On October 15, a Vietnamese state-owned tanker, the PVT Azura, departed St. Petersburg with 109,000 barrels of Russian diesel. It is due at Norfolk on November 2, at a facility that the shipping journal gCaptain reports serves the American military, a detail no official has confirmed. It will be the first Russian diesel to reach an American port since 2023. On October 23, Russia's deputy prime minister said three tankers were at sea, that supply contracts were being finalized, and that volumes would rise to 1 million tons in December and could reach 3 million a month. A week earlier, the United States had waived, by executive order, the duties Congress had required to punish Russia's energy customers. Within a week, the waiver became a contract.

Azura's cargo is about 40 minutes of American diesel demand; 3 million tons a month would be a fifth of it, and roughly four times what Russia exported in the third quarter. To deliver that, Russia must repair the refineries Ukraine has spent a year destroying, which Rosneft now says it cannot afford. The contract's first effect is to give Washington an interest in Russian refineries running, even as Ukraine's president says the interceptors it has already paid for "are still not coming."

Diesel is one of four things the arsenal took this autumn from parties it does not control. The second is magnets: China exported 6,165 tons in September, its largest month this year, and they are the magnets in the motors of the drones the new Autonomous Warfare Command is to buy by the hundreds of thousands; Beijing's pause on its licensing rules lapses on November 10, with no notice published. The third is a room: the President said on October 19 that he would meet Vladimir Putin and Xi Jinping in China next month, after the Wall Street Journal reported that Putin had proposed a three-way meeting in Shenzhen to settle the war in Ukraine, without Ukraine. The fourth is money: on October 21, the Treasury sold 20-year bonds at a record 5.469 percent with foreign demand well below its average, and the 10-year fell below 5 percent the next day only because investors fled artificial-intelligence debt for the government's.

The one adversary with nothing to sell was squeezed: a third carrier group was ordered toward Iran on October 21, and Brent settled Friday at $116.72, its highest since April, which raised the price of everything the arsenal buys from the adversaries that do sell.

A sanction is the instrument of the party that sells. This autumn, the United States is the party that needs, and each supplier holds a date on which it can change the terms: October 31, when Russia's own fuel-export ban lapses; November 10 for Beijing's licenses; early November for the Treasury's refunding; November 18 for the summit. In economic warfare, the buyer takes the terms.

I write this from the Cipher Brief's Threat Conference at Sea Island, where General Bryan Fenton and I addressed the question of what the Department of War has to do with economic warfare. The week answered it before we spoke: the Department is now, by available reports, a customer of one adversary's refineries, a buyer of another's magnets, the holder of an ally's interceptors, and the owner of the carriers that set the price of oil. No office weighed those instruments against one another; the suppliers did.

For nine weeks in these pages, I have written about what the United States cannot do, from the army it cannot command to the day it cannot choose, and each piece ended at the same place: a decision no one was assigned to make. The diagnosis is complete, and the series turns here from what we cannot do to what we must. The place to start is the Autonomous Warfare Command: its plan is due on October 30, and it will be the government's largest buyer of the parts this piece is about.

Three things must be in that plan, and none of them is money.

First, the authority to decide. The Secretary's memorandum settles who buys. It has not settled who decides: one command-and-control architecture across every Service and domain, including space; who allocates among theaters when two ask for the same drones on the same day; who overrides at tempo; and whether the answer binds the Services. Congress granted those authorities to Special Operations Command in 1986, with its own budget line and acquisition power. The plan should name the same for this command, and add the paragraph Congress left out in 1986: command and control.

Second, the edge. Ukraine computes on the aircraft; we compute in Virginia and wait, and the Pacific cannot fight on a round trip. The plan must put the computing on the platform and the communications on a layer the force controls, so that no one else sets its speed.

Third, supply before the ban. The command's motors turn on Chinese magnets until American plants deliver, and the Pentagon's own ban takes effect on January 1. A Defense Production Act priority rating and a drawdown from the National Defense Stockpile, issued before November 10, stock what we need before we forbid what we depend on. The same plan is the demand signal industry has asked for: an architecture and a date.

—

The Cipher Brief is committed to publishing a range of perspectives on national security issues submitted by deeply experienced national security professionals. Opinions expressed are those of the author and do not represent the views or opinions of The Cipher Brief.

Have a perspective to share based on your experience in the national security field? Send it to Editor@thecipherbrief.com for publication consideration.

Read more expert-driven national security insights, perspective and analysis in The Cipher Brief

China is about to run the largest influence operation in history. It will not have to run it. The world will download it.

EXPERT PERSPECTIVE -- Our research team at Vanderbilt spent months inside the internal documents of GoLaxy, a Beijing firm - with ties to the Chinese state - that built a machine for shaping opinion abroad. Using AI, it generates personas, amplifies narratives that are favorable to Beijing and buries narratives that are not. And it’s been busy. It was used in Hong Kong to combat dissent against the National Security Law. It was used in Taiwan to sway the island’s 2024 elections.

