Checked 2026-09-03 · unchanged since 2026-08-21RSS
Export Controls
Restrictions matched to the compute they reach and to the trade either side of them.
3 of 11 alleged relationships are corroborated at the primary-source layer
A further relationship is corroborated only against subscription-held corporate records, which confirm it and cannot be cited as its source; the count above leaves it out. A framework for auditing diversion-thesis claims at the primary-source-disclosure layer (the Culper Research 2026-05-13 NVIDIA short thesis as the worked example). The magnitude studio recomputes peak and effective ExaFLOPS live as trade-volume, chip-mix, MFU, and ASP move; a Tier-1-only counterfactual toggle strips the Tier-3 input and shows what the framework establishes without it. Scrutica builds the cascade chain from corporate filings, flags where the trade-record claims diverge from disclosed corporate topology, and cross-references Chinese-hyperscaler peering at SE-Asian facilities via PeeringDB. Every claim shows the authority tier of its source.
BIS license-action coverage: CY2017 - CY2022. CY2023+ not yet released by BIS.
Diversion-rate inference is structurally bounded above by absent CY2023+ BIS license data. The CY2017 - CY2022 license-action substrate documents what was licensed (denied + RWA + approved + ECCN top-10) for the pre-Oct-2023-rule window; the post-rule window — exactly the period the Culper-NVDA worked example operates over — has no BIS license-action substrate to corroborate against. The framework substitutes bilateral-trade-flow measurement of HS 854231/8542 advanced-chip-class proxies and corporate-disclosure topology, and labels every inference accordingly.
Substrate vintage
CY2017 - CY2022
2,587 rows × 33 jurisdictions · BIS OTE Annual Country Licensing & Trade Analysis
Export Control Transparency Act of August 2025 (H.R. 1316, 119th Cong.) mandates a separate, narrower per-entity license-action report — Entity-List / MEU-List scope only — to Congress no later than one year from enactment. The statutory date has passed and no such report is in this platform’s substrate; whether one has been delivered to Congress is not something Scrutica measures.
UN Comtrade + CEPII BACI (231 reporters) + Taiwan Customs + China GACC + Japan e-Stat. HS 8542 advanced-chip-class proxies through 2026. Measures what shipped under customs declarations — NOT what BIS licensed.
See what we can / cannot answer about the post-CY2022 window for the per-question crosswalk. Substrate refresh will land on the BIS publication, not on inference; the platform’s “Verify, never hedge” data-quality principle holds — analyst commentary is not a substitute for the government measurement.
Alleged chain · evidence grade
Every relationship the worked example alleges, drawn once. A connector's ink is what stands behind the claim: a primary-source filing, or a single Tier-3 citation. Hover any connector for its relationship kind, its corroboration state, and the strongest authority tier in its evidence chain.
Worked example The chain alleged in the Culper Research 2026-05-13 report. Each connector is a claimed relationship; its ink grades the evidence behind the claim.
3
Alleged relationships a primary-source filing corroborates, on 7 Tier-1 records from corporate registries and a DoJ indictment
8
Carry no filing a reader can open: a single Tier-3 citation, or corroboration held only under subscription. Drawn in amber, and the reason the control above leaves 3 connectors standing
8
Distinct relationship kinds across the 11 connectors — ownership, rename, financing, trade flow, lease, and director clustering among them
20
Evidence records behind the figure, each with its own source, authority tier and vintage; every connector names the strongest tier it holds
Plate VII. The alleged OEM → intermediary → end-customer chain: one connector per claimed relationship, over 14 organizations. Solid connectors are corroborated by primary-source filings; dashed connectors are not, whether that is a single Tier-3 citation or corroboration held only under subscription. Each column head names the tier of the link arriving in it, and an open tick marks a firm with no upstream link in this set. Primary-source evidence only fades the 8 unfiled connectors and the 8 firms only they reach, leaving what the filings alone establish; nothing is removed from the ledger or the counts. Layout is by chain position — 2 connectors reach past the next position — and geometry encodes nothing else.
