AI Lattice / Permission
Who is allowed to do what in AI?
Compute and power can be bought. Permission has to be granted, and it can be taken back. This page maps who needs permission, who grants it, where each one stands and what it takes to pull it.
Evidence as of 2026-11-10, the newest record on this page. 23 permission relationships, each with a source. This is the Alignment layer of the map: the rules that decide what AI companies may sell, build and do.
A selection, not a full count. A map of permission relationships. Companies with at least one row: Anthropic, Nvidia, OpenAI, Mistral, Synopsys, Salesforce, ServiceNow, SoftBank, Meta, Oracle, CoreWeave, Amazon, Google, Microsoft. Each company holds or needs many more permissions than are shown here.
Our answer
The money is committed for years. Permission can be pulled in a day.
The clearest case took one directive from one agency. On June 12, 2026 a Commerce directive took effect immediately and a frontier model went dark for every customer the same day. Access was restored on July 1. It was not the first time: a Commerce letter put a license requirement on Synopsys's chip-design software and technology for China from May 29 to July 2, 2025.
The gate now sits at both ends of the build-out. Governments decide what can be sold: the United States, the EU and China each have a lever on models or chips. States and grid regulators decide what can be built and connected.
This is a map of permission relationships, not a count of all permission in AI. It holds 23 relationships, each a permission someone had to ask for or a requirement placed on them: 4 granted, 7 conditional, 6 pending, 4 blocked and 2 pulled and then restored. It is a selection, so the mix says nothing about AI as a whole.
What the record cannot yet show is the dollars. Almost no company discloses how much revenue rests on a single permission, so the money column is blank where no source fills it.
This section is exmxc's judgment. The record it rests on follows, with sources.
23
Permission relationships mapped
Permissions asked for (granted, refused, pending or lost) and requirements imposed.
4
Granted
P015, P016, P017, P022
7
Conditional
P002, P004, P006, P007, P008A, P010, P019
6
Rule or approval pending
P008, P011, P012, P013, P018, P021
4
Blocked
P003, P005, P009, P020
2
Pulled, then restored
P001, P014
Permission to sell
Governments deciding which models and chips can be sold, and to whom.
| Who needs it | For what, and where it stands | What the record shows | What it takes to pull it | What rides on it |
|---|---|---|---|---|
| Anthropicneeds it from US Commerce (BIS) | Selling Fable 5 to customers Pulled, then restored last record 2026-07-01 |
On June 12, 2026 a Commerce directive requiring export licenses for foreign access took effect immediately. Anthropic switched the model off for all customers the same day. Controls were lifted June 30 and access was restored July 1. CSIS, 2026-06-16 Anthropic, 2026-07-01 | What it takes to pull it: A Commerce directive, effective immediately. The model went dark for every customer, not only foreign ones. | What rides on it: All customer access to the model from June 12 until access was restored July 1. Revenue effect not disclosed. |
| Anthropicneeds it from US government | Selling Mythos 5 to customers Conditional last record 2026-07-01 |
Switched off with Fable 5 on June 12, 2026. Returned July 1 for selected US organizations, following US government approval. The record does not say who selected them. CSIS, 2026-06-16 Anthropic, 2026-07-01 | What it takes to pull it: The same directive. | What rides on it: Access for every customer outside the selected US organizations. Revenue effect not disclosed. |
| Anthropicneeds it from Pentagon | Standing as a supplier to the US military Blocked last record 2026-09-25 |
The Pentagon labeled Anthropic a supply chain risk. An appeals court upheld the label 2-1 on September 25, 2026. ABC News, 2026-09-25 | What it takes to pull it: A government label, tested in court and left standing. | What rides on it: Not disclosed. |
| Nvidianeeds it from US Commerce (BIS) | Selling H200 chips to China Conditional last record 2026-08-26 |
Beginning in February 2026 the US government granted licenses to ship small amounts of H200 chips to specific customers in China. Each chip must pass a US inspection before it ships. Nvidia says it has made only a fraction of the shipments allowed. Nvidia (SEC filing), 2026-08-26 | What it takes to pull it: US export licenses, granted customer by customer. | What rides on it: H200 shipments under the licenses were less than 1% of Nvidia's data-center revenue in the quarter ended July 26, 2026, and Nvidia took a $0.4 billion charge for excess H200 inventory and purchase obligations in the first half of its fiscal year (filing figures). |
