China Moves to Wall Off Its AI: Export Controls Proposed on Models, Chips and Agents

China has proposed the most sweeping technology export controls in its history — and for the first time, the rules would reach beyond physical hardware to the artificial intelligence itself: model weights, source code and autonomous agents. The draft, published on 16 October by the Ministry of Commerce and the Ministry of Science and Technology, would add 40 technologies to Beijing's export control catalogue, 23 of them in AI, with public consultation open until 15 November.

First reported by Bloomberg, the move marks a sharp reversal of the chip war's direction. For years the story ran one way: Washington cutting China off from Nvidia's most advanced GPUs while Beijing scrambled to build domestic alternatives through SMIC and Huawei. Now Beijing is building a wall facing the other direction — aimed at keeping its own AI models, training data and agent technology from leaving the country.

What the draft actually covers

The 40-item package splits into 14 technologies marked prohibited and 26 marked restricted, according to analysis of the draft text. The 23 AI entries span large language models, autonomous agents, computing clusters and data processing. Crucially, trained systems themselves fall in scope for the first time: weights, checkpoints, source code, model architecture and training or inference methods would need export approval when they cross specified capability thresholds.

Those thresholds, detailed in the draft's technical annexes, are steep: models trained with at least 10^26 floating-point operations, models with two trillion parameters or more, or models ranked in the global top 10 on public benchmarks. A separate clause covers large models trained on China's "important data" — a category defined under the country's Data Security Law — that offer services built on it.

The draft also draws a hard line on offensive cyber-AI. AI tools able to write or alter malware on their own to attack critical infrastructure, the military or government agencies would face a total export ban, while tools for finding software vulnerabilities would face new limits short of a ban. Chip designs below 14 nanometres and advanced packaging technologies are in scope too.

What's exempt — and what's already in force

The proposal is narrower than it first looks. Technology already in the public domain through open-source releases or academic publications is exempt, and access through APIs, websites, apps and software-as-a-service platforms does not count as an export. In practice, a developer calling a Chinese model through a web API would see no change; downloading its weights or buying its source code above the thresholds is what triggers review.

Timing matters here. While the draft is open for comment until 15 November, an interim pre-export registration requirement is already in force for the affected technologies — meaning exporters are filing paperwork with regulators before the final rules even land. The Financial Times reported that the commerce ministry has been consulting domestic AI and chip firms, including Alibaba, ByteDance and Zhipu, since the summer to shape the controls.

Why now: the reverse chip war

The economics explain the urgency. Chinese open-weight models — downloadable, modifiable and runnable on a developer's own servers without API fees — have become the default cheap alternative to OpenAI and Anthropic pricing. Alibaba's Qwen, ByteDance's Doubao, Zhipu's GLM and DeepSeek's releases have seen steep adoption curves: Chinese open-weight models captured 17.1% of global open-weight downloads in the year to August 2025, overtaking the United States' 15.8% share for the first time, with DeepSeek and Qwen alone accounting for 14% of that traffic.

Beijing appears to have concluded that its AI stack is no longer something to protect from being blocked — it's something to protect from being taken. "This move does not mean China is shutting down open-weight models," wrote Dean W. Ball, head of strategic futures at OpenAI, "but it does indicate the Chinese government establishing the optionality to shut down future open-weight models at will." Ball described the framework as a "mirror image" of model-weight export controls the US government has already put in place.

Chip trade typically prices in US dollars, so any yuan-denominated deal caught by the new licensing regime will need converting at the market rate — the FIGURES currency converter tracks live exchange rates for exactly that kind of cross-border pricing.

Taipei answers with criminal penalties

Beijing is not the only capital tightening the screws. Taiwan has announced plans to add advanced AI servers and cutting-edge semiconductors to its controlled-items list and to make unauthorised shipments to China a criminal offence — a shift Taipei says flows from its 2026 trade pact with the United States. Enforcement is already rising: Taiwan detained suspected AI chip smugglers in May and has pursued further legal actions this year.

The squeeze is showing in market data. Chinese firms and labs are substituting domestic chips and models for barred foreign gear, shrinking Nvidia's share of the China accelerator market, even as the new rules raise the cost of moving technology the other way. Markets noticed: the proposal landed the same week tech stocks shed more than a trillion dollars of value on Friday, as investors demanded proof that AI spending would pay off.

What happens next

Comments close on 15 November, and the final rules could still change materially — Beijing has a track record of softening drafts after industry pushback. The hard questions are definitional: how export officials rank a "global top 10" model, how capability thresholds get measured, and how effectively registration and criminal penalties deter sophisticated smuggling and cross-border transfers.

For teams building on Chinese models today, the practical advice from analysts is simple: open-source releases and API use appear unaffected, so little changes yet. But the era in which a frontier Chinese model could be downloaded and commercialised anywhere on earth with no paperwork is, at the very least, now on a countdown.

FAQs

What exactly did China propose on 16 October 2026?

China's commerce and science ministries published a draft adding 40 technologies to the national export control catalogue, with 23 of them in artificial intelligence — covering large language models, agents, chip designs and computing clusters. Across the full package, 14 technologies would be prohibited from export and 26 would require licences. An interim pre-export registration requirement is already in force while public consultation runs until 15 November.

What are the capability thresholds for model weights?

Weights, checkpoints, source code, architecture and training or inference methods fall in scope when a model was trained with at least 10^26 FLOPs of compute, has two trillion or more parameters, or ranks in the global top 10 on public evaluations. A separate clause covers models trained on China's legally defined "important data". These thresholds are meant to catch frontier systems while leaving ordinary commercial software alone.

Does this ban Chinese open-weight models like Qwen or DeepSeek?

No — at least not as drafted. Technologies already public through open-source releases or academic papers are exempt, and access via APIs, websites, apps and SaaS platforms does not count as an export. The framework gives Beijing the legal option to block future weight releases at will, but analysts describe it as a mirror of existing US model-weight controls rather than a shutdown of open weights.

Why is Beijing doing this now?

Because the chip war has reversed: years of US restrictions pushed China to build domestic alternatives, and those alternatives are now winning abroad — Chinese open-weight models overtook US ones in global download share in the year to August 2025. Beijing has been consulting Alibaba, ByteDance and Zhipu on the controls since the summer, and now treats its AI stack as a strategic asset to keep in, not an import to keep out.

What should companies watch before the 15 November deadline?

Whether the thresholds and the "top 10" ranking mechanism survive in their current form, how strictly pre-export registration is enforced, and how Taiwan's parallel criminalisation of AI chip shipments to China reshapes smuggling routes. For most teams using Chinese models through APIs or open-source releases, nothing changes — but anyone licensing frontier weights or chip designs should track the final catalogue closely.