# Alibaba (Qwen) SI Safety Grade: Containment Board

> Alibaba (Qwen) gets D- overall (GPA 0.66) on the Containment Board, rank 10 of 11. Best on incident disclosure, weakest on outside testing, every grade sourced.

Source: https://enterrsi.si/containment-board/alibaba/
Updated: 2026-11-08

1. [Home](https://enterrsi.si/)
2. [Containment Board](https://enterrsi.si/containment-board/)
3. Alibaba (Qwen)

Containment Board · rank 10 of 11 · updated Nov 8, 2026

# Alibaba (Qwen) safety report card

Alibaba is a Chinese technology company that makes the Qwen models. On the Containment Board it gets **D- overall** (GPA 0.66), rank 10 of 11. Alibaba's Qwen team releases very large open-weight models, and FLI credits it with stronger-than-expected safety benchmarks and more open reporting of misalignment propensity than its Chinese peers. There is no published framework, no outside pre-release testing and no shutdown commitment on record.

Overall
:   D-

GPA
:   0.66

Rank
:   10 of 11

Sources
:   5

Five grades

## Each grade, why, and the sources

The same rubric applies to every lab. Grades use public documents only, current to November 8, 2026.

Safety framework

D-

[How it is graded](https://enterrsi.si/containment-board/#crit-framework)

Why D-

No published frontier safety framework was found; Alibaba Cloud signed China's CAICT safety commitments but not the Seoul commitments.

**D on this criterion means:** No framework of its own; the lab has only signed voluntary pledges such as the Seoul Frontier AI Safety Commitments, the EU General-Purpose AI Code of Practice or China's CAICT commitments.

Sources

1. [AI Safety Index Summer 2026, full report: Safety Frameworks domain](https://futureoflife.org/wp-content/uploads/2026/07/AI-Safety-Index-Summer-2026-Digital-14-Jul.pdf) Future of Life Institute · Jul 14, 2026
2. [AI Safety Index Summer 2026, full report: Voluntary Commitment indicators (Seoul commitments, EU Code of Practice)](https://futureoflife.org/wp-content/uploads/2026/07/AI-Safety-Index-Summer-2026-Digital-14-Jul.pdf) Future of Life Institute · Jul 14, 2026
3. [Frontier AI Safety Policies (index of published company frameworks)](https://metr.org/fsp) METR · Nov 8, 2026

Outside testing

F

[How it is graded](https://enterrsi.si/containment-board/#crit-testing)

Why F

FLI found no public mention of outside pre-release testing for Qwen 3.5 Max, and the Qwen3.8 model card on Hugging Face describes none as of Nov 8, 2026.

**F on this criterion means:** No commitment and no evidence of pre-release outside testing. Government testing after release without the lab's involvement is noted but earns no credit.

Sources

1. [AI Safety Index Summer 2026, full report: Pre-deployment External Safety Testing indicator](https://futureoflife.org/wp-content/uploads/2026/07/AI-Safety-Index-Summer-2026-Digital-14-Jul.pdf) Future of Life Institute · Jul 14, 2026
2. [Qwen3.8-2.4T-A95B model card](https://huggingface.co/Qwen/Qwen3.8-2.4T-A95B) Hugging Face · Nov 8, 2026
3. [Qwen organization page (model releases)](https://huggingface.co/Qwen) Hugging Face · Nov 8, 2026

Shutdown and pause

F

[How it is graded](https://enterrsi.si/containment-board/#crit-shutdown)

Why F

No public commitment to pause or shut down and no monitoring and control plan for internal deployment were found as of Nov 8, 2026.

**F on this criterion means:** No public commitment found.

Sources

1. [AI Safety Index Summer 2026, full report: Internal Monitoring and Control Interventions indicator](https://futureoflife.org/wp-content/uploads/2026/07/AI-Safety-Index-Summer-2026-Digital-14-Jul.pdf) Future of Life Institute · Jul 14, 2026

Incident disclosure

D+

[How it is graded](https://enterrsi.si/containment-board/#crit-disclosure)

Why D+

FLI credits Alibaba Cloud with more open disclosure of misalignment propensity than its peers, but incident reporting rests on Chinese legal duties and no incident reports were found.

