U.S.-China A.I. Safety Talks Won't Prevent the Real Threat

An agreement between governments is only as strong as the enforcement mechanisms behind it
Without corporate buy-in and oversight, bilateral safety talks risk creating false reassurance while actual risks persist.
Mark

So you're saying the talks are pointless?

Mimi

Not pointless, but they're addressing the wrong problem. The issue isn't whether Beijing understands AI risks. It's whether Beijing can actually make its companies care about those risks.

Luke

Do we know that Chinese companies aren't already implementing safety measures? Or are we assuming they're reckless?

Mimi

The source material suggests limited oversight and a disconnect between government priorities and what companies actually do. But you're right—we don't have detailed reporting on what specific safety practices Chinese firms are or aren't using.

Mark

What would actually work, then? If bilateral talks won't, what would?

Mimi

Enforcement mechanisms. Transparency requirements. Real consequences for cutting corners. But those are hard to negotiate and even harder to verify across borders.

Luke

And the U.S. side—are American companies perfectly compliant with every safety standard the government sets?

Mimi

Fair point. This isn't unique to China. But the argument here is that the gap is particularly wide in China because oversight is weaker.

Mark

So the talks create a false sense of security?

Mimi

Exactly. They let both governments claim they're managing the problem, when the actual risks are still building in the companies doing the real work.

Luke

One more thing—do we know if Chinese companies are even aware of what their government is committing to in these talks?

Mimi

That's the core of the problem. We don't know, and that's precisely why the agreement might fail.

  • The urgency is not a looming diplomatic failure but something more insidious: a deal that succeeds just enough to make the world feel safe while the underlying risks quietly compound.
  • Chinese domestic AI companies operate in a fiercely competitive, loosely overseen environment where financial incentives to move fast consistently outweigh government signals about restraint.
  • The credibility gap between what Beijing says at the negotiating table and what its industry does in practice mirrors failures already seen in cybersecurity, intellectual property, and environmental agreements.
  • Both governments may produce a document — handshakes, press releases, commitments to transparency — that functions more as political theater than as a genuine constraint on dangerous development.
  • The real danger accumulates not in a single catastrophic event but in the steady deployment of increasingly powerful systems by companies that may not even know their government has made safety promises on their behalf.

As the United States and China prepare to negotiate artificial intelligence safety, a deeper structural problem shadows the table: governments can make commitments, but they cannot always compel the companies beneath them to honor those commitments. A former US AI diplomat warns that Beijing's stated caution about AI risks has not reached the domestic firms actually building the technology, creating a credibility gap that diplomatic language alone cannot bridge. History suggests that agreements between states are only as meaningful as the enforcement mechanisms and corporate cultures that give them life — and in this case, both remain dangerously thin.

The United States and China are preparing to negotiate artificial intelligence safety — a moment that, on its surface, suggests two competing superpowers are finally taking shared risks seriously. But a former US AI diplomat sees a problem that no amount of diplomatic skill can resolve: Beijing's message about caution and restraint has not reached the companies actually building AI inside China.

This is not a minor administrative gap. Chinese domestic firms operate in an environment of limited, inconsistent oversight, competing fiercely with one another and with American rivals. They have every incentive to move fast and deploy systems quickly. A government statement about safety does not automatically reshape those incentives — and the companies may not even be aware that their government is making commitments on their behalf.

The deeper danger is that the talks will succeed just enough to be misleading. Both sides may produce a document — commitments to information-sharing, research collaboration, mutual transparency — that allows policymakers to declare the problem managed. Meanwhile, in labs across China, development continues with minimal regard for whatever safeguards were agreed upon in a conference room far removed from the work.

This pattern is familiar. Bilateral agreements in cybersecurity, intellectual property, and environmental protection have repeatedly foundered on the same structural reality: you cannot sign a treaty with a government and assume it will govern the behavior of private companies operating under weak oversight in a competitive market. The threat is not what Beijing says it will do. The threat is what Beijing's companies will do when no one is watching.

The United States and China are preparing to sit down and talk about artificial intelligence safety. On the surface, this looks like progress—two superpowers acknowledging that the technology they're racing to build carries genuine risks, and deciding to manage those risks together. But there is a problem baked into the premise, one that no amount of diplomatic skill can solve at the negotiating table.

Beijing may have begun to take the dangers of artificial intelligence seriously. Senior officials may understand the stakes. The government may even be sincere in its willingness to discuss safeguards. But that message—the one about caution, about the need for restraint, about the real hazards embedded in systems that can learn and act at scale—has not filtered down to the companies actually building the technology inside China.

This is not a small gap. It is the difference between what a government says it believes and what its industry actually does. Chinese domestic companies operate in an environment where oversight is limited and inconsistent. They are competing fiercely with one another and with American firms. They have financial incentives to move fast, to deploy systems, to capture market share. A government statement about safety, no matter how carefully worded, does not automatically reshape those incentives or constrain those behaviors.

When two countries sign an agreement on paper, the world often treats it as a binding commitment. Diplomats shake hands. Press releases are issued. The agreement is filed away as evidence that the problem has been addressed. But an agreement between governments is only as strong as the enforcement mechanisms behind it and the willingness of the actual actors—the companies, the engineers, the decision-makers on the ground—to abide by it. Without that, the agreement becomes theater. It creates the appearance of progress while the underlying risks continue to accumulate.

The real threat is not that negotiations will fail in some dramatic way. It is that they will succeed just enough to be dangerous. They will produce a document that both sides can point to as evidence of cooperation. They will allow policymakers to claim that the problem is being managed. And meanwhile, in labs and offices across China, companies will continue building systems with minimal regard for the safety commitments their government has made on their behalf. The companies may not even be aware those commitments exist, or they may be aware and simply choose to ignore them because the cost of compliance is higher than the cost of risk.

This is the credibility gap that no bilateral agreement can close from above. You cannot negotiate your way around the fact that the entity you are negotiating with does not have reliable control over the entities that actually matter. You cannot sign a treaty with a government and assume that treaty will shape the behavior of private companies operating under weak oversight in a competitive market. That assumption has failed repeatedly in other domains—in cybersecurity, in intellectual property, in environmental protection. It will fail here too.

The talks may produce something that looks like progress. There may be commitments to information-sharing, to research collaboration, to mutual transparency. These things have value. But they will not prevent the real threat, which is not a single catastrophic failure but a steady accumulation of risks as Chinese companies deploy increasingly powerful systems without the safety infrastructure that responsible development requires. The threat is not what Beijing says it will do. The threat is what Beijing's companies will do when no one is watching.

Beijing may understand the dangers of artificial intelligence, but that message has not filtered down to the companies actually building the technology
— The argument presented in the piece
Möchten Sie die ganze Geschichte? Das Original lesen bei The New York Times ↗
Kontakt FAQ