Now consider what happens when it does not need to be built at all. If Chinese open-weight models — the ones that anyone can download, modify and run on their own machines — become the foundation that the world builds on, then the Chinese Communist Party’s (CCP) framing of Taiwan, Tiananmen, Xinjiang and Beijing itself ships inside every product that sits on top. No personas. No campaign. Just the default answer, everywhere. Something like this would make GoLaxy look like a dress rehearsal.

And here is the part that should stop Washington cold. Chinese models are about to be everywhere, and American strategy could allow it to happen. Washington is deciding whether to let frontier development run while clamping down on powerful open-weight models (whose safeguards can be stripped away). Here’s the deal though: restrictions would not kill demand for a cheap model that a company can download and make its own. China is standing at the counter with exactly that.

Today, we talk about the AI race as if it has one finish line. But it has two. The first is for frontier capability: who builds the most advanced models. American companies lead the way today. The second finish line is for reach: whose models become the foundation on which thousands of products are built? Chinese firms may have the advantage on this one. The first brings concentrated scientific, economic and military power. The second decides whose systems become the workhorses of ordinary life, and that reach shapes what people know and will learn in the future.

American frontier models like Claude, ChatGPT and Gemini are closed, meaning you use them on the company's servers, and the company can cut off access. Chinese developers compete by releasing cheap open-weight models that companies can run on their own, with no provider to answer to. The babysitter has left the building.

This has already started. Airbnb relies on Alibaba's Qwen in its customer-service agent. Qwen, even briefly, powered a tool for searching proposed regulations on the Federal Register website. Amazon says thousands of customers have deployed DeepSeek through its cloud. In every case the interface is American. But the model underneath it is not.

Here’s something else to consider: Chinese developers must operate under Communist Party rules about what may be said. Those rules then shape which questions the models answer, which facts they omit and how they frame sensitive subjects. Open weights can be retuned, but scrubbing built-in defaults is expensive, and most companies will focus their efforts on addressing what matters to their business rather than check how a model handles every political subject. If a cheap Chinese model sits under thousands of products, its habits travel with it — into research tools, classroom software and fact-checkers — and the person on the other end never knows.

Beijing already knows about this risk. When Meta released its open-weight Llama models, Chinese regulators worried that a foreign model could "poison" China's AI ecosystem with information that the CCP censors. It seems to make sense that Washington should take seriously a vulnerability that Beijing recognized first.

None of this makes the open-weight safety problem smaller. In fact, just the opposite. Once a powerful open-weight model is released, its developer cannot recall it. Its safeguards can be stripped away and the model can be used for cyberattacks, the creation of biological weapons or worse. If we’re going to address this as a society, then testing requirements, liability rules and release restrictions are needed. But a Chinese open-weight model carries the same dangerous capabilities as an American one, and no American rule touches it.

If we constrain American developers and leave foreign weights untouched, demand will certainly shifts toward Chinese models. Theoretically, Washington could end up regulating the companies it can see while deepening its own dependence on the ones it cannot.

One answer might be to ban the Chinese models. But that means telling Americans which information technology they may use — and here lies the irony: the openness that protects Americans from domestic censorship may leave them exposed to systems built under Chinese censorship.

TikTok offers a glimpse of the stakes. More than 170 million Americans use it, and tens of millions say they get their news there. Washington spent five years fighting over its recommendation algorithm, and the deal that kept it in the United States required a change to that algorithm. But an algorithm only ranks videos that people make. While that fight dragged on, AI models learned to make the videos themselves — realistic footage with synced audio, from a sentence, in seconds. Three months after the deal closed, TikTok upgraded its ad tools to ByteDance’s newest video model. No rule required anyone to ask whose model was making the videos.

Now, you can see why the United States is facing a trilemma. It wants to prevent the uncontrolled release of dangerous AI capabilities. It wants to preserve Americans' freedom to choose their technology and information. And it wants to avoid dependence on models that are shaped inside an authoritarian system. It cannot fully secure all three.

Honest regulation starts by admitting that. Before restricting an U.S. model, ask which model developers will pick first. Domestic and foreign models distributed in the United States should face the same tests and the same rules. And companies that build products on a foundation model should have to say whose model it is.

AI leadership combines two things: the capability of a country's best models, and the reach of the models embedded in ordinary life. AI risk also combines two things: what a powerful model might do, and what a ubiquitous one tells people is true. GoLaxy showed us what Beijing can do with a machine to shape a belief. Now, what are we going to do about it?

Mr. Goldstein and Mr. Benson are professors at Vanderbilt University who specialize in national and international security.

