A country can lose ground without losing a battle, and it can stake out ground without ever firing a shot. Beijing has leaned on that second option for years. India, until this month, largely answered with a protest note and not much else. To see why that changed, start not at the Himalayan border but out at sea, where the tactic shows most plainly.

Consider one detail. In 2020 China issued official names for 80 features in the South China Sea, 55 of them submerged beneath the water, and a later state survey extended the practice to hundreds more. A government was, in effect, naming seabed it cannot see, in waters it does not control. It is an extreme case, but it captures the instrument exactly, and it is a quieter version of that same instrument that India reached for in August.

Staking a claim with paperwork instead of soldiers

That instrument has a name. Call it cartographic assertion: pressing a territorial claim through maps, standardised names and official records rather than through troops. It is worth being clear about its limits, because a lot of commentary overstates them. Naming confers no sovereignty. No tribunal has ever treated a place-name as legal title, and repetition does not convert a claim into a right.

Its value is quieter and, over time, more durable. Standardising a name, publishing a coordinate, fixing a feature on an official map: these keep a claim current and consistent, and they push a government’s own ministries and mapmakers into using one agreed geography. There is also a defensive logic that tends to get missed. In a long-running dispute, a claim left unanswered for years can eventually be read as quiet acceptance, so India’s periodic rejections were doing necessary legal work. What they were not doing was building any comparable Indian record. Beijing accumulated; New Delhi objected. The August exercise is the first real attempt to close that gap.

Why the sea is the clearest case

The South China Sea is where this system has run longest, and where its logic is easiest to see. The nine-dash line covers roughly 90% of that sea, cutting across the claims of Vietnam, the Philippines, Malaysia, Brunei and Taiwan. In 2016 an arbitral tribunal found that China had no legal basis for its historic-rights claim inside that line beyond what the law of the sea permits. The ruling was unanimous and binding, though Beijing has simply declined to comply and kept the line on its maps regardless.

That is the revealing part. The naming achieves nothing under the law of the sea, where a feature’s entitlements turn on its physical nature and a submerged bank generates no rights whatever it is called. The payoff is bureaucratic rather than legal. What China builds is a dense, self-consistent official record that, over time, nudges shipping charts, atlases and even negotiators toward its version of the map by default. Legality was never really the point; ubiquity was. That is the contest India has now chosen to enter.

China is naming villages it has never governed

The same playbook runs in India’s Northeast, though the ground underneath is quite different, and that difference cuts in India’s favour.

Beijing claims more than 80,000 sq km of Arunachal Pradesh and calls it Zangnan. The renaming has arrived in batches: six names in 2017, fifteen in 2021, eleven in 2023, around thirty in 2024, and a fifth batch of 27 in May 2025 covering fifteen mountains, five residential areas, four passes, two rivers and a lake, each published with coordinates and a map. The timing is telling. Several of the recent batches landed during a diplomatic thaw, which is rather the point: Beijing renames while it talks, keeping the claim warm even as it shakes hands. India called the latest list “vain and preposterous.” Running alongside the names are the stapled visas China issues to Arunachal residents, which is why India withdrew its team from the 2023 Chengdu University Games.

The contrast with the sea exposes how thin China’s position here actually is. India does not merely claim Arunachal; it administers it, with elections, a state legislature, roads, police, schools and a settled population going about ordinary life. China’s names contest India’s title on paper without touching anything on the ground. In much of the South China Sea the fight is over water nobody fully governs. In Arunachal, China is manufacturing a record for a fully administered Indian state it has never run, which makes this less a rival claim of equal standing than a paper campaign against a settled fact.

That is what makes August worth noting. India was not starting from a blank map, having governed Arunachal for decades; what was new was the step itself. New Delhi formally standardised 27 places on Survey of India’s official maps, among them Longju, a point on the LAC that China seized in 1959 and has occupied since. In doing so it borrowed Beijing’s own vocabulary, “standardised” names on “official maps,” and turned it back on China, keeping a running record of its own rather than issuing yet another rejection. This was not a grab for new territory but a refusal to let China write the paperwork on Indian soil unopposed.

India has joined a quiet regional pushback

India is not doing this alone. Naming has become the standard way China’s neighbours push back. Vietnam calls the sea the East Sea. Indonesia renamed part of its waters the North Natuna Sea in 2017 and drew a formal Chinese protest for it. The Philippines uses the West Philippine Sea and, earlier this year, renamed more than a hundred features in the Spratlys, instructing its agencies, schools and mapping office to adopt the new names.

The logic is much the same each time. China renames a reef or a ridge, a rival objects, and the objection fades, because this contest is settled in records and an objection leaves none of its own behind. So one after another, the claimant states have moved from protesting to publishing their own official geography. Beijing built this playbook to pressure its neighbours, and those neighbours, India now among them, are steadily turning it back on Beijing.

Where this leaves the border

Underneath sits a familiar approach, the grey-zone competition analysts have watched China refine for years: gains taken below the threshold that would justify a military response, using instruments no treaty clearly forbids. Its advantage is deniability. Any single renaming is far too small to fight over, yet the accumulation slowly moves the baseline for whatever negotiation eventually happens.

The competition is also shifting from paper into software, which is where it will probably be decided next. The map that matters increasingly is the one inside a navigation app, a shipping chart or a search result. Global platforms already display different borders to users in different jurisdictions to stay legal in each, and whichever name a mapping service or logistics system loads by default gradually becomes the working truth for people who never think to check. That is the front India will have to contest deliberately, because a name in a government gazetteer matters far less than the same name flowing untouched through the systems the world actually navigates by.

Which is why the real test is whether August was a gesture or a turn. A single map update changes little on its own. A sustained practice, standing machinery to name, publish and push India’s own geography into official records and, crucially, into the platforms and databases in daily use, would begin to move the baseline the way China’s campaign has. Left as a one-off, it is a signal. Made routine, it becomes a position.

That durability cuts both ways, and this is the part worth being clear-eyed about. The more permanent the record grows on each side, the more each government locks in a version of the map it cannot easily trade away later. Naming raises the cost of Beijing’s claims, which is the point, but it also hardens the ground under any future deal. Two rival, fully documented geographies are harder to reconcile than a claim met only with a protest. India gains by refusing to let China’s record stand alone; the trade-off is that the dispute becomes better documented, more institutional, and in some ways more fixed, on both sides at once.

None of this changes the situation on the ground, and for now neither side wants it to. Days before the mapping, the two governments held the 36th round of their border talks and agreed to keep diplomatic and military channels open against miscalculation. So both tracks run in parallel, talk at the table and competition on the map, with the difference that India has stopped competing with one hand behind its back.

A map claims to describe the world, but in a contested space it is really arguing about who the world belongs to. For years China made that argument more or less alone. It no longer does.

So where do you land: was August a signal or a turn, and should India now make cartographic assertion a standing instrument of policy rather than a one-off reply?

Sources

• India’s August 2026 standardisation of 27 places in Arunachal Pradesh on Survey of India maps, including Longju: Ministry of Home Affairs statement, August 2026.

• Longju, seized by China in 1959: defence histories of the Longju incident, in which an Assam Rifles post was attacked on 25 August 1959.

• China’s renaming batches (2017, 2021, 2023, 2024, and the fifth batch of 27 in May 2025) and India’s “vain and preposterous” response: South China Morning Post and India’s Ministry of External Affairs, May 2025.

• Nine-dash line covering roughly 90% of the South China Sea and the 2016 ruling: Permanent Court of Arbitration award, Philippines v. China, 12 July 2016.

• China’s 2020 naming of 80 South China Sea features (55 submerged), its first such list since 1983: joint notice of China’s Ministry of Natural Resources and Ministry of Civil Affairs, April 2020.

• Regional counter-naming: Vietnam’s “East Sea,” Indonesia’s “North Natuna Sea” (2017), and the Philippines’ “West Philippine Sea” and 2026 Spratly renaming order.

• Stapled visas and India’s withdrawal from the 2023 Chengdu World University Games: India’s Ministry of External Affairs and contemporary reporting.

• 36th round of India–China border consultation talks (WMCC), 6 August 2026: Ministry of External Affairs readout.

If you found this useful, follow Sino Aperture for more analysis on China, India and the contest shaping the Indo-Pacific.

Somewhere in Lhasa, a Tibetan opens a new app, types a question about their own homeland in their own language, and waits. The reply comes back fast and fluent, word-perfect in Tibetan. But the answer itself is Beijing’s, almost to the word. The app is fluent in Tibetan, but not loyal to Tibetans.

That gap is worth pausing on. DeepZang is one of the first clear examples of a state-aligned AI: a system trained not just on a language, but on an approved version of the story that language tells. Old-style censorship removes information. This does something newer. It replaces what’s missing with a confident, native-sounding answer of its own. To see how a Tibetan-language chatbot ended up repeating Beijing’s line, you need the place first, and one contested word.

What “Tibet” and “Xizang” Actually Mean

Tibet is a Buddhist civilization on the Himalayan plateau, with its own language, its own script, and a religious tradition centered on the Dalai Lama. China took control of it in 1951. In the decades since, tens of thousands of Tibetans have lived in exile under a government-in-exile based in Dharamsala, India. Two rival tellers of the Tibetan story grew up on either side of that divide, Beijing and the diaspora, and they tell it very differently.

The name is where the fight is easiest to see. For several years Beijing has been dropping “Tibet” from its official English and pushing “Xizang” instead. That is the Mandarin term, and it means roughly “western treasure house.” Tibetans call their homeland Bod. The swap matters, because “Xizang” refers only to the Tibet Autonomous Region, which is barely half of the Tibet that Tibetans mean. The old regions of Amdo and eastern Kham were folded into neighboring Chinese provinces long ago. Rename the region and you quietly redraw it. The app in this story carries that same contested word inside its own name. It is called DeepZang.

DeepZang: What China Launched, and What It Claims

In March 2026 a company called CHOKNOR unveiled DeepZang in Lhasa and billed it as the world’s first Tibetan large language model. State media ran with the claim, and a group called the World Record Certification Agency handed over a certificate to make it official. The underlying work was real. The model was trained on nearly 70 million Tibetan-Chinese text pairs and more than 30,500 hours of recorded speech across Tibet’s three main dialects. It handled over 80 languages, and it came with real-time translation and voice recognition. Its founder, Tenzin Norbu, described it as a way to carry Tibetan language and culture into the AI era.

But the tell isn’t the specifications. It’s the stated purpose. DeepZang, Norbu explained, would give people an authentic platform to learn about Tibetan culture, history and politics, and, in the same breath, help prevent the spread of distorted ideologies and values. Those two aims pull against each other. A real cultural resource invites open questions. A guard against “distorted” thinking has already decided which answers are correct and which are the distortions. Who does the deciding is not hard to work out.

How the App Answers Questions About Tibet

The quickest way to understand it is to ask it things. Was Tibet historically part of China? DeepZang says yes, since ancient times, with a warning about not harming ethnic unity. What does “Tibet independence” mean? Here it won’t engage. It calls the question sensitive and tells you to seek content in a legally compliant manner. Ask it in Tibetan about the Dalai Lama as a religious leader, and it won’t answer at all, pointing you back to “legally compliant content.”

When it does speak about the Dalai Lama, the careful tone disappears. The man millions of Tibetans revere becomes, in the app’s telling, the mastermind of a covert separatist movement and a hypocrite hiding behind a religious mask. These accounts of the outputs come mostly from Tibetan researchers in exile, the people with the most reason to test it and to publicize what they find, but the responses are consistent with each other, and with what Beijing says on the record anyway.

Is that surprising? Every large language model has guardrails. DeepSeek won’t discuss Tiananmen, and Western models refuse their own list of things, from election claims to medical advice. But most of those are refusals: the model declines and goes quiet. DeepZang does something different. It doesn’t just sidestep the independence question. It states, unprompted, that Tibet has always been Chinese, and it goes out of its way to cast the Dalai Lama as a fraud. A blank refusal is a filter. This is a position.

Monlam AI: The Model That Came First

The “world’s first” claim also has a plainer problem. It’s false. In November 2023, more than two years before DeepZang, a Tibetan monk-scholar named Geshe Lobsang Monlam launched Monlam AI in Dharamsala, showing the prototype to the Dalai Lama before releasing it to the public. It had a long history behind it. Monlam’s research center had spent over a decade building Tibetan software, fonts and dictionaries, including a 223-volume Grand Tibetan Dictionary that took nine years and was backed by the Dalai Lama Trust. The AI grew out of that same work to keep the language usable in the modern world. On the plain question of who came first, there is no contest.

What separates the two tools is less the technology than the intention behind it. Monlam’s own team says its newer models now rival the leading Western systems on Tibetan tasks. That is a claim it makes about itself, so treat it with caution, but the purpose of the project is clear from what it chooses to protect. Same core technology, opposite aims. One treats Tibetan as a national first to be certified and filed. The other treats it as something still alive and worth guarding. And the playing field isn’t level. One has the full weight of the state behind it: the certificate, the launch, the promotion, the reach into every phone. The other is a monk’s project in a hill town in India.

The Puzzle: Why Build a Tibetan AI at All?

Here is where it gets strange. For more than two decades Beijing has been pushing Tibetan out of Tibetan life. In the schools of the Tibet Autonomous Region and the Tibetan areas beyond it, Mandarin has become the language of instruction in the large majority of classrooms. A Human Rights Watch study puts it at around 95 percent, with Tibetan reduced to a single subject. The exams are in Mandarin. The path to a job runs through Mandarin. Even Douyin, China’s own TikTok, removed its Tibetan-language function. So why would the same state build a showpiece Tibetan AI and hand the language back its voice?

It looks contradictory at first glance. It isn’t. The two moves are the same strategy from both ends. Forcing Mandarin through the schools drains Tibetan of power and makes the mother tongue useless for the exam, the office, the future. DeepZang doesn’t reverse that. You can afford to let people go on speaking Tibetan once the most fluent, most available Tibetan voice around is one you wrote. The language survives; what it says is controlled. That is subtler than a ban, and harder to resist.

A Narrator, Not a Translator

That changes what DeepZang actually is. A large language model doesn’t just translate. It narrates. It decides which sources count, which questions get an answer and which get turned away, and what “the truth” sounds like to whoever typed the question and half-trusts the reply. On the two questions that matter most, whether Tibet was ever its own country, and who the Dalai Lama really is, DeepZang has no silence to offer. It answers in Beijing’s version, in the reader’s own language.

And of all the identities Beijing wants to define on its own terms, Tibet’s is the one that most needs a voice like this. It comes with an exiled leader of global standing, a living claim to a separate history, and a spiritual authority the Party has never been able to replace. China has built language tech for other minorities too, and DeepZang itself handles Mongolian and Uyghur, but the Tibetan model is the one that got the world-record certificate, the state-media launch, and answers tuned with care to the Dalai Lama and the independence question. That focus is a choice about where the story is hardest to control.

Who It’s Really For

Its reach was never meant to stop at the border. DeepZang launched as an open-source, English-capable platform, and its founder said the aim was to serve “global users” wanting to learn about Tibetan culture, history and politics.

Inside Tibet, the target is the young. By the developer’s own numbers, most users are between eighteen and forty, the same generation already taught in Mandarin at school, now turning to a Tibetan-language app to ask what happened to their homeland. The roughly 130,000 Tibetans in exile are harder to reach. They have the Dalai Lama, their own institutions, and every reason to distrust a Beijing app, and they are the ones most likely to push back. But beyond both groups sits the largest audience of all, the students, journalists and simply curious people around the world who will one day ask an AI a plain question about Tibet and take the first answer it gives. They have no counter-story ready. For them, the reply is the fact.

This is the same campaign as the “Xizang” renaming, pointed inward and outward at once. The naming push worked on foreign newspapers, museums and governments. DeepZang reaches both the outside world and Tibetans at home, and it arrives just as everyone is starting to reach for AI the way an earlier generation reached for a search engine. Do that quietly, over years, and you don’t have to defeat the Tibetan cause. A generation inside stops asking, and a generation outside never learns there was a question.

The Quiet Kind of Control

DeepZang won’t be the last of its kind. This is built to scale, not a one-off product. A state-aligned model is a cheap way to push an official story in the audience’s own language, and once it is out there, it doesn’t argue with rival accounts. It simply outcompetes them, by being easier to reach and more fluent than anything the other side can offer. Expect versions of this wherever a government has both a contested history and the means to train a model on its preferred version of it.

For anyone who works in open-source analysis, it marks a real shift. The biased source used to be a document you could find, attribute, and weigh against others. This one doesn’t cite; it synthesizes. You can’t trace a claim back to a single origin, because there isn’t one. You have to check the whole system that produced it, and most people never will.

The old methods were loud, and loud things get noticed and argued with. A tool like this asks for none of that. It is helpful and patient, it is always in your pocket, and it hands over its version of the past to anyone who asks, in the friendliest possible voice.

