Generated by Codex with GPT 5.6 Sol High

Techmeme surfaced a New York Times investigation, “U.S. Cleared Nvidia Chips to Chinese Firms With Empty Offices and Troubling Ties.” The reporting tests a central promise of the United States’ current AI-chip policy: that advanced processors can be sold to China without surrendering national-security control, because the Commerce Department will approve only known, compliant companies. The companies the Times found do not prove that restricted chips reached China’s military. They do show that the approval layer itself may be much harder to trust than the policy assumes.

A controlled opening depends on knowing the customer

The United States began broadly restricting advanced AI-chip sales to China under the Biden administration. In December 2025, the Trump administration changed course for Nvidia’s H200, an older generation than the company’s leading chips but still powerful enough to train and run large AI systems. A January 2026 Commerce Department rule replaced a presumption of denial with case-by-case review for the H200, AMD’s MI325X, and comparable processors.

The rule is meant to make access conditional rather than unrestricted. Applicants must show that U.S. customers will not lose supply, recipients have export-compliance procedures including customer screening, and the chips have passed independent testing in the United States. The government said this arrangement would preserve American technology leadership while protecting national security. That logic depends on being able to establish who the approved companies really are, who controls them, and where the finished servers go.

The Times reports that dozens of Chinese companies have received permission to buy H200s or handle them during server assembly. Its clearest example is New Matrix, a 17-month-old company approved to assemble the chips. A reporter visiting the Beijing address found an empty, unfinished office; neither the building directory nor nearby property managers had a record of the company. Its website named no staff and offered no company history or job listings.

Corporate records make the absence more consequential. Two principal New Matrix owners appear connected to Wise Road Capital, which the Commerce Department added to its Entity List in 2024 for helping China acquire strategically sensitive semiconductor businesses. Wise Road founder Li Bin also chairs Tsinghua Unigroup, a technology conglomerate with government ownership. One of Tsinghua Unigroup’s subsidiaries, New H3C Semiconductor Technologies, was added to the Entity List in 2021 for working with the Chinese military.

New Matrix is not the only thinly documented intermediary. The Times had previously visited the listed office of Maginfra, another recently created company approved to assemble H200 servers, and found a locked, apparently unused room. Analysts cited shared personnel, patents, government ownership, and proximity as evidence that Maginfra may be an offshoot of Inspur, an Entity List company accused by the United States of supporting the People’s Liberation Army. Neither New Matrix nor Maginfra was presented as the final user of the chips, which leaves another link in the chain—the customer receiving each completed server—to verify.

The investigation found comparable concerns beyond the empty offices. Zhejiang Yindun Cloud Technology has ownership and operating ties to Range Intelligent Computing Technology Group, a cloud provider that has served Chinese military contractors. Shanghai Jiatang grew out of a state-owned telecom group whose technology work includes military applications. These are corporate and personnel links, not proof that every named company is legally the same entity as a blacklisted affiliate. They nonetheless raise the basic diligence question the licensing system exists to answer.

Paper controls need operational verification

The findings expose a gap between checking a transaction and monitoring a supply chain. The formal rule contains extensive certifications about chip performance, domestic availability, independent testing, and compliance procedures. Those controls can confirm what product is leaving the United States and require applicants to describe intended recipients. They cannot by themselves show that a newly formed intermediary has real operations, that its disclosed beneficial ownership is complete, or that a server reaches only its declared end user after assembly.

That problem is especially acute for hardware that can be moved, resold, or accessed remotely. A server assembled by an approved company may be installed for another customer, while Chinese firms can also rent Nvidia compute in data centers outside China. Effective control therefore requires more than screening names against a blacklist at the moment of application. It requires tracing beneficial ownership, validating physical operations, identifying the final customer, reconciling serial numbers and shipment records, and checking actual end use after delivery.

The evidence also has limits. An empty registered office can reflect a shell company, a stale address, or a business that operates elsewhere; it is not proof of criminal conduct. Ownership ties to a listed company do not automatically establish prohibited control, and the public reporting does not show that New Matrix, Maginfra, or the other firms diverted chips to military users. Direct H200 sales to China remained small: the Times reported that China-based shipments were less than one percent of Nvidia’s data-center revenue in the quarter ending in July, while Beijing had itself delayed many imports to support domestic chips. The investigation identifies vulnerabilities in the gatekeeping process, not the final disposition of every processor.

That distinction makes the story more important, not less. Export controls are often discussed as a choice between a ban and an open market. The H200 policy attempts a third path: permit sales, collect economic benefits, and manage strategic risk through licenses. The Times found that this compromise inherits the hardest part of financial compliance and supply-chain security—discovering who sits behind a paper company and continuing to verify what happens after approval. If the government cannot do that reliably, “approved customer” becomes a form field rather than a security boundary.