Smaller models are the future of AI sovereignty

Australia does not need a national chatbot with an Australian flag 🇦🇺🦘 stuck on the side. Nor do we become sovereign by signing a long-term contract for access to an American frontier model and calling that national capability.

If somebody else can change the price, alter the rules, withdraw the service or dictate its use, then the capability is rented. Rented capability is not sovereignty.

That does not mean Australia should attempt technological autarky. We cannot, and we should not. The real task is harder: retaining enough capability, visibility and choice that our institutions are not trapped when commercial, legal or geopolitical conditions change. That is what AI sovereignty should mean.

It is not a single model. It is not a procurement slogan. It is not a data centre announcement dressed up as strategy. It is the practical ability to choose, adapt, govern, replace and, when necessary, walk away.

Rented capability is not sovereignty

The first mistake in this debate is confusing access with control.

The leading US frontier models are often remarkable. They are useful for research, analysis, coding, writing, translation, customer support and a growing range of complex tasks. Australian organisations should use them where they make sense.

But these are services and they are controlled elsewhere.

When an organisation relies on a proprietary frontier model, it usually does not control the weights, the training choices, the policy settings, the processing environment, the update cycle or the commercial terms. It may not know exactly where data is handled. It may not be able to audit the system to the standard required for a high-accountability public decision. And if the provider changes the rules, the customer’s room to manoeuvre may be very small.

None of this makes frontier models bad. It makes them infrastructure with conditions attached. And infrastructure is political.

We have already learned this with cloud platforms, software ecosystems and social media. We are learning it again with AI, except this time the systems are likely to be embedded far more deeply into our administration, healthcare, education, research and critical infrastructure.

The more consequential the use, the more important the governance question becomes. Who gets to change the rules? Who decides what is permissible? Who can withdraw the service? Who can inspect the system? Who can turn it off?

If the answer is a company operating in another jurisdiction under another legal system and pursuing its own commercial interests, that is not a minor procurement detail. It is the issue.

The monopoly assumption is breaking

For much of the generative AI boom, the working assumption was that the United States would remain decisively ahead, and that the best systems would stay locked behind proprietary APIs. That assumption is starting to fray.

The 2026 Stanford AI Index found that the gap between the leading US and Chinese models had narrowed to low single digits. As of March 2026, Claude Opus 4.6 led Dola-Seed-2.0 Preview by 39 Arena points, or 2.7 percent.

The United States still holds enormous advantages in capital, compute, frontier labs and infrastructure. That matters, and it is not going away. But a small and fluctuating performance gap is a different strategic environment from one of overwhelming and durable US dominance.

Australia should not respond to that by swapping dependence on US systems for dependence on Chinese ones. That is not sovereignty. That is vendor diversification with a geopolitical flavour.

What matters is that the model landscape is becoming more plural. There are more capable systems, from more providers, under more varied licensing and deployment arrangements. That includes open-weight models that can sometimes be inspected, benchmarked, adapted and run in environments the user controls.

More models do not make Australia sovereign. They simply remove one excuse for remaining dependent.

Open weights are not a magic wand

There is now a lot of magical thinking attached to open-weight models. People hear that weights are available and leap to the conclusion that capability has somehow become local, accessible and sovereign by default. It has not.

Open-weight models matter because they widen the field of possible action. Stanford’s 2026 analysis found that the gap between the best open and closed models had narrowed substantially, and it identified Alibaba among the leading providers in a more tightly clustered frontier field.

That matters because capable institutions can do more than simply rent access through somebody else’s interface. They can inspect, test, adapt and in some cases operate models under their own governance settings.

But let’s not get carried away. Downloadable weights are not the same thing as usable capability.

A large model still needs compute (aka data centres), skilled people, secure infrastructure, evaluation, monitoring and money. It may still depend on foreign chips, foreign cloud capacity, foreign software frameworks and foreign research ecosystems.

Open weights are not sovereignty in a box. They are leverage.

And leverage is what gives institutions room to negotiate, contest and walk away. I have often argued that open institutions matter because they preserve the ability to resist concentration of power rather than simply accommodate it.

Small is often the strategic choice

The sovereignty conversation has been distorted by frontier-model theatre.

Most organisations do not need a model that can do everything. They need a system that can do a particular job, reliably, securely and at a cost they can sustain.

A council classifying planning documents does not need a trillion-parameter model. A health service answering staff questions from internal policy documents probably does not either. A regulator searching its own guidance certainly should not be sending sensitive material into an opaque external system by default.

For many of these jobs, a smaller model in a controlled environment is the better choice. Not because small is automatically safe, but because smaller systems are easier to host, test, bound, monitor and replace. That makes them easier to govern.