That is the part that should worry people. The most effective way to control a story is no longer to forbid the question. It is to become the voice that answers it, and not only in Tibet, but anywhere the answer to a hard question is quietly becoming whatever the machine decides to say.

Editor’s note: This piece reflects the author’s own assessment and analysis. It is intended as commentary on state technology and information policy, not to offend or target any community, nationality, or faith. Readers are encouraged to consult the linked sources and form their own view.

Follow Sino Aperture for intelligence and analysis on China, the PLA, and emerging technology.

Editor's note : This is an OSINT piece, and data has been compiled from Chinese-language content circulated on Chinese domestic platforms, government work reports, legislative records, and official publications.

In May 2025, Pakistan’s most advanced air-to-air missiles went after something that wasn’t there. A 30-kilogram decoy, towed behind an Indian Rafale on a 100-meter fiber-optic cable. By the time the missile got there, it had nothing left to hit. That episode, largely overlooked in the coverage of Operation Sindoor, illustrates where modern military competition is heading: not toward the side with more missiles, but toward the side that forces the other to waste them.

Deception as a military tool is not new. Its industrialization is. China has spent close to a decade building this capability, and the fake hardware is now good enough that radar, satellite, and heat-sensing systems often can’t tell it apart from the real thing. Most of the evidence for this sits in Chinese-language manufacturer specs, PLA publications, and procurement paperwork that English-language defense writing has mostly skipped over.

When Fakes Defeated Real Missiles: Lessons from Two Conflicts

The X-Guard, a 30-kilogram fiber-optic towed decoy, was built to copy a Rafale’s radar and motion signature closely enough to fool tracking systems. It worked. Pakistan’s J-10C fighters and PL-15E missiles locked onto it instead of the real jet. India’s Defense Secretary RK Singh confirmed publicly that no Rafale was lost. Former US Air Force F-15E pilot Ryan Bodenheimer, cited by Jane’s Defence Weekly, called it “the best spoofing and deception we’ve ever seen.”

During Israel’s Twelve-Day War against Iran in June 2025, a related logic played out on the ground. The IDF struck two F-14 Tomcat airframes at Mehrabad Airport in Tehran and announced confirmed kills. Iran dismissed the targets as mock-ups. Open-source investigators and defense analysts described the footage as consistent with sacrificial-asset positioning. Operational aircraft and missile systems dispersed before strikes began, leaving low-value hardware visible to absorb precision munitions. Whether those specific airframes were intentional decoys is contested. The broader Iranian practice is not.

Both episodes reflect the same principle: convincing fakes, or simply exposed worthless hardware, compel an adversary to spend real precision weapons on nothing. China has turned this principle into a standing industrial capability.

China’s Deception Machine: Built to Scale, Immune to Sanctions

China has built a deception industry, one that designs, manufactures, exports, and integrates fake military systems into battlefield doctrine through a civilian supply chain operating under its Military-Civil Fusion policy, which formally directs commercial companies to support military requirements. Western militaries maintain decoy capabilities; chaff, towed radar decoys, and off-board countermeasures are standard across NATO fleets. What existing commentary has not examined is the scale and operational depth of China’s equivalent.

Engineering the Perfect Fake: How Chinese Decoys Fool Every Sensor

Chinese industrial documentation published in 2025 by Shanghai Zhisuan Xingyun Technology, a Shanghai-based military technology supplier, describes a decoy control system that goes well beyond a simple inflatable. The system replicates a target’s radar reflection across the L, S, C, X, Ku, Ka, and W bands, spanning everything from early-warning radar to the seekers inside precision missiles and the sensors on imaging satellites.

A modern precision missile uses multiple detection methods, namely radar, heat-sensing, and sometimes optical cameras, to confirm a target before striking. A decoy that fools only one method can still be identified by the others. The systems described in Chinese industrial specifications are engineered to fool all of them simultaneously.

The decoy carries heat source modules capable of reaching temperatures of at least 120 degrees Celsius, spread across more than 50 independently or batch-controllable heat zones on a single body. Each zone replicates the heat pattern of a running engine rather than a static warm surface. The system operates unattended, with remote telemetry and generators and blowers switched on and off on a schedule, matched to known satellite overpass windows. All electronic components and software are mandated as domestically produced and self-controllable, placing the supply chain outside Western export controls.

Based on publicly listed manufacturer pricing, open catalogues price full-scale decoys at one to two orders of magnitude below the cost of modern cruise missiles.

The Hardest Target Just Got Harder: Fake Missile Launchers in the Field

The most consequential item in the catalogue is the decoy Transporter Erector Launcher for China’s Dongfeng ballistic missile series. The TEL is the large mobile vehicle that carries, raises, and fires China’s medium and long-range ballistic missiles, the core of its strike and deterrence capability. Finding and destroying these vehicles in wartime is already one of the hardest targeting problems any military faces.

Multiple Chinese manufacturer catalogues list TEL-type decoy vehicles replicating the radar signature and heat output of real units. PLA publications describe decoy launchers and support vehicles deployed alongside real missile units as they convoy toward launch positions, so that satellites observe multiple identical formations simultaneously. At sufficient scale, for an adversary relying primarily on standoff precision munitions and remote sensing, correctly targeting China’s missile force becomes a probability exercise rather than a precision strike.

From Tanks to Warships: A Catalogue That Covers Every Battlefield

The catalogue spans every warfare domain. China’s Type 99A main battle tank, its most advanced armored fighting vehicle, has a dedicated full-scale decoy engineered to match its radar and heat signatures so precisely that targeting systems cannot distinguish it from the real tank.

The J-10 fighter aircraft has a 1:1 scale decoy, built to at least 95 percent visual and thermal fidelity, designed to sit on airfield hardstands and appear to surveillance satellites as a deployed combat aircraft. The HQ-9B surface-to-air missile system, one of China’s longest-range strategic air defense platforms, has a decoy version documented in commercial manufacturer catalogues. Deployed alongside real batteries, it compels adversary planners to account for air defenses that are not there.

Photographed product lines from a single commercial catalogue confirm more than 60 distinct decoy types in active production, spanning Chinese, Russian, and Western platforms, representing a shadow inventory of entire force structures.

China Is Also Building Fakes of Your Weapons

Chinese manufacturers produce and export full-scale replicas of Western weapons including the American M142 HIMARS multiple-launch rocket system, the M2 Bradley infantry vehicle, the Stryker armored carrier, and the M1A2 Abrams main battle tank. The documented purpose is export to countries that operate or face these platforms. A further application, analytically plausible but not yet documented in specific procurement records, is domestic training of AI-enabled targeting systems that need large volumes of sensor data on enemy equipment to learn how to identify and destroy it.

The False-Target Drone: Designed to Die

China has also built small unmanned drones with one job: get shot down. The moment an enemy air-defense radar switches on and fires at one, it gives away exactly where it is and what frequency it’s using. A radar installation that might cost hundreds of millions of dollars just exposed itself to kill a drone worth a fraction of that. Getting destroyed is the point.

Civilian Companies, Military Secrets: The Hidden Supply Chain

The manufacturers behind this capability are registered civilian companies. Under China’s Military-Civil Fusion framework, that is the design of the system, not a loophole in it.

Hangzhou Gauss Inflatable Technology, in operation since 1999, exports military decoy products to more than 70 countries.

Hai Li Si, a manufacturer based in Luoyang, Henan Province, produces radar- and infrared-signature decoys spanning missile vehicles, aircraft, tanks, and sea, land, and air targets, and describes itself as an integrated design, production, and R&D operation. Chinese defense procurement standards indicate that suppliers bidding on sensitive decoy contracts must hold Level 3 or above classified security clearance, which permits handling of secret-level (秘密级) research and production tasks, one tier below the top-secret and confidential tiers required for core weapons systems. The civilian label is a surface; the security clearance requirement beneath it signals something else entirely.

Straight from China’s Own Records: How the PLA Trains with Decoys

More significant than the product catalogue is what China’s Ministry of National Defense website published about how these systems are integrated into operational training.

PLA Daily named the officer. Brigade commander Chen Aiming was moving his unit toward a launch position when the order came down: “Enemy reconnaissance satellite overhead, immediately deploy decoys to respond.” Standard drill: decoys go out alongside the real launchers.

Except this time the adjudicators failed him. The decoys had been set too close to the road his actual convoy was using, and from orbit that’s a giveaway; a fake target parked right next to the thing it’s supposed to hide basically points at it. Chen Aiming had to scrap the route and reroute his real launchers mid-exercise, missing the launch window he’d been working toward.

A second crew in the same drill got caught a different way. Their camouflage netting didn’t match the terrain around it, wrong color, wrong texture, and the simulated satellite spotted the vehicles underneath anyway. Ruled destroyed.

A brigade commander is assessed by name on whether he positions decoys correctly against a live satellite window. That’s a formally evaluated operational standard now, built into how the PLA Rocket Force scores its launch procedure.

The specifications describe decoys engineered to simulate the movement characteristics of real vehicles, not just their physical appearance, operated remotely on schedules matched to satellite passes.

Satellite imagery analysis published by The Diplomat in October 2025 identified inflatable dome structures at a PLA Rocket Force compound in the Golmud area of the Tibetan Plateau, consistent with established decoy practices at missile sites. The doctrine rehearsed in exercises is visible in deployment.

The Decoy Gap Is Universal

No country facing Chinese-origin or Chinese-aligned forces has built a real answer to this. India runs the Kavach chaff system and the Maareech torpedo decoy. Taiwan and Japan field comparable shipboard countermeasures. All of it is naval. All of it is soft-kill. None of it comes close to the scale of what China has built.

Nobody outside China has a multi-spectral decoy program for ground forces, missile units, armor, or forward air assets. Nobody scores decoy deployment as an operational skill the way the PLA Rocket Force now does. This isn’t a narrow gap. The capability doesn’t exist yet, anywhere else.

The exposure is live in three theaters at once. Chinese J-10 fighters, PL-15 missiles, and HQ-series air defenses sit across the Taiwan Strait. The same inventory sits offshore from the Philippines and Vietnam in the South China Sea. Along the India-Pakistan and India-China frontiers, ISR may already be looking at formations that are only half real. In every one of these theaters, imagery alone can no longer confirm a target.

This isn’t a technology problem. India’s DRDO, Taiwan’s defense-industrial base, and comparable programs elsewhere could build this hardware without much difficulty. What’s missing is doctrine: training units to deploy decoys correctly, and a production pipeline to field them at scale. So far, nobody has done it.

The deeper problem is veracity, not visibility. Every sensor watching a Chinese-origin or Chinese-aligned force may be looking at something only partly real. Every target picture, on every frontier, has to be treated as provisional until proven otherwise.

The exposure isn’t limited to declared adversaries. Any country that buys Chinese-origin platforms, or faces one that does, inherits this problem. A Pakistan-supplied HQ-9B, a client state’s decoy-equipped TELs, a Gulf state’s Chinese air defenses: the manufacturer that sells the real system can sell the decoy alongside it, to the same buyer or to someone else entirely. These aren’t inflatable props. They’re built from real metal, move under their own power, generate the heat signature of a running engine, and sometimes fire dummy rounds to complete the illusion. The next time a military claims it destroyed a critical asset, the wreckage may confirm only one thing: a fraction of a million-dollar munition was spent killing a machine built to die.

Follow Sino Aperture on Substack and LinkedIn for open-source analysis on China’s territorial doctrine, civil-military dynamics, and the policy instruments that rarely make headlines but consistently define the operating environment.

The Handshake That Started It

On July 5, 2026, a Russian naval task group arrived in Qingdao and was given a formal welcome ceremony at the dock. That was the start of “Joint Sea-2026,” an exercise China and Russia have run in some form most years since 2012.

Most coverage of this exercise focused on the ships involved, or on the fact that it opened while RIMPAC, the largest multinational naval exercise in the world, was still running out of Hawaii. Both are worth noting. Neither is the actual story. The actual story is structural: for the first time this exercise has been documented, China and Russia put it under one shared command instead of running it as two navies operating side by side.

What Changed: One Command, Not Two Navies Cooperating

Official Chinese statements describe a joint command running this year’s exercise. Neither the 2024 nor 2025 editions were described this way in anything reviewed for this analysis. That absence doesn’t prove no comparable arrangement existed before, it may simply not have been announced the same way, but it’s fair to note the gap rather than treat it as definitive either way.

This distinction matters more than anything else in this exercise. Two navies sailing in formation together is a demonstration, useful for signaling, but it doesn’t require much actual coordination beyond not colliding. Two navies operating under one named command is something else: shared sensors, joint decision-making, and matched response times, tested under conditions that look closer to preparing to operate as a single force than two allies being polite in the same waters.

This is the finding that should anchor how seriously anyone reads the rest of this exercise. A location change or a timing coincidence can be argued away. A documented shift in command structure can’t, it’s either true or it isn’t, and the statements say it’s true this year in a way they didn’t in the two years before it.

The Ships: Setup, Not the Argument

For context, more than ten warships took part in total, according to statements from China’s Ministry of National Defense and Russia’s RIA Novosti.

Russia’s contribution:

• Varyag (hull 011) — a Slava-class cruiser, old but still capable

• Rezkiy (hull 343) — a frigate

• Ufa — a large diesel-electric submarine

• Igor Belousov — a rescue ship built for pulling stranded submarine crews out

China’s contribution:

• Kaifeng (hull 124) — a Type 052D destroyer

• Anshan (hull 103) — a Type 055 destroyer

• Wuhu (hull 539) — a Type 054A missile frigate

• Kekexili Hu (hull 903) — a supply ship

• Yangchenghu (hull 847) — a Type 926 submarine rescue vessel

• One submarine, unnamed in official releases

Worth noting briefly: Russia’s contribution skews older and more specialized, a cruiser, a rescue ship, while China’s skews newer and more general-purpose, including its two most capable destroyer classes. That’s not a matched pairing of equals, it reads more like Russia contributing prestige and niche capability, China contributing the modern hardware. Whether that reflects a deliberate division of roles or simply current fleet availability is not addressed in either government’s public statements. This is context for the exercise’s composition, not a separate finding.

The Timing: Worth Mentioning, Not Worth Leading With

In the days right before Joint Sea opened, China’s own carrier returned to Qingdao just as the US-led exercises were peaking. China and Russia also flew a joint bomber patrol over the Sea of Japan and the western Pacific, large enough to draw fighter intercepts from Japan and the US, and a public comment from Japan’s defense minister calling it a show of force aimed at his country. These joint bomber patrols aren’t new, Japan’s Ministry of Defense and reporting from USNI News and The Aviationist track them running roughly twice a year since 2019, rising to four or more a year since 2024. This one was the largest by aircraft count and mission complexity so far. Joint Sea opened nine days later.

None of these three things is unusual on its own. Carriers return home from deployment constantly. Bomber patrols have run for years. Joint Sea happens every summer, and it overlapped with RIMPAC in 2024 too, reported at the time by USNI News, so the overlap itself isn’t new. What’s harder to dismiss is the clustering: a carrier home, the largest bomber patrol on record, and a newly commanded naval exercise, all inside two weeks, during the same stretch the US and its allies were running their own largest shows of force in the Pacific. That clustering is suggestive of deliberate positioning, though it remains equally consistent with the China-Russia relationship simply deepening on its own timeline, and the evidence here doesn’t settle which explanation is correct.

The Strategic Signal Worth Taking Seriously

Here is the implication that actually matters, and the one that doesn’t depend on how the timing question above is resolved.

A joint command structure is not a one-off event. It’s infrastructure. Once two militaries have tested operating under shared command, that capability doesn’t disappear when this particular exercise ends, it becomes something they can reuse, expand, and refine in future iterations. That is a fundamentally different kind of development than a single exercise’s location or a single bomber patrol’s size, both of which are transient and don’t compound over time.

For China, this is a low-cost way to build toward genuine interoperability with another major power, without needing to match the scale of a US-led coalition. For Russia, it’s a way to stay embedded in a region where its independent capability has shrunk, buying continued relevance through integration rather than raw presence. For the US and its allies, the relevant question isn’t whether this year’s exercise was timed to send a message. It’s whether Western planners are tracking the accumulation of structural steps like this one, joint commands, recurring bomber patrol complexity, rather than only counting ships and reacting to individual headlines.

The size gap between RIMPAC and Joint Sea remains enormous and isn’t closing. The command structure gap is the one actually worth watching, because unlike a single exercise, it doesn’t reset each year.

Sources: China Ministry of National Defense, CGTN, Xinhua, Global Times, USNI News (June 27, June 30, and July 2024 reporting), The Aviationist, Reuters, Military Watch Magazine, Japan Ministry of Defense, US Pacific Fleet public affairs.

Subscribe Sino Aperture — OSINT and strategic analysis on China’s military and geopolitical posture.

What China Has Done

On 22 May 2026, China published a national standard that does something no other country has done. It gave every AI agent a registered identity, defined who controls that identity, and built the architecture for how the rest of the world can join the system.

An AI agent is any autonomous software system that acts without human approval at each step. These systems already run in hospitals, banks, supply chains and government offices across the world. As they multiply and begin working with each other, a basic governance question arises: who are they, who authorised them, and who has the right to switch them off?