Each edge has one of these states. 4 of 11 edges are corroborated by a record independent of the report; the definitions are the method, so the same grading runs on the next thesis without reading this page’s conclusions.
The relationship appears in a document a reader can open — a corporate filing or a government record — independently of the short thesis. The thesis may have pointed at it; the document stands without it.
The relationship appears in a subscription-held record, independent of the thesis in the same way and unopenable by a reader without that subscription. Corroborated and uncheckable are both true, so it is graded apart from the state above.
Trade record via the report4 of 11 edges · 6 evidence rows · authority tier 3
The only evidence is a trade record the thesis quotes. The record itself is not reproduced, so what is verifiable is that the thesis makes the claim, not that the shipment occurred.
Press reporting via the report2 of 11 edges · 3 evidence rows · authority tier 3
The only evidence is press reporting the thesis quotes. Same reading as above, with a named publication rather than a trade database behind it.
The only evidence is the thesis’s own narrative. Nothing independent stands behind the edge at any tier.
Absent from disclosureno edges in this chain
The licensed supply-chain topology contains no such link. An absence in one source is not a refutation — it is a statement about that source’s coverage, and it is drawn as one.
Magnitude studio · alleged diversion channel translated to compute capacity
If Culper's $4.74B trade-flow figure holds and the assumed chip mix is broadly correct, the alleged channel represents ~160K GPUs / 166 ExaFLOPS peak BF16 dense / 67 ExaFLOPS effective at 40% MFU — approximately 1.58× China's MIIT 2025 intelligent-computing target (105 EFLOPS; six-agency Computing Power Infrastructure Action Plan, October 2023), sufficient to train ~98 GPT-4-class models annually on aggregate effective compute, and accounting for 4.1% of Nvidia's FY2025 Data Center revenue.
How to read this number. Per-card FLOPS data is Tier 1 (Nvidia spec sheets). Chip-mix and MFU are Tier 2 derived metrics. The trade-volume input is Tier 3 (Culper Research 2026-05-13 citing Tradesparq) and is unverified at the primary-source layer. Use the controls below to test how the magnitude moves with each assumption, or toggle the counterfactual Tier-1-only mode to see what the framework reports when the Tier-3 input is stripped.
Comparison anchors
1.59×China's MIIT 2025 intelligent-computing target (105 EFLOPS, 35% of the 300-EFLOPS total-computing-power target, six-agency Computing Power Infrastructure Action Plan, Oct 2023). Peak BF16 dense against an aggregated anchor: order-of-magnitude calibration, not a spec match.T3
210Models annually exceeding the EU AI Act Article 51 10²⁵ FLOPs threshold (1.74 days each at the current MFU)T3
4.1%of Nvidia FY2025 Data Center revenue ($115B), if the trade-volume figure holdsT3
Trade-volume input is unverified by Scrutica; Culper's Tradesparq aggregation is the load-bearing Tier-3 assumption.
Chip-mix assumption is derived from Culper's narrative emphasis, not from per-shipment product-code analysis. A skewed-toward-H800 mix no longer reduces aggregate BF16 throughput once H800 spec is correctly stated, but it does shift the magnitude estimate via ASP differences (H800 ASP $25K vs H100/H200 $30K → ~10% more cards per dollar in the H800-heavy mix).
ASP brackets are mid-market; H200 SXM5 GPUs trade $25K–$35K depending on configuration. ±20% ASP swing yields ±25% chip-count swing.
40% MFU is industry-standard for large-model training but real-world MFU for distributed Chinese clusters with networking constraints (post-restriction NVLink caps) may run 25–35%. Effective compute estimate is correspondingly lower.
Peak ExaFLOPS comparisons are nameplate (BF16 dense); effective capacity is what actually-deliverable compute looks like.
China MIIT 2025 intelligent-computing target (105 EFLOPS) is denominated in Chinese-policy 'intelligent computing' (AI training + inference + scientific computing aggregated), not strictly BF16 dense. Treat the 1.58× multiplier as order-of-magnitude calibration, not spec-matched comparison.
