# Framework 3.0: China SI Safety Guidance Explained

> Framework 3.0 (China): Non-binding technical guidance from standards committee TC260, issued under Cyberspace Administration of China guidance, for SI.

Source: https://enterrsi.si/encyclopedia/cn-ai-safety-governance-framework/
Updated: 2026-11-08

1. [Home](https://enterrsi.si/)
2. [Encyclopedia](https://enterrsi.si/encyclopedia/)
3. Framework 3.0

RSI Encyclopedia · Law · China

# Framework 3.0

Framework 3.0 is an SI safety measure in China, status: voluntary or guidance. Non-binding technical guidance from standards committee TC260, issued under Cyberspace Administration of China guidance, for SI developers and service providers.

Status
:   Voluntary or guidance

Jurisdiction
:   China

Signed
:   Sep 14, 2026

Next date
:   None set

## What it is

AI Safety Governance Framework 3.0

Non-binding technical guidance from standards committee TC260, issued under Cyberspace Administration of China guidance, for SI developers and service providers.

## What it requires

- Adds a standalone agentic SI risk category covering permission abuse, planning failures and tool execution
- Describes loss of control risks, including models deceiving evaluators and sandbagging
- Treats loss of control over chemical, biological, nuclear and missile knowledge as a risk
- Adds an agentic risk management framework and trustworthy SI principles
- Updates version 2.0, released September 15, 2025

## Penalties

No penalties: this measure has no binding enforcement.

## Status

Voluntary or guidance As of November 8, 2026, per the [Control Map page for China](https://enterrsi.si/control-map/china/). Statuses follow the Control Map method: in force means binding and applying now; passed means enacted but not yet applying; voluntary covers guidance and pledges; proposed means formally introduced; stalled means withdrawn, paused or dead.

## Sources

1. [China: TC260 AI Safety Governance Framework 3.0 Adds Agentic AI Risks](https://obsidianri.com/blog/newsroom-cn-20260915-ai-safety-governance-framework-3) Obsidian Regulatory Intelligence · Sep 15, 2026
2. [Brief #29: What China's new AI safety framework tells us before Xi meets Trump](https://aisafetychina.substack.com/p/brief-29-what-chinas-new-ai-safety) AI Safety in China · Sep 23, 2026
3. [TC260 Published AI Safety Governance Framework 2.0](https://sesec.eu/?p=2036) SESEC · Oct 15, 2025

The measure

Short name
:   Framework 3.0

Jurisdiction
:   [China](https://enterrsi.si/control-map/china/)

Status
:   Voluntary or guidance

Key dates

Introduced
:   n/a

Signed or adopted
:   September 14, 2026

Effective
:   n/a

Other measures in China

[Generative AI Measures **Law**](https://enterrsi.si/encyclopedia/cn-generative-measures/)[Labeling Measures **Law**](https://enterrsi.si/encyclopedia/cn-labeling-measures/)[Cybersecurity Law SI clause **Law**](https://enterrsi.si/encyclopedia/cn-cybersecurity-law-amendment/)

Related terms

[Frontier safety framework **Term**](https://enterrsi.si/encyclopedia/frontier-safety-framework/)[Red teaming **Term**](https://enterrsi.si/encyclopedia/red-teaming/)

Cite this entry

"Framework 3.0." The RSI Encyclopedia, enterrsi.si, November 8, 2026. https://enterrsi.si/encyclopedia/cn-ai-safety-governance-framework/

Free to cite under CC BY 4.0 with a link to enterrsi.si.

The RSI Encyclopedia

## Keep reading

207 entries on the terms, labs, models, laws and events of rogue SI, plus every case in the Rogue Incident Database.

[Previous law FLI Statement](https://enterrsi.si/encyclopedia/fli-superintelligence-statement/)[Next law FRONTIER Act](https://enterrsi.si/encyclopedia/us-frontier-act/)

Enter RSI

## Every term, lab, model and law

Browse the full A to Z index, filter by category or search for a name.

[Open the encyclopedia](https://enterrsi.si/encyclopedia/)
[Incident Database](https://enterrsi.si/incidents/)
[Containment Board](https://enterrsi.si/containment-board/)