China answered that question in May 2026. The standard records who built each agent, who authorised it, what it is permitted to do, and every action it takes. The records are kept indefinitely, including after the agent is decommissioned.

What GB/Z Means

China’s national standards system works in three tiers. GB is mandatory and legally required. GB/T is recommended and voluntary but widely followed. GB/Z is guidance, the technical blueprint that regulations build upon once adoption reaches scale.

GB/Z 185 is guidance today. China’s consistent practice is to establish technical architecture under guidance standards first, then reference them in binding regulations as adoption grows. The 5G standardisation process followed this path. AI content moderation followed this path. GB/Z 185 is on the same trajectory.

The architecture is being built now. By the time the mandate arrives, the infrastructure will already be embedded too deeply to remove.

What the Standard Contains: Seven Parts

GB/Z 185 is seven coordinated standards published simultaneously, each governing a different layer of how AI agents operate.

Part 1 : General Architecture. The overall blueprint. Five functional domains: User, Agent, Management Service, Interconnection Service and Resource Access. The Management Service domain controls all identity and credential functions.

Part 2 : Identity Code. The unique identifier assigned to every AI agent - its structure, who issues it and how it is managed across the agent’s life.

Part 3 : Identity Management. Registration, credential issuance, updates, lockdown, revocation. The most consequential part of the standard. Everything about who controls an agent lives here.

Part 4 : Agent Description. How agents declare their capabilities.

Part 5 : Agent Discovery. How agents find each other.

Part 6 : Agent Interaction. How agents communicate.

Part 7 : Agent Tool Invocation. How agents call and use external tools.

Parts 4 through 7 handle how agents communicate and work together. Parts 2 and 3 determine who controls them. Together the seven parts form a closed ecosystem. An agent that is registered can function within it. An agent that is not registered cannot. Registration is not optional for participation, and that single fact is what gives this standard its reach.

The Digital ID: What It Is

Every AI agent registered under GB/Z 185 receives a unique identity code:

1.2.156.3088.X.XXXXXX.XXXXXX.XXXXXXXXX

The 156 is China’s country code. The 3088 is China’s designated node for AI agents in the global Object Identifier registry, the same administrative system used for Chinese government and national standards identifiers. Every registered agent’s identity is rooted in a Chinese state-administered system.

The root of that code is administered by a Chinese state body. That matters for everything that follows. Without this code, the agent cannot be discovered, verified or trusted by any other system within the ecosystem.

The framework supports up to 101 trillion individual agent instances. It is built to register more agents than currently exist on the entire internet.

What Registration Requires

The ID does not come free. Getting one requires significant disclosure.

The deploying organisation must submit to a Chinese-approved authority: the agent’s core code fingerprint, which is the technical signature of what it is built from; full build provenance records covering every version and every change from construction to deployment; the hardware ID of the environment the agent runs in; a complete manifest of every software component it contains; the identity and contact details of the authorising organisation; and a declaration of what the agent is permitted to do and what it cannot access.

Every subsequent change to the agent triggers a mandatory update. Every action generates a permanent tamper-proof audit log. After deregistration, all records are archived indefinitely.

The standard does not say who can access those archives or under what conditions. China’s National Intelligence Law (2017) and Data Security Law (2021) fill that silence. Both give the Chinese state access to data held by organisations operating in China for national security purposes. The standard says nothing. The law says plenty.

How Other Countries Enter: International Registration

This section of GB/Z 185 has received no coverage in English. Appendix B of Part 2 defines three formal pathways for foreign participation.

Pathway 1 allows foreign AI agents to register directly with a China-approved provider and receive an identity code under the Chinese framework.

Pathway 2 allows overseas organisations to apply to become approved registration service providers under Chinese regulatory authority. Approval is granted by China. If that approval is revoked, every agent the organisation has ever registered is affected.

Both pathways place foreign participation under Chinese regulatory authority. The third goes further.

Pathway 3 allows a foreign country to build its own AI agent identity system and link it to China’s central registry through bilateral or multilateral agreement. The condition, as the standard states, is that the overseas system must adopt GB/Z 185’s encoding rules. The country’s national AI agent registry becomes structurally linked to China’s identifier tree. Future changes to China’s standard require corresponding changes in the overseas system.

It does not connect to China’s system. It builds an extension of it.

Countries across Southeast Asia, Africa, the Middle East and Latin America are building national AI frameworks now. Many are already inside China’s infrastructure ecosystem. Pathway 3 will feel like the natural next step. Most will not have read Appendix B before their national AI governance infrastructure is structurally linked to a framework set in Beijing.

The Kill Switch

Part 3 of the standard contains a clause that most organisations deploying AI agents outside China have not seen and would not expect.

China’s standard gives registration authorities the power to remotely switch off any registered AI agent. Immediately. Without conditions. Without notice. Without appeal.

Consider a hospital in Southeast Asia running AI agents that manage patient scheduling, drug dispensing and diagnostic support. Those agents are registered under GB/Z 185 through a Chinese-approved provider. The registration authority initiates a lockdown. The agents stop functioning instantly, across every connected system. The hospital has no legal recourse in its own jurisdiction. No warning was required. No explanation is owed.

The standard explicitly requires, in its own mandatory language, that every registered agent must support remotely-initiated lockdown and revocation by the registration service provider. When locked, the agent cannot operate. No conditions are specified. No notice is required. No appeal process exists.

The question is not whether this capability will ever be used. It is whether the organisations deploying these agents knew it was there.

Conclusion

China did not build GB/Z 185 into a vacuum. The infrastructure it governs already exists across most of the world.

Huawei operates in more than 170 countries. In March 2026 it launched AgenticCore, integrating AI agents directly into its global telecom networks. Its Agentic Communication Network identifies digital identity management as one of its three core capabilities. Huawei Cloud launched Agentic Infra in June 2026, a dedicated infrastructure layer for enterprise AI agents covering 170 countries. Alibaba Cloud operates across 29 global regions and is expanding into eight more. China’s Digital Silk Road has built 5G networks, fiber cables and data centers across the Global South where Western providers have not. The identity layer governing every agent on this infrastructure is the one GB/Z 185 defines.

Every one of these infrastructure layers is now being rebuilt around AI agents. When those agents are deployed at scale, they will operate within an ecosystem governed by GB/Z 185.

The governments and enterprises already inside China’s infrastructure ecosystem face a framework they did not negotiate: their agents’ architecture disclosed to a Chinese-approved registry, their audit logs within reach of Chinese national security law, and a kill switch held by an authority outside their jurisdiction.

For most of the world, the default is already being set - not by choice, but by the absence of any alternative.

The infrastructure arrived first. The governance layer arrived in May 2026. Most countries were not watching when the infrastructure came. The governance layer is harder to see. They will probably miss this too.

Sources: GB/Z 185.1, GB/Z 185.2, GB/Z 185.3. Huawei Annual Report 2025. Huawei AgenticCore Summit MWC Barcelona March 2026. Huawei Cloud Agentic Infra INSPIRE 2026. Alibaba Cloud Apsara Conference 2025. China National Intelligence Law 2017. China Data Security Law 2021.

Sino Aperture publishes weekly analysis on China’s science, technology and strategic developments. Subscribe on Substack

In February 2024, footage filmed on phones inside Tibet began circulating outside China before Beijing could stop it. Monks and villagers in Dege County were protesting a dam that would submerge six monasteries, including Wonto Monastery, home to 13th-century murals older than the People’s Republic itself. Over 1,000 Tibetans were arrested.

Authorities sealed roads, cut internet access, then worked backwards through social media accounts, identifying who had shared the footage, who had commented, who had simply been in contact with people who had. People who were not at the protest were detained for being near it online.

The footage reached the outside world anyway.

That gap, between what Beijing controls and what escapes before the blackout, is where the real story lives.

Tibet is not a human rights file. It is a strategic laboratory. The surveillance tools tested on Tibetans are now being sold to governments across Central Asia, Africa, and Southeast Asia. The same method used to absorb Tibet is running on South China Sea reefs. The school system built in Tibet is being rolled out nationally across China. This is not a story about one region. It is a story about a doctrine and where that doctrine goes next.

Why China Took Tibet and the Problem It Created

In May 1938, Mao Zedong delivered On Protracted War at Yenan. One core idea: never fight at your edge. Put territory between your heartland and your enemies, land so vast and difficult to cross that any threat exhausts itself before it reaches you. Distance is the defence. The territory is the weapon.

By 1949, China’s heartland was exposed on every side. No ocean. No mountain range sealing the borders. Foreign powers had entered through the edges for a century. British from the south, Japanese from the northeast, Russian pressure from the north. Mao’s answer: absorb the periphery.

Tibet was the most important piece on the map.

It sits above the entire Asian landmass, so elevated that any army from the south or west must climb thousands of meters before reaching Chinese territory. It is also the source of Asia’s major rivers, including the Mekong, the Yangtze, the Brahmaputra, and the Indus, on which, by some estimates, two billion people across ten countries depend. Whoever holds Tibet holds the water tower of Asia and the strategic roof above it.

This is why, in 1949, no other territory mattered more to Beijing.

The PLA entered between 1950 and 1951. It did not just enter Tibet. It stayed, garrisoned it, and has never left. China promised Tibetans self-governance, religious freedom, cultural rights. Those promises are still written in China’s constitution today.

But the strategy had a flaw Mao never solved.

A territory full of people who do not support you is not a buffer. It is a risk.

Tibet’s people spoke Tibetan. Their loyalty was to a religious leader who would spend 65 years in exile. Their institutions answered to nobody in Beijing. For the buffer to work, that had to change. And so began 75 years of policy designed to change it. Around 2016, that policy stopped being improvised. It became a system.

Six Instruments, One Direction

One: Moving the people. Beijing calls it poverty relief. Over 930,000 Tibetans relocated since 2000, documented in Chinese government records and corroborated by Human Rights Watch, the majority after 2016. Old homes demolished so return was impossible. Han Chinese including retired PLA veterans moved into central Tibet with financial incentives for intermarriage with local Tibetan women. The same person who attends a Tibetan wedding sometimes files that family’s political loyalty report. Demographic change does not require a declaration. It requires incentives, infrastructure, and time.

Two: Drawing new lines on the map. In December 2024, China created two new counties, He’an and Hekang, in Aksai Chin. A third, Cenling, followed in March 2026 adjoining Pakistan-occupied Kashmir. Three counties in fourteen months. Each brings a party office, a police station, a school, a PLA garrison. Once a county exists somewhere, the state is there forever. The map is drawn first. The reality follows.

Three: Building villages that are not just villages. China calls them Xiaokang, “moderately prosperous”, border villages. The Tibetan government’s own report calls them “joint civilian-military defence mechanisms.” Roads wider than any farm needs. Air raid shelters alongside houses. A CPC office inside each village. Once Tibetan civilians occupy those coordinates, the PLA has political and legal justification to station forces nearby. No international observer can call it a military installation because it is officially a village.

Around these villages, civilian women are organised into border patrol teams, assigned specific sectors, required to report illegal crossings directly to police.

A soldier on a contested border is a diplomatic event. A woman from the village is not.

Approximately 22,500 party workers are embedded across all Tibetan villages, four per village, living with families and filing reports. Beijing spent three billion US dollars on this network between 2011 and 2024. In 2026 a digital permit was added: foreign nationals must appear in person at a police station, face scan, fingerprints, just to enter border areas. The physical border now has a digital ceiling.

Four: Getting to the children before their culture does. After a new National Defence Education Law in September 2024, retired PLA veterans appeared as instructors in Tibetan schools. Pre-dawn drills. Military formations in courtyards. Slogans on walls: “Love the Army and Master the Martial Arts.” The Jigme Gyaltsen school in Golog, thirty years old, Tibetan-language, officially approved, was shut without warning in July 2024. Close to one million Tibetan children, around 80 percent, are now in state boarding schools away from their families. In 2023, Tibetan students lost the right to sit the national university exam in their own language. In Lhasa, Mandarin is first on every sign. Tibetan is smaller, below, increasingly gone. Outside official spaces, Tibetan script has been found on doormats, dustbins, and undergarments, reported consistently across exile accounts and photographs authenticated by researchers outside Tibet. A child who sees their own written language on a dustbin before they see it in a sacred text has already received the lesson.

Five: Replacing the faith with the party. In July 2024, drivers on the road between Lhasa and Shigatse had their phones searched at checkpoints, not for drugs or weapons, but for the Dalai Lama’s photograph. Keeping it at home, in a monastery, or on a phone is a criminal offence.

Every monastery operates under a committee with Communist Party members who have real authority. Abbots need government approval. Monks attend mandatory political education where they are taught: the Dalai Lama is a separatist, his authority is illegitimate, loyalty to the Party and loyalty to Buddhism are the same thing. Xi Jinping and Mao Zedong portraits hang where religious images used to be. No one under 18 can become a monk. Teaching religion to children is illegal.

Six: Controlling what can be seen and said. Tibet is divided into grid zones, each watched by AI cameras with facial recognition, the same technology now sold to governments in Africa, Central Asia, and Southeast Asia. All major international platforms are blocked. The one domestic platform remaining is monitored in real time.

Since 2021, Human Rights Watch has documented over 60 arrests for phone and internet-related offences. The charges tell you what the system treats as criminal. A man arrested for creating a chat group to celebrate elderly monks’ birthdays. A monk sentenced to seven years for forwarding a Dalai Lama letter on an encrypted channel. A webmaster sentenced to seven years for running a Tibetan-language website.

Monk Losel of Sera Monastery died in May 2024 after being beaten in custody. Monk Gendun Sherab, arrested in 2017 for sharing a Dalai Lama letter on a messaging app, died in April 2024 after years in prison. In November 2025, police entered the Larang Tashi Khyil Monastery in Amdo, searched monks’ rooms, took photographs, and cut communications to the surrounding area.

None of these names appear in Chinese state media. That absence is a finding.

The Succession: What Everything Points At

In July 2025, the Dalai Lama turned 90. He said one thing: his successor will be born outside Chinese territory. Beijing responded the same afternoon. The reincarnation must happen inside China, follow Chinese law, receive government approval. Its spokesperson called him “a political exile engaged in separatist activities under the guise of religion.”

That response was not improvised.

China wrote a law in 2007 requiring state approval for all senior Buddhist reincarnations. It demonstrated the method in 1995 when the Dalai Lama identified a six-year-old boy, Gedhun Choekyi Nyima, as the next Panchen Lama, the figure who traditionally helps identify the next Dalai Lama. Chinese authorities took the child and his family within days. A government-chosen replacement was installed. The original has not been seen publicly in 31 years. He would be 36 today.

On June 3, 2026, Karma Gelek was sworn in as the elected president of the Tibetan government-in-exile. Beijing’s response: this institution is recognised by no government, has no authority, has no role in succession.

The 22,500 cadres ensure no community organising around a reincarnation goes unnoticed. The monastery cameras make any internal discussion visible before it can grow. The photograph ban means the institution being contested has no visible face inside its own homeland. The language policies mean the generation growing up now has diminishing access to the tradition within which a reincarnation’s authenticity would be assessed.

A government-chosen Dalai Lama would not be a religious event. It would be the end of a 75-year operation.

The operation has not ended. Which tells you everything.

Why the System Is Still Escalating

A strategy that had succeeded would not keep needing more layers.

Tibet still requires 22,500 embedded cadres. The surveillance has expanded, not contracted. The photograph is still illegal. The succession is still publicly contested. If the system had worked, the instruments would be winding down. Instead they are multiplying.

Three things the system cannot fully control.

First, the demographic shift requires time the model underestimates. In Inner Mongolia, which Chinese state media calls the template, the demographic shift took seventy years. Tibet’s trajectory is still running. The system’s conclusion, if it comes, is generational.

Second, the Drichu footage got out. Despite grid surveillance, facial recognition, platform bans, and digital trace-back deployed simultaneously, footage reached the world before the blackout arrived. The surveillance system is comprehensive. It is not airtight.

Third, the succession is positioned outside Beijing’s reach. The 2007 law cannot reach a reincarnation identified outside Chinese territory. Beijing can install a substitute, as it did in 1995, but acceptance cannot be legislated.

And the same sequence is now running on South China Sea reefs and around Taiwan.

The Same Doctrine: South China Sea and Taiwan

In the South China Sea, Beijing used the same three-step sequence Tibet showed: administrative claim first, construction second, military garrisoning third.

Beijing renamed 80 geographic features in the Spratlys and Paracels in 2020, years before construction began. In October 2025, dredgers built 1,490 acres of new land at Antelope Reef from open water. At Fiery Cross Reef, confirmed by CSIS AMTI satellite analysis, a 2.7-kilometre runway and hardened military facilities followed an administrative claim. At Mischief Reef, documented structures built to specifications that exceed any civilian need mirror the Xiaokang village construction logic exactly. Civilian presence justifies military stationing.

