The United States has proposed setting up a system to exchange AI safety alerts with China, a senior U.S. official, Bessent, told NBC News, signaling a rare offer of cooperation on a technology at the center of growing geopolitical tension. The proposal aims to create channels for rapid notification when advanced artificial intelligence systems behave unpredictably or pose safety risks, officials said, as Washington seeks ways to manage potential harms without ceding strategic advantage.
The outreach comes amid an intensifying global debate over how to oversee powerful AI tools, and represents a pragmatic effort to reduce the chance that machine-driven errors could spark broader crises between the two rivals. It remains unclear how Beijing will respond and whether any formal mechanisms can overcome deep mutual mistrust surrounding technology and national security.
U.S. Proposal Lays Out Framework for Exchanging AI Safety Alerts With China and Scope of Shared Information
U.S. official Bessent outlined a proposed mechanism for rapid, structured exchanges of AI safety alerts with Chinese counterparts, saying the goal is to reduce the risk of cross-border harms from emerging systems. The plan would create a rapid notification system with defined categories of incidents, timelines for reporting and response, and agreed channels for contact between technical teams – while explicitly preserving national-security and intellectual-property protections. Officials framed the proposal as narrowly focused on safety and stability rather than broad technology transfer, noting that many notifications would be handled on a case-by-case basis to avoid forcing disclosure of sensitive research.
Types of alerts and handling include the following priorities and limits:
- Model behavior anomalies that indicate potential physical or cyber risks
- Evidence of coordinated misinformation or automated influence campaigns
- Data-poisoning or supply-chain compromises affecting model integrity
- Systemic failures with cascading public-safety consequences
A simple operational rubric sketched by U.S. planners maps alert types to sharing rules, with many safety incidents marked shareable under protections and core research or export-controlled data treated as restricted.
| Alert Type | Shareable? |
|---|---|
| Model safety anomaly | Yes |
| Proprietary model weights | No |
| Coordinated misinformation | Case-by-case |
Suggested Operational Mechanisms Prioritize Secure Timely Alerts Through Standardized Protocols Encryption and Independent Verification
U.S. and Chinese officials are reported to be discussing a practical blueprint for exchanging AI safety alerts that prioritizes speed and trust while limiting diplomatic risk. Sources say the plan leans on standardized protocols for classification and transmission, combined with robust authentication to ensure messages are genuine and actionable. Advocates stress the need for clear chains of custody and audit trails so that critical warnings – whether about emergent model behavior, data poisoning, or runaway automation – can be escalated without political interference or undue delay.
Operational recommendations under consideration include a compact set of technical and governance measures designed to be implemented quickly:
- Shared alert taxonomy to avoid semantic drift between agencies;
- Mutual authentication and end-to-end encryption for all alert traffic;
- Independent verification by neutral third parties to reduce bilateral mistrust;
- Pre-agreed escalation timelines with automated telemetry snapshots.
A simple working table circulated among participants proposes graded responses:
| Alert Level | Action |
|---|---|
| Red | Immediate bilateral briefing, 6-hour triage |
| Amber | Technical data exchange, 24-hour analysis |
| Green | Informational notice, 72-hour follow-up |
These mechanisms aim to make alerts both secure and timely while preserving independent verification to guard against misinformation and escalation.
Risk Mitigation and Trust Building Include Joint Incident Classification Regular Response Exercises and Strong Legal Protections for Sensitive Data
U.S. officials framed the proposal as a practical step toward reducing the chances that a cross-border AI anomaly escalates into a diplomatic crisis. Officials argued that a common language for incidents – a shared incident taxonomy – paired with rapid notification channels could defuse confusion, accelerate mitigation and create predictable expectations. Proponents said the move should be anchored by regular response exercises that simulate worst‑case scenarios and test coordination, transparency and communication across technical teams and national authorities.
- Common taxonomy for classifying AI failures and near‑misses
- Joint red‑team drills and interoperable playbooks
- Secure, time‑bound notification channels and data minimization
- Independent audits and pre‑agreed escalation paths
Lawmakers and legal advisers stressed that exchanges depend on robust legal safeguards to protect proprietary code and citizen privacy while enabling timely action. Suggested measures include narrowly tailored data‑sharing agreements, encryption and access controls, and independent oversight mechanisms to audit compliance and resolve disputes without politicizing technical incidents. Observers noted that credible enforcement and arbitration clauses would be key to building sustained trust between capitals.
| Safeguard | Function |
|---|---|
| Data minimization | Share only incident‑relevant artifacts |
| Encryption & access controls | Prevent unauthorized use or leaks |
| Independent audits | Verify compliance with agreements |
Policy Recommendations Call for Multilateral Oversight Industry Participation and Clear Escalation Rules to Prevent Misunderstanding
Washington’s recent push to swap AI safety alerts with Beijing has accelerated calls for an international architecture that blends governmental oversight with private-sector expertise. Observers say a new framework should be governed by multilateral institutions and built around practical, interoperable mechanisms that reduce the risk of misinterpretation between capitals and companies. Key proposals gaining traction include:
- Multilateral secretariat: a neutral body to receive, verify and route alerts.
- Industry liaison: designated vendor representatives to translate technical signals into operational context.
- Shared taxonomy: agreed definitions for what constitutes a safety alert versus routine performance anomalies.
- Transparency protocols: clear metadata standards and audit trails for cross-border exchanges.
These elements, proponents argue, would ensure alerts are actionable and reduce the diplomatic friction that can follow ambiguous signals.
Experts stress that alongside those building blocks, the system must include clear, time‑bound escalation rules and neutral verification paths to prevent rapid misjudgments. Suggested procedural safeguards include defined notification timelines, thresholds for public disclosure, and independent technical adjudicators to rule on contested alerts. A simple operational rubric being discussed by policy teams maps alert tiers to responses:
| Alert Tier | Immediate Response |
|---|---|
| Tier 1 – Critical | Immediate bilateral notification + joint technical review |
| Tier 2 – High | Rapid industry verification within 24 hours |
| Tier 3 – Advisory | Informal sharing and monitoring |
Advocates say pairing these rules with regular drills and public reporting will institutionalize trust and make cross‑border alerts a predictable, low‑risk tool rather than a flashpoint.
In Retrospect
If adopted, the proposal would mark a rare bid at direct U.S.-China cooperation on the risks posed by rapidly advancing artificial intelligence, creating a channel to warn about potentially dangerous developments and reduce the risk of accidental escalation. Significant questions remain, including how alerts would be verified, what kinds of incidents would trigger them, and whether mutual mistrust or domestic politics in either capital could limit the arrangement’s effectiveness. The administration has signaled interest in starting talks; a response from Beijing and the details of any formal agreement are still pending. As policymakers, lawmakers and technologists weigh the trade-offs, the outcome will help determine whether the world’s two largest powers can build practical safeguards around AI or whether such efforts will be constrained by broader geopolitical tensions.
