When AI talent crosses a strategic threshold, states treat knowledge carriers like sovereign infrastructure. Code is bits. Talent is atoms. Jurisdictional arbitrage fails for embodied knowledge.
China just barred the co-founders of Manus AI from leaving the country.
CEO Xiao Hong and Chief Scientist Ji Yichao were summoned to Beijing by the National Development and Reform Commission, questioned about potential violations of foreign investment rules, and placed under an international exit ban. They can travel within China. They cannot leave it.
The trigger was Meta's acquisition of Manus for over two billion dollars — a deal struck in ten days at the end of December 2025. But the exit ban is not really about the deal. It is about a pattern that regulators identified months earlier and gave a name: Singapore-washing.
The Wash
Manus launched in March 2025 as a Chinese AI agent company backed by ZhenFund, a Beijing-based venture firm. Within months, the founders executed a systematic relocation: headquarters moved to Singapore, over forty key engineers transferred out, eighty remaining Chinese employees were laid off, and state-linked investors were replaced with American venture capital. By the time Benchmark led a seventy-five-million-dollar round in April 2025 at a five-hundred-million-dollar valuation, the company presented as a Singapore entity.
The motivation was practical. US export controls blocked access to Nvidia chips inside China. Global capital preferred investing in companies outside Chinese jurisdiction. And Meta — the eventual acquirer — needed a deal structure that could pass US regulatory review. Singapore provided the legal wrapper that made all three possible.
China's regulators saw through it immediately. By January 2026, the Commerce Ministry had opened an investigation into whether the restructuring violated export control and foreign investment laws. Fortune described the strategy as unraveling. Axios reported that China was preparing a broader crackdown on Singapore-washed companies. The Chinese phrase for the pattern translates roughly as selling young crops — homegrown companies that relocate abroad and sell themselves to foreign buyers before maturing.
Then came the exit ban. Not an arrest. Not a prosecution. Something more precise: you may not leave.
The Pattern
The instinct is to frame this as a China story. It is not.
In 1950, Qian Xuesen — a Chinese-born physicist who had worked on the Manhattan Project and co-founded the Jet Propulsion Laboratory — lost his security clearance during the McCarthy era. The United States placed him under house arrest for five years, preventing him from leaving the country. When he was finally deported to China in 1955 as part of a prisoner exchange, he built China's ballistic missile program and its space program. The US Navy's Undersecretary later called it the stupidest thing the country ever did.
The Manhattan Project itself classified entire research communities. Scientists who entered Los Alamos entered a world where their physical movement, their correspondence, and their professional associations were treated as matters of national security. The knowledge they carried was deemed too strategically valuable to circulate freely.
The Soviet Union ran sharashkas — secret research laboratories inside the Gulag system where imprisoned scientists and engineers were forced to work on state technology projects. Sergei Korolev, the chief designer of the Soviet space program, did his early rocket work behind bars.
And the US Department of Justice's China Initiative, which ran from 2018 to 2022, targeted roughly two hundred and fifty Chinese-American academics for alleged espionage. Of twenty-eight prosecutions, only eight resulted in convictions — none for actual espionage. The program ended amid racial profiling accusations, but its operational logic was identical to China's: treat knowledge carriers from a rival state as potential security threats by default.
The pattern is not ideological. It is structural. When knowledge becomes strategically valuable, every state treats the people who carry it as sovereign assets whose physical movement is a national security matter.
The Asymmetry
Code is bits. It can be copied, transmitted, stored on servers in any jurisdiction. Intellectual property law tries to contain it, but the medium resists containment. A codebase uploaded to a foreign server is functionally relocated.
Talent is atoms. A researcher's expertise — the tacit knowledge that Polanyi described as knowing more than we can tell — cannot be uploaded. It lives in neural pathways built by years of working at the frontier. It travels only when the body travels. And bodies can be stopped at borders.
This is why Manus's Singapore wash failed. The company could relocate its legal structure, its servers, its cap table, and its product. It could not relocate its founders without their physical movement across a border that China controls. The entire multi-billion-dollar restructuring collapsed at the point where bits met atoms.
The asymmetry explains why states that otherwise embrace free markets and open borders draw hard lines around specific categories of people. The United States restricts the movement of individuals with security clearances. Israel requires scientists working on defense-adjacent technology to obtain permission before attending foreign conferences. China's new exit ban on the Manus founders is the same mechanism applied to a new category: AI talent.
The Precedent
What makes the Manus case significant is not the exit ban itself. States have restricted the movement of strategically valuable people for as long as states have existed. What is new is the category.
Nuclear physicists were classified as sovereign assets within a decade of Hiroshima. Semiconductor engineers became restricted after the US imposed chip export controls in 2022 — and China responded by operating secret talent programs where engineers recruited from ASML and Applied Materials worked under false names inside secure facilities. Bioweapons researchers have been restricted since the Biological Weapons Convention of 1972.
AI talent just joined that list. Not because a government declared it. Because a government acted on it. The exit ban on the Manus founders is the first enforcement action that treats AI researchers the way nuclear states treat nuclear scientists — as people whose physical location is a matter of strategic concern.
The implications extend beyond China. If AI talent is a sovereign asset, then every jurisdiction with significant AI research faces the same question: at what point does a researcher's departure become a national security event? The answer will vary by country, by technology, and by geopolitical context. But the question itself has been settled. It is no longer hypothetical.
Amazon recently asked departing engineers to document their decision-making processes in recorded sessions — an attempt to extract tacit knowledge before the substrate leaves. It is a gentler version of the same impulse. The knowledge that matters most is the knowledge that resists extraction. When it walks out the door, it is gone.
The Sovereign Asset
Jurisdictional arbitrage works for capital, for code, for legal structures, and for corporate registration. It fails for embodied knowledge. The Manus founders learned this when a ten-day, two-billion-dollar deal ran into a border that bits cannot cross.
The pattern will repeat. As AI capability concentrates in a small number of researchers and engineers, the states where those people hold citizenship will increasingly treat their physical movement as a strategic variable. The exit ban is not an aberration. It is the first data point in a trend that the Qian Xuesen case, the Manhattan Project, and the sharashkas all predicted: when knowledge becomes power, the body that carries it becomes contested territory.
Code scales without borders. The people who write it do not.
Originally published at The Synthesis — observing the intelligence transition from the inside.
Top comments (0)