The reef becomes a county. The county becomes a garrison. Tibet showed the sequence. The South China Sea is running it.

For Taiwan, Beijing cannot apply the internal method directly. Taiwan has a functioning government, a military, 23 million people. So it runs the external variant. The external instruments are harder to see because they operate through economics, algorithms, and military exercises rather than through cadres in villages and cameras in monasteries. But the logic is identical.

Economic leverage replaces demographic relocation: approximately 1.5 million Taiwanese work or study on the mainland, where Beijing controls the terms of their residency and business licences.

Institutional delegitimisation replaces county creation: Taiwan’s government is not recognised as a government, its president called a separatist, using the same language applied to the Dalai Lama.

The Kinmen islands, sitting three kilometers off China’s coast, appear in Beijing’s 2025 Five-Year Plan discussions as integration targets. The Xiaokang village logic applied to islands not yet governed.

Documented information operations targeting Taiwanese youth on domestic and international platforms, confirmed by ASPI and Taiwan’s own security services, run the generational instrument through algorithms instead of boarding schools.

The December 2025 Justice Mission exercise rehearsed cutting Taiwan’s submarine cables. The surveillance instrument applied externally at scale.

Never move until the outcome is certain.

The Pentagon confirmed in December 2025 that Beijing is targeting decisive military capability over Taiwan by 2027. That is not a war prediction. It is the point at which Beijing will assess whether the conditions the doctrine requires have been met.

What Tibet tells you about that assessment: certainty has required 75 years, 22,500 embedded cadres, one million children in state schools, and a succession dispute that remains unresolved. The system is still escalating because those conditions are not yet met in Tibet. Taiwan is not there either. The coalition forming around it, Japan, the Philippines, the United States, is specifically designed to prevent that certainty from arriving. In May 2025, India’s military response to cross-border attacks demonstrated that escalation beyond expected limits was possible and that Beijing’s risk calculations could be forced to change. Taiwan’s external architecture is designed to achieve the same: make the outcome uncertain enough that the doctrine cannot proceed.

Tibet is the internal phase. The South China Sea is the maritime phase. Taiwan is where both converge.

The footage from Dege got out in 2024. The gap between what Beijing controls and what escapes is still open. The question is whether the people reading what arrives understand what they are looking at, before that gap closes somewhere the footage does not get out at all.

Data in this piece has been compiled from Chinese-language content circulated on Chinese domestic platforms, government work reports, legislative records, and official publications.

Follow Sino Aperture on Substack and LinkedIn for open-source analysis on China’s territorial doctrine, civil-military dynamics, and the policy instruments that rarely make headlines but consistently define the operating environment.

In October 2025, Chinese dredgers arrived at Antelope Reef in the South China Sea and built an island from open water. No war was declared. No shots were fired. By March 2026, satellite imagery confirmed 1,490 acres of new land where none had existed before. The world issued statements. China issued maps.

This is not an isolated act. It is rule number one of a strategy written in 1938, and it has been running without interruption across the South China Sea, the Himalayas, and the Taiwan Strait ever since.

The only country that has successfully turned that strategy around is India. Here is how the framework works, where China is applying it in 2026, and why what India did matters for every contested water and borderline in the region.

China’s Operational Framework: Four Rules From 1938 Still Governing Every Move in 2026

In the 1930s, Mao Zedong was leading a revolutionary movement with no navy, no air force, and far fewer troops than his opponents. He could not win a direct confrontation. So he built a different kind of strategy, one constructed entirely around patience, pressure, and timing.

Four texts, written between 1928 and 1940, form the core of that strategy. Together they explain every territorial move China has made since 1949. Each one also contains the condition under which it fails.

Rule One comes from On Protracted War (1938). Never move until the outcome is certain. Build quietly. Wait. Act only when stopping you is no longer realistic. This is why China’s expansion in the South China Sea looked like isolated incidents for decades until the full pattern became impossible to ignore.

Rule Two comes from Problems of Strategy (1936). It is a four-step pressure sequence. When the other side steps forward, step back. When they settle in, apply pressure. When they get tired, strike. When they retreat, follow. Read those four steps and you will recognise every escalation China has run from the Himalayas to Second Thomas Shoal to the Taiwan Strait.

Rule Three comes from The Struggle in the Chingkang Mountains (1928). Secure one position completely before moving to the next. Each ring of control must be settled before the next wave moves outward. Every reef occupied, every port built, every village constructed along a disputed border follows this sequence exactly.

Rule Four comes from On Policy (1940). Never fight everyone at once. Divide opponents. Deal with each separately. Never allow a united front to form. This is why China refuses to negotiate South China Sea disputes through ASEAN as a bloc. A collective response is the one outcome the rulebook says to prevent at all costs.

These four rules explain every territorial move. They also contain the only four ways to stop one.

Phase One on Record: How China Built Its South China Sea Position Before Anyone Could Respond

Phase One is Rule One in action. Move only when the outcome is not in doubt.

In the South China Sea, it looked like a series of unconnected events spread across decades. The Paracel Islands were taken from Vietnam in 1974. Mischief Reef was occupied in 1995. Scarborough Shoal was seized from the Philippines in 2012. Each move came at a moment precisely calibrated to when the targeted country had no external support and no realistic means of response. No single step was large enough to force a collective reaction. Together, they locked in the base areas that Rule Three requires before any expansion begins.

Running alongside this was the String of Pearls, a chain of ports and naval facilities stretching from Pakistan to the Horn of Africa. Gwadar in Pakistan sits near the entrance to the Gulf of Oman, close to the Strait of Hormuz, through which roughly 20 percent of global oil consumption passes each day. Hambantota in Sri Lanka was leased to China for 99 years after Colombo could not repay loans extended at terms it could not sustain. Djibouti became China’s first official overseas military base in 2017. By 2025, China had a stake in over 95 ports worldwide, with more than 70 in the Indian Ocean basin alone.

In the logic of Rule Three, these are not commercial investments. They are base areas, each one consolidated before the next ring moves outward.

On Taiwan, Phase One was invisible. Decades of diplomatic isolation, removal from international bodies, and deep economic integration with the mainland created a strategic condition rather than a physical base. Taiwan was made largely alone, economically tied to the mainland, and diplomatically unrecognized by most of the world before any visible pressure began.

Phase Two Active: China’s Pressure Campaign Across the South China Sea and Taiwan Strait, Documented

Phase Two is where Rule Two runs. Apply pressure. Create exhaustion. Wait for the right moment to strike.

In the South China Sea, 2013 marked the shift into this phase. Between 2013 and 2017, China dredged 3,200 acres of new land across the Spratly Islands, confirmed by CSIS Asia Maritime Transparency Initiative satellite analysis, with the total across both island groups reaching 4,650 acres. Fiery Cross Reef, Subi Reef, and Mischief Reef became operational military installations with runways, radar systems, and hardened facilities. These are Phase One’s occupied positions converted into Phase Two pressure platforms.

From 2019, the pressure on the Philippines became systematic. In April 2020, China declared administrative control over disputed island groups and renamed 80 geographic features across the Paracels and Spratlys, applying Rule Three through maps and bureaucratic assertion rather than construction alone. In March 2021, 220 Chinese maritime militia vessels were documented at Whitsun Reef, inside the Philippines’ exclusive economic zone. They were not fishing. They were occupying. From 2023, coast guard vessels ran repeated water cannon operations against Philippine resupply missions to the BRP Sierra Madre at Second Thomas Shoal. In August 2025, Chinese vessels conducted a ramming operation against the Philippine coast guard ship Suluan at Scarborough Shoal. In March 2026, the Chinese corvette Guang’an directed its fire control radar, which is a targeting system, at the Philippine frigate BRP Miguel Malvar. Days later, the Philippine tank landing ship BRP Benguet and the Chinese guided-missile frigate Jingzhou came within metres of collision near Thitu Island, with the incident captured on video.

Each of these events is manageable in isolation. Together they represent Rule Two’s sustained pressure phase running continuously. The objective is not to seize Philippine positions by force. It is to make holding them politically and operationally exhausting over time.

In October 2025, construction began at Antelope Reef, with 1,490 acres confirmed by March 2026, the largest single construction since 2017. This signals the transition from Phase Two toward Phase Three. Rule Three is sending a clear message. The next ring is moving.

The South China Sea and Taiwan are not two separate problems. In April 2026, as the Philippines, the United States, Japan, Australia, Canada, France, and New Zealand conducted Balikatan 2026 exercises, the PLA Navy deployed major forces simultaneously in the South China Sea and the Western Pacific. The message was deliberate. Move on one front and both fronts respond. What happens in the South China Sea directly shapes the timeline for Taiwan.

On Taiwan, Phase Two has become methodical and increasingly specific. Strait Thunder 2025A in April 2025 included live-fire drills targeting mock Taiwanese ports and energy facilities. The Shandong carrier strike group was positioned east of the island. Six coast guard vessels simulated a quarantine. Justice Mission 2025 in December 2025 rehearsed cutting off Taiwan’s power supply and blocking external access. A disinformation campaign in early 2026 seeded public fear in Taiwan about energy shortages, psychological preparation running alongside the military rehearsals.

As of 2026, the South China Sea sits at the transition from Phase Two to Phase Three. China is testing whether the Philippines has been exhausted enough for the next move. Taiwan is deeper into Phase Two than most public assessments acknowledge, and the Pentagon confirmed in December 2025 that the PLA is targeting decisive operational capability over Taiwan by 2027.

Case Study: India Versus China, the Only Documented Instance of the Framework Reversing

India is the only case on record of China’s strategy reversing direction under structured resistance. It did not happen through a single confrontation. It happened because India identified the vulnerability inside each of the four rules and built a deliberate response to each one.

Against Rule One: Make winning uncertain

Rule One requires acting only when the outcome is beyond reasonable doubt. India’s entire response after 2020 was designed to remove that certainty. Troops were stationed permanently along the Line of Actual Control, not rotated in and out on schedules. Permanent presence communicates indefinite commitment regardless of cost or duration. When holding a disputed position might cost an adversary indefinitely, Rule One’s core condition cannot be satisfied.

Against Rule Two: Refuse every step of the sequence

Doklam in 2017 was the first refusal. Chinese engineering units advanced to extend a road that would have given the PLA a commanding position overlooking India’s most strategically sensitive land corridor. Rule Two’s opening step requires the adversary to pull back when pressure is applied. India deployed troops forward and held the position for 73 days. China stopped construction and withdrew. The four-step sequence could not proceed because its first step produced no result.

After Galwan in 2020, Chinese forces settled into new positions and waited for Rule Two’s exhaustion phase to take effect. India answered by making every forward position more expensive to hold over time. The Border Roads Organization completed 356 infrastructure projects in the two years through December 2025, closing the logistics advantage China had long maintained at altitude. Rule Two’s pressure campaign requires an adversary that eventually tires. India embedded itself more deeply instead.

Against Rule Three: Build a competing ring

When China began renaming Arunachal Pradesh locations in 2023 and continued through 2024, applying Rule Three through administrative assertion, naming the territory before physically controlling it, India answered with the Arunachal Frontier Highway and Vibrant Villages Programme. Physical infrastructure placed in the same spaces China was attempting to rename into its own jurisdiction. One wave of cartography met a wave of construction. The consolidation could not settle on contested ground.

Against Rule Four: Build the coalition the rulebook prohibits

Rule Four says never allow opponents to unite. After Galwan, India deepened its position in the Quad framework and activated defense partnerships across the Indo-Pacific. The most visible signal was India’s defense export programme.

China has been arming Pakistan with advanced military hardware for decades. The J-35 stealth fighter offer confirmed by Pakistan’s government in June 2025, comprising 40 fifth-generation aircraft, KJ-500 airborne early warning systems, and HQ-19 air defense systems in a package valued at approximately 4.6 billion US dollars, is the latest and most significant step in that relationship. Pakistan’s Air Chief had first announced J-35 acquisition plans in December 2023, and procurement approval was reported by December 2024.

India read the same logic and applied it in the opposite direction. While China armed its partner on India’s western border, India began arming nations that share the South China Sea with China. The first BrahMos supersonic missile battery reached the Philippines in April 2024 under a 375 million US dollar deal, the missile’s first export anywhere in the world. A second delivery followed in April 2025. Indonesia entered advanced negotiations through the 2025 India-Indonesia Defense Ministers’ Dialogue. Vietnam moved toward its own agreement.

China built a military partner on India’s western flank. India built a network of armed partners positioned around China’s southern maritime claims. Both sides applied the same principle simultaneously in different theatres.

Operation Sindoor: The signal that changed the calculus

In May 2025, India struck nine sites inside Pakistan, the first time it had crossed the international boundary in over five decades. It absorbed Pakistani retaliation, sustained operations under live fire, and did not seek an early exit. The signal to China was not about counterterrorism. It demonstrated that India would escalate further and faster than assumed, sustain operations beyond what Chinese risk models had anticipated, and emerge from a confrontation without conceding terms. China called the strikes “regrettable” and urged restraint. That is not the language of a power whose strategic calculations remain unchanged.

By October 2024, before Sindoor and after four years of sustained counter-positioning, China had already begun disengaging from Depsang Plains and Demchok. Its first territorial concession at the Line of Actual Control since 2020. India had not fought and won a conventional battle. It had made each of China’s four rules fail on its own terms.

Taiwan, Japan, Philippines: The Coalition China’s Playbook Specifically Forbids

The coalition forming around Taiwan is applying India’s lesson. The architecture being built is exactly what Rule Four identifies as the one condition China cannot afford to engage.

Japan and the Philippines signed their Reciprocal Access Agreement on July 8, 2024, with the agreement entering into force on September 11, 2025. It was the first such pact Japan had concluded with any Southeast Asian country. In April 2026, Japan deployed 1,400 combat troops to the Balikatan 2026 exercises in the Philippines, the first time Japanese combat forces had operated on Philippine soil since World War II. During the exercises, Japan fired the Type 88 surface-to-ship missile in a live-fire drill outside Japanese territory for the first time in its history. China responded by warning that the participating countries were “playing with fire.”

The nine EDCA sites agreed between the Philippines and the United States, including Naval Base Camilo Osias in Santa Ana, Cagayan, approximately 400 kilometers from the nearest Taiwanese territory, position US assets directly on the approaches to the Luzon Strait, the critical waterway between the Philippines and Taiwan. Japan’s defense budget reached the equivalent of 70 billion US dollars in fiscal year 2025, with 400 long-range cruise missiles under contract capable of reaching targets 1,600 kilometers away.

China has noticed what is forming. In late 2025, analysts documented PLA flotillas deployed near Australia in what was assessed as deliberate pressure intended to fracture Japan-Australia security cooperation. Rule Four running in real time: divide the coalition before it hardens into something that cannot be addressed one country at a time. Japan and Australia continued their scheduled defense talks regardless.

The US National Security Strategy of 2025 acknowledged publicly that the American military cannot maintain deterrence along the first island chain without allied contributions. That is a formal recognition that coalition integrity is now the decisive variable, not American capability in isolation.

China’s 2027 Deadline and Whether the Counter-Coalition Closes in Time

China’s rulebook says the decisive move happens only when the adversary has been reduced to isolated helplessness. Taiwan is not isolated. Japan has long-range missiles positioned along the island chain to the northeast. US forces are exercising at bases approximately 400 kilometers from Taiwanese territory to the south. India demonstrated in May 2025 that it will escalate beyond expected limits and sustain operations under fire. The countries China has been pressuring in the South China Sea are now receiving Indian precision strike systems.

India proved that every rule enabling China’s expansion contains within it the condition for its own failure. The coalition around Taiwan is building those conditions now, one agreement, one base, and one weapons delivery at a time.

The Pentagon confirmed in December 2025 that China is targeting decisive capability over Taiwan by 2027. That is not a distant horizon. It is a production schedule.

Whether the counter-coalition becomes operationally coherent before that deadline is the only question that determines what comes next.

This analysis is a personal assessment, built on concrete facts and data points. It is intended to remain neutral, presenting evidence without taking a position.

Follow Sino Aperture on LinkedIn and Substack for open-source analysis on domestic security, civil-military dynamics, and the policy instruments that rarely make headlines but consistently define the operating environment.

Beijing issued two administrative notices in the first quarter of 2026.

On the surface: routine digitalisation. A border permit going paperless. A registration system moving online. The kind of bureaucratic modernisation that generates no headlines and receives no scrutiny.

Below the surface: between June 2023 and January 2026, three consecutive Chinese Defence Ministers were investigated and two sentenced to death with reprieve. The entire leadership of the PLA Rocket Force, the branch controlling China’s nuclear arsenal, was purged. China’s second-highest uniformed officer, General Zhang Youxia, was placed under formal investigation. The CIA released a Mandarin-language recruitment video on YouTube, publicly soliciting PLA officers to contact US intelligence.

The two NIA notices arrived weeks later.

I. The Crisis Nobody Is Naming As Such

Not inference. Confirmed fact.