| Nvidianeeds it from US Commerce (BIS) | Selling Blackwell and Rubin chips to China Blocked last record 2026-11-10 |
US licensing requirements in place since October 2023 cover Nvidia's Blackwell products, including the B200 and GB200, Nvidia's filing says. Press reporting in November 2026 describes both Blackwell and the newer Rubin chips as banned from export to China. Nvidia (SEC filing), 2026-08-26 Malay Mail, 2026-11-10 | What it takes to pull it: US export licensing rules. | What rides on it: Nvidia says it was effectively shut out of China's market for data-center computing as of July 26, 2026 (filing). |
| Nvidianeeds it from China regulators | Delivering H200 chips into mainland China Conditional last record 2026-11-05 |
China's customs stopped H200 shipments in January 2026. Nvidia's August filing says the Chinese government restricted the sales, so it could not sell all the chips it holds US licenses for. Reuters reported on November 5, 2026 that China has let some chips in while withholding approval for large-volume imports. Taipei Times, 2026-01-15 Nvidia (SEC filing), 2026-08-26 Reuters (via The Express Tribune), 2026-11-05 | What it takes to pull it: Import approval withheld by the Chinese government. | What rides on it: About 600,000 H200 chips stored in Hong Kong awaiting shipment (outside estimate: Reuters, citing two people familiar with the matter). |
| Providers of general-purpose AI models in the EU, including OpenAI and Mistralneeds it from EU AI Office | Offering general-purpose models in the EU Conditional last record 2026-10-26 |
The Commission's enforcement powers over AI Act obligations for providers of the most advanced models entered into application on August 2, 2026, a year after the obligations began to apply. The AI Office has since sent its first information requests to model makers; our record does not name the recipients. The official source names no company: listing OpenAI and Mistral as covered providers is our inference. Our inference European Commission, AI Act Service Desk, 2026 Reed Smith, 2026-10-26 | What it takes to pull it: The AI Office can request information, test a model, require fixes, and ask a provider to restrict, withdraw or recall a model. | What rides on it: Fines of up to 3% of global annual turnover. |
| Exporters of advanced AI technology from Chinaneeds it from China regulators (Ministry of Commerce) | Exporting AI technology that China proposes to put on its export catalogue Rule or approval pending last record 2026-10-16 |
Still pending: on October 16, 2026 China's commerce and science ministries proposed adding 40 technologies to the catalogue of technologies banned or restricted from export, 23 of them in AI: large models, agents, computing clusters and information processing. Comment is open to November 15. Technology already public through open source or academic papers is left out. The revised catalogue has not been issued. China Ministry of Commerce, 2026-10-16 | What it takes to pull it: A listing on China's export catalogue, not yet final. | What rides on it: Not disclosed. |
| Exporters of advanced AI technology from Chinaneeds it from China regulators (Ministry of Commerce) | Exporting technology on the proposed list, subject to registration first Conditional last record 2026-10-16 |
In force since October 16, 2026: exporters must register on the commerce ministry's platform before exporting any technology on the proposed list, including exports already under way. Registration covers transfers of ownership abroad, licenses for use abroad and changes of control to a foreign party. It applies until the revised catalogue takes effect. The announcement describes it as registration, not as a license or an approval. China Ministry of Commerce, 2026-10-16 | What it takes to pull it: An interim rule issued with the proposal and effective the same day. | What rides on it: Not disclosed. |
| Synopsysneeds it from US Commerce (BIS) | Rescission of the license requirement Commerce placed on Synopsys in May 2025 Pulled, then restored last record 2026-08-26 |
