You can implement your licensing system such that licenses will only be granted to entities for which there exist an established business history for gallium exports (i.e., there were business transactions conducted for the export of gallium to them). Since that wouldn't apply to shell companies unless somebody hacked the databases and added entries for them, only existing customers could be granted licenses in theory. And then you can add that any diversion beyond the buyer to an end-user who is subject to a ban (i.e., Raytheon) would result in revocation of the license.
Now of course there will always be leakage, as
@FairAndUnbiased due to the limited customer pool and volumes the costs will be higher. This makes transactions easier to monitor and control whereas for general purposes chips alot of business goes through wholesalers and distributors in huge volumes so siphoning through degrees of separation from the end user is more straightforward.