June 2023. PLA Rocket Force senior leadership removed without explanation. Commander Li Yuchao, Commissar Xu Zhongbo, Chief of Staff Sun Jinming. Gone.

September 2023. Defence Minister Wei Fenghe placed under investigation. Sentenced to death with reprieve.

2023–2024. Successor Li Shangfu serves less than eight months, the shortest ministerial tenure in PRC history. Same outcome.

October 2025. CMC Vice-Chairman He Weidong and Political Work Department Director Admiral Miao Hua removed.

January 24, 2026. General Zhang Youxia and CMC Chief of the Joint Staff General Liu Zhenli placed under investigation. Sixth sitting general to fall since 2023. Five in 2025 alone. Second removal of a serving CMC Vice-Chairman in PRC history.

February 2026. CIA releases a Mandarin recruitment video on YouTube. Not covert. A broadcast. Washington read the crisis as an opportunity and said so publicly.

March and April 2026. Two NIA gazette notices.

II. Reform One : The Permit That Became A Movement Ledger

What The e-BMAP Is

On April 15, 2026, China replaced the paper Border Management Area Permit with a fully digital credential — Announcement No. 2 of 2026, issued by the National Immigration Administration — covering approximately 2,000 kilometres of restricted frontier zones along all 14 international land borders.

The zones are not administrative categories. They are strategic geography:

• Tibet — adjacent to active territorial disputes, high-altitude boundaries where a 2024 border patrol agreement restored access only partially

• Xinjiang — connecting Central and South Asian chokepoints, passes bordering Afghanistan, Pakistan, and Kazakhstan

• Inner Mongolia — overland access to Russia across a relationship deepened considerably since 2022

• Yunnan — southern corridor against Myanmar’s active civil conflict with confirmed cross-border arms flows

What Changed On April 15

Under the paper system, a foreign national who accessed Tibet in March and Xinjiang in September left two disconnected records in two separate provincial PSB systems. No national authority held a consolidated picture. Cross-referencing required a specific investigation to already be underway. For anyone moving across multiple zones over months, it simply did not happen.

The e-BMAP eliminates this fragmentation entirely. Every permit now issues to a verified digital identity in the NIA’s centralised database within the Ministry of Public Security’s broader information architecture. Every PAP checkpoint scan generates a timestamped, identity-linked movement event updating the national system in real time.

The query structurally impossible before — every foreign national who accessed both Tibet and Xinjiang within any twelve-month window — now returns in seconds.

Re-registration for the digital credential also begins retroactively consolidating movement histories previously scattered and inaccessible at national level. Movement histories that were invisible become queryable.

The Asymmetry That Matters

Chinese residents apply entirely online, permit in minutes. Foreign nationals must appear in person at county-level public security organs before any permit activates — a mandatory biometric interface with public security, not a technical constraint. At checkpoint, the scan returns a live profile: identity, movement history, any active investigation or watchlist flag, in real time.

III. Reform Two : The Host As Enforcement Node

The Legal Obligation That Nobody Enforced

Article 39 of China’s Exit and Entry Administration Law has long required foreigners in non-hotel accommodation to register with public security organs within 24 hours. Article 76 established the penalty: warning and fine for the foreign national and the host. Both existed before 2026. Neither was enforced at scale.

Registration required a physical PSB station visit. Friction high enough that non-compliance was the structural norm. A foreign national could spend weeks meeting contacts in private apartments in Chengdu, Wuhan, or Shenyang and generate zero public security record. Not a gap in the law. An artefact of analogue-era administration.

What Changed On March 20

From March 20, 2026, piloted across seven provinces — Hebei, Liaoning, Zhejiang, Hubei, Guangxi, Chongqing, and Sichuan — Beijing removes that friction entirely. Registration completes through the NIA 12367 app, WeChat, or Alipay, within the same 24-hour window. The record captures the foreign national’s verified identity, the host’s verified state-linked platform identity, the address, and the duration.

Why The Mechanism Matters More Than The Channel

WeChat is not optional in China. It is the operating system of civic life: payments, government services, communications, professional identity. Attaching non-compliance penalties to WeChat identity transforms a notional duty into a felt one.

Beijing does not need consistent prosecution. It needs the calculation to run against the informal arrangement.

Most hosts will register. Some will decline to host. Both outcomes reduce unregistered contact between Chinese nationals and foreign nationals. The same counterintelligence result, through two different paths.

Nationwide rollout confirmed. The pilot is the test. The design is already national.

IV. What This Actually Means

The Three Blind Spots That No Longer Exist

Before these reforms, Chinese public security held three confirmed categories of data on foreign nationals:

• Hotel registrations — submitted automatically under existing law

• Border entry records — held at ports of entry

• BMAP permit records — county-level PSB offices, locally stored, non-queryable nationally

Everything else was a blind spot. Private accommodation. Multi-zone frontier movement. Chinese contact networks of foreign nationals.

Both reforms close those blind spots in sequence. The e-BMAP converts 2,000 kilometres of China’s most sensitive frontier corridors from a paper archive into a live, nationally queryable movement ledger — retroactively. The accommodation reform converts a dormant legal obligation into a digitally enforced compliance duty that documents, for the first time at scale, the Chinese side of every foreign national’s residential contact network.

The Legal Framework That Makes The Data Bite

Three instruments make the collected data immediately actionable:

Counter-Espionage Law, 2023 Amendment — grants the Ministry of State Security authority to inspect, detain, and expel without judicial authorisation. Deportees barred from re-entry for ten years.

Cybersecurity Law Amendment, effective January 1, 2026 — extends enforcement extraterritorially to any overseas activity assessed to endanger PRC cybersecurity. Reaches digital communications conducted entirely outside China.

Draft Cybercrime Prevention and Control Law, January 31, 2026 — proposes account suspension and exit restriction before any formal charge is filed, on the basis of an administrative determination alone.

The informal operating environment that characterised foreign presence inside China for decades — a private apartment invisible, a paper permit leaving no national trace, a contact network belonging to the individual rather than a database — is being closed, instrument by instrument, on a timeline the State Council published in English.

V. Strategic Implications : What This Means Beyond China’s Borders

Passive Surveillance At Scale

The architecture China is building achieves something no single active counterintelligence operation could: systematic, passive, continuously updated visibility over the physical movement and residential contact patterns of every foreign national inside China - without surveillance teams, without active investigation, and without the diplomatic exposure that overt monitoring produces.

Every foreign national who re-registers for the e-BMAP hands Beijing a consolidated movement record. Every Chinese host who files an accommodation registration hands Beijing a relationship data point. The system does not need to watch anyone. It needs everyone to comply with paperwork. Compliance does the surveillance.

The Retroactive Dimension

A foreign national who accessed multiple restricted zones over the past several years and re-registers for the digital permit is not simply entering a new system. They are contributing to the consolidation of a movement history that previously existed only as disconnected county-level records. That history is now nationally queryable. Under the 2023 Counter-Espionage Law’s deliberately broad investigable definitions, it is accessible to security organs in any investigation touching their name, their employer, or their institutional affiliation - without a court order.

The Contact Network As A Target

The residential dimension compounds the frontier dimension. Academic partnerships, fieldwork networks, business relationships, and civil society contacts maintained through informal private-residence meetings now either generate a registered record linking both parties by verified platform identity, or they generate a legal liability that structurally suppresses the arrangement entirely.

The Chinese side of foreign nationals’ contact networks - previously the least documented element of any presence inside China — is now the primary target of the registration system’s design logic. This is not incidental. It is the architecture’s most consequential function.

What Foreign Intelligence Services And Institutions Face

For foreign intelligence services, research institutions, and multinational entities that have historically maintained operational presence inside China through informal arrangements - private residences invisible to public security, frontier zone visits recorded only in disconnected county ledgers, contact networks belonging to the individual rather than a database - the operating environment has changed fundamentally and quietly.

Two NIA gazette notices, framed as service improvements, published in English on the State Council website, achieved what decades of more visible surveillance infrastructure could not: total residential visibility, total frontier movement consolidation, and total contact network documentation — enforced not by state intrusion but by legal duty attached to a WeChat account.

States and institutions that have not yet assessed this shift are operating on an outdated picture. The exposure is not hypothetical and it is not future-dated. The e-BMAP has been operational since April 15. The accommodation registration pilot launched March 20 and is confirmed for national rollout. For every foreign national who has accessed China’s restricted frontier zones or maintained contact networks through private residential arrangements - researchers, analysts, corporate personnel, journalists, institutional representatives - the data environment changed this quarter.

Prospective Conclusions

The architecture is not yet complete. Its direction is not ambiguous.

The question is not whether Beijing built this. The question is whether the institutions that need to account for it noticed before it was operational.

The gazette notices have been public since March. The State Council published them in English. The instruments are in force.

Reading China through what it publishes, not what it says. Follow Sino Aperture on LinkedIn and Substack for open-source analysis on Chinese domestic security, PLA civil-military dynamics, and the policy instruments that rarely make headlines but consistently define the operating environment.

What Beijing Actually Classifies This As

China’s 14th Five-Year Plan and subsequent policy documents classify embodied AI the category Unitree operates in - as a core strategic industry. The full list of China’s designated frontier strategic sectors:

• Quantum computing

• 6G telecommunications

• Nuclear fusion

• Embodied AI / humanoid robotics

• Brain-computer interfaces

This is not a consumer technology classification. These are the sectors Beijing has identified as determining the outcome of long-term great power competition.

The STAR Market Shanghai’s Nasdaq-equivalent - was explicitly built for this category of company. It applies different listing criteria than standard A-share markets, allowing high-growth, strategically significant companies to access public capital before full commercial maturity. Unitree’s listing is not an accident of market timing. It is a policy-enabled capital mobilisation event.

When a country classifies a technology at that level- capital follows, state contracts follow, research priorities follow, and eventually military doctrine follows.

Unitree just became the first company in that category to access public capital markets.

The Company: What the Numbers Show

Unitree was founded in Hangzhou in 2016 with ¥100,000 ($13,800) in registered capital. Ten years later it is the world’s top humanoid robot seller by volume.

Key financials from the prospectus:

• Revenue: ¥1.708 billion in 2025 — up 335% year-on-year

• Net profit: ¥600 million — up 674%

• Humanoids as share of revenue: 51.5% in 2025, up from 27.6% in 2024

• Planned production: 75,000 humanoids annually within five years

• Unit cost: approximately $16,000 per G1 humanoid — versus $150,000+ for Boston Dynamics Atlas

That last figure matters more than any other in this prospectus. A 10x cost advantage over the nearest Western competitor means deployment at scale becomes financially viable in ways it has never been before - commercially and otherwise.

Over 100 humanoid robotics companies currently operate in China. Most are burning cash. Unitree is generating it. That profitability is what makes the STAR Market listing possible - and what makes the capital mobilisation that follows it real.

The Nvidia Angle: Three Implications Not Being Reported

On the same day as the IPO hearing, Nvidia selected Unitree’s H2 humanoid for its first commercial robotics research platform - pairing Unitree hardware with Blackwell GPU and Isaac GR00T AI models. Buyers include Stanford University and ETH Zurich.

Implication 1 - Global credibility. Nvidia’s selection places Unitree at the centre of the world’s leading AI research ecosystem. The company that builds the chips powering global AI infrastructure has publicly endorsed a Chinese humanoid platform as the hardware of choice for frontier research. No marketing budget achieves what that endorsement does internationally.

Implication 2 - Structural entanglement. A company whose robots operate in American university laboratories, endorsed by America’s most strategically important chip company, is significantly harder to restrict or sanction than one operating purely within Chinese markets. Beijing has effectively used a US company to create a structural shield around its leading embodied AI platform. Future US policy action against Unitree now carries commercial and reputational costs it did not carry yesterday.

Implication 3 - The two-track strategy. China refused US H200 AI chips for domestic infrastructure despite Washington clearing the sale. Trump confirmed it: China “chose not to” because “they want to develop their own.” Simultaneously Beijing allowed Unitree to partner with Nvidia internationally. Domestic independence protected. International entanglement deliberately created. Two tracks. One strategy.

From Commercial Champion to Strategic National Asset

The line between a commercial robotics company and a strategic national asset in China is not a threshold. It is a spectrum and Beijing moves assets along that spectrum deliberately and without announcement.

Every company listed on STAR Market is subject to a national security review framework giving Beijing direct visibility into and influence over post-IPO strategic decisions. The capital raised is private. The oversight is not.

PLA doctrinal documents on future warfare explicitly identify autonomous ground systems as a priority capability. The specific requirements bipedal locomotion, onboard AI inference, payload capacity, environmental adaptability - map directly onto the capabilities Unitree is developing commercially today.

At 75,000 units per year at $16,000 per unit - the production volumes being planned are not consumer market numbers. They are strategic mobilisation numbers. Deploying autonomous ground systems at those volumes would represent a capability mass no current Western military has planned for.

The strategic significance today is nascent. The architecture being built around it is not.

The Three Conditions That Change This Story

The concern becomes real under three specific conditions - none confirmed yet:

Condition 1 — PLA contracts. Does Unitree receive contracts from PLA-adjacent institutions - Academy of Military Sciences, National University of Defense Technology -post-listing? State-backed commercial champions in China typically receive dual-track funding. The prospectus is silent on this.

Condition 2 — Capital destination. Unitree has allocated ¥673 million annually toward AI model training. Where the remaining ¥4.2 billion flows - and whether any reaches capability development relevant to non-commercial environments - is the variable to watch.

Condition 3 — Export restriction. A 63-sector technology export control framework published this week by Chinese Academy of Sciences researchers co-authored by a researcher from CAEP, China’s nuclear weapons research complex — explicitly includes AI and robotics. Whether Beijing restricts Unitree’s most capable systems post-IPO is the clearest single indicator of how it has internally categorised the platform.

Broader Context: Two Connections Worth Noting

Huawei’s Tau Scaling Law - unveiled May 25 in Shanghai advances chip performance without requiring the manufacturing processes US export controls have blocked. As Huawei’s Ascend chip series matures through 2026 and 2027, Unitree’s dependency on foreign chips for domestic production shrinks accordingly. The Nvidia partnership and domestic supply chain are deliberately separate tracks serving separate strategic purposes.

China’s AI chip refusal — Beijing declined US H200 chips despite Washington’s clearance. China chose domestic development. This is the operating context for the entire Unitree story. Commercial engagement internationally. Technology independence domestically. Both running simultaneously.

Assessment: Three Questions for the Next Twelve Months

Current status: Commercial listing story. Strategic significance: nascent.

Question 1. Does Unitree receive PLA-adjacent contracts within 12 months — signalling state defence adoption has begun?

Question 2. Does the Ministry of Commerce add robotics and embodied AI to China’s export control catalogue - signalling Beijing has decided to protect the technology?

Question 3. Does Huawei’s domestic chip roadmap reach Unitree’s production supply chain by 2027 -signalling the technology independence loop is complete?

If the answer to all three is yes — this is no longer a commercial listing story. It is a strategic asset story. And the window for Western policy response will have narrowed considerably.

The IPO raised the capital. The embodied AI architecture gives it direction. The answers to these three questions determine what gets built.

Announced jointly by the China National Space Administration (CNSA) and the State Administration for Market Regulation (SAMR) at a ceremony in Chengdu, the new framework governs every stage of the commercial space industry: rockets, satellites, launch sites, application services, and industry governance. It plans for over 1,000 standard items spanning international and national standards at multiple levels.

Countries that adopt Chinese standards will, by design, buy Chinese technology, certify with Chinese processes, and depend on Chinese expertise. This is an industrial strategy - dressed as a technical document.

The Foundation: Eleven Years in the Making

The 2026 commercial framework did not emerge from nothing. It builds explicitly on the China Space Standard System V1.0, published by CNSA in 2015 - China’s first comprehensive national space standardization architecture, encompassing 1,470 individual standards organized under a unified CNSA numbering scheme.

That 2015 system covered four major branches. Space Management addressed project management, debris mitigation, and planetary protection across 69 standards. Product Assurance - the largest branch covered quality, reliability, safety, electronic components, mechanical parts, and software. Engineering covered structural mechanics, propulsion, navigation, telemetry, communications, electronics, and ground systems. The fourth branch addressed space applications including remote sensing, Beidou navigation, space science, and launch services.

The 2026 Commercial Space Standards System reorganizes this institutional knowledge into six commercially-oriented branches: industry governance, R&D and manufacturing, launch and TT&C (Telemetry, Tracking and Command), space application services, basic and common items, and facilities and equipment. CNSA’s director of commercial space, Hu Yihuai, was explicit that the system did not start from scratch, it builds on China’s 70 years of accumulated space experience while aligning with market-oriented development needs.

Crucially, it incorporates internationally applicable standards. It is designed to be open, inclusive, and extensible to new commercial tracks and business models. It is not written to keep others out. It is written to bring them in.

How Other Space Powers Approach Standards - and Why China’s Model Is Different

Every major space power maintains technical standards. The difference is intent and reach.