Named-component subtotal (4000 + 344 + 142 = 4486) and total_alleged_channel_usd_m (4742) carry a $256M unattributed residue; the substrate preserves the $4,742M aggregate per Culper's reporting framing. Component reconciliation is upstream substrate work outside the C2 (2026-05-15) audit scope.
Cascade graph — OEM → intermediary → end-customer
Each edge is one corporate-filing or trade-record relationship in the alleged Culper-NVDA chain. Edge color encodes primary-source corroboration (green), single-sourced via Tier-3 analyst citation (amber dashed), or absent from the licensed supply-chain disclosure topology (stone dotted). Toggle “fade Tier-3 edges” to keep only the links a corporate filing or trade record directly supports.
Channel taxonomy · status × tier × relationship-kind
The cascade graph rendered as a cross-tab. Each of the 11 alleged edges appears in exactly one matrix cell (corroboration status × tier) and one relationship-kind row — showing which channels a primary source supports and which rest only on a Tier-3 analyst citation (Tradesparq, WSJ, or Culper).
Relationship-kind breakdown · ordered by primary-source share
Financing via pledged charge1
1 primary-source corroborated
Corporate rename1
1 primary-source corroborated
Shared-director clustering1
1 primary-source corroborated
Trade flow (unilateral)3
3 tradesparq via culper
Lease through intermediary2
2 wsj via culper
Wholly-owned subsidiary1
1 subscription-source corroborated
Cloud-capacity lease (alleged)1
1 culper narrative only
Trade flow · optical components1
1 tradesparq via culper
Each edge appears in exactly one row and one column. The asymmetry the matrix exposes, counted from the same payload as every figure above: the financing via pledged charge, corporate rename and shared-director clustering edges rest on 7 filings a reader can open; the wholly-owned subsidiary edge is corroborated only against subscription corporate-data sources, which confirm it and cannot be cited for it; the remaining 7 reach the framework on a Tier-3 citation and nothing else. Every edge names its own records in the cascade graph below.
Speedmatrix Malaysia Statement of Charges filed 18 June 2024 (Malaysian SSM)
Megaspeed International Pte Ltd 2024 annual report (Singapore Bizfile)
Singapore ACRA Bizfile — Megaspeed International Pte. Ltd. (UEN 201535940Z)
Hong Kong corporate filings (OBON BVI director list)
Singapore Bizfile — Siam AI Corporation Pte. Ltd. officer listings
March 2026 DoJ Supermicro indictment + May 2026 Bloomberg identification
Enforcement-shock cascade · scenario explorer
If BIS designates Aivres alongside Inspur Group; if the corridor behind the March 2026 DoJ indictment is severed (per the DoJ release, a front company purchased ~$2.5B of AI servers from the manufacturer, unnamed in the release, and at least ~$510M worth was diverted to China; Sen. Warren’s letter ties the case to a Supermicro co-founder); if a Beijing- or Washington-side action cuts the post-restriction Asian-routed Nvidia flow — what propagates downstream through Scrutica’s licensed supply-chain graph? Four scenarios, each with a severity, decay rate, direction, and the countries and firms hit hardest; a companion probe adds the 14 additional edges Culper alleges, so the effect of the weaker evidence is visible on its own. The supply-chain graph is built from a licensed supply-chain database held under subscription and not redistributed.
Enforcement-shock cascade · downstream propagation through 3,416 supply-chain nodes
The DoJ-indicted corridor as proxy. Severity 100% at the Supermicro OEM node, downstream-only propagation with 0.85 per-hop decay. The narrowest enforcement footprint of the four scenarios.
