US chip export controls are back in play, but Brussels is where the fight moved

Three days before what looks like the decisive trilogue on the EU's child sexual abuse regulation, internal Council of Ministers documents circulated on 29 September. They show member states trying a new route to mass scanning of private messages. Heise online reported the leak. The documents describe "search plans" that would let national judicial or administrative authorities hand chat and email providers temporary blanket authorisations to scan message content. The Council's own Legal Service warned early that scanning an entire service, or parts of it, is highly likely to breach EU law. The European Court of Justice could read it as general and indiscriminate surveillance.

On its face, that is not a chip story. The reflex is the same, though. Authorities reach for blanket powers over private infrastructure because targeted tools are slower and harder to justify.

On the same day, Yahoo Finance reported that Apple's new chief executive John Ternus is planning small-scale layoffs inside large teams and cancelling projects. The report came from Bloomberg on Wednesday. The stated pressure is component cost. "Money pressure is coming from 2 directions: a memory shortage is raising component costs, and services revenue fell quarter over quarter in June for the first time since 2022," tech commentator Rohan Paul said in an X post cited by Yahoo Finance. Apple issued cautious revenue guidance in late July because it could not source enough memory chips. Tim Cook told his final earnings call that the company had "reluctantly raised prices" amid what he called "a 100-year flood on the memory pricing."

The memory crunch is an AI infrastructure crunch. High-bandwidth memory and advanced DRAM for AI servers have outrun supply. SK Hynix, Samsung and Micron have largely sold out their premium AI capacity through much of 2026, Yahoo Finance reported, while Nvidia, Microsoft, Amazon and Meta keep building. The shortage is expected to persist into 2027.

So the export-control debate now has a second front. The question is no longer whether chips move, but what they cost when they do.

China's answer to restricted access has been domestic substitution. The latest signal is that Beijing may allow ByteDance and Alibaba to buy Nvidia's RTX PRO 5500. Several outlets reported that prospect on 28 and 29 September, including Asia Times and qz.com. It lands after a Trump-Xi summit where chip controls took a back seat. Much of that coverage frames the move as a transaction: a specific product, a specific buyer set, a specific carve-out.

Contrast that with the EU scanning file. There the Council is not carving out a product. It is trying to convert a temporary, voluntary scanning regime, chat control 1.0, into a permanent legal basis that providers cannot fall short of. Former MEP Patrick Breyer, quoted by heise, called the search plans continued scanning of millions of innocent users without suspicion. He compared the approach to mopping the floor while the tap runs. He also warned that member states are knowingly accepting a foreseeable defeat before the Court of Justice in Luxembourg.

Heise reported that roughly 75 percent of reported chats are legally irrelevant. In Germany, a large proportion of investigations into child pornography target adolescents themselves, for example over consensual sexting. That is the false-positive tax on blanket scanning. The same argument shows up in chip policy when controls are written broad enough to catch ordinary commerce.

The European Parliament's mandate, by contrast, focuses on targeted orders issued under judicial review against specific suspects. It also proposes a new EU centre to proactively search publicly accessible content for known abuse material. The leaked Council documents contain a plan B as well: if talks fail, the Irish Presidency would exclude private chats from the regulation entirely. That would leave chat control 1.0 as a permanent voluntary-scanning loophole.

Whether the trilogue produces a deal on Tuesday, or the plan B, matters beyond Brussels. Every provider that operates in Europe inherits whatever scanning obligation emerges. That includes the cloud and inference providers now competing on price for open-weight models.

That competition is real and measurable. Unblocked published a technical post on 29 September describing an adaptive router that moves LLM traffic between Baseten, Fireworks and CoreWeave, all serving GLM 5.2. Its numbers: on a round-robin setup, Fireworks served 51 percent of tasks and Baseten 49 percent, even though Fireworks' prices were 25 percent higher and Baseten was faster. A fixed order pushed Baseten to 98.5 percent and Fireworks to 1.5 percent. CoreWeave listed prices about 45 percent below Baseten's, but the team had no performance data, so it could not place it in the order without a deploy.

That is what a functioning market for inference looks like. Providers differentiate themselves by cost, speed and reliability, and customers route around failures. Export controls and scanning mandates both interfere with that routing. One restricts which chips reach which buyers. The other adds obligations that smaller providers cannot absorb.

There is a third thread, and it is about who holds the keys. On 29 September, Windley published a demo of human-in-the-loop control for OpenClaw using Cedar and a Yubikey, where every tool invocation passes through a policy enforcement point. Sending email is gated. The PEP parks the request, a human reviews recipient, subject and body, taps a Yubikey, and the Cedar request is retried with the approval injected. If nobody taps within three minutes, the PEP returns a hard deny and does not wait again.

The author's point is that a prompt is guidance, not a control, and that authorization belongs in the harness. Replace "send email" with "export a restricted chip" or "scan a private chat" and the design question is identical. Who attests that this specific action, for this specific request, is permitted?

None of these stories is a chip export control story in the narrow sense. Read together, they describe the same shift. Controls are no longer just about denying hardware at a border. They are about memory prices that force layoffs, about carve-outs negotiated product by product, and about surveillance powers that member states want to make permanent by renaming them.

Heise reported that the Council insists a permanent law must not fall short of existing voluntary scanning. That is the tell. Once a temporary practice becomes the floor, the argument is no longer whether to scan but how much. The legal risk sits with the courts rather than the ministers.

The chip file will keep moving on prices and permits. The Brussels file will move on Tuesday. Both will be decided by people who are not in the room where the inference traffic actually routes.