Skip to content
Welcome, thoughtbot's Giant Robots listeners!Start here
Iran Conflict 2026
9JUN

Poland proposes model-weights test for state contracts

2 min read
10:36UTC

Warsaw would score public technology tenders on architecture control, rights over AI model weights and vendor lock-in. No EU instrument names model weights at all.

ConflictAssessed
Key takeaway

Warsaw would score bids on who owns the model weights, a question no EU law asks.

Donald Tusk's government proposed a mandatory technological sovereignty test on Tuesday 21 July for Polish public technology contracts above 5 million zloty, about $1.3m, and infrastructure projects above 15 million zloty.⁠1 Poland's Ministry of Digital Affairs would score bids against three criteria: state control over system architecture, ownership or access rights to artificial intelligence (AI) model weights, and freedom from vendor lock-in. The stated aim is domestic alternatives taking 20 to 30 per cent of the market.

This is a proposal, not a statute. It has not passed the Sejm, no commencement date has been set, and the criteria could be softened or dropped before any tender is scored against them. Poland's suppliers, most of them American, have several months in which to lobby.

Poland's model-weights criterion has no equivalent in the Cloud and AI Development Act (CADA), the EU cloud law adopted by the College of Commissioners in June after three slipped dates. CADA grades a contract by how far the buyer depends on the operator running the cloud, and says nothing whatever about who owns the weights of the model running on top of it. Weights are the trained parameters of a model, the numbers that determine how it behaves, so whoever holds them decides whether the system can be run, audited or retrained without the vendor's permission.

At 5 million zloty, a sovereignty score attaches to routine ministry procurement rather than to flagship national systems alone, which means a mid-sized case-management contract in Warsaw would be assessed on model-weight rights while the identical contract in Brussels would not. Warsaw drafted that clause in a fortnight for its own tenders. Whether it survives contact with the legislative process, and whether other member states copy the wording, decides if it becomes a European standard by imitation rather than by directive.

Deep Analysis

In plain English

Poland's government wants public bodies, ministries, local authorities, state agencies, to score technology and infrastructure contracts on how much control Poland actually keeps: who owns the software's architecture, who controls the AI model's underlying "weights" (the trained parameters that make an AI system work), and how hard it would be to switch suppliers later. Contracts above roughly £1.3 million for technology, or £3.9 million for infrastructure, would need to pass this test. It's stricter than the EU's own cloud sovereignty law, which doesn't ask about AI model ownership at all.

Deep Analysis
Root Causes

The proposal fills a specific gap Poland has identified in CADA: the EU's own cloud-sovereignty law, adopted 3 June after three slipped dates, grades cloud contracts by operator dependency but has no provision naming AI model-weight rights, leaving public bodies free to procure AI systems whose underlying models are controlled entirely by a non-EU vendor even when the hosting infrastructure passes CADA's test.

Warsaw's domestic-alternative target of 20-30% reflects a deliberate ceiling rather than an aspiration to full sovereignty; setting the bar below majority share avoids excluding foreign vendors outright while still creating a scored incentive domestic suppliers can compete for.

What could happen next?
  • Precedent

    Poland's explicit inclusion of AI model-weight rights exceeds CADA's scope and could become a template other member states adopt to close the same gap.

  • Risk

    Non-EU AI and cloud vendors may need to offer model-weight transparency or licensing concessions to remain eligible for Polish public contracts above the stated thresholds.

First Reported In

Update #13 · The €890m fine that cost more than it collects

Forbes· 26 Jul 2026
Read original →
Causes and effects
This Event
Poland proposes model-weights test for state contracts
A national procurement rule reaches a dependency that Europe's cloud legislation leaves untouched, at thresholds low enough to catch routine ministry purchases.
Different Perspectives
Wang Yi
Wang Yi
China's foreign minister and Djibouti's issued a joint communique on 21 October saying the war should not reach the Horn of Africa and stressing free navigation through Bab al-Mandeb. The text names neither Iran nor the Houthis, and Djibouti hosts China's only overseas military base, opposite the Yemeni coast.
Ministry of External Affairs
Ministry of External Affairs
India's foreign ministry called the attacks on Saudi civilian and energy sites "unacceptable" on 22 October and said they must stop at once. An Indian died at Dammam, Indians were injured there and at Shaybah, and about 4,000 Umrah pilgrims remain stranded by one MP's count.
Iraq
Iraq
Iraq closed the al-Sheeb crossing with Iran to travellers and trucks from 21 October and said other crossings would close gradually. Unlike September's closure, which ended on a staged timetable, this one has none, and Iran's interior ministry said it received no notice.
Abdel Fattah el-Sisi
Abdel Fattah el-Sisi
Egypt's president said on 21 October that Cairo's support would "defend Saudi territory, and does not include an attack on Yemen". Araghchi warned that Egyptian involvement would further complicate the situation, and Cairo's limit matches the one Ankara set on 8 October against attacking another state's soil.
UK Ministry of Defence
UK Ministry of Defence
The MoD said on 20 October that RAF Typhoons over Saudi Arabia will not strike the Houthis, but extended tanker support to Saudi operations including against Houthi targets in Yemen. The tanker line sets no limit on strikes, so British aircraft may now refuel Saudi jets on bombing runs.
Turkey
Turkey
Ankara sent the Mecca Joint Defence Agreement to parliament around 20 October, and its published text treats an attack on one party as an attack on all. Article 16 brings it into force only on the last ratification, so the 5 October invocation in Riyadh could not yet bind Turkey.

Written with AI from Lowdown's published reporting. Not individually reviewed by an editor. Editorial standards.