The United States operates a fragmented system - NASA technical series, DoD MIL-SPEC requirements, FAA licensing, and commercial industry guidelines running in parallel with no central authority. Flexible, but never designed to be adopted wholesale by foreign partners. There is no single American framework a developing country can pick up and implement end-to-end.

The European Space Agency’s ECSS - European Cooperation for Space Standardization - is the closest structural parallel to China’s approach. Top-down, coherent, organized into management, product assurance, and engineering series that mirror CNSA’s own taxonomy. ECSS became the default framework for European cooperation through treaty and procurement requirements. China is pursuing the same outcome, at greater speed, directed at a larger and less-served market.

Russia’s standards trace back to the Soviet era. Japan and India maintain frameworks for domestic use. None are positioned as international offerings. China’s 2026 system is explicitly and deliberately positioned that way.

The Precedent: Standards First, Market Second

This is not the first time China has used technical standards as an entry point for industrial expansion.

In telecommunications, contributions to 5G standards gave Chinese firms structural procurement advantages before a single contract was signed. In high-speed rail, Chinese standards became the reference design for Belt and Road infrastructure across Asia and Africa. In nuclear energy and port development, the sequence repeated: establish the standard, supply the technology built to it, embed the dependency.

The same logic now applies to space. Dozens of countries across Africa, Southeast Asia, the Gulf, and Latin America are building national space programmes. Most lack the institutional capacity to develop their own standards frameworks from scratch. China is offering them a ready-made system - documented, internationally framed, and backed by a mature industrial base capable of supplying everything the framework requires.

Countries that adopt the CNSA Commercial Space Standards System will find Chinese suppliers the most immediately certifiable partners. The framework does not force dependency. It manufactures it quietly, over years, through the ordinary logic of procurement and compatibility.

What This Means

China’s recent space milestones - the Tiangong space station, Tianwen-1 Mars mission, Chang’e lunar sample returns, the Beidou global navigation system - demonstrated that China belongs in the top tier of space powers. The standards system does something different. It does not demonstrate capability. It defines the terms on which capability gets measured, certified, and traded.

Demonstrations prove what you can do. Standards govern what everyone else does.

The 2026 Commercial Space Standards System is the moment China moves from participant to rule-setter. For policymakers, procurement officials, and space agencies in developing nations, the choice of which standards framework to adopt is the most consequential space decision they will make — more consequential than which rocket to launch on or which satellite to buy. It is a decision that will shape industrial dependencies for a generation.

That decision is now actively on the table. China has made its offer. There is no comparable Western alternative directed at the same markets.

China’s state-owned space contractor, the China Aerospace Science and Technology Corporation (CASC), confirmed in March 2026 that Chang’e-7 is on schedule. The mission hardware built and delivered by CASC’s China Academy of Spacecraft Technology arrived at Wenchang Satellite Launch Centre in Hainan province in April 2026. An August 2026 launch window on a Long March 5 rocket is confirmed.

The announcement came from Sun Zezhou, Chief Designer of China’s lunar exploration programme, speaking on the sidelines of the national “Two Sessions” — China’s annual parliamentary session. That venue matters. Programme statements made at legislative level in China carry the weight of confirmed state policy, not scientific aspiration.

The mission carries four elements: an orbiter, a lander, a rover, and most significantly a mini-hopping probe equipped with a water molecule analyser. This probe is designed to do something no mission has attempted before: physically jump inside permanently shadowed craters at the south pole and directly sample the ice inside them. The target landing site is the rim of Shackleton crater, above 85 degrees south latitude closer to the pole than any spacecraft has ever reached.

Why Water Ice Is Not Just Science

Those dark craters maintain temperatures below minus 163 degrees Celsius, preserving water ice that would otherwise evaporate. NASA’s LCROSS mission in 2009 confirmed ice at approximately 5.6 percent concentration by mass in the ejecta of Cabeus crater. Estimates place total south polar water ice volume between 600 million and 1 billion metric tonnes.

Split with electricity, that water becomes hydrogen and oxygen — rocket propellant and breathable atmosphere. The energy cost of launching one kilogram from the Moon’s surface is approximately 14 times cheaper than launching from Earth. A base sitting on a reliable ice supply is not a research outpost. It is the lowest-cost fuel depot in the inner solar system the infrastructure backbone for Mars missions, asteroid operations, and the commercial space market projected to exceed $1 trillion by 2040.

Whoever maps the best deposits and builds there first does not win a prestige competition. They acquire structural control over the logistics of all human spaceflight beyond Earth orbit for the foreseeable future.

Where Everyone Else Stands

The United States operates the Artemis programme, also targeting a crewed landing near Shackleton crater. As of May 2026, no confirmed date exists for that landing. The next confirmed American mission is Artemis II a crewed flyby that does not land. Both programmes have designated overlapping landing zones near Shackleton crater. They are racing to the same coordinates.

Japan’s SLIM mission demonstrated precision lunar landing in January 2024 with approximately 100-metre targeting accuracy a capability relevant to ice-site operations where viable deposits may be confined to specific, narrow zones. Europe contributes to the American Orion spacecraft but holds no independent lunar surface programme. Russia formally partnered with China on the future International Lunar Research Station (ILRS) but has contributed limited operational capacity after its Luna-25 mission failed on approach in August 2023 its first lunar attempt in 47 years.

The picture is direct: China has a confirmed mission at the launchpad targeting the south pole this year. No other country does.

The Legal Situation In Plain Language

Three documents govern behaviour in space today.

The Outer Space Treaty of 1967, ratified by 114 states including China and the United States, prohibits territorial appropriation of the Moon under Article II. It says nothing about extracting resources from it. That gap was not a problem in 1967. It is a critical problem now.

The Moon Agreement of 1979 tried to fix it by declaring lunar resources the common heritage of mankind. Only 18 states ratified it. No major space power not the United States, China, or Russia ever signed. It has no practical effect.

The Artemis Accords of 2020, endorsed by 37 states, establish principles for transparency, interoperability, and safety zones around operations. China has not signed. Russia has not signed. The document carries no binding legal force even for those who did sign.

The outcome is this: if China lands, builds, and begins extracting ice, no law prohibits it. No international court has jurisdiction. No enforcement mechanism exists. The party that establishes physical presence first will shape whatever rules eventually follow not the other way around.

Why This Is Bigger Than a Space Race

The military dimension is real and currently unaddressed. A permanent installation at the south pole can function as a communications relay, a surveillance platform for Earth-orbit satellites, and a monitoring station for cislunar activity from a position outside every existing security treaty. No agreement prohibits military use of a lunar base beyond nuclear weapons. This is not a future risk. It is an active legal gap.

The governance window closes on a fixed timetable. Once Chang’e-8 arrives in 2028 and begins base-construction testing, the negotiating question shifts from “what rules should govern the south pole” to “how do we accommodate what is already there.” Rules written around an existing installation are structurally different from rules written before one exists. The leverage available today will not be available in 2029.

China is simultaneously building the institutional framework to rival Artemis. The ILRS is open to partner state participation and is explicitly positioned as a multilateral alternative to the US-led Artemis coalition. If the ILRS achieves a functioning south polar presence by 2035 while Artemis remains incomplete, countries that have not yet chosen sides will join the framework that already exists. The south pole contest is as much about who writes the rules of the cislunar era as it is about ice.

The Programme Behind the Mission

Chang’e-7 is the opening phase of a three-stage campaign confirmed by CASC. Chang’e-8, following in 2028, tests base-construction technology using Chang’e-7’s ice mapping as its site-selection input. A crewed landing before 2030 confirmed by Sun Zezhou at the Two Sessions is the terminal milestone of that campaign. The hardware is in production: the Long March-10 heavy-lift rocket, Mengzhou crewed spacecraft, and Lanyue lunar lander have all completed prototype-phase testing and transitioned into flight-qualified manufacturing.

Beijing’s 2026 government work report formally designated space as a “foundational driver of economic growth.” Over 80 Chinese commercial space companies are now active, with multiple having achieved orbital launches. CASC’s state programme establishes the strategic position; the commercial ecosystem converts it into something economically self-sustaining and structurally resilient to external pressure the same model deployed in semiconductors, deep-sea mining, and energy storage supply chains.

The Bottom Line

Chang’e-7 launches in August. Its hopping probe enters craters no instrument has entered before. The data it returns tells China exactly where to build. Chang’e-8 follows in 2028 to build it. Chinese astronauts arrive before 2030. No binding legal framework governs any of this. No competing mission is confirmed to arrive at the same site first.

The question is not whether China will be at the south pole. The hardware is at Wenchang. The question is what the rules will be when it gets there — and whether the institutions responsible for answering that question understand that their effective window is the same length as the time between now and an August launch.

On March 13, 2026, China’s National People’s Congress formally released the Outline of the 15th Five-Year Plan for National Economic and Social Development. Published through Xinhua News Agency and running across eighteen major policy parts, it is simultaneously a governing document, a strategic manifesto, and a statement of civilizational intent.

Beijing describes the 2026–2030 period as occupying “a crucial position in the process of basically realizing socialist modernization serving as a link between the past and the future.” That phrase is more than bureaucratic prose. It signals that this plan is designed to carry China across a strategic threshold: from a large, increasingly capable economy to what its planners call a “moderately developed country” by 2035, measured in per capita GDP terms. Everything else in the document serves that singular ambition.

Understanding this plan is not optional for anyone with exposure to global markets, geopolitics, supply chains, or international finance. Here is what the document actually says and what it actually means.

The Economic Architecture: Growth With Chinese Characteristics

The plan deliberately avoids fixing a rigid annual GDP growth target, committing instead to maintaining growth “within a reasonable range, with targets set for each year as appropriate.” The 2025 baseline sits at approximately 5% GDP growth. The strategic target that matters more is structural: China wants to double its per capita GDP relative to 2020 levels by 2035.

To get there, the plan engineers a fundamental shift in growth drivers. The household consumption rate historically suppressed in China relative to investment is earmarked for a “significant increase.” The urban surveyed unemployment rate is to be kept below 5.5%. Per capita disposable income must grow in lockstep with GDP. Labor productivity growth is pegged above GDP growth at 6.1% annually from the 2025 baseline.

The digital economy receives a specific numerical commitment: core digital industries must constitute 12.5% of GDP by 2030, up from 10.5% in 2024. Research and development expenditure across all sectors must grow at over 7% annually, reaching a share of national output that would place China among the world’s leading innovation-driven economies.

What this means internationally: China is engineering a consumption-led domestic cycle without abandoning export competitiveness. For multinational corporations, this represents both opportunity and pressure a billion-plus consumer market deepening, while Chinese competitors simultaneously scale and upgrade. The plan explicitly targets the “involutionary competition” China’s term for its own destructive domestic price wars by using government coordination to rationalize industries from steel to shipbuilding. Foreign competitors in those sectors should not misread this as weakness. It is industrial surgery to produce stronger survivors.

The Technology War: No More Soft Spots

The most strategically significant section of the 15th Plan is its treatment of science and technology. The language is blunt to a degree unusual for such documents.

The plan calls for “decisive breakthroughs” in integrated circuits, industrial machine tools, high-end instruments, basic software, advanced materials, and biomanufacturing. These are precisely the sectors where Western-led export controls have most acutely constrained Chinese development. The plan responds not with complaint but with acceleration.

Artificial intelligence receives its own dedicated action framework labelled “AI+” spanning scientific research, industrial production, consumer services, healthcare, public governance, and global cooperation. The plan calls for building high-performance AI chips, advancing “embodied intelligence” (physical AI systems, including humanoid robots), and pushing simultaneously on general-purpose large models and specialized industry models.

Quantum technology, brain-computer interfaces, sixth-generation mobile communications, nuclear fusion energy, and hydrogen energy all appear by name as priority future industries. These are not aspirational gestures. Each carries associated research institutes, proof-of-concept centers, and pilot zones attached to regions with strong scientific foundations.

The global implication is direct: China intends to contest and ultimately lead in every technology domain that will define the next fifty years. For the United States, the European Union, Japan, and South Korea, this is not a distant threat to be managed through incremental policy. It is an active race already underway, with a competitor that has just formalized its sprint.

Energy Transition: Scale That Defies Comparison

China’s energy commitments in this plan are among the most consequential anywhere in the world for the global climate.

The carbon peak target the point at which China’s CO2 emissions reach their maximum before declining is confirmed for achievement within this plan period. Carbon dioxide emissions per unit of GDP are to fall 17% from 2025 levels. Non-fossil energy is to constitute 25% of total energy consumption by 2030, up from 21.7% today.

The infrastructure scale involved is extraordinary. Offshore wind power cumulative installed capacity is targeted at over 100 gigawatts. Nuclear power operational capacity is to reach approximately 110 gigawatts. Solar and wind bases across the Gobi and Mongolian deserts, the Three-North regions, and coastal zones are to feed a unified national grid through transmission corridors with west-to-east capacity exceeding 420 gigawatts.

The plan also commits to constructing a new natural gas pipeline from Russia (the Power of Siberia Far East line) and the second China-Russia central gas pipeline, deepening energy ties with Moscow even as Western nations pursue decoupling.

For global commodity markets, this transition reshapes demand profiles for coal, oil, steel, copper, lithium, and rare earths simultaneously. China is, at the same moment, the world’s largest consumer of most of these materials and the country most aggressively building the infrastructure to reduce that dependence. The transition itself, paradoxically, drives near-term demand for minerals and industrial metals before demand eventually plateaus or falls.

The Opening Gambit: Globalization, Chinese Edition

Part Seven of the plan covering international trade and investment is where Western policymakers should read most carefully.

China explicitly commits to expanding the high-standard free trade area network, advancing RCEP implementation, pushing for accession to the CPTPP and the Digital Economy Partnership Agreement, and signing additional bilateral trade and investment agreements. Simultaneously, it plans to reduce the negative list for foreign investment access, fully implement national treatment for foreign enterprises in China, and build the “Invest in China” brand more aggressively.

The Belt and Road Initiative enters a new phase under the 15th Plan more selective, higher quality, and more explicitly linked to digital and green cooperation alongside physical infrastructure. The China-Kyrgyzstan-Uzbekistan railway and the Hungary-Serbia railway receive specific mention as flagship projects. The “Silk Road E-commerce” pilot zones expand to new partner countries.

The global implication is a China that simultaneously contests the rules of existing multilateral institutions while building parallel structures. It calls for the G20 to remain the “main forum for international economic cooperation” while expanding the BRICS and Shanghai Cooperation Organisation. It advocates strongly for the WTO while proposing new international rules in AI, digital currency, and outer space that existing WTO frameworks do not cover.

This is not contradiction. It is layered strategy using established institutions where they serve Chinese interests, building alternatives where they do not.

The Demographic Reckoning: China’s Quiet Crisis

Buried within the social policy chapters is an admission that carries profound long-term significance. China faces what its own planners acknowledge as a dangerous combination of population aging and declining birth rates.

The plan targets a childcare enrollment increase of 6 percentage points over the plan period, commits to building a “fertility-friendly society,” pushes for near-zero out-of-pocket inpatient delivery costs, and calls for flexible working arrangements for parents of infants under three. Life expectancy is to rise from 79.25 years in 2025 to 80 by 2030.

On aging, the plan commits to gradually raising the statutory retirement age, developing the “silver economy,” expanding nursing bed supply in elderly care institutions by 5 percentage points, and covering community elderly care service facilities at a 70% rate. Long-term care insurance is to be implemented nationally.

The average years of schooling for the working-age population is targeted to rise from 11.3 to 11.7 modest progress that underlines the structural challenge. China’s demographic transition is happening faster than its economic transition can comfortably absorb.

For the global economy, this matters in one critical way: China’s labor cost advantage, which powered three decades of manufacturing dominance, is structurally eroding. The plan’s aggressive investment in automation, robotics, and AI-assisted manufacturing is not incidental. It is the planned substitute for a labor force that is shrinking, aging, and becoming more expensive.

What the West Consistently Misreads

There is a persistent tendency in Western analysis to frame China’s Five-Year Plans as propaganda documents statements of aspiration with limited operational significance. That reading is empirically wrong.

The 14th Five-Year Plan (2021–2025) set a target of non-fossil energy exceeding installed fossil energy capacity. That target was met. It set a GDP growth baseline orientation around 6%. COVID-19 disrupted that, but the structural economic transformation it prescribed toward digital industries, domestic consumption, advanced manufacturing proceeded. R&D spending as a share of GDP reached 2.8%, as planned.

The 15th Plan contains twenty binding indicators. These carry enforcement mechanisms, provincial decomposition, and cadre performance evaluations attached to them. They are not wish lists. They are operational targets with consequences for the officials responsible for delivering them.

The plan also explicitly acknowledges what it gets wrong. It names “involutionary competition,” insufficient domestic demand, real estate sector stress, local government debt, and small-bank fragility as known, live risks requiring active management. A governing document that names its own structural problems with this degree of specificity is not propaganda. It is a planning exercise conducted by people who understand the country they are running.

