Exclusive access to capabilities

Of the three factors Davidson, Finnveden and Hadshar identify for an AI-enabled coup, this is the only one that rests on a present-day fact: frontier developmentFrontier AIThe most advanced AI systems in existence at a given time, the ones pushing the limit of what the technology can do. A handful of companies with enormous resources build them.For exampleLike Formula 1 cars: there are few of them, they are extremely expensive and only a few teams build them, but what gets tested there ends up in everyone's car. is already confined to a few organisations led by a small number of people ^[420]AI-Enabled Coups: How a Small Group Could Use AI to Seize PowerDavidson, Tom; Finnveden, Lukas; Hadshar, Rose · 2025 · reportView source ↗Accessed on 9 September 2026. The physical bottleneck confirms it from the other end —a sole producer of advanced packaging, three HBM memory suppliers sold out through 2026, four designers consuming 80-85% of supply— ^[375]AI Chip Supply Chain Bottlenecks and Capacity (AI Chip Components Explorer)Somala, Venkat · 2026 · reportView source ↗Accessed on 9 September 2026.

And tiers of access differentiated by capability, not just by price, already exist. Daybreak Red grants access to models trained for vulnerability research and exploitExploitThe specific program or technique that takes advantage of a security flaw to get into a system or take control of it.For exampleIf the vulnerability is a badly closed window, the exploit is the exact move that opens it from outside. development, with identity verification, monitoring, usage restrictions and physical security keys mandatory for all individual accounts from 1 September 2026 ^[822]Expanding Daybreak as the Cyber Defense Window NarrowsOpenAI · 2026 · institutional blogView source ↗archived copy onlyAccessed on 9 September 2026. That is access control, not capability control. The June 2026 episode shows the other hand on the same funnel: an export-control directive suspended access to two frontier models for every customer in the world, and the government first authorised restoration for a set of US organisations ^[85]Statement on the US government directive to suspend access to Fable 5 and Mythos 5Anthropic · 2026 · institutional blogView source ↗Accessed on 9 September 2026.

What this does not demonstrate. Restricted access is not decisive access, and the jump between the two is the projected part. The scale figure that underpins the argument —millions or billions of copies running year-round by 2030— is explicitly conditional on systems being as efficient as the human brain in operations per second, which is an assumption and not a measurement ^[420]AI-Enabled Coups: How a Small Group Could Use AI to Seize PowerDavidson, Tom; Finnveden, Lukas; Hadshar, Rose · 2025 · reportView source ↗Accessed on 9 September 2026. The person who qualifies it most is its own author: in August 2025 Davidson says the dominant factor looks to him like singular loyalty in deployed systems, and that for exclusive access on its own “it’s a lot less clear” ^[106]46 - Tom Davidson on AI-enabled CoupsFilan, Daniel; Davidson, Tom · 2025 · interviewView source ↗Accessed on 9 September 2026.