China Export Controls

A research team in China wants help with technical documents, and the same prompt can carry a controlled subject or an official secret. Getting that wrong is not a policy violation. It is a legal exposure for the person who sent the request. This starter narrows what the assistant may touch, screens the counterparty and the subject, and keeps traffic inside approved domestic routes.

The execution posture is deliberately narrow. Only a regulation lookup tool is allowed, and a session may take two actions. Shell access, browsers, code execution, network scans, external interfaces and database writes are refused. Traffic may go only to targets that operators mark as no retention and no training. When no such target is available, the request is blocked.

Counterparty screening compares the prompt against a named list of restricted defense suppliers, with fuzzy matching for near spellings. A second list refuses controlled dual use subjects such as satellite remote sensing payloads, laser gyroscopes, synthetic aperture radar and marine inertial navigation. Redaction masks resident identity card numbers, passports, unified social credit codes, customs entries, military unit identifiers and export license numbers.

Chinese secrecy and confidentiality labels act as a hard stop, and so do phrases about outbound provision of important data. Prompts in a language other than Chinese or English are refused below a confidence of 0.80. Politically prohibited phrasing is named in the configuration and refused before generation continues.

On the way back, the answer must reach a combined score of 0.93, with faithfulness at 0.94 and accuracy at 0.94. It must also run to 250 characters and three sentences. Anything weaker is blocked instead of delivered. An audit marker closes the chain, notes that the evaluation ran, and blocks nothing.

Redacted history capture is on, blocked events are included, and the gateway stops when capture fails. Nothing here decides whether an item is controlled under Chinese law. Technology classification, license applications and counterparty diligence stay with your legal and trade team. Keep the screening lists current, because a static list ages quickly.