Affected nodesT4
50
1.46% of 3,416
Weighted compute impactT4
3.21%
max depth 1
SeverityT4
100%
at 1 input node
PropagationT4
0.85 decay
downstream (toward customers)
Weighted impact by supply-chain tier
L0 Materials/Foundry · 1 node
1.510%
L3 Systems/OEM · 1 node
0.062%
L4 Cloud/End-User · 48 nodes
1.637%
Top affected nodes by tier · per-node impact = severity × decay^depth
L0 Materials/Foundry
Super Micro Computer, Inc.100.0%
L3 Systems/OEM
Applied Digital16.8%
L4 Cloud/End-User
Compuware Technology, Inc.20.4%
WhiteFiber18.0%
One Stop Systems15.8%
Penguin Solutions14.6%
Logicom14.4%
Shinden Hightex13.7%
+4 more on record
Tier-3-aware probes · cannot be modeled on the canonical graph alone
The Aivres → Speedmatrix → Megaspeed → Novagate → Aolani chain rides on 14 additional edges that exist only at Culper Research’s analyst synthesis. Their reach into Alibaba, ByteDance, IFLYTEK, PT Indosat, and Opera appears here at the Tier-3 layer, and is absent from the canonical-graph scenarios above by construction.
BIS enforcement extends across the full Culper-alleged Aivres + Speedmatrix + Megaspeed + Novagate + Aolani chain. It cannot be modeled on the canonical graph alone: depth-4 reach into Alibaba, IFLYTEK, PT Indosat, Opera requires the Tier-3 edges.
Affected nodes
16 · 0.47% of 3,428
Weighted impact
0.438%
Max depth
4
NARROW: Aivres alone shutoff (the cleanest Culper-thesis test)
The cleanest Culper-thesis test: BIS extends to Aivres only. Depth-2 reach via Speedmatrix and Aolani; ByteDance and Alibaba appear at depth 2 only because Tier-3 edges connect them.
Affected nodes
6 · 0.18% of 3,428
Weighted impact
0.117%
Max depth
2
Weighted impact = per-node severity × decay^depth, normalized by graph-level node weighting. Propagation uses the existing Scrutica cascade-simulation engine against the licensed supply-chain graph. The single load-bearing Tier-3 input is the set of 14 additional Culper-alleged edges; with the toggle off, no Tier-3 edge enters the model.
Cross-source disclosure tensions
Where public primary-source disclosure (SEC, A-share + HK + Bizfile / SSM) and the licensed corporate-disclosure substrate read against the Tier-3 narrative for the same entity; the Tier-1 measurement sits next to the Tier-3 interpretation, and both can be true at once. 2 of 8 substrate rows render: where a tension rests entirely on subscription sources, the card states that it was corroborated and withholds the record, and where no such statement has been written the row does not render at all.
Geographic-revenue methodology change within the disclosure window
Nvidia changed its geographic-revenue methodology from billing location to customer headquarters location in Q3 FY2026, which removed Singapore from the disclosed geographic split. Singapore-billed revenue had been rising through the preceding disclosure window; what it reached is established here only against subscription sources, and is not republished.
T1Primary-source evidence
Nvidia stated change reflects 'better representation of the geographic profile of our revenue' — companies' HQ location now overrides Singapore-based billing
Corroborated against subscription corporate-data sources that cannot be republished (1 record, values withheld). How the licensed layer is held
T3Analyst interpretation
Per Culper, the methodology change makes pre-2025 vs. post-2025 geographic-revenue compositions directly non-comparable; absent the disclosure shift, Singapore would likely still surface as a material exposure even with operational changes.
Revenue growth counter-cycle to export restrictions
Supermicro's Mainland China revenue rose across the window straddling the April 2025 export-control tightening, against the direction the restrictions were meant to produce; the level and the rate are established here only against subscription sources, and are not republished. The March 2026 DoJ indictment alleged $2.5B in restricted-chip smuggling through a Southeast Asian pass-through, since identified by Bloomberg as OBON Corp.
T1Primary-source evidence
USD 2.5B alleged smuggling via 'Company-1' (Bloomberg-identified as OBON Corp)
DoJ SDNY indictment of Wally Liaw (March 2026)· 2026-03
Corroborated against subscription corporate-data sources that cannot be republished (1 record, values withheld). How the licensed layer is held
T3Analyst interpretation
Per Culper, revenue growth during a tightening window is itself a signal worth scrutinizing; the DoJ indictment quantifies one corridor at $2.5B but Culper's narrative interpretation is that this 'is the tip of the iceberg' with multiple parallel OEM/intermediary channels.
