Export controls on AI chips are supposed to slow frontier training abroad, but smuggling, cloud access, and domestic alternatives complicate the picture. Are controls measurably working, or mostly signaling?