Beijing unwound a closed AI deal — and rewrote where a company comes from

I.A finished deal came apart

Meta completed its roughly $2bn purchase of Manus, the Singapore-headquartered agentic AI company, on 29 December 2025. On 11 August 2026 Manus posted a note to its users saying it would “soon resume operating as an independent company,” and that some users would need to back up their data before 07:59 SGT on 23 August. Files created on or after the closing date are scheduled for deletion on 24 August, with a restore path opening the following day.

The sequence is the point. China’s National Development and Reform Commission opened a review in January 2026, prohibited the transaction on 27 April through its foreign-investment security review office, and required the parties to withdraw. Meta did not contest it. By June the two companies had severed systems and halted data sharing. A Tencent-led group is reported to be taking Meta’s stake at the original price, with early backers HSG and ZhenFund participating; that ownership structure has not been formally confirmed by the parties, and should be treated as reported rather than established.

What is new is not a blocked deal — regulators block deals constantly. What is new is a deal blocked after it closed, with the acquirer already inside the target for eight months.

II.Domicile stopped being a defence

Manus was structured exactly the way Chinese-founded startups have been structured for two decades. It traced back to Beijing-registered entities, moved its headquarters to Singapore in 2025 to take foreign money, and Meta stated there would be no continuing Chinese ownership and that China operations would be discontinued. None of it worked. The NDRC, as a Morgan Lewis analysis published 6 May 2026 put it, looked through the offshore structure to the origin of the technology, using the Measures for the Security Review of Foreign Investment in force since January 2021 — a regime that already contained the power to order a completed transaction unwound, and had simply never been used this way in public.

The one-off then became a rule. On 1 June 2026 the NDRC issued outbound rules that treat Chinese-origin technology, IP and key personnel as review triggers regardless of where the target is incorporated. On 1 July, State Council Decree No. 837 took effect, extending the definition of outbound investment to VIEs, SPVs, financing and control arrangements, imposing lifecycle reporting rather than one-time approval, and establishing a formal NDRC/MOFCOM security review with forced divestiture as an available penalty. The Cayman-or-Singapore restructuring playbook is not weakened. It is answered.

III.Washington is sealing the mirror channel

Within the same fortnight, the United States moved against the equivalent workaround on its own side. Bloomberg reported on 7 August that the Bureau of Industry and Security is reviewing how Chinese AI firms reach Nvidia hardware they cannot import — by renting it remotely in third countries, which is currently legal. The trigger was capability, not paperwork: Moonshot AI’s Kimi K3 posted benchmark results in the range of leading US systems, and a White House official alleged the compute behind it was obtained through an intermediary. The House has passed a bill extending export controls to cloud access; the Senate has not, and Nvidia is expected to resist.

Read together, the two moves are the same move. Beijing has decided a company’s nationality is set by where its technology was made. Washington is deciding a chip’s nationality is set by where it is rented from. Both are closing the arbitrage that let AI assets sit in a convenient jurisdiction while operating in an inconvenient one.

IV.The honest read: the capital stayed, the exit left

The tempting conclusion — that foreign money is being driven out of Chinese AI — is not what the data shows, and the strongest counter-evidence deserves stating plainly. Global venture funding hit a record $510bn in H1 2026, more than all of 2025, with over 70% of Q2 capital going to AI. Chinese foundation labs kept raising at scale, including a $2bn Series C for Moonshot AI in May 2026. And the public route opened: MiniMax surged 109% on its Hong Kong debut on 9 January 2026, raising $619m, days after Zhipu AI raised $558m on the same exchange.

Morgan Lewis is also explicit that the Manus precedent is proportional, not categorical: exposure depends on how much China nexus remains — founders’ ties, the acquirer’s China interests, the political salience of the sector. Agentic AI bought by Meta was close to a worst case on every axis. A quiet $80m acqui-hire of an infrastructure tooling team is not the same trade.

What the figure shows is the shape of the constraint. The blocked trade sale and the largest private round are the same size; each Hong Kong listing raises under a third as much. The trade sale to a US strategic was the single largest liquidity event available to a China-origin AI company this year, and it is the one route that has now been demonstrated to be revocable after the money has moved.

V.A passport now prices into the cap table

Trace the effect through four channels. Capital flows: dollar-denominated funds holding China-origin AI stakes have lost their highest-value exit and must price against Hong Kong or onshore listings instead — a route that, per the January comparables, clears smaller. Reincorporating onshore to reach it is not free: it means converting dollar stakes to renminbi, renegotiating with foreign LPs, and absorbing capital-gains treatment across jurisdictions. Market structure: US hyperscalers can no longer buy agentic capability that originated in China, which removes supply from an already thin market and bids up US and European agentic assets. Manus was bought at roughly 20x a self-reported $100m run rate; the next comparable asset without the jurisdictional problem should clear higher.

Prices: expect an explicit origin discount in diligence — not on the corporate registry, but on where the engineers were when the model was trained. Morgan Lewis flags the trap: the restructuring steps that reduce US outbound-investment exposure can simultaneously look, to Beijing, like documented technology extraction. Risk is redistributed, not removed. Labour: if the value is deemed to sit where the technology was built, teams become less portable, which pushes multinationals toward licensing, joint ventures and ring-fenced arrangements rather than ownership.

VI.The second-order cost lands on users

The Manus unwind ends with customer files being deleted to satisfy a regulator. That is a new category of counterparty risk for anyone building on an agentic platform: not that the vendor fails or is acquired, but that an acquisition is reversed and the data created during it cannot lawfully survive the separation. Manus has not said how much of its run rate will come through the transition, and a general-purpose agent is exactly the kind of product whose value compounds in the user’s stored context.

The wider consequence is bifurcation. If agent platforms cannot be acquired across the boundary, and the compute under them cannot be rented across it either, two agent stacks develop with separate data-governance regimes and no portability between them. Enterprises operating in both markets then carry two vendor sets, two audit trails and two sets of failure modes — a permanent compliance cost, not a transition cost.

VII.How it plays out: three scenarios

Probabilities below are analytical judgment, not measured frequencies, and are stated so they can be scored against the indicators later.