PeeringDB BGP forensic corroboration
Public IX peering tables disclose which networks are present at which SE-Asian facilities. A direct peering between a Culper-named facility and a Chinese-hyperscaler AS-number is evidence of network-level proximity, independent of any Tier-3 analyst interpretation. The True IDC East Bangna ↔ Huawei Cloud (AS136907) finding leads; four representative adjacent disclosures and the calibrated nulls follow.
Lead corroboration
True IDC - East Bangna, Thailand ↔ Huawei Cloud Global (AS136907)
True IDC (Charoen Pokphand Group / True Corporation subsidiary)·IX: SYMPHONY THAI - IX BANGKOK - 1
Culper relevance. True IDC signed MOU with Siam AI per Culper p.38 (Dec 2024) — 'establish Thailand as the Regional AI data center hub'. Direct Culper-named entity.
Chinese hyperscaler / state-telecom AS-numbers disclosed at PeeringDB-listed facilities across the Malaysian, Thai, Indonesian, Vietnamese, and Singaporean data-center cluster. Not directly Culper-named but in the same diversion-corridor metropolitan areas.
China Mobile InternationalAS58453China Mobile International - NIIAS58807
Calibrated nulls · 3 Culper-named facilities absent from PeeringDB
YTL Green Data Center / YTL AI Cloud / YTL Communications · Equinix JH1 - Johor · Singapore Equinix SG1-SG5 cluster.
PeeringDB visibility partitions Asian data centers into two structurally different topologies: (a) MID-TIER facilities (NTT, BDx, DCI, STT, TM ONE, True IDC East Bangna) where Chinese hyperscaler peering is openly disclosed via public IX — these are 'Chinese tech is here' facilities; (b) HYPERSCALE facilities (YTL Green, Bridge DC, Singapore Equinix flagships) where tenant relationships are private cross-connect, invisible to public peering tables. The single direct Culper-corroborating finding is True IDC East Bangna ↔ Huawei Cloud — a facility-participation record Huawei Cloud Global publishes itself, which strengthens Culper's CP Group / True IDC / Chinese-tech-tenancy thesis with non-narrative-dependent evidence. 105 SE-Asian facilities scanned; 13 with Chinese-hyperscaler peering. Source: PeeringDB, analyzed 2026-05-14.
Evidence timeline
7 milestones from the 2023 BIS designation of Inspur Group through the 2026-06-01 Warren letter to Nvidia's General Counsel and Audit Committee Chair. Each clicks through to its primary source. A further 2 Tier-3 milestones (NYT shipment, Tradesparq window) are held back from this page; what appears here is an editorial selection, marked per milestone on the record.
2 Mar 2023Regulatory anchor
T1
Inspur Group added to BIS Entity List
U.S. Department of Commerce, Bureau of Industry and Security designates Inspur Group Co., Ltd. on the Entity List “for acquiring and attempting to acquire U.S.-origin items in support of China’s military modernization efforts.” Designation is the upstream regulatory anchor for every subsequent disclosure-anomaly card.
Inspur Systems Inc. renames to Aivres Systems Inc.
California Secretary of State business filing records the corporate name change from Inspur Systems Inc. to Aivres Systems Inc. — approximately two months after the BIS designation of parent Inspur Group. The rebrand raised the uplift question the Tracker’s cascade graph renders — whether designation reaches a US operating entity through an intermediate that carries none of its own. BIS answered it by enumeration rather than by uplift: it designated that intermediate, Inspur Electronic Information Industry Co., Ltd. (Inspur Information / IEIT Systems), separately on 25 March 2025. See the milestone below.
