Treasury's outbound investment rule adds supercomputing, hypersonics

Share
Treasury's outbound investment rule adds supercomputing, hypersonics

The US Treasury widened the list of technologies American money is not supposed to fund abroad, and asked the market what it thinks of the list. The question underneath is whether screening private capital does anything that export controls on hardware did not.

The Treasury Department proposed a rule on Thursday that extends its outbound investment screening to high-performance computing, supercomputing, hypersonic systems and biotechnology, on top of the semiconductors, quantum and artificial intelligence categories the program has covered since January 2025. The Notice of Proposed Rulemaking implements the Comprehensive Outbound Investment National Security (COINS) Act, which Congress enacted in December 2025 as part of the fiscal 2026 National Defense Authorization Act, per Treasury's announcement. The program keeps its two-tier structure: some transactions must be notified to Treasury, others are prohibited outright.

The technology list is not Treasury's invention. The COINS Act named five sectors for the Secretary to define technical parameters around — semiconductor technologies and microelectronics, artificial intelligence systems, quantum information technologies, high-performance computing and supercomputing, and hypersonic systems. The statute also allowed the Secretary to add technologies beyond that list through notice-and-comment rulemaking, and Treasury used that authority to add biotechnology, arguing it is now a capability that matters to military modernization. The Financial Times reported the biotech additions reach specific compounds and materials and technologies such as brain-computer interfaces, according to the FT.

What actually changes

Three things, in order of how much paperwork they create.

New sectors. Hypersonic systems and high-performance computing join a program that previously stopped at chips, quantum and AI. Hypersonic means flight at five times the speed of sound, which is the sort of hardware that is bought by ministries rather than consumers. That matters for a specific kind of deal: a US fund taking a stake in a Chinese or Russian compute company, or in a supplier to a hypersonics program.

More countries. The country-of-concern list grows beyond China and its Hong Kong and Macau special administrative regions to include Cuba, Iran, North Korea and Russia, according to the Associated Press. The COINS Act required the expansion; Treasury is implementing it.

The floor stays low but real. The rule would apply only to investments exceeding $50,000 and would exclude many purely financial investments, including stock purchases, AP reported. The $50,000 trigger is the number compliance officers will quote to their investment committees, because it is low enough to catch seed rounds and follow-ons that nobody would describe as strategic.

One piece of framing is worth flagging. Treasury's technical specifications describe the AI category as "super intelligence systems," the administration's preferred term for frontier AI. That is more than branding: the definitions in the annex determine whether a given AI deal is notifiable, prohibited or untouched, and the label tells you which side of the line the government thinks it is drawing.

"This important step also helps promote our commitment to an open investment environment by providing clarity to U.S. and foreign investors as well as an opportunity for them to provide feedback on the proposed regulations," Treasury Secretary Scott Bessent said in the announcement, which also carried a shorter version of the same message from Christopher Pilkerton, the assistant secretary for investment security.

The program has teeth, and one scar

The existing Outbound Investment Security Program has been live since January 2, 2025, when the final rule implementing the August 2023 executive order took effect. Its first civil penalty arrived in July 2026: $200,000 against a US-based company whose subsidiary failed to report a $92,500 investment in a Chinese artificial intelligence and robotics company, AP reported. Eighteen months of operation, one enforcement action, and the underlying deal was under six figures — a ratio that tells you how lightly the program has touched the market so far.

The proposed rule is built to change that arithmetic. It sets out what a notification must contain, a knowledge standard, an expectation that a US person conduct a "reasonable and diligent inquiry" before transacting, and the conduct that counts as a violation along with the penalties attached. WilmerHale's Jason Chipman, a former Justice Department lawyer, told AP the rule "will require more substantial compliance programs to manage risk." Ryan Majerus, a former US trade official now at King & Spalding, called it "just the first step in a fairly long process to get to changes which presumably will be more enforcement-minded."

The counter-case

Three objections are worth taking seriously.

