The university was blacklisted. An H200 order still appeared.

A restriction is supposed to follow the technology to the person using it. That is why this story deserves more than a familiar argument about whether America or China is winning the AI race. The immediate question is much more practical: who checked the eventual user? Reuters reports that Northwestern Polytechnical University, a Chinese institution on the US Entity List, obtained access to restricted computing through purchases and rentals. An indexed university procurement notice lists two NVIDIA H200 cards. That notice is evidence of a recorded order, not independent confirmation of delivery. The available record also does not establish that NVIDIA knowingly supplied the university or that these particular chips were used for military work. The legal distinction matters. H200 exports to eligible Chinese customers can receive case-by-case review; that does not remove institution-specific restrictions. The January rule also addresses prohibited remote users. Renting computing power should not be described as an unrestricted legal escape route. My concern is the distance between a rule and the chain of organizations expected to apply it. A reseller may know the buyer; a hosting provider may know the account; neither fact alone answers who ultimately uses the capacity. That is an enforcement question worth pursuing without pretending that two listed cards reveal the scale of an entire national programme. Legitimate researchers have a stake here too. When targeted controls cannot be credibly enforced, pressure can grow for broader restrictions that catch more people. A documented supply chain and usable end-user checks would be more informative than another round of sweeping claims.