The Prestige Camouflage

That instinct is the entire subject of this interlude. Because the instinct is not a mistake. It is the camouflage.

The Mind’s Hierarchy

Americans carry an unspoken ranking of their own universities, and that ranking is much narrower than the universities themselves. At the top, two private institutions function as universal shorthand: Harvard for status and power, the Massachusetts Institute of Technology for technical authority. When a reader hears that China is targeting elite American science, the brain reaches almost involuntarily for those two names. They fit the symbolic structure. They confirm the story you already half-knew.

Below that ceiling, things get blurrier. Stanford registers, sometimes Princeton. Berkeley is in the conversation but is mentally filed under “public flagship” or “Bay Area counterculture” or “Free Speech Movement,” not under “global elite peer to Tsinghua.” Carnegie Mellon, Caltech, the University of Michigan, the University of Texas at Austin, the University of Illinois at Urbana-Champaign, Georgia Tech, Purdue, the University of California at San Diego, the University of Washington — world-class engineering and research universities, every one — barely register as “elite” in the prestige translation at all.

And below that tier, in the public mind, there is essentially nothing. A small Catholic university in Lacey, Washington, called Saint Martin’s? A regional school in Tahlequah, Oklahoma? Bryant University in Smithfield, Rhode Island? These are not even on the map of “places where great-power espionage happens.”

That is the camouflage. The Chinese Communist Party did not have to build it. America built it for itself, decades ago, when it agreed that prestige meant the same five or six schools. And once that mental shortcut hardened into reflex, every school that fell outside it became, by definition, invisible.

What the Map Actually Looks Like

In September 2025, the United States House Select Committee on the Chinese Communist Party, working jointly with the House Committee on Education and the Workforce, published a 24-page report titled Joint Institutes, Divided Loyalties. The committee had spent two years asking American universities, in writing, what arrangements they had with the People’s Republic of China. The report’s central finding can be stated in one sentence.

The committee identified nearly one hundred and fifty American university partnerships with Chinese entities tied to the People’s Liberation Army or the Chinese defense industrial base, and walked through more than fifty of them in detail.¹

You have heard of two: the Tsinghua-Berkeley Shenzhen Institute, which Berkeley is now unwinding, and the Shanghai Jiao Tong University-University of Michigan Joint Institute, which Michigan closed in January 2025. Those two made the news. Eight more joint institutes have been shuttered after committee pressure — the University of Pittsburgh, Oakland University, the University of Detroit Mercy, Eastern Michigan University, the University of Illinois, the Georgia Institute of Technology — and most readers would struggle to name even two of those.² A further thirteen high-risk joint institutes that the committee specifically flagged remain in operation.³

Read the list slowly. Read it twice. These are the institutions where, by the committee’s documented findings, the corridor remains open right now — while you have been told to worry about Harvard.

How Many of Those Schools Did You Recognize?

Be honest. Two? Three? Saint Martin’s University has an undergraduate enrollment around fifteen hundred. It is a Catholic university founded by Benedictine monks. Until I wrote this sentence, I would have struggled to place it on a map. And it is in a joint degree program in mechanical design with a Chinese institute jointly supervised by the conglomerates that build the missiles China would aim at the United States in a war.

That is the point. That is the entire point.

The corridor is not built where Americans expect espionage. It is built where Americans do not look at all.

Why It Works

Step back from the list and consider the strategic logic, because it is elegant and it is everywhere.

A flagship like Harvard or the Massachusetts Institute of Technology attracts scrutiny precisely because of its brand. A partnership with Tsinghua would be on the front page of the Chronicle of Higher Education the morning it was announced. Federal grant officers, alumni groups, congressional staff, and investigative journalists would be on it within hours. The cost of getting caught is high, and the brand itself raises the risk of being caught. Harvard, by virtue of being Harvard, is in some ways the worst target.

A regional state university or a small private college is the opposite. Its brand is the brand of its region; its presence is felt locally, not nationally; its administration is leaner and its general counsel’s office smaller; its Section 117 foreign-funding disclosures, if they exist at all, are not parsed by national reporters. Federal grant officers see “Saint Martin’s University” and read “small Catholic school in Washington state.” A national reporter sees the name and does not see a story. And meanwhile, the school has something genuinely valuable: a federally accredited engineering program, real laboratories, real students, and a federal designation that lets it confer real American engineering degrees.