Most of this is notification, not prohibition. The prohibited bucket is narrow by design; everything else is a filing. A rule that mostly generates paperwork changes the record Treasury keeps more than it changes where capital goes, at least at first.

The exclusions are generous. With a $50,000 floor and stock purchases carved out, a US pension fund buying listed shares of a Chinese AI company, or a family office writing a small check into a fund that later invests in one, sits largely outside the perimeter. The binding constraint on Chinese frontier AI has been compute and domestic state capital, not American LP money — and no notification rule changes that.

Then there is the timing. Russia entered the country list days after the president waived sanctions on Russia following a diesel deal with Vladimir Putin, AP noted in the same report. Tightening investment screening on Moscow in the same week you lift sanctions on it is a hard story to tell allies, and it is the detail critics will use to argue the program is being run for signal as much as for effect.

What to watch

Treasury is taking comments until December 7, and the final rule will set its own effective date. Watch three things: whether the AI definitions reach model training and rented compute rather than just equity stakes; whether the next enforcement action is routine or another 18-month gap; and how Beijing responds, given the two governments extended their tariff truce into January.

Should Washington screen private capital going into Chinese AI, or will the money simply route around it? Write to us via our contact page.

Get SiliconNoon in your inbox

One email a day with the AI stories that matter — what happened, the numbers, and why it matters. No spam, unsubscribe in one click.

Read more

Senate report: hyperscalers misled the public on data center costs

Senate report: hyperscalers misled the public on data center costs

A yearlong Senate investigation just put Congress's own numbers under the claims AI data centers sell to towns and ratepayers. Also: the Times finally counts what Anthropic's agents submitted to the State Department, and StepFun sets an open-weights date for its top-ranked flagship. A yearlong Senate investigation led by Senators Warren, Van Hollen, and Blumenthal concludes that some of the biggest hyperscalers misled the public about what their AI data centers cost everyone else.

Tesla drops 'Full Self-Driving' name in Europe after regulator push

Tesla drops 'Full Self-Driving' name in Europe after regulator push

Two stories today sit on the same question — who gets to name what AI actually does. Tesla blinked first in Europe; in China, a founder with a very public sabotage history is betting $30 million that investors will pick technical brilliance over a clean record. Tesla is renaming "Full Self-Driving (Supervised)" to "Assisted Driving" across Europe after German regulators called the brand name "somewhat misleading." The German Federal Ministry of Transport said Tuesday the system "is not a…

A judge calls Flock's plate searches mass surveillance

A judge calls Flock's plate searches mass surveillance

A landmark Fourth Amendment ruling lands on the same day Congress moves to cut license-plate readers out of federal hands — and in the funding lane, the database layer agents build on just got its biggest raise yet. A federal judge ruled that a warrantless search of Flock's license-plate network was an unconstitutional "type of indiscriminate mass surveillance." U.S. District Judge Sara Hill of Northern Oklahoma suppressed the evidence in United States v.

OpenAI backed a startup built to fight an AI-made pandemic

OpenAI backed a startup built to fight an AI-made pandemic

A biosecurity startup raised $36 million to design antibodies against the pathogens AI might help build — and it was already quietly firing at the attack surface it is defending. Separately, DHS started using AI to recommend what to redact from the records you asked for, and an anonymous model took third place on the world's busiest token leaderboard with a fingerprint no one was supposed to see. Red Queen Bio, a biosecurity startup whose $15 million seed OpenAI led in November, has now raised…

Baidu apologises in China's first AI defamation case — two years on

Baidu apologises in China's first AI defamation case — two years on

A lawyer who searched his own name and found a criminal record that never existed finally got a written apology today. The reasoning behind the order is the part the industry should read. Baidu formally apologised in writing to Nanjing lawyer Li Xiaoliang on September 22, at the Nanjing Jiangbei New Area People's Court — the first time a Chinese court has forced a model operator to apologise for what its model said about a named person.