US–China AI Safety Protocol Announcement

The US and China are moving toward a formal AI safety protocol covering best practices for frontier models and preventing powerful AI from reaching nonstate actors [1]. Treasury Secretary Scott Bessent has pointed to Anthropic's Mythos model as a concrete example of the cyber-capability concerns driving Washington's urgency [1]. Separately, the US, EU, and China are each independently converging on nearly identical oversight frameworks—limited pre-deployment review focused on cyber and bio risks, plus targeted bans on harmful applications—suggesting implicit trilateral alignment even without a formal multilateral agreement [2].

A bilateral US-China safety protocol would be the first formal diplomatic guardrail on frontier AI, carving out a narrow lane of cooperation inside a broader strategic rivalry. Even a soft-norm agreement on nonstate-actor proliferation and surprise capability jumps could reduce the risk that each new model release becomes a geopolitical crisis—what one observer calls the need for 'continuity' in an agentic world [1].

In mid-May 2026, the United States and China announced plans to establish a bilateral AI safety protocol, a narrow but symbolically significant diplomatic agreement focused on two priorities: sharing best practices for governing frontier models, and preventing highly capable AI from reaching nonstate actors [1]. The announcement came against the backdrop of escalating concern in Washington about AI's offensive cyber potential. Treasury Secretary Scott Bessent publicly named Anthropic's Mythos model as a specific capability that had raised alarms, suggesting that concrete model evaluations—not just abstract risk scenarios—are now driving the diplomatic agenda [1].

The agreement does not resolve the deeper US-China technology rivalry. Analyst Grant Harvey, writing in The Neuron, is explicit that the protocol 'will not solve Taiwan, chips, rare earths, or military competition' [1]. Its value, in his framing, is narrower: creating one shared lane where both governments agree that autonomous weapons, model misuse, and surprise capability jumps require guardrails, even if everything else remains contested. The protocol's durability will depend heavily on whether that narrow lane can be maintained as competition intensifies elsewhere.

A parallel data point reinforces that this bilateral deal may reflect a broader structural shift rather than an isolated negotiation. Reporting from earlier in May noted that the US, EU, and China were each independently arriving at nearly identical oversight architectures: limited pre-deployment review focused specifically on cyber and bio capabilities, plus targeted bans on the most harmful applications [2]. The convergence across three otherwise-competing jurisdictions suggests that the basic risk categories are becoming a kind of implicit common ground among major AI powers, even without formal coordination.

The framing Harvey applies to both the diplomatic story and parallel AI product developments centers on the concept of continuity—the idea that governments, workers, and users all need stable, predictable AI behavior as systems become more autonomous and agentic [1]. In this view, the safety protocol is less about resolving geopolitical rivalry and more about building the minimal scaffolding that prevents each new frontier model from being treated as a unilateral provocation requiring an immediate response.