Context: No supporting evidence was published: neither Treasury nor Commerce released watermark findings, sample models, or a methodology, and Bessent identified no company. The claim is not settled by the one government measurement published this week — the UK AISI/CAISI assessment of Kimi K3 evaluated cyber capability, not provenance. The threat itself remained unexecuted as of this cycle: Politico reported on July 23, citing a person familiar with the department's thinking, that Commerce had not begun drafting Entity List plans for Moonshot or other Chinese AI companies, and that any decision would depend on conclusive Commerce findings.