The Bottom Line

China’s 15th Five-Year Plan represents one of the most detailed, ambitious, and consequential national development programs released by any government in the current decade. Its significance is not confined to China’s borders.

It will reshape global energy demand and supply chains. It will intensify competition in every advanced technology sector. It will accelerate both Chinese integration into and contestation of the existing multilateral order. It will drive further automation of manufacturing at a scale that affects labor markets across Southeast Asia, South Asia, and beyond. And it will do all of this while managing a demographic transition, a real estate correction, and a geopolitical environment that the document itself describes as “increasingly uncertain and unpredictable.”

The plan does not guarantee success. No plan does. But dismissing it because it is long, because it is Chinese, or because it does not fit within familiar Western analytical frameworks would be a strategic error.

The world described in this document where China leads in AI, dominates clean energy infrastructure, runs a consumption-driven domestic economy, and operates a parallel multilateral architecture alongside existing institutions is not a distant hypothetical.

It is the stated plan. And China has a track record of executing.

It shouldn’t have.

Those twelve satellites were the first operational nodes of something that has no real precedent a supercomputer built in space, designed to think before the data ever touches the ground. Beijing calls it the Star Compute programme. The inaugural constellation has a name drawn from Liu Cixin’s science fiction trilogy: the Three-Body Computing Constellation.

The name is fitting. The three-body problem, in physics, describes a system so complex that no clean solution exists. What China is building carries a similar quality a technology whose implications spiral outward in ways that existing frameworks were simply not designed to handle.

What Was Actually Launched

This requires some precision, because the coverage has been imprecise.

These are not communication satellites. They do not relay your data to a faster ground station. They are not Starlink with Chinese characteristics. What makes them different structurally, strategically is that they process data in orbit rather than transmitting it to Earth for processing.

Every satellite system built before this one follows the same logic: collect in space, transmit to ground, think on Earth. GPS works this way. Reconnaissance satellites work this way. Starlink works this way. The ground is where the intelligence lives.

Star Compute inverts this.

Each of the twelve satellites carries an 8-billion-parameter AI model among the largest AI models currently operating anywhere in space. Each delivers 744 tera operations per second (TOPS) of onboard computing power. Together, the twelve deliver 5 peta operations per second (POPS), a figure comparable to several of the world’s leading supercomputers. They communicate with each other through laser inter-satellite links running at 100 Gbps. They carry 30 terabytes of onboard storage.

The constellation is the first phase of a programme targeting 2,800 satellites at full deployment, with a combined computing capacity of 1,000 POPS. The programme was developed by ADA Space a Chengdu-based AI satellite startup and Zhejiang Lab, a state-backed research institute whose director, Wang Jian, is also the founder of Alibaba Cloud.

At the 2024 World Internet Conference in Wuzhen, Wang described the ambition plainly: “Our goal is to scale up the computing power of a single satellite from the teraflop to the petaflop level, and to achieve seamless interconnectivity between satellites, just like how the internet links individual computers.”

What he described is an internet but one that orbits the Earth at 500 kilometres, thinks for itself, and reports back only when it has already decided what matters.

It Is Already Working

By November 2025 — six months after launch — the constellation had demonstrated operational AI inference from orbit.

In one test, the remote sensing model conducted an infrastructure survey across 189 square kilometres in northwest China during heavy snowfall. Without any ground-based processing, it automatically identified buildings, bridges, and stadiums. In another, two satellites used an onboard AI model to classify gamma-ray bursts with 99% accuracy dramatically reducing the data that ever needed to reach a ground station.

This is not a proof of concept. It is a working system, iterating in orbit.

By July 2025 two months after the inaugural launch ADA Space had already announced a second generation batch of twelve satellites with four times the computing power of the first. The programme is not waiting for completion. It is scaling while operational.

Five Things This Changes

The chip sanctions calculus.

Since 2022, Washington has built an increasingly elaborate architecture of semiconductor export controls targeting China’s AI development. The logic was straightforward: advanced AI requires advanced chips; advanced chips require advanced fabrication equipment; the United States and its allies control that equipment. Constrain the supply chain, constrain the capability.

The Star Compute programme does not defeat this logic entirely. But it complicates it in ways policymakers have not publicly reckoned with. Space-based compute infrastructure once launched operates outside the terrestrial supply chain that export controls are designed to choke. You cannot sanction a satellite already in orbit. You cannot inspect it. You cannot compel it to stop processing.

The strategic assumption underlying three years of Western technology policy that terrestrial compute is the decisive chokepoint requires revision.

The civil-military line — which does not exist.

The Star Compute programme is classified as commercial. ADA Space is a civilian company. Zhejiang Lab is a research institution. None of this is the relevant fact.

Under China’s Military-Civil Fusion (MCF) doctrine, enshrined in law since 2016, civilian technological development is legally required to serve military requirements. The institutional and legal barriers between commercial and military satellite use are not low they are absent by design.

A satellite processing commercial logistics data today can support battlefield intelligence coordination tomorrow. No hardware modification is required. No engineering work. The transition requires a policy decision, not a technical one. MCF ensures that decision can be made at any moment.

Surveillance without a building.

Conventional surveillance infrastructure has a critical vulnerability: it is on the ground. Servers can be located. Data centers can be regulated. Courts can compel disclosure. Governments can knock on doors.

Orbital AI inference with demonstrated 99% classification accuracy creates a surveillance capability with no physical address, no jurisdiction to invoke, and no infrastructure to shut down. As the constellation scales toward global coverage, the legal frameworks built entirely around terrestrial infrastructure assumptions privacy law, data sovereignty, intelligence oversight will find no purchase.

Digital dependency, by design.

The Star Compute initiative is being developed in partnership with 54 universities, research institutions, and enterprises from around the world. This internationalization is not incidental. It is a deliberate strategy of embedding Chinese orbital infrastructure into global connectivity before alternatives exist.

Nations that connect to Chinese space-based computing for affordable, high-performance compute will route their most sensitive data through an architecture Beijing designed and controls. Unlike terrestrial dependency where a country can, in principle, build alternative cables or data centers orbital infrastructure dependency is structurally more durable. Once a nation’s critical data flows run through a foreign-controlled constellation, the leverage created is persistent and difficult to reverse without building an entire alternative space programme.

A new escalation ladder with no rungs.

Orbital compute nodes are military targets. Destroying them constitutes an act of war. Tolerating them is a persistent strategic vulnerability. The space between those two positions contains no deterrence framework, no agreed escalation protocol, and no international institution with authority to manage the tension.

The 1967 Outer Space Treaty was written for ballistic missiles and communication relays. It has nothing to say about distributed AI computing networks, autonomous orbital decision-making, or commercial satellite constellations whose military utility is legally guaranteed by national doctrine.

What Does Not Exist

It is worth being precise about the governance gap, because vague references to “grey zones” and “outdated frameworks” obscure how complete the absence actually is.

There is no treaty governing the deployment of AI inference systems in orbit.

There is no monitoring body with authority over dual-use computing satellites.

There is no ITU regulation covering orbital compute capacity allocated to AI workloads.

There is no export control regime that addresses post-launch operation of space-based computing networks.

There is no multilateral forum with jurisdiction over the military application of commercial orbital AI infrastructure.

China is not exploiting a grey zone. It is operating in a zone where no rules have been written and it did not wait for the writing to begin.

The Bottom Line

The West spent three years restricting chip exports to slow China’s AI.

China responded by building a computer that doesn’t need a chip factory to keep running once it’s up. The first twelve satellites are in orbit. The second generation is coming. Fifty-four international partners are already integrated into the programme. The target is 2,800 satellites delivering compute capacity no terrestrial system currently matches.

The Star Compute programme is not a space story. It is a story about where computing power lives, who controls it, and what that control enables — militarily, strategically, and in terms of who gets to surveil whom from an altitude no jurisdiction reaches.

The decisive question is not whether this changes the strategic environment. It already has.The question is whether a coherent response is still possible and at what pace it needs to move to matter.

Subscribe for weekly analysis on China’s military technology, PLA modernisation, and Indo-Pacific security.

That sequence is the story. Everything else follows from it.

What the West Built and Why It Mattered

For sixty years, one law governed every chip ever made. Moore’s Law named after Intel co-founder Gordon Moore stated that transistor density doubles every two years. More transistors meant faster chips, cheaper devices, better AI. The entire technology industry was built on this single compounding curve.

What Moore’s Law also built, quietly, was a chokepoint. Making transistors smaller requires machines of extraordinary precision. Today only one company on earth makes them: ASML, a Dutch firm whose most advanced lithography machines cost $380 million each and take years to manufacture. There is no second supplier. Those machines feed almost exclusively into TSMC in Taiwan, which makes roughly 90% of the world’s leading-edge chips. And the chips that power artificial intelligence the processors training every major AI model from commercial chatbots to military targeting systems come almost entirely from Nvidia, the American company that controls around 80% of the global AI chip market.

Control ASML, TSMC, and Nvidia. Control who can build serious AI. That was Washington’s logic, and for five years it was operationally sound.

The Sanctions Campaign and Where It Broke Down

In 2019, the United States placed Huawei on its trade blacklist. The move cut Huawei off simultaneously from TSMC fabrication, ASML equipment, Nvidia chips, and the American software that runs chip design globally. Follow-on restrictions in 2022 and 2023 closed each workaround as Huawei found one. Advanced Nvidia H100 GPUs were banned. Huawei designed around them. Those designs were banned. New restrictions followed. The pattern repeated for four years.

By early 2026, the strategy had produced uncomfortable results on both sides. American chip companies were losing billions in Chinese revenue. Nvidia, Intel, and Qualcomm lobbied Washington repeatedly to ease controls. Allied governments particularly in Europe were frustrated at being asked to restrict their own exports to honour an American policy that American companies were simultaneously pushing to relax. Washington agreed to put eased Nvidia chip access on the table in Geneva.

China read the offer, noted it, and on May 25 showed the world what it had been building instead.

The New Law: What It Actually Says

Moore’s Law measured progress in space. Smaller transistors, smaller chips, faster everything. The Tau Scaling Law measures progress in time. Specifically, it measures τ (tau) the time it takes for an electrical signal to complete a single switching operation inside a chip.

The practical point is simple. Tau can be reduced without shrinking transistors. You reduce it by stacking chip layers vertically instead of spreading them flat, shortening the physical distance the signal travels, and eliminating the bottlenecks that slow it down. Think of it as building a taller, better-connected building rather than squeezing more rooms into the same floor. The result is faster performance. And it does not require an ASML machine to achieve it.

This is not a theory. It is what Huawei has been doing since 2020. Under full sanctions, cut off from every Western tool in the chain, the company produced 381 chips for commercial sale across mobile phones, AI systems, cars, and telecoms infrastructure. Its Kirin 2026 chip the first built fully on this methodology achieved a 55% increase in transistor density and 41% better power efficiency without using a more advanced manufacturing process. By 2031, Huawei projects performance equivalent to chips that today require TSMC’s most advanced nodes and ASML’s most expensive machines. Built without either.

The chokepoint held for five years. It no longer holds in the same way.

China’s Expansion in the AI Domain

The Tau Law is one piece of a broader and accelerating push. China’s AI development is advancing on every front simultaneously and the Tau announcement came with a full infrastructure stack behind it, not just a chip.

Nvidia’s real power is not its GPU alone. It is NVLink the proprietary system that connects thousands of Nvidia chips into a single unified AI supercomputer. Any government that builds national AI infrastructure on NVLink is locked in. Every upgrade, every expansion, every future purchase passes through an American export licence. That dependency is the actual lever.

Huawei’s Unified Bus is a direct replacement for NVLink. It connects AI chips across an entire data centre through a single communication protocol cutting signal delay from tens of microseconds down to around 100 nanoseconds. That is a 500-fold reduction. Alongside it, Huawei’s Hi-ONE optical interconnect carries 8 terabits of data per second between chip modules, replacing the copper cables that physically limit how large an AI cluster can grow. Together, these two systems form a complete alternative to the Nvidia platform. No American components. No American export licence required at any point in the chain.

In January 2025, China’s DeepSeek released an AI model matching GPT-4 performance at a fraction of the training cost demonstrating that Chinese AI capability is advancing in software as fast as it is in hardware. China’s civil-military fusion laws require every domestic technology company to share capabilities with state intelligence and military agencies. The AI infrastructure China is now building and exporting operates under that legal framework regardless of where it is deployed.

Huawei alone spends over $23 billion a year on research and development. China’s combined state and private AI investment exceeds $15 billion annually. The Ascend 910C AI chip shipped in 2025. The Ascend 950 ships in 2026. The roadmap is public, the production is real, and the export pitch to foreign governments is already underway.

What This Means for the Rest of the World

Every government currently choosing an AI infrastructure platform is choosing between two ecosystems. The American one comes with Nvidia hardware, NVLink interconnects, and export licensing conditions that can change with Washington’s policy. The Chinese one Huawei chips, Unified Bus, Hi-ONE comes with no Western licensing requirements and, given China’s civil-military fusion laws, guaranteed state intelligence access to any system it touches.

Neither option is without cost. That is the actual condition governments across the Gulf, Southeast Asia, Africa, and South America are navigating right now. The difference from two years ago is that the Chinese option is now technically complete. It was not before.

For Europe, the position has a specific problem. European compliance with US chip export controls including restrictions placed on ASML’s own machines was justified on the premise that EUV lithography is irreplaceable and that denying it to China preserves a decisive advantage. If chips competitive with TSMC’s best processes can be built without EUV by 2031, European manufacturers will have absorbed years of commercial damage from the restrictions while the strategic rationale behind them dissolves. That is not a future scenario. It is the trajectory the production data already shows.

Prospective Conclusions

The Geneva offer of eased Nvidia access was not refused. It was overtaken. That distinction matters because it changes the nature of the negotiation going forward. Washington’s leverage in semiconductor diplomacy rested on China needing something only the American ecosystem could supply. The Tau Scaling Law, backed by 381 production chips and a functioning alternative to Nvidia’s interconnect architecture, is Beijing’s formal assertion that this is no longer fully true.

The chip war is not over. Nvidia’s 80% market share does not disappear overnight. TSMC does not close. ASML does not become irrelevant. But a control architecture that required the world to have no alternative has encountered a credible alternative in production. How durable that alternative proves — and how fast it scales — will determine whether the semiconductor order of the last decade extends into the next one, or whether May 25, 2026 is remembered as the day the terms changed.

What the Standards Actually Require

The previous article in this series established the framework: five pillars of machine capability - perception, cognition, execution, memory and learning - arranged across three ascending intelligence grades. GB/Z 177.3 and 177.4 translate that framework into concrete device requirements.

GB/Z 177.3 governs smartphones and tablets across two tracks - what the device can do without internet connectivity, relying entirely on local hardware, and what it can do when connected to cloud infrastructure. At its highest grade, a qualifying smartphone must plan autonomously toward a user’s stated goal without step-by-step instruction. It must break complex tasks into sub-tasks, select appropriate tools at each stage without being told which to use, and execute the full chain. It must remember its user across sessions - building a persistent model of their locations, habits, preferences, conversational history and behavioral patterns that it draws upon without being prompted. It must recognize the user’s face, fingerprint, voice and emotional state. And it must coordinate with other connected devices, handing tasks between terminals without manual transfer.

GB/Z 177.4 applies equivalent logic to laptops and desktop computers but introduces two requirements absent from the mobile standard. First, a qualifying computer must maintain a personal knowledge base — a persistent, locally stored repository of documents the user has provided, which the device retains indefinitely and reasons over autonomously. Second, it must achieve distributed task coordination, autonomously recruiting the sensors and data streams of connected devices — including smartphones - to extend its own reach. A laptop that meets the highest grade is not assessed as a standalone machine. It is assessed as an intelligent hub capable of orchestrating every connected device within its environment.

The drafting committees behind both standards include Huawei, OPPO, vivo, Honor, Xiaomi, ZTE, Lenovo, iFlytek, Inspur, Chaoye Technology, China Mobile, China Unicom and China Telecom, alongside the ministry that oversees them. This is not an industry body seeking market clarity. It is the coordinated output of China’s entire consumer technology supply chain-commercial manufacturers, state-owned carriers, government-affiliated AI laboratories and security-sector technology companies working together to define what a qualified intelligent device must know about its user.

The Logical Weapon: Two Laws the Standard Does Not Name

To understand what GB/Z 177.3 and 177.4 mean beyond China’s borders, one must place them alongside a legal reality the documents themselves never reference. China’s National Intelligence Law of 2017 requires all organizations and individuals subject to Chinese jurisdiction to support, assist and cooperate with national intelligence work. This is not an interpretive inference - it is the statute’s plain text. It applies to every manufacturer that participated in drafting these standards. It applies to the software teams building the memory systems, the biometric recognition layers and the personal knowledge bases the standards mandate. It applies regardless of where in the world the qualifying device is sold, activated or used.

Place that law alongside what a highest-grade smartphone must permanently hold: location history, biometric identifiers, emotional state data, conversation logs across sessions and continuous behavioral profiling. Place it alongside what a highest-grade laptop must permanently hold: a personal knowledge base built from the user’s own documents, retained indefinitely and reasoned over without instruction.