On May 29, 2025 Commerce sent Synopsys a letter requiring a license to export, re-export or transfer chip-design (EDA) software and technology in two export-control categories (3D991 and 3E991) whenever a party to the deal is in China or is a Chinese military end user anywhere. On July 2, 2025 Commerce told Synopsys that requirement was rescinded, effective immediately. The rescission lifted that one requirement; it is not a general exemption, and other US export rules on chip-design software still apply. Synopsys's filing for the quarter ended July 31, 2026 still reports the effect: the rescinded restrictions hurt its business in China and may keep affecting it. Synopsys (SEC filing), 2025 Synopsys, 2025-07-02 Synopsys (SEC filing), 2026-08-26 | What it takes to pull it: A letter from Commerce, in both directions. | What rides on it: No dollar figure disclosed. Synopsys says the restrictions negatively affected its China business, including its design IP segment (filing). |
| Salesforceneeds it from US government (FedRAMP) | Using Agentforce AI agents inside Government Cloud Plus, Salesforce's FedRAMP High environment Granted last record 2026-11-10 |
The FedRAMP Marketplace lists Salesforce Government Cloud Plus as FedRAMP Certified at the High level (Class D), certified since May 27, 2020, with 67 authorization letters on record as of November 10, 2026. The Marketplace record does not name Agentforce. Salesforce announced on June 4, 2025 that Agentforce had achieved FedRAMP High authorization, and its help page says Agentforce in Government Cloud Plus is FedRAMP High authorized. FedRAMP, 2026-11-10 Salesforce, 2025-06-04 Salesforce Help, 2026 Nextgov/FCW, 2025-06-04 | What it takes to pull it: A federal security authorization for the environment the agents run in. | What rides on it: Not disclosed. |
| ServiceNowneeds it from US government (FedRAMP and the Defense Department) | Running AI agents inside ServiceNow's two authorized government clouds Granted last record 2026-03-05 |
ServiceNow's Government Community Cloud holds a FedRAMP High authorization (since August 2019) and a Defense Department Impact Level 4 authorization (since October 2019). Its National Security Cloud holds a Defense Department Impact Level 5 provisional authorization. ServiceNow said on March 5, 2026 that its Autonomous Workforce was available in both clouds; on that date the first AI specialist was in controlled availability, with general release expected in the second quarter of 2026. ServiceNow says Moveworks, its AI assistant, is authorized at FedRAMP Moderate. ServiceNow, 2026 ServiceNow, 2026-03-05 | What it takes to pull it: Federal security authorizations for the two environments. | What rides on it: Not disclosed. |
Permission to buy
Regulators deciding which deals can close.
| Who needs it | For what, and where it stands | What the record shows | What it takes to pull it | What rides on it |
|---|---|---|---|---|
| SoftBankneeds it from US and foreign regulators | Buying DigitalBridge, an investor in data centers and other digital infrastructure Granted last record 2026-09-30 |
DigitalBridge's proxy statement listed the approvals the deal needed. In the United States: antitrust clearance, the Committee on Foreign Investment in the United States, the FCC, FERC and state utility commissions. Abroad: antitrust reviews in the European Union, Australia, Japan and Mexico, the EU's foreign-subsidies review, foreign-investment reviews in fourteen countries including the United Kingdom, Germany, France and Canada, and financial regulators in the United Kingdom and Singapore. On September 22, 2026 DigitalBridge announced that all required approvals had been received, naming FERC and the foreign-investment committee. SoftBank completed the purchase on September 30, 2026. DigitalBridge (SEC filing), 2026 DigitalBridge, 2026-09-22 SoftBank Group, 2026-09-30 | What it takes to pull it: Approvals from regulators in more than a dozen countries. | What rides on it: About $3.1 billion, at $16.00 per share in cash (company figures). |
| Nvidianeeds it from Regulators | Buying Hugging Face Rule or approval pending last record 2026-09-02 |
Nvidia agreed on September 2, 2026 to buy Hugging Face. Closing is expected in the first half of 2027 and depends on required regulatory approvals. NVIDIA (SEC filing), 2026-09-02 | What it takes to pull it: Regulatory approvals not yet given. | What rides on it: About $11.9 billion, plus up to about $1.0 billion of stock-based retention (filing figure). |
Permission to build and switch on
States and grid regulators deciding which sites get built and connected. The gigawatts behind these rows are on the power page.
