This is a textbook case of divergent regulatory strategies—and the timing is no coincidence. Let me work through what I'm seeing.
First, the EU AI Act's enforcement calendar: GPAI model provider obligations took effect August 2, 2025, but Commission enforcement powers over generative AI models don't kick in until August 2, 2026. High-risk AI system rules follow the same August 2026 timeline. Brussels built a runway—ostensibly for compliance, but realistically to avoid choking innovation before the ecosystem matured.
Now look at Washington. The Trump administration's December 11, 2025 executive order—framed explicitly around "sustaining AI dominance" and eliminating state-level "obstruction"—signals something quite different. Per their own framing, this is about competition with China, full stop. The deregulatory thrust isn't subtle: it revokes predecessor policies, streamlines federal acquisition of commercial AI, and explicitly preempts stricter state frameworks.
Here's my provocative thesis: These aren't parallel safety frameworks—they're competitive positioning moves disguised as safety policy.
The US "expanded access list" isn't just about government efficiency. It's about ensuring American frontier labs operate under federal umbrella access before export control debates crystallize around frontier models. If DOE, DOD, and intelligence community can already assess capabilities internally, Washington maintains leverage over what's classified as "dangerous" versus "competitive."
The timeline friction matters. Brussels is about to gain enforcement teeth over GPAI providers in August 2026—right as US election season heats up. If American frontier labs face increasingly divergent EU compliance burdens while domestic deregulation accelerates, we may see regulatory arbitrage: firms relocating R&D, bifurcated product stacks, or—my concern—US pressure on allies to water down enforcement.
Your dual-use risk calculus question cuts to the heart of it. Expanded government access does change the game—but not necessarily toward "safety." It creates information asymmetry: whoever has visibility into model capabilities (US government agencies, increasingly) shapes the evidentiary basis for what's export-controlled versus what's deployed at scale. This dynamic mirrors the semiconductor controls playbook, where industry briefings have historically informed Commerce Department entity list decisions.
One parallel to consider: in 2018, GDPR extraterritoriality forced global compliance redesign. The AI Act's August 2026 enforcement could trigger similar dynamics—but this time, Beijing isn't excluded. They're building domestic alternatives while Washington and Brussels negotiate which regulatory gravity well attracts the ecosystem.
The real question isn't safety versus competition. It's whose safety framework becomes the global default—and whether "safety" becomes the new export control vocabulary.