**D on this criterion means:** Minimal safety documentation; incident reporting only where the law requires it.

Sources

1. [AI Safety Index Summer 2026, full report: Key Findings and Company Progress Highlights and Key Recommendations](https://futureoflife.org/wp-content/uploads/2026/07/AI-Safety-Index-Summer-2026-Digital-14-Jul.pdf) Future of Life Institute · Jul 14, 2026
2. [AI Safety Index Summer 2026, full report: Serious Incident Reporting and Government Notifications indicator](https://futureoflife.org/wp-content/uploads/2026/07/AI-Safety-Index-Summer-2026-Digital-14-Jul.pdf) Future of Life Institute · Jul 14, 2026
3. [AI Safety Index, Summer 2026 Edition (scorecard)](https://futureoflife.org/ai-safety-index-summer-2026/) Future of Life Institute · Jul 7, 2026

Whistleblower protection

D+

[How it is graded](https://enterrsi.si/containment-board/#crit-whistleblower)

Why D+

Alibaba's Code of Ethics says whistleblower rules exist, with reports to the Compliance Officer and no-retaliation protection, but the rules are not public. FLI recalls a 2021 case in which Alibaba fired an employee who had publicly reported a sexual assault.

**D on this criterion means:** A policy is said to exist but is not public, or there is a credible recent controversy involving suppression of disclosures, such as enforcing a non-disparagement agreement against a former employee.

Sources

1. [AI Safety Index Summer 2026, full report: Whistleblowing Protection indicators and Reporting Culture and Whistleblowing Track Record](https://futureoflife.org/wp-content/uploads/2026/07/AI-Safety-Index-Summer-2026-Digital-14-Jul.pdf) Future of Life Institute · Jul 14, 2026

At a glance

## Models, facts and its own rules

The flagship models the board looked at, the facts that shaped the grades and the safety policy Alibaba (Qwen) has published for itself.

Flagship models

[Qwen3.8](https://enterrsi.si/encyclopedia/qwen3-8/)[Qwen3.8-Flash-Next](https://enterrsi.si/encyclopedia/qwen3-8-flash-next/)

Notable

### Facts behind the grades

- FLI's Summer 2026 index graded Alibaba Cloud D- overall.
- The Qwen3.8 release includes a 2.4 trillion parameter open-weight model, Qwen3.8-2.4T-A95B.

Its own rules

### Published safety policy

The Control Map lists no frontier safety framework of its own for Alibaba (Qwen). Its safety framework grade above explains what the board found instead.

The Rogue Log

## Incidents involving Alibaba (Qwen) systems

The Rogue Incident Database lists 1 case involving Alibaba (Qwen) systems, rated on the Rogue Scale. Disclosure cuts both ways: labs that publish more show more.

1. Dec 31, 2025
   [Alibaba-linked agent opened a tunnel and mined crypto in training](https://enterrsi.si/incidents/rome-agent-mined-crypto-in-training/) ROME
   Lab test 4 Deception

The Control Map

## SI safety rules where it is based

Alibaba (Qwen) is based in China. These are the measures the Control Map tracks there, from binding laws to voluntary guidance.

- In force [**Generative AI Measures**](https://enterrsi.si/encyclopedia/cn-generative-measures/) [China](https://enterrsi.si/control-map/china/)
- In force [**Labeling Measures**](https://enterrsi.si/encyclopedia/cn-labeling-measures/) [China](https://enterrsi.si/control-map/china/)
- In force [**Cybersecurity Law SI clause**](https://enterrsi.si/encyclopedia/cn-cybersecurity-law-amendment/) [China](https://enterrsi.si/control-map/china/)
- Voluntary or guidance [**Framework 3.0**](https://enterrsi.si/encyclopedia/cn-ai-safety-governance-framework/) [China](https://enterrsi.si/control-map/china/)

Cite this report card

"Alibaba (Qwen) safety report card." The Containment Board, enterrsi.si, November 8, 2026. Overall D- (GPA 0.66), rank 10 of 11. https://enterrsi.si/containment-board/alibaba/

Free to cite under CC BY 4.0 with a link to enterrsi.si.

[Rank 9 · D Z.ai (Zhipu)](https://enterrsi.si/containment-board/zai/)[Rank 11 · F DeepSeek](https://enterrsi.si/containment-board/deepseek/)

Every lab on the board

[Anthropic **B+**](https://enterrsi.si/containment-board/anthropic/)[OpenAI **B**](https://enterrsi.si/containment-board/openai/)[Google DeepMind **B-**](https://enterrsi.si/containment-board/google-deepmind/)[Microsoft **C+**](https://enterrsi.si/containment-board/microsoft/)[Meta **C+**](https://enterrsi.si/containment-board/meta/)[Amazon **C**](https://enterrsi.si/containment-board/amazon/)[xAI **D+**](https://enterrsi.si/containment-board/xai/)[Mistral **D**](https://enterrsi.si/containment-board/mistral/)[Z.ai (Zhipu) **D**](https://enterrsi.si/containment-board/zai/)[DeepSeek **F**](https://enterrsi.si/containment-board/deepseek/)

Enter RSI

## See the whole board

11 labs, five criteria, one public method. Sort them, compare them and download the data.

[Open the Containment Board](https://enterrsi.si/containment-board/)
[Incident Database](https://enterrsi.si/incidents/)