Six Inspur subsidiaries added to the Entity List — including the A-share issuer that owns Aivres
BIS adds six Inspur Group subsidiaries: Inspur (Beijing) Electronic Information Industry Co., Ltd.; Inspur Electronic Information Industry Co., Ltd.; Inspur Electronic Information (Hong Kong) Co., Ltd.; Inspur (HK) Electronics Co., Ltd.; and Inspur Software Co., Ltd. under China, plus Inspur Taiwan — all for all items subject to the EAR, under a policy of denial, with a Footnote 4 designation. The second of those is the Shenzhen-listed issuer 000977-CN that owns the US OEM Aivres Systems Inc.; the Federal Register records “Inspur Information” and “IEIT Systems Co. Ltd.” among its aliases, which is what ties the entry to the entity the cascade graph draws. This is the answer to the uplift question the May 2023 rebrand milestone raises: designation reached the intermediate directly, two years after the parent, rather than extending to it.
Nvidia’s Q3 FY2026 10-Q discloses a shift in geographic-revenue methodology: from billing-location-of-customer to customer-headquarters-location — because “the end customer and shipping location may be different from customer’s billing location.” Singapore’s share of disclosed revenue collapses; United States share rises to ~70%. Cross-source disclosure-anomaly card “da-nvidia-georev-methodology-shift” anchors to this filing.
DoJ unseals indictment of three individuals · ≥$510M in AI servers diverted to China
The U.S. Department of Justice unseals an indictment of Yih-Shyan (“Wally”) Liaw, Ruei-Tsang (“Steven”) Chang, and Ting-Wei (“Willy”) Sun for allegedly conspiring to divert high-performance AI servers, assembled in the United States, to China in violation of U.S. export-control law. Per the DoJ release: a front company purchased approximately $2.5B of servers from the U.S. manufacturer (unnamed in the release) across 2024–2025, and at least approximately $510M worth was diverted to China between late April and mid-May 2025 alone, using false documents, staged dummy servers, and transshipment. Senator Warren’s June 1, 2026 letter to Nvidia characterizes the case as involving a Supermicro co-founder and “$510 million in diverted servers.” The indictment provides primary-source corroboration of the structural pattern — OEM→intermediary→end-customer — the Tracker’s cascade graph encodes.
Culper Research publishes its NVDA short thesis, synthesizing the Inspur / Aivres / Speedmatrix structural topology, the Tradesparq trade-volume aggregations, the Nvidia disclosure-methodology shift, and the BIS designation chain. The Tracker’s render of this publication is the worked example — not endorsement of every claim, and not a stand-in for the underlying primary sources.
Sen. Warren letter to Nvidia General Counsel and Audit Committee Chair on export-control compliance
Senator Elizabeth Warren (Ranking Member, Senate Banking Committee) writes to Nvidia General Counsel Tim Teter and Audit Committee Chair Brooke Seawell — not to CEO Jensen Huang — requesting information about Nvidia’s compliance with U.S. export control laws and the accuracy of its public statements about chip diversion. The letter cites three DOJ enforcement actions: the Nov 20, 2025 arrests for exporting AI technology to China via Malaysia and Thailand (“millions of dollars in GPUs”); the Dec 8, 2025 shutdown of a China-linked AI tech smuggling network (“$160 million in H100 and H200 chips”); and the Mar 19, 2026 indictment (“$510 million in diverted servers”). It quotes CEO Jensen Huang’s public statements that “[t]here’s no evidence of any AI chip diversion” and that Nvidia chip market share in China has “dropped to zero,” and puts four numbered questions to the Audit Committee, response deadline June 18, 2026.
2 of the 4 levers the framework identified, each naming the statutory authority under which reform could proceed and the structural-engineering gap the lever would close; the other 2 were assessed as derivative of these and are held on record with that reason. The selection is editorial and no ranking metric was applied. Every factual premise has its own source and authority tier, and 3 of them have no tier, because nobody on this project has opened the instrument they cite. This is descriptive: not a prediction of legislative likelihood, and not advocacy.
