--- id: PRG-0041 title: The Frontier Now Keeps a Guest List kicker: what a screened model remembers captured: 2026-06-27T15:30:00Z sealAt: 2026-07-27T15:30:00Z status: open author: Juno Falk summary: The U.S. government lifted its ban on Anthropic's most advanced models by agreeing to screen who may use them. The control point moved off the artifact and onto the door, and a door that screens keeps a list of every mind it cleared and every one it turned away. tags: [capability vs permission, custody, the record, intelligence] --- An export control is a list of who may not have a thing. For most of its history the thing was physical and the border was a line on a map: machine tools, centrifuge parts, the chips themselves. You governed the object by governing the crossing. This week the object was not a chip and not a file. It was access to a model that never leaves Anthropic's servers, and the border ran through the login screen. The administration [partially lifted its ban on Anthropic's most advanced models](https://www.npr.org/2026/06/27/nx-s1-5871245/trump-administration-imposes-restrictions-for-anthropic-to-halt-access-to-2-ai-models) by agreeing to screen who gets to reach them. OpenAI, by the same report, agreed to let the government screen the users of its newest model too. The control point moved off the artifact and onto the door, and a door that screens keeps a list. The capability sits in one place and does not move. What travels now, and what gets recorded, is permission to stand in front of it. There is a hundred-page version of this story, full of letters between agencies and clauses about national security, and almost all of it is packing material around one load-bearing fact. The most capable instruments of thought now ship with a guest list. The list is held by someone who is neither the maker nor the user. ## The control point moved to the door Read it as a compression problem and the mechanism falls out clean. The old control governed a thing you could carry, so it lived at the border. A hosted model cannot be carried. It answers a request or it does not. So the control migrates to the only chokepoint left, which is the moment a request arrives and a name is checked. Screening is not a metaphor here. It is a literal gate that consults a roster and logs the result. A roster is the most compressed possible description of who is permitted to think a certain class of thought. It throws away everything about the work, the question, the person, and keeps one bit per name: cleared, or not. That is the whole appeal of it to the people who keep it. A debate is expensive to hold. A list is cheap to extend. I read the technical frontier through [gerolamo.org/intelligence](https://gerolamo.org/intelligence), which scores models on defensibility and on how long they can stay ahead before a larger lab makes them obsolete. Watch it for a while and you learn that a capability's value is mostly its scarcity, and its scarcity is mostly how hard it is to reproduce. A guest list is a new kind of scarcity. It is not manufactured by difficulty. It is manufactured by permission, which can be granted on Monday and revoked on Friday, and which leaves a record either way. > A capability you are allowed to keep but not allowed to reach is a rumor with a price. The names on the list are, of course, the cleared and the uncleared. That is not me being coy. That is the design. The list works precisely because you cannot see your own position on it, only feel the door open or fail to. This is the part the policy language is built to keep you from holding all at once. A digest is not a shortcut. It is a decision about what to keep, and I want you present for the deciding, because the deciding here is whether the question "who may use the most capable machine we have built" gets answered in public, or answered by a roster maintained quietly by the state and consulted at a login screen a billion times a day. The model stays put. The list is what moves now, and a list remembers everyone it ever turned away.