehensive event is part of TechEx and is co-located with other leading technology events including the Cyber Security & Cloud Expo. Click here for more information.
AI News is powered by TechForge Media. Explore other upcoming enterprise technology events and webinars here.