| Who needs it | For what, and where it stands | What the record shows | What it takes to pull it | What rides on it |
|---|---|---|---|---|
| Builders of new hyperscale data centers in New Yorkneeds it from New York State | Building new sites over 50 MW Blocked last record 2026-07-14 |
First statewide moratorium, launched July 14, 2026: a pause of up to one year on discretionary environmental permits for projects over 50 MW. New York State Governor's Office, 2026-07-14 | What it takes to pull it: A state moratorium. | What rides on it: Not disclosed. |
| Data centers waiting for a grid connection in Texasneeds it from ERCOT and the Texas regulator | Connecting to the Texas grid Conditional last record 2026-08-21 |
On August 3, 2026 the governor directed ERCOT, the Texas grid operator, to verify data-center projects before advancing them. ERCOT said the same day it would not issue the large-load classifications due August 7. On August 20 the state regulator excused the missed deadline and let ERCOT classify large loads conditionally. ERCOT, 2026-08-03 ERCOT, 2026-08-21 Utility Dive, 2026-08-06 | What it takes to pull it: A governor's directive. | What rides on it: About 49.8 GW of projects touched by the pause (outside estimate, BNEF). |
| Large new loads in six US grid regionsneeds it from FERC, through six grid operators | Connecting large loads to the grid Rule or approval pending last record 2026-06-18 |
FERC ordered six grid operators to justify or rewrite their rules for connecting large loads. Duane Morris, 2026-06-18 | What it takes to pull it: A federal regulator's order. | What rides on it: Not disclosed. |
| Meta (Hyperion campus, Louisiana)needs it from Louisiana Public Service Commission | Seven more gas plants to power the campus Rule or approval pending last record 2026-11-09 |
Three Entergy gas plants were approved in August 2025. The plan tripled in March 2026 to ten plants. In April 2026 the commission voted 4-1 to fast-track the request for the other seven, with its vote set for December 2026. Industrial Info Resources, 2025-08 The Lens, 2026-04-03 Louisiana Radio Network, 2026-04-16 WWNO (via KRVS), 2026-11-09 | What it takes to pull it: A state commission vote not yet taken. | What rides on it: 5.25 GW of planned power (our arithmetic: the 7.5 GW plan less the 2.25 GW approved). |
| Oracle and Vantage (Port Washington campus, Wisconsin)needs it from Wisconsin's state regulator | A transmission line to power the campus Rule or approval pending last record 2026-10-04 |
The regulator closed the transmission-line case after the utility kept changing its filing. The utility refiled September 18, 2026, restarting the review clock. Partial power is now expected about June 2028 and the full 1.3 GW about April 2029. TechRadar, 2026-10-04 | What it takes to pull it: A regulator's review clock. | What rides on it: 1.3 GW of grid draw. |
| CoreWeaveneeds it from ERCOT and the Texas regulator | Moving its Texas data-center projects forward Conditional last record 2026-08-18 |
On August 18, 2026 the Texas governor's office said CoreWeave had committed to comply with the governor's data-center standards. Under them the state regulator and the grid operator must receive and audit each project's information before it moves forward, and a company that fails the audit will have its approval denied. Office of the Texas Governor, 2026-08-18 | What it takes to pull it: A state audit each project must pass. | What rides on it: Not disclosed. |
| Amazonneeds it from FERC | Raising the direct supply from the Susquehanna nuclear plant, Pennsylvania, by 180 MW Blocked last record 2026-08-05 |
