Every AI Policy Ever · open in the interactive register

Draft / proposedProposed · Guidelines / framework

Cybersecurity Standard Practice Guide — Security Guide for the Development of Agentic AI Systems (Draft for Comment)

网络安全标准实践指南——智能体系统开发安全指南（征求意见稿）

Record CN-19

Issued by
National Cybersecurity Standardization Technical Committee (TC260) Secretariat
Jurisdiction
China
Level · region
National · East Asia
Published / adopted
2026-09
Language
Chinese

Summary

Draft TC260 practice guide on the secure development of agentic AI systems built on large models, covering the preparation, design, implementation, testing and release stages. It names risks such as prompt injection, goal deviation, privilege abuse, memory poisoning and cascading failure, and sets principles of risk orientation, graded control, human controllability and defence in depth. Measures include a risk register, models meeting GB/T 45654-2025, execution limits, rollback for irreversible operations, human confirmation, review and takeover of high-risk operations, guardrails, supply-chain checks, sandboxing, red-team testing and a pre-release security assessment.

Language

No English version of this instrument was found. The English title and the summary are the register's own, written from the sources below; for the exact wording use the Chinese text.

Safety topics

human oversightevaluation & testinggeneral-purpose / frontier AI

Status notes

The TC260 Secretariat released it for public comment with notice 网安秘字〔2026〕119号 of 18 Sept 2026; comments were due by 2 Oct 2026. The draft itself is dated September 2026, is version v1.0-202609 and carries the number TC260-PG-2026NA. It covers software agentic AI systems built on large models, not agentic systems whose main function is controlling physical devices such as robots or autonomous vehicles. Its bibliography lists AI Safety Governance Framework 2.0 (CN-13) and TC260's practice guide on the security of deploying and using agents (CN-26).

Sources

Open the official source https://www.tc260.org.cn/tc260/tzgg/202609/e5b82ae7aca244d19d36b39575cbb458/files/%E3%80%8A%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E6%A0%87%E5%87%86%E5%AE%9E%E8%B7%B5%E6%8C%87%E5%8D%97%E2%80%94%E2%80%94%E6%99%BA%E8%83%BD%E4%BD%93%E7%B3%BB%E7%BB%9F%E5%BC%80%E5%8F%91%E5%AE%89%E5%85%A8%E6%8C%87%E5%8D%97%EF%BC%88%E5%BE%81%E6%B1%82%E6%84%8F%E8%A7%81%E7%A8%BF%EF%BC%89%E3%80%8B.pdf.pdf

Secondary source: https://www.tc260.org.cn/tc260/tzgg/202609/e5b82ae7aca244d19d36b39575cbb458.shtml

Local copy

Archived. Last attempt 2026-10-18 07:41:56 UTC

Official source (third-party copy, not published) archive/CN-19/2026-10-18/official.pdf
Retrieved 2026-10-18 07:42:03 UTC
SHA-256 27c2765673ce18e56d8e2e548a450e032b96e0092ca8d018b93eee5e9e4b3e2a
Secondary source (third-party copy, not published) archive/CN-19/2026-10-18/secondary.html
Retrieved 2026-10-18 07:42:06 UTC
SHA-256 35825846958052b134319b1c9bc6c202c6d1dcf912b6bd4c7cfb592cbb1f59c9

Verification

A
The instrument's own official text, or an official register, was stored and confirms the title, date and status. checked 2026-10-18 · official-url-fetched
Refresh of 18 Oct 2026 under the rule that level A needs the instrument's own text or an official register. Stored and read (tc260.org.cn, stored 14 Oct 2026 and unchanged when the archiver checked them on 18 Oct 2026): the draft PDF (31 pages), now the official_url, and the TC260 Secretariat's notice of 18 Sept 2026 calling for comments and attaching it, the previous official_url, now the secondary source. The PDF confirms the title, the draft status and version, the number TC260-PG-2026NA, the Secretariat as issuer, the month (2026年09月) and the contents; the summary follows the Chinese text. The notice announces the draft's release, so the day, 18 Sept 2026, and the comment deadline of 2 Oct 2026 are in the notes and date_published is 2026-09. TC260's home page, stored on 18 Oct 2026 in run 2026-10-18-recheck-east-asia-1, lists the latest notices of 13 Oct, 18 Sept and 15 Sept 2026; the newest notice on this guide is still the call for comments of 18 Sept, so no final version had been released by 18 Oct 2026. No English version was found.
Second check: Independent check by Claude Code (claude-sonnet-5-5), 2026-10-18: 7 field(s) supported.