The Chinese Communist Party, by the documentary record the House Select Committee assembled, has noticed all of this. Some of the partnerships are at the marquee schools where the prestige translation lights up the Western imagination; that is the bait. But the bulk of the network — the part that operates in the dark — sits at the schools that exist below the prestige threshold. The brand that protects Harvard from quiet predation is the same brand that, for a school nobody outside the region has heard of, simply does not exist.

And there is something darker here too, because the prestige hierarchy is not just an attentional filter. It is a credentialing system. A joint degree from Saint Martin’s University, conferred to a Chinese national who spent four years inside a partner program with a missile-producing institute, says “Saint Martin’s University” on the diploma. It says “United States.” It opens doors at American companies, in American visa categories, on American defense contracts in ways that a degree from the missile institute alone never could.

The corridor is not just transferring research. It is laundering legitimacy.

The Cutout

And once you see the prestige-camouflage pattern, you start noticing that the architecture is, in fact, more sophisticated than direct university-to-university memoranda of understanding. The Chinese Communist Party has built the next layer down. There is now a class of corporate intermediaries — cutouts, in intelligence parlance — that handle recruitment, operations, and program delivery for partnerships that an American school can describe to itself as “a corporate education partnership” rather than “a deal with Tsinghua.”

The clearest public example is a company called Tsinghua Holdings Zijing (Beijing) Education Group — Zijing Education, for short — which was, in its own words on the websites of its American partners, “initially founded and incubated by the PBC School of Finance of Tsinghua University.”⁹ The PBC School of Finance, you may recall, was itself founded in 2012 as a joint venture between the People’s Bank of China and Tsinghua University — that is, between the Chinese central bank and the country’s flagship party-cadre university. Zijing operates out of Tsinghua University Science Park in Beijing’s Haidian district. The address appears on the websites of its American university partners, in plain text.

Zijing’s business model is to act as the operational front end for American degree programs delivered partly in China to Chinese students. The American university provides the brand and the degree. Zijing provides — in the language used by its American partners themselves — “operational services and student recruitment.”¹⁰ The partner roster, in technology-relevant fields, is substantial:

Read that list with the prior list still in your mind, because the engineering of the cutout is what makes it remarkable. None of these partnerships will appear on a Section 117 disclosure as a contract with Tsinghua University. The contracting entity, on paper, is a corporation. The American school can answer truthfully, if asked, that it has no joint institute with Tsinghua. And the program will still place Chinese nationals into American master’s programs in computer engineering and electrical engineering, on diplomas bearing the names of accredited American universities, on degree pathways recruited and operated by a corporation that publicly identifies itself as having been founded by the People’s Bank of China and Tsinghua University.

The Park University MBA does not get a press release. The Stevens Institute electrical-engineering master’s does not get a New York Times investigation. The Marywood Executive MBA in Mandarin does not get a House Select Committee letter. They sit beneath every existing layer of scrutiny because the existing scrutiny is built to detect joint institutes, not corporate intermediaries that route the same students to the same kinds of programs at the same kinds of schools without ever crossing the institutional-MOU threshold that triggers the existing oversight architecture.

The cutout is not a workaround. It is the next layer of the same architecture.

The Soft Lane

Even the cutouts are not the bottom of the picture, because the corridor has lanes that move not chip designs but people, networks, and credentials — the long-cycle infrastructure of influence rather than the short-cycle technology transfer. Two of those lanes deserve naming.

The first is the continuing-education and extension-program lane. American universities run, alongside their traditional degree programs, a sprawling and lightly governed continuing-education industry: certificate programs for working professionals, executive education courses, online master’s degrees marketed to mid-career adults. By design, these programs operate at lower scrutiny than the residential undergraduate and graduate pipelines. Their admissions standards are looser, their reputational stakes are smaller, their international recruitment is more entrepreneurial, and their oversight by university provosts and federal grant offices is correspondingly lighter. And the demographic they serve — working professionals already in their careers — is the demographic that, five and ten years later, occupies positions of trust and access inside American industry and government. A certificate program does not feel like an espionage vector. That is why it can serve as one.

