Applying export controls to AI models calls for public rulemaking, not undisclosed directives.