Draft restrictions and an immediate filing duty
China's commerce and science ministries have proposed adding 40 technologies to the country's prohibited and restricted export catalogue, including 23 artificial-intelligence items, according to an analysis published by the Cloud Security Alliance. The proposal reaches frontier model components, agent systems and some AI-enabled cyber capabilities. A related pre-export registration requirement took effect immediately, even though the catalogue revisions remain open for public comment until November 15.
The distinction between those two measures is important. The catalogue additions are still a draft, while exporters handling listed technology must already register planned transfers through the Ministry of Commerce platform. The analysis says the filing requirement can cover transfers of ownership, licences for overseas use and ownership or control changes that place technology under a foreign entity. Exporters must assess whether their technology falls within scope and provide recipient, destination, end-use, description and estimated-value information.
For large models, the draft would restrict weights, significant checkpoints, source code, architecture and optimization knowledge when a system meets any of three tests. Those include training compute of at least 10^26 floating-point operations, at least two trillion parameters, or a top-ten global position based on public evaluations, usage or comparable measures at the time of export. The ranking route introduces uncertainty because the draft does not identify a single ranking authority.
Agent technology is treated separately from the underlying model. Planning, multi-agent coordination, tool use and game-theoretic decision systems would face controls above specified benchmarks. High-performance agents intended for critical infrastructure, defense or core government activity would be prohibited from export. The analysis also says qualifying AI tools for vulnerability discovery, red teaming and detection could require licences, while certain offensive code-generation capability would be prohibited.
The proposed rules distinguish remote service access from transferring controlled technology. The ministry's explanation, as summarized by the alliance, says access through an API, web service, app, software-as-a-service product or lightweight on-device deployment does not by itself constitute export of a large model. Installing a restricted model for local operation outside China does. That boundary could shape how Chinese developers offer models internationally and how multinational companies share code or systems between affiliates.
Open-source releases and academic publications already in the public domain are excluded from catalogue management, according to the official annex described in the analysis. However, companies cannot assume that every collaborative or intra-group transfer is outside the rules; licensing and control changes may still trigger review or registration.
The proposal is not yet a final catalogue, and its interpretation may change after consultation. The immediate compliance fact is narrower: businesses considering outbound transfers of technologies named in the announcement must evaluate the registration requirement now. The longer-term effect will depend on the final thresholds, licensing practice and official guidance on ambiguous measures such as global ranking and agent capability.