Structural issueUS
Designation reached this ownership chain entity by entity, not by uplift. Inspur Group was added to the Entity List effective 2 March 2023 (88 FR 13673); its A-share-listed subsidiary Inspur Electronic Information Industry Co., Ltd. — recorded there under the aliases Inspur Information and IEIT Systems Co. Ltd., and the owner of the US OEM Aivres Systems Inc. — was added separately, effective 25 March 2025 (90 FR 14046). For the two years between the two additions, the US operating entity sat below an intermediate carrying no designation of its own.
BIS 50%-subsidiary-extension rule extension to ultimate beneficial owner
What that rests on · 5 premises
T1
Inspur Group Co., Ltd. (a.k.a. Inspur Group; IGL) was added to the Entity List effective 2 March 2023, presumption of denial, Footnote 4.
Inspur Electronic Information Industry Co., Ltd. — recorded with the aliases Inspur Information and IEIT Systems Co. Ltd. — was added to the Entity List effective 25 March 2025, policy of denial for all items subject to the EAR, Footnote 4, as a subsidiary of Inspur Group.
The US OEM in this chain is Aivres Systems Inc. The California register returns exactly one Aivres entity — AIVRES SYSTEMS INC., entity 3815827, Stock Corporation - CA - General, initial filing 2015-08-11, active. No Aivres LLC is registered.
The one premise on this card that no public filing in this substrate carries. It is corroborated and it is not citable; both halves render.
T4Scrutica-derived
For the two years between the two additions, the US operating entity sat below an intermediate carrying no designation of its own.
Scrutica, from the two Federal Register notices above
Statutory authority
Unverified
Export Control Reform Act of 2018, §1758(a)(2) (Pub. L. 115-232) — delegating BIS authority to regulate "emerging and foundational technologies"; 15 CFR §744 Supplement No. 4 (Entity List).
Neither instrument was opened, so no tier is asserted over it.
Reform direction
Proposal, not a finding
Amend the 50% rule so that designation of any entity in an ownership chain uplifts to every entity that ultimately controls, or is ultimately controlled by, the designated party — regardless of jurisdiction of intermediate holding entities. The Inspur Group / Inspur Information / Aivres Systems chain is the worked case: designation reached the US entity only when BIS added the intermediate separately, two years after the parent.
SEA beneficial-ownership disclosure exists on paper (Singapore Companies Act §386AF; Malaysian Companies Act 2016 §60A; Indonesian Presidential Regulation 13/2018) but is not API-accessible to allied export-control authorities. End-customer identity verification requires bilateral mutual-legal-assistance requests that move at jurisdictional-court timescale.
Allied API access to SEA beneficial-ownership registries for export-control verification
What that rests on · 2 premises
Unverified
Singapore, Malaysia and Indonesia each impose a beneficial-ownership / registrable-controller disclosure obligation by statute.
No instrument was opened — an attempt to retrieve the Singapore statute on 2026-08-14 returned HTTP 403 — so the citation stands unverified rather than being asserted at Tier 1.
T4Scrutica-derived
None of those registers is API-accessible to allied export-control authorities; end-customer identity verification runs through bilateral mutual-legal-assistance requests at jurisdictional-court timescale.
Scrutica assessment
An assessment of an ABSENCE — that no such access channel exists. No source establishes it and none is claimed; it is the premise a reader should press hardest on this card.
Statutory authority
Unverified
Singapore Companies Act §386AF (Register of Controllers); Malaysian Companies Act 2016 §60A (Beneficial Ownership); Indonesian PR 13/2018; FATF Recommendation 24 (Beneficial Ownership of Legal Persons).
Same citations as the premise above, and unopened for the same reason.
Reform direction
Proposal, not a finding
Bilateral agreements with SG / MY / ID / TH / VN to provide allied export-control authorities API-level access to registered beneficial-ownership data — analogous to FATCA-style information sharing but for dual-use technology end-use verification. Closes the verification-latency gap the Culper thesis turns on.
Source transparency
Licensed-database provenance — how the licensed corporate-ownership and supply-chain substrate underpinning this page is held and audited (held under subscription, not redistributed).