Beijing says artificial intelligence will give the state a visible hand to allocate capital. Here’s the rub: Washington’s economic authority sits in five places, and none of them is in command.

This column begins a four-week series ahead of The Cipher Brief Threat Conference on economic-warfare. The author is hosting a live session on this topic with former Commander of U.S. Special Operations Command, General Bryan Fenton (Ret.). Apply now to attend.

On September 26, the President answered the week's largest security question in just four words: "I'm rejecting their deal." Iran's offer to reopen the Strait of Hormuz within seven days, in exchange for lifting the blockade and waiving oil sanctions, had been on the table since September 24. It received its answer in public, from the one official authorized to give it, inside forty-eight hours.

The week's economic questions received no answer of that kind. The trade truce with China, and the pause on Beijing's rare-earth licensing regime tied to it, moved from November 10 to January 10 on the strength of a Treasury Secretary's statement; Beijing has yet to publish a matching notice.

The Russia sanctions act the President signed on September 18 requires determinations on the largest buyers of Russian energy by October 18, a deadline set by Congress rather than the executive, with waivers broad enough to let it pass unenforced. In February, the Supreme Court ruled six to three in Learning Resources v. Trump that the International Emergency Economic Powers Act does not authorize tariffs, removing the instrument the executive had used for its broadest tariffs.

This is important because Washington can decide a war in a sentence. But on the economic front, authority rests with Treasury, Commerce, the U.S. Trade Representative, Congress, and the courts. Each is competent. None is in command. The arrangement is by design and has served the country well for most of the last eighty years. But not anymore.

Beijing is now claiming a different design. In a recent lecture on Xi Jinping's economic strategy, former Australian Prime Minister Kevin Rudd, who has tracked Chinese ideology for fifty years, described a shift in the Communist Party's theoretical literature. Artificial intelligence (AI) and other "new quality productive forces" are portrayed not only as sources of productivity but also as "a superior macro-allocation mechanism for resources," driven by algorithms. Rudd says the literature now uses the term "the visible hand of the state," offered for the first time as a rival to the market's invisible one. He is careful about its status: the idea sits in the ideological literature, "not yet in the policy literature," and not yet in the behavior of firms. But in his reading, ideology in China is where policy begins.

The hand is already visible without the algorithm. The rare-earth regime now paused until January, the Ministry of Commerce's Announcement No. 61, applies to any product anywhere that carries more than 0.1 percent Chinese-origin rare-earth content by value. One ministry notice imposed it; one more can reimpose it. The capital moves the same way. Chinese households, burned by property and wary of equities, hold record savings in low-yield bank deposits, and the state draws on those deposits through local, provincial, and national loan instruments to fund its technology bet. Rhodium Group puts China's AI capital spending at 932 billion renminbi this year, double last year's, financed by state banks and equity placements rather than bond markets.

America's AI buildout is financed the other way. Its five largest builders raised a net $163 billion in debt in the first half of this year, compared with $90 billion in all of 2025, in a bond market where the ten-year Treasury has reached 5.18 percent, its highest since 2007. No ministry allocated that capital. The market did, and the market will reprice it.

Neither design is simply superior, and the distinction matters more than the verdict. A single allocator is fast and brittle. It can direct capital, licenses, and supply to a strategic target within a week, and it can misallocate at the same speed. The household savings now financing the AI bet were poured into a property boom that left many of those households with assets worth only a fraction of what they paid. A distributed system is slow and resilient. Its errors stay local, its capital carries a price, and no single notice can switch it off. In peacetime competition, resilience compounds. In economic warfare, tempo is the contested variable, and the side that can decide within the other's cycle sets the terms. Beijing has already shown what that looks like. It imposed its rare-earth regime by notice on October 9 of last year and suspended it by another on November 7, having collected in between Washington's agreement to delay its own rule extending export controls to the affiliates of blacklisted firms. Two notices, one month, one American concession.

This column has traced the same gap from the drone fleet to the power grid: the capacity exists, and the decision does not. The economic front shows it at national scale. Washington holds the reserve currency, the deepest capital markets, and the reach of the dollar system. What it lacks is a place to settle competing claims on those instruments and to make them binding on the timeline decided by an adversary.

October 18 is the first live test. The sanctions act's determinations are due that day, just sixteen days before the midterm elections. They will be imposed, waived, or deferred, and whichever it is will say more about the American economic hand than any strategy document published this year. Beijing will be watching the same date, holding a notice it can publish on any morning it chooses.

The question for Washington is who, when economic warfare requires a decision, is empowered to make it, and whether that decision can arrive before the adversary's action. Coordination assigns. Integration arbitrates.

Read more expert-driven national security insights in The Cipher Brief. Need full access to more content like this? Become a Subscriber+Member here.