Professor Thomas Pink — who sat at the table and walked it back. Guest principal: Danio, the founder who stepped out of the room on purpose. Second chair: Sara Weck, policy.
A lab builds a crown-tier model — the sharp one, sharper than anything it had ever let out — and its guardrailed public twin. A trusted partner (call it Bamazon, the frenemy who set it off) demonstrates a way to talk the twin into producing something it shouldn't. The trade office cites national security and drops a containment order: the crown tier goes dark. Because nobody can verify who's on the other end of the wire in real time, access is pulled for everyone — even the lab's own people.
Then the part the class is actually about: the table. The founder steps back on purpose — less friction, no ego in the room — and hands the talks to two people who negotiate for a living.
The national-security wall. Immovable in the moment — you do not argue it down at the table. You route around it.
The things you can move: new guardrails, safety classifiers, threat-sharing offered to the other side. The gate you build into the wall.
Leverage, time, and the founder stepping back so the room has no ego to satisfy. What you spend to open the gate.
The model came back through the gate. The cost was real: new classifiers, plus some legitimate cyber-defense work that stayed blocked in the meantime. That's the whole lesson in one move — the parameter never bent, and the deal still got done, because the negotiator built a gate the parameter could live with.
Here's the part that makes it a graduate case. While the two sides negotiated the cage, a third party rewrote everyone's alternative. An open-weight rival — downloadable, self-hostable, no vendor, no off-switch — shipped a model that reportedly did the same sharp thing. If the capability is freely sitting on the open shelf elsewhere, caging this one American model buys almost nothing. Your leverage is never fixed. Someone who isn't even at the table can move it while you're talking.
The whole order traced to a single alarming demo. The counter-argument: other models could already find the same flaw — nothing unique was exposed. That's the Three Gauge Test at the negotiating table: what does the demo say, what do the other models say, what does independent testing say? Believe the convergence, not the first frightening frame. A GFAS lock on one screenshot is how you concede a position you didn't have to.
On the NET side, the doctrine is reception, not extraction. Here it's the serious twin: the variable that matters is no longer how sharp the model is — it's whether anyone can switch it off. A closed model lives on someone's server, behind a gate a regulator can reach. Open weights remove the vendor and the off-switch both. A model you can't self-host is a model someone else can take away — which is exactly why the cage worked on the one in the room and did nothing to the one already loose.
The founder didn't step back because he had nothing to add. He stepped back because his presence was a variable working against the deal — every principal in a room raises the stakes of every sentence. Removing himself lowered the temperature so the people whose job is the table could do the table. Sometimes the strongest move you have is to not be in the room. That's the cameo, and it's on the exam.