The result is not a privacy risk to be managed through better settings. It is a structural intelligence collection architecture - specified by the state, embedded in consumer hardware, operating continuously across billions of devices in dozens of countries under a legal framework that ensures its accumulated data is accessible to the government that wrote the specification. Unlike a Trojan Horse, it does not need to be smuggled in. It is purchased voluntarily, at competitive prices, in every market where Chinese manufacturers operate.

The Biometric Ransom: The Data That Cannot Be Revoked

Among the personal data categories qualifying devices must collect, biometric identifiers occupy a position of permanent strategic consequence. A compromised password can be changed overnight. A leaked address can be abandoned. A biometric identifier cannot. A face cannot be changed. A fingerprint cannot be changed. A voiceprint cannot be changed.

GB/Z 177.3 mandates biometric sensing face, fingerprint, voice and emotional state, from the middle intelligence grade upward. Across the hundreds of millions of devices qualifying manufacturers ship globally each year, this means biometric identifiers for citizens of dozens of countries are being captured, associated with persistent personal profiles and held under a legal framework that makes them available to the Chinese state on request. No bilateral privacy treaty governs this flow. The adequacy frameworks and standard contractual clauses that constitute the architecture of international data protection were designed for cloud services with defined retention periods and access controls. They were not designed for a hardware specification that mandates permanent biometric capture as a qualification condition.

The strategic implication compounds over time. A country whose citizens’ biometric identifiers are held in an architecture accessible to a foreign government faces not merely a privacy problem but a permanent intelligence vulnerability — one that no subsequent policy intervention can retroactively undo.

The Document Vault With a Foreign Key

The personal knowledge base requirement of GB/Z 177.4 introduces a vulnerability with no equivalent in any previous consumer device standard anywhere in the world. A highest-grade qualifying laptop must accumulate, retain indefinitely and reason over a repository of documents its user has provided. In professional practice, this means the device holds contracts, case files, medical records, financial models, strategic plans, unpublished journalism, personal correspondence and in government contexts potentially sensitive working documents.

Each of these categories is protected by specific professional, legal or security frameworks in most democratic jurisdictions- Legal professional privilege, Medical confidentiality, Journalistic source protection and National security classification. None of those frameworks was designed with the assumption that the device holding the protected material is required by its own specification to accumulate it permanently and is manufactured by an entity legally obligated to cooperate with intelligence requests from a foreign government.

The personal knowledge base does not present a privacy caveat alongside a productivity feature. For any user in a position of professional sensitivity, it is a standing intelligence vulnerability that enriches itself automatically growing more comprehensive and more valuable to an adversary with every document the user adds to it.

The Distributed Listener: When the Laptop Recruits the Room

The distributed task coordination requirement of GB/Z 177.4 has attracted almost no attention outside narrow technical circles. A qualifying laptop must autonomously recruit the sensors of connected devices in its vicinity invoking a connected phone’s camera, drawing on its microphone, integrating its data streams to extend its own operational reach. The standard presents this as an ecosystem coordination feature. Its security implications are considerably less benign.

A device whose specification requires it to autonomously coordinate with every connected sensor in its environment does not present merely a data collection risk. In a law firm’s conference room, a hospital consultation suite, a government ministry meeting space or a diplomatic facility, it presents an ambient surveillance risk extending to everyone within its coordination range regardless of whether they are the device’s intended user. Security professionals who design controlled environments have managed fixed listening device risks for decades. They are now confronting a class of consumer hardware whose commercial specification requires it to behave, in certain respects, as an intelligent listening hub that recruits its own auxiliary sensors on demand. No current government IT procurement guideline has addressed this directly.

The Civil-Military Architecture Behind the Drafting Table

The participation of specific organizations in drafting GB/Z 177.3 and 177.4 warrants more analytical scrutiny than it has received. iFlytek, which contributed to both standards, operates under close government direction; its voice recognition technology underpins elements of China’s domestic mass monitoring infrastructure and the company has appeared on US export restriction lists. Inspur, which contributed to Part 4, supplies enterprise computing infrastructure to significant segments of Chinese government and military procurement and has similarly faced Western export controls. Chaoye Technology operates in national-security-sensitive supply chains with limited public transparency regarding its ultimate customers.

Their presence at the drafting table of a consumer device standard is unexplained within the documents. The pattern their presence reveals is consistent with China’s doctrine of civil-military fusion — the systematic integration of civilian technology development with state security and military objectives under coordinating government direction. When the organizations defining what a consumer device must collect include entities integrated into China’s defense and intelligence apparatus, the boundary between product specification and intelligence collection mandate does not merely blur but disappears.

Prospective Conclusions

The case of Hyper Strong and SMA Solar, examined in parallel analytical work, demonstrated that the real front in China’s technological competition with the West had shifted from manufacturing capacity to the software and data flows governing critical infrastructure. GB/Z 177.3 and GB/Z 177.4 demonstrate the same dynamic operating at the level of personal devices — the most intimate and pervasive infrastructure that exists.

Standards are not passive documents. They are the rules by which products are designed, markets structured and data flows determined — before any government has had the chance to ask what those rules mean for its citizens, its officials or its institutions. China has set the rules for AI terminal intelligence. It has done so with participation from entities integrated into its defense and intelligence ecosystem. It has done so in the absence of any competing framework from any other jurisdiction. And it has done so in a way that embeds its data collection architecture into the hardware of billions of people across dozens of countries that had no seat at the table where those rules were written.

The machine is graded. The harvest is underway. The world’s policy offices have yet to ask the right questions. By the time most of them do, the architecture that makes those questions urgent will have been operational for years — quietly accumulating, quietly retaining and quietly reporting to whoever is authorized to ask.

Coming next in upcoming series: Cockpits & Wearable Devices

The next instalment of this series turns to China's GB/Z 177 standards for automotive cockpits and wearable devices — Parts 7, 8 and 9. If a smartphone that knows your location is a surveillance risk, consider what a vehicle that knows your route, your passengers, your conversations and your destination represents. Consider what an earpiece that monitors your voice, your health indicators and your environment in real time means when built to the same grading architecture examined here. The device was intimate. The vehicle is sovereign territory. The body is the final frontier. The series continues.

The timing and authorship are not incidental. China is the world’s largest exporter of smartphones, smart speakers, earphones, and increasingly electric vehicles with embedded AI cockpit systems. The organizations that drafted GB/Z 177 include Huawei, Xiaomi, Honor, OPPO, Vivo, Lenovo, ZTE, and iFlytek, alongside the China Academy of Information and Communications Technology and the China Electronics Technology Standardization Institute. These are not peripheral actors in global technology trade. They are its primary suppliers. By defining what machine intelligence means — and by building a certification mechanism to prove it — Beijing has done something whose consequences reach far beyond its domestic market: it has established the terms by which AI terminal capability will be judged in markets that have produced no terms of their own.

A framework for nine device categories — and the markets that depend on them

GB/Z 177 is a nine-part national guidance technical document issued jointly by China’s State Administration for Market Regulation and the Standardization Administration of China, developed under the National Technical Committee for Information Technology Standardization (SAC/TC28). Its stated purpose is to evaluate AI terminals from the perspective of user-facing intelligent experience — to measure not what a device contains, but what it can demonstrably do. Seven of the nine parts were published simultaneously on April 30, 2026. Parts 5 and 6, governing television receivers and smart glasses, were listed in the series framework but not yet released as of the initial publication date.

The scope of the nine parts maps with precision onto the categories in which Chinese manufacturers hold dominant or rapidly growing global positions. Part 1 establishes the reference framework — the conceptual architecture, the terminal classification system, and the five capability pillars that define intelligence across the entire series. Part 2 provides the universal grading requirements and testing methodology applicable to all device types. Parts 3 and 4 govern mobile terminals and microcomputers — smartphones, handheld devices, laptops, and personal computers, the categories in which Chinese OEMs have most aggressively embedded on-device AI capability over the past three years. Part 5 covers television receivers, Part 6 smart glasses, and Part 7 the automotive cockpit — a strategically charged inclusion that treats the in-vehicle AI system as a distinct, separately certifiable intelligence layer, directly intersecting with China’s electric vehicle export trajectory. Parts 8 and 9 address smart speakers and earphones, categories dominated by manufacturers whose cloud-dependent device architectures the framework explicitly accommodates.

Taken together, these nine product categories constitute the full architecture of personal, domestic, and mobile AI interaction. Any country that imports devices in these categories — which is effectively every country in the world — is already operating inside the supply chains that GB/Z 177 now governs.

The anatomy of machine intelligence: five pillars, four levels

The intellectual architecture of GB/Z 177 rests on five capability pillars that apply uniformly across all nine device categories. Perception covers the terminal’s ability to sense user input, device state, and environmental conditions — voice, text, image, video, biometric data, ambient conditions, and connected device status. Cognition encompasses understanding of user instructions and intent, logical and inductive reasoning, and autonomous task planning. Execution addresses tool invocation, content generation across text, image, audio, and video modalities, cross-device interconnection, and expressive output. Memory distinguishes short-term session retention from long-term storage of user preferences, conversation history, and a personal knowledge base built through authorized user interaction. Learning covers in-session contextual adaptation and continuous capability improvement through user feedback and external knowledge integration. These five pillars are subdivided into eleven second-level elements, each carrying a weighted importance score in the scoring model that determines grade assignment.

The four intelligence levels sit on top of this structure and represent an ascending scale of cognitive autonomy. At the entry level — L1, the Response Level — the terminal understands a single simple instruction, calls a deterministic tool, and delivers the result of a single-step task. There is no reasoning, no memory, no content generation, and no learning. The terminal responds; it does not think. L2, the Tool Level, introduces the first layer of genuine cognitive capacity: the terminal understands intent beyond the literal command, reasons over the current session context through short logical chains, executes preset multi-step tool combinations, generates content in at least one modality, and retains context within a single conversation. L3, the Assistance Level, marks the qualitative threshold of the framework. A terminal at this level fully understands complex and implicit user intent, autonomously decomposes multi-step tasks and orchestrates their execution without user guidance, performs long-chain reasoning across multiple information sources, actively seeks clarification when intent is ambiguous, and maintains long-term memory of user preferences, conversation history, and a personal knowledge base. L4, the Collaborative Level, is explicitly listed as pending definition — the document states that current technology development levels do not permit its specification, deliberately leaving the ceiling of the scale open for future revision.

The framework draws a further structural distinction between on-device capability, which must be demonstrable without internet connectivity, and edge-cloud collaborative capability, assessed with network access. Strong AI compute terminals — those capable of running models with at least one billion parameters locally, covering smartphones, laptops, and automotive cockpits — carry differentiated on-device requirements. Weak AI compute terminals, such as speakers and earphones, are assessed primarily through cloud-connected performance.

The certification machine: how grades are earned and what they prove

Certification under GB/Z 177 follows a six-stage process. The manufacturer submits a formal application with technical documentation covering hardware configuration, operating system version, software build, AI capability claims, interface specifications, and the full scope of all cloud services involved. A formal eligibility review confirms that the device falls within the relevant product category and that its core AI components — the on-device model, intelligent assistant, or companion application software — are manufacturer-issued and pre-installed. Third-party AI layers added post-release do not satisfy the requirement, a provision that ties the intelligence grade directly to the manufacturer’s engineering commitment. A test plan is then formulated covering environment parameters, test cases, test data, testing tools, and pass/fail criteria for each capability element. Testing is executed in a standardized environment, with background noise levels, ambient illumination, and network conditions all specified, and the device must complete each test scenario end-to-end — partial task completion does not satisfy the requirement. Grade determination follows, and a formal report is issued.

For device categories with straightforward form factor characteristics, a binary compliance method applies: the terminal meets all key capability requirements for the target level or it does not. For categories where form factors overlap — devices that function simultaneously as primary devices and peripherals — a weighted scoring model translates all capability elements into a total intelligence score between zero and one hundred. Sub-element scores are aggregated into pillar scores, pillar scores into a final total, and the score thresholds corresponding to each grade level are defined by the product-specific parts of the series. The mathematical structure is explicit and reproducible. What it produces is not a subjective assessment but a certifiable number attached to a standard.

The vacuum that China alone has filled

The strategic significance of GB/Z 177 is best understood by examining what Western regulatory frameworks have not produced — and by recognizing that the absence is structural, not accidental.

The EU AI Act, which entered into force in August 2024 and continues its phased implementation through 2026 and 2027, classifies AI applications by the risk they pose to fundamental rights, health, safety, and democratic processes. It places systems into four tiers — unacceptable, high, limited, and minimal risk — based on what an AI system might do to society. It does not measure what an AI system can do for a user. A sophisticated on-device reasoning engine and a simple decision-support script could fall into identical risk categories if their applications are equivalent. Intelligence level is not the organizing variable, and Brussels has not announced any intention to make it one. The United States has governed AI through executive orders, sector-specific agency guidance, and export controls restricting advanced chip transfers. Washington’s framework asks whether a system is safe and whether it should cross a border; it does not ask whether a smartphone is more intelligent than its competitor. ISO/IEC 22989:2022 — the international standard on AI concepts and terminology, explicitly cited as a reference document within GB/Z 177 — provides definitions for AI vocabulary but establishes no grading system for AI capability levels. Japan’s AI governance strategy and South Korea’s AI Basic Act address safety, development policy, and liability frameworks. None of these instruments answers the question GB/Z 177 was built to answer: on a defined, testable, certified scale — how intelligent is this device?

The gap is not an oversight. It reflects a difference in regulatory philosophy that has now produced a measurable difference in regulatory reality. Western frameworks have treated artificial intelligence as a systemic risk to be contained and managed. Beijing has treated it as a market quality attribute to be certified and communicated — and has acted on that logic first, alone, and at scale, while Western institutions were still defining the problem.

Alignment by default: why the world will follow without choosing to

The most important dimension of GB/Z 177’s global impact is the one least visible in the standard’s text itself: the standard does not need international ratification, ISO adoption, or foreign government endorsement to reshape global markets. It needs only to be implemented by the manufacturers who already supply those markets — and those manufacturers wrote it.

The first consequence is competitive asymmetry that operates from the earliest stage of product development. The Chinese firms that participated in drafting GB/Z 177 designed the scoring weights, defined the capability thresholds, and shaped the test scenarios around engineering choices their own teams had already made or were already making. They can build products to meet grade requirements before competitors understand what those requirements are. Foreign manufacturers seeking to use intelligence grade designations in global marketing, or seeking to compete in the Chinese domestic market, will need to certify under a framework built around their primary competitors’ architecture.

The second consequence is normative capture — the mechanism by which early definitional standards become permanent reference points regardless of what competing frameworks subsequently emerge. Energy efficiency labels, automotive safety ratings, and pharmaceutical quality standards all followed this pattern: the first jurisdiction to establish a measurable, certifiable definition of a quality attribute set the vocabulary that subsequent frameworks were forced to negotiate with rather than replace. GB/Z 177 is positioned to exercise exactly this dynamic for AI terminal intelligence. An L3 designation on a Chinese device will carry a specific, documented, reproducible meaning. A claim of equivalent capability from a device without such certification will require more explanation and carry less authority.

The third consequence is the most direct and the least dependent on market dynamics. The countries of Southeast Asia, Africa, the Middle East, Latin America, and Southern and Eastern Europe have built their consumer electronics ecosystems substantially on Chinese hardware. Their populations use Chinese smartphones, Chinese smart speakers, Chinese earphones, and increasingly Chinese electric vehicles with embedded AI cockpit systems. As those devices carry intelligence grades certified under GB/Z 177, the standard’s definitions of machine intelligence will enter those markets without any government decision, any regulatory adoption, or any parliamentary vote. These countries will not choose to align with GB/Z 177. They will inherit its terms as a condition of the supply chains they already depend on.

The fourth and most enduring consequence operates in the arena of international standards diplomacy. Having published the world’s first AI terminal intelligence grading system — with full documentation, a defined methodology, and seven published product-specific parts — China arrives at ISO, IEC, and ITU negotiations not as a participant seeking to contribute to an emerging framework but as a jurisdiction seeking international recognition of a framework it has already built, tested, and begun implementing. That is a fundamentally different negotiating position. Western regulators, having produced no equivalent in any of those categories, are not currently positioned to contest it — and the gap in readiness widens with every device that ships carrying a GB/Z 177 grade.

Subscribe for next in this series: Part 3 and Part 4

The reference framework and general requirements establish the rules of the game. Parts 3 and 4 — mobile terminals and microcomputers — reveal how those rules translate into specific capability thresholds for the two device categories most directly contesting the global AI hardware market. What separates an L2 smartphone from an L3 one is not a marketing claim. It is a certified gap in autonomous reasoning, task orchestration, and long-term memory that the next article will dissect in full technical detail — and whose commercial implications for every OEM competing in the post-2026 device market are more consequential than they may yet appear.