Smaller and specialised models can be:

• Hosted closer to sensitive data
• Adapted to Australian law, institutional language and defined workflows
• Evaluated more thoroughly against a narrower and better-understood set of risks
• Run at lower cost and with lower energy demand
• Operated with lower latency and better resilience
• Replaced without rebuilding the whole organisation around one vendor

The design principle should be simple: use the smallest model that can safely, reliably and economically perform the task, then justify every escalation in scale.

This is not an argument against frontier models. Some work will need them. But “use the largest model available” is not a strategy. It is a habit formed in an era when capability was scarce, concentrated and theatrically marketed.

Australia cannot go it alone

Let’s dispose of one fantasy right now. Australia is not going to achieve AI autarky.

We are not going to manufacture every advanced chip domestically, train every major foundation model from scratch, own every cloud layer or detach ourselves from global research and software ecosystems. Nor should we try.

Autarky would be ruinously expensive, technologically brittle and strategically foolish. It would replace one set of dependencies with a smaller, more fragile local monoculture. But rejecting autarky does not mean accepting helplessness.

The real alternative is managed interdependence.

That means understanding where power sits in the AI stack and deciding, consciously, which dependencies are tolerable and which are dangerous. It means knowing where the chips come from, where the model is hosted, who controls the updates, what the licence permits, which cloud services are indispensable and which skills are so scarce that they become strategic bottlenecks.

It also means having options before we need them.

An institution should not discover during an outage, contract dispute, export-control shock or geopolitical rupture that one external provider has quietly become the operating system for an essential public function.

That is not resilience. It is wishful thinking with an invoice attached.

Sovereignty is tested under pressure

Real AI sovereignty is not a claim about where a model was trained, where a company is headquartered or where a server happens to sit. It is a test of what happens under pressure.

Can you:

• Inspect the system?
• Independently test its performance, safety, privacy and security?
• Move the data?
• Shift workloads to another model?
• Keep operating if the provider changes the terms?
• Tell when the model has changed?
• Meet your legal, regulatory and public-accountability obligations?
• Turn it off?

If the answer to those questions is no, then you do not have sovereignty. You have a dependency that has not yet been tested.

This matters most in government, regulated sectors and critical infrastructure. We should be very cautious about building essential functions around systems that cannot be independently evaluated, meaningfully audited or credibly replaced.

A proprietary model may still be the right choice in some cases. There is nothing inherently wrong with buying a service. But the decision should be deliberate, proportionate to the risk, and backed by contractual, technical and operational safeguards.

The point is not to eliminate dependency. The point is to ensure that dependency does not become obedience.

No single national champion required

The choice is not between a small Australian model and a giant American or Chinese one. That is not how a serious AI strategy works. Australia needs a portfolio approach, we need:

• Routine, private or low-latency work: Small local or Australian-hosted model
• Regulated decision support: Domain-adapted models with defined evaluation, logging and human oversight
• Complex research, multimodal analysis or agentic work: Large open-weight model where infrastructure and governance justify it
• Exceptional general-purpose capability: Proprietary frontier model, used selectively with security, contractual and exit controls
• Nationally significant uses: Australian research, evaluation, operational expertise and secure infrastructure across the stack

This is not about picking a national champion. It is about avoiding a national dependency.

The more AI becomes part of essential systems, the more we need to be able to negotiate, contest and walk away from the companies that provide it. The most important policy task is not to produce another strategy document full of aspirational language about trustworthy or responsible AI.

It is to build the capacity to choose, and that means investing in:

• Australian-hosted inference and secure compute for sensitive workloads
• Public-sector capability to procure, test, monitor and govern AI systems
• Independent model evaluation for security, reliability, privacy, bias and cultural appropriateness
• Fine-tuning, deployment and operational expertise across government, universities and industry
• Open standards and interoperable architectures that reduce vendor lock-in
• Indigenous data governance and meaningful community authority over culturally sensitive data and AI use
• Practical requirements for portability, continuity and tested exit plans in high-consequence procurement
• The technical and legal ability to pause or shut down AI systems safely when required

This is not glamorous work. It will not produce a shiny national chatbot to unveil at a press conference. It will produce something much more useful: institutions that can use AI without surrendering their capacity to govern it.

The future of AI sovereignty is not one giant sovereign model. It is the ability to choose the right model for the job, understand the dependencies it creates, and change course when the provider, the contract or the geopolitical environment changes.

That is the capability Australia needs to build. Not independence from the world, but enough agency to remain a participant in it rather than merely a customer.