On November 1, 2024 FERC rejected an amended grid agreement (189 FERC ¶ 61,078) that would have raised the direct, co-located supply to Amazon's data center beside the plant from 300 MW to 480 MW. The vote was 2-1. That increase remains blocked. Separately, in June 2025 Talen, the plant's majority owner, and Amazon signed a revised agreement under which Talen expects to supply up to 1,920 MW through the grid through 2042, phased in over several years. Talen's filing for the quarter ended June 30, 2026 says the switch to the revised agreement took place in April 2026. FERC, 2024-11-01 Utility Dive, 2024-11-04 Utility Dive, 2025-06-11 Talen Energy (SEC filing), 2026-08-05 | What it takes to pull it: A vote by the federal power regulator. | What rides on it: 180 MW of added direct supply (our arithmetic: 480 MW less 300 MW). Separately, Talen estimates about $18 billion of revenue over the life of the replacement agreement at full quantity (company estimate). |
| NextEra, for Google (Duane Arnold nuclear restart, Iowa)needs it from Nuclear Regulatory Commission | Restarting the reactor that will supply Google Rule or approval pending last record 2026-09-08 |
NextEra is restarting the plant under a 25-year power contract with Google. On April 23, 2026 the NRC opened a hearing opportunity on the license changes needed to restart, and said it had not yet decided. The Energy Department closed a $1.9 billion loan for the restart on September 8, 2026. US Nuclear Regulatory Commission, 2026-04-23 U.S. Department of Energy, 2026-09-08 Latitude Media, 2025-12-08 | What it takes to pull it: A federal license decision not yet made. | What rides on it: About 615 MW on a 25-year contract. |
| Constellation, the applicant (Crane nuclear restart; Microsoft is the power customer)needs it from FERC | A waiver to move grid-connection rights to the restarted reactor Granted last record 2026-06-01 |
On June 1, 2026 FERC granted Constellation a one-time, limited waiver of the grid operator's rules (195 FERC ¶ 61,162, Docket ER26-2028-000). It lets Constellation move 760 MW of grid-connection rights from Eddystone Units 3 and 4 to the Crane Clean Energy Center, the former Three Mile Island unit it is restarting. FERC said the waiver does not change Crane's place in the queue or prejudge the grid operator's studies. The order does not name Microsoft. Constellation announced on September 20, 2024 that it had signed a 20-year agreement to sell the plant's power to Microsoft. FERC, 2026-06-01 FERC (copy hosted by RTO Insider), 2026-06-01 Constellation, 2024-09-20 | What it takes to pull it: A waiver from the federal power regulator. | What rides on it: About 835 MW of plant capacity (company figure). |
Permission to act
Governments are not the only gatekeepers. A company that lets an AI system work inside its own systems is granting a permission too. Strategic Signal tracks these arrangements one by one.
In Strategic Signal's November 3, 2026 archive, 134 of 205 disclosed arrangements include action execution as an access mode. Strategic Signal, 2026-11-03
Action execution (the field action_execution) is one of eight access modes a record can carry. It marks an arrangement where the source shows the AI system can take actions inside the owner's systems or workflows, such as updating records or starting a workflow, and not only read from them. A record can carry several modes at once, so this count overlaps with the others.
How to read this page
What counts as a row
One permission that someone has had to ask for (granted, refused, pending or lost), or one requirement placed on them. Ordinary business that needs no one's sign-off is not listed. The counts by status describe this selection only.
What the status means
The last status on record, with the date of the source behind it. A row may have moved since; each row is re-checked in the quarterly review.
What rides on it
Only what a source states. Figures are labeled as a filing figure, an outside estimate or our arithmetic. Where nothing is disclosed, the cell says so.
The money behind the same companies: Does the AI money add up? The gigawatts: Is there enough power for AI? Download as permission.csv.