The second is the colleges-of-education lane, which is the softest and the longest-cycle of all. The collaborations between American teacher-training faculties and their Chinese counterparts — sometimes involving Tsinghua-adjacent entities, sometimes their peer institutions — do not produce semiconductor breakthroughs. They produce something far more durable: the curricula, textbooks, and pedagogical standards that will shape millions of students over decades, and the networks of education administrators and policy advisers who will hold positions in school systems, education ministries, and accreditation bodies. This is not the chip-design corridor. It is the influence corridor — the long, slow, multi-generational sculpting of how future Americans and future Chinese think about each other and about themselves. The Chinese Communist Party has explicitly named education as a strategic priority. Western audiences, accustomed to thinking of espionage in terms of stolen blueprints, are not trained to recognize a textbook deal as a national-security event. It still is.

The corridor, in other words, is not only a STEM story. The STEM story is the visible one because chips and missile guidance lend themselves to legible alarm. The soft-power story — running through cutouts, continuing education, and teacher training — is harder to write about because none of its individual transactions look frightening. That is precisely what makes the architecture work.

The Camp Grayling Incident

To put the abstraction on the ground: in 2024, five Chinese nationals affiliated with the Shanghai Jiao Tong-University of Michigan Joint Institute were charged with using drones to surveil Camp Grayling, a United States military training site in Michigan.⁴ The committee’s September 2025 report cites the incident as a specific demonstration of how, in its words, even “instructional” partnerships create access for surveillance and intelligence purposes.⁵

The joint institute had been in operation, openly, for two decades. The University of Michigan is not a low-prestige school. It is one of the great public research universities in the country. The Camp Grayling incident is not, therefore, a story about a prestige-camouflaged school. It is a story about something worse: even when the institution is well-known, the partnership runs beneath the public’s attention for twenty years until five drones go up over a military range, and only then does the country notice.

Now multiply that by the dozens of partnerships at schools the country does not pay attention to in the first place.

What Disclosure Reveals When It Happens

The single most useful number in the entire report is this one: during the first Trump administration, between 2019 and 2021, the United States Department of Education opened Section 117 enforcement investigations at nineteen American universities. Those investigations — nineteen of them — produced disclosures of six and a half billion dollars in previously undeclared foreign funding to American higher education.⁶

Six and a half billion dollars, hidden in plain sight, surfaced by nineteen letters from the Department of Education. The Biden-Harris administration that followed opened zero new Section 117 enforcement actions across its full four years.⁷ The current administration has reopened the file: as of mid-2025, the Department of Education has new compliance reviews open at Harvard, the University of California at Berkeley, the University of Pennsylvania, and the University of Michigan, and Executive Order 14282 of April 28, 2025, ties Section 117 compliance to False Claims Act liability for the first time.⁸

What the enforcement record establishes is simple. The money was always there. The relationships were always there. The disclosures were always missing. The corridor was never invisible because it was hidden. It was invisible because no one in a position to demand the paperwork was asking for it.

What This Means for the Series

This interlude steps outside the numbered spine of The Tsinghua Corridor because its observation applies to the entire series and to everything that comes after.

Part One showed Tsinghua as a leadership incubator. Part Two showed it as a defense hub. Part Three showed the recruitment apparatus. Part Four showed the joint-institute highway. And every one of those installments, by necessity, has had to focus on the schools the public can name — Berkeley, the Massachusetts Institute of Technology, Harvard, Stanford. That is where the documents live, where the budgets are public, where the names are recognizable enough to anchor a story.

But the deeper architecture, the one that should make every reader pause, is that the same pattern operates one tier down at schools you have never heard of, and operates there because you have never heard of them. The prestige hierarchy is the camouflage. The institutions you trust to be too small to matter are precisely the institutions chosen because they are too small to be examined.

When Part Five takes up the cyber dimension — the digital lane of the corridor — keep this in mind. The same logic applies. The famous attacks attributed to Chinese state-linked actors hit the targets you expect: the Office of Personnel Management, the major defense contractors, the marquee technology companies. The targets that do not make the news are the law firms, the regional hospitals, the city governments, the small research foundations, the mid-tier universities — the soft, distributed underbelly of American technological life. The prestige camouflage on the campus has a perfect mirror in the threat-modeling assumptions of the network.

What we have learned from Joint Institutes, Divided Loyalties is not that Berkeley failed to disclose. We knew that. What we have learned is that the country has been looking at the corridor with one eye closed, because the second eye was trained on the wrong list of schools.

Open both eyes. The corridor is wider than the prestige map can show.