Control
Public-opinion GenAI service without filing / security assessment
GenAI services with public-opinion or social-mobilization capability must complete a security assessment and algorithm filing.
Informational data, not legal advice. Summaries are TwinEthos's own words and rules have not been reviewed by a lawyer: check the official text before relying on any of it. A guard addresses an item; adding it is not a statement that your code meets any law.
Reach
Law in force in China (CN).
The guard to add
Record the completed algorithm filing and security assessment for a public-opinion GenAI service, show the filing number in the product, and gate launch on it.
For a public-facing GenAI service with public-opinion or social-mobilization reach (open content generation, feeds, posting or comment features), keep a filing record in the repository with the algorithm filing number, the generative AI service filing record, the security assessment report reference, and dates. Render the filing number from config in the site or app footer or about page, and have a release check refuse to enable the public endpoint when no filing number is configured. Update the record when the algorithm or service changes or is withdrawn.
Where it goes: 3 config and feature flags, 12 repository artifacts, 14 user-facing text, 11 CI/CD pipeline.
What reviewers look for: a filing number displayed in the footer or about page of the public product, a filing and security-assessment record under compliance records, and a launch or config check that ties the public GenAI endpoint to that record.
Example (Service config), before:
# config/release.yaml
public_genai_chat:
enabled: trueAfter:
# config/release.yaml (startup fails if enabled without filing details)
public_genai_chat:
enabled: true
algorithm_filing_number: "<filing number issued after algorithm filing>"
service_filing_record: records/cn/genai-service-filing.md
security_assessment_ref: records/cn/security-assessment-2026.pdfEngineering guidance, not legal advice. Each provision below may add its own details (a cadence, a deadline, a required notice element): open it for those.
Every rule this guard addresses
Binding law — in force (1)
- China (CN)
- Public-opinion GenAI services must complete filing and a security assessment (China) 生成式人工智能服务管理暂行办法 第十七条 (Art. 17)