History

  1. 2026-10-18notes: Released for public comment by the TC260 Secretariat with notice 网安秘字〔2026〕119号 → The TC260 Secretariat released it for public comment with notice 网安秘字〔2026〕119号 — first two sentences reworded: the notice is named as the source of the release day, and the draft's own date (September 2026) is added; the rest is unchanged2026-10-18-refresh-level-rule-2 · Claude Code (claude-opus-5-5)
  2. 2026-10-18secondary_url: – → https://www.tc260.org.cn/tc260/tzgg/202609/e5b82ae7aca244d19d36b39575cbb458.shtm — null -> the call-for-comments notice of 18 Sept 2026, which gives the release day, the notice number and the comment deadline2026-10-18-refresh-level-rule-2 · Claude Code (claude-opus-5-5)
  3. 2026-10-18official_url: https://www.tc260.org.cn/tc260/tzgg/202609/e5b82ae7aca244d19d36b39575cbb458.shtm → https://www.tc260.org.cn/tc260/tzgg/202609/e5b82ae7aca244d19d36b39575cbb458/file — the record pointed at the TC260 Secretariat's call-for-comments notice, an announcement that attaches the draft; the draft PDF itself, already stored, becomes official_url (rule 7c)2026-10-18-refresh-level-rule-2 · Claude Code (claude-opus-5-5)
  4. 2026-10-18date_published: 2026-09-18 → 2026-09 — 2026-09-18 -> 2026-09: the draft's own text gives only the month (cover '2026 年 09月'); the day, 18 Sept 2026, comes from the call-for-comments notice, an announcement, and stays in the notes (rule 7b)2026-10-18-refresh-level-rule-2 · Claude Code (claude-opus-5-5)
  5. 2026-10-18notes: Released for public comment by the TC260 Secretariat with notice 网安秘字〔2026〕119号 → Released for public comment by the TC260 Secretariat with notice 网安秘字〔2026〕119号 — the bibliography item linked as CN-262026-10-18-recheck-east-asia-1 · Claude Code (claude-opus-5-5)
  6. 2026-10-18related: [{"id": "CN-10", "slug": "cn-gb-t-45654-2025"}, {"id": "CN-13", "slug": "cn-ai-s → [{"id": "CN-10", "slug": "cn-gb-t-45654-2025"}, {"id": "CN-13", "slug": "cn-ai-s — added CN-26: the draft's bibliography lists TC260's practice guide on the security of deploying and using agents, which is CN-262026-10-18-recheck-east-asia-1 · Claude Code (claude-opus-5-5)
  7. 2026-10-14Added to the register — found in pipeline run 2026-10-14-discover-leads-2026-10-14, candidate C002 (CN/ministries)2026-10-14-discover-leads-2026-10-14 · Claude Code (claude-opus-5-5)

Related records

GB/T 45654-2025 China · Published (non-binding, current)

AI Safety Governance Framework 2.0 China · Superseded

TC260-PG-20266A (agent deployment and use security) China · Published (non-binding, current)

Citation

National Cybersecurity Standardization Technical Committee (TC260) Secretariat. Cybersecurity Standard Practice Guide — Security Guide for the Development of Agentic AI Systems (Draft for Comment). 2026-09. https://www.tc260.org.cn/tc260/tzgg/202609/e5b82ae7aca244d19d36b39575cbb458/files/%E3%80%8A%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E6%A0%87%E5%87%86%E5%AE%9E%E8%B7%B5%E6%8C%87%E5%8D%97%E2%80%94%E2%80%94%E6%99%BA%E8%83%BD%E4%BD%93%E7%B3%BB%E7%BB%9F%E5%BC%80%E5%8F%91%E5%AE%89%E5%85%A8%E6%8C%87%E5%8D%97%EF%BC%88%E5%BE%81%E6%B1%82%E6%84%8F%E8%A7%81%E7%A8%BF%EF%BC%89%E3%80%8B.pdf.pdf. Status: Draft / proposed; verified 2026-10-18 (level A). Local copy archive/CN-19/2026-10-18/official.pdf retrieved 2026-10-18 07:42:03 UTC, SHA-256 27c2765673ce18e56d8e2e548a450e032b96e0092ca8d018b93eee5e9e4b3e2a. Every AI Policy Ever, version 1.18 (snapshot 2026-10-18), record CN-19.

Improve this record

Know of an amendment, a status change or an error? Report news or an error on GitHub; the form opens with this record filled in.