China's cybersecurity standards committee named a robotics company as lead drafting unit for one of five artificial intelligence security standards covered by August 2026 recruitment notices

What these notices are, and what they are not

The notices are dated 3, 4, 5, 6 and 11 August 2026, a span of nine days on the committee's own posting dates. Each recruits 参编单位, drafting-participant units, for an artificial intelligence security national standard, and all five sit under the same working group, WG9.

The retained documents identify recruitment conditions and lead units. They do not establish whether internal drafts existed, the present drafting stage, or the eventual standards' requirements or commencement dates.

Who leads what

The embodied-AI security guide notice names Unitree, sealed as 宇树科技股份有限公司, with applications returned to the company. The on-device large-model cybersecurity guide names Pujiang National Laboratory, and the model-development security guide names Beijing Zhongguancun Laboratory.

The notice for security requirements for AI training and inference frameworks names China University of Political Science and Law as lead unit. Its HTML posting date is 6 August 2026, while the notice image carries a 7 August seal date. Those are distinct source fields; this review does not resolve the discrepancy.

The open-source model security guide is led by Zhejiang University in Hangzhou. Its notice printed an application deadline of 14 August 2026.

The five notice subjects cover embodied intelligence, on-device large models, training and inference frameworks, model development and open-source models. This describes the recruitment notices, not a finding about their current drafting status.

Printed deadlines and participation conditions

The five notices printed three application dates. Zhejiang University's open-source-model notice specified 14 August 2026. The Unitree embodied-intelligence and Pujiang on-device-model notices specified 21 August. The model-development and training-framework notices specified 31 August. All three dates had passed by this October 1, 2026 correction; extensions and actual closure were not verified.

All five notices require applicants to be WG9 member units. The printed application timetable therefore applies alongside a stated eligibility condition; the notices are not an unrestricted invitation to all organisations.

A passed printed date does not prove that recruitment ended. This review did not contact the lead units or establish whether any period was extended.

Each notice asks for a sealed application form returned to the lead unit, and each requires the participating organisation to assign one fixed technical specialist to take part in the drafting throughout, rather than rotating staff through meetings.

What the notices say about openness, and what condition 1 requires

Each of the five notices opens with the same stated purpose, in the committee's own words: 为切实做好网络安全国家标准编制工作，鼓励更多单位切实参加到标准编制过程中，提高标准编制工作的开放性、公正性、透明性，提升标准的实用性和质量. In English, to do the work of drafting national cybersecurity standards properly, to encourage more units to take part in the drafting process, and to improve the openness, fairness and transparency of that work as well as the practicality and quality of the standards.

Each notice also describes itself as a 公开征集, which translates as a public call. All five notices require applicants to be WG9 member units. The embodied-intelligence notice states the condition as 该标准所属（WG9）工作组的成员单位.

Both of those come from the same document. We report the juxtaposition rather than characterise it. We have not established how many organisations are WG9 member units, and we make no claim about whether this eligibility rule is usual or unusual for standards bodies, in China or elsewhere. What it does mean concretely is that an organisation reading these notices cold cannot simply apply, and any description of them as open to industry at large would be inaccurate.

The remaining conditions are ordinary: accept the committee's participation rules, complete the tasks the lead unit assigns, attend drafting meetings on time and contribute, and assign fixed technical staff.

Why a foreign reader should care about a participant call

The lead units and notice subjects identify documents that a China-facing AI team may wish to track. The recruitment notices do not establish future market-access conditions, mandatory status or the only opportunity to influence a standard.

For a robotics or on-device model vendor, any later draft or issued standard would need its own review. The August notices alone do not establish what technical requirements will result or when.

What we did not verify

This review examined the five recruitment notices and their operative images, not draft or final standard texts. It does not establish whether drafts existed internally or what has been published since those notices.

We did not verify the internal composition of WG9, so we cannot say how many organisations are eligible to apply, or whether any foreign-invested entity is a member unit.

We did not contact any lead unit or establish application numbers, extensions or actual closure. The dates reported here are the dates printed in the original notices.

This review does not establish the eventual standard numbers, mandatory or recommended status, publication dates or current drafting stages.

The notice bodies are published as images rather than text. We read the images directly and took the lead units, deadlines, contacts and seal dates from them.

Related briefings

• China's earlier sector AI-security drafting call
• The GB standard on AI security classification and grading
• TC260's AI agent deployment security guide
• China's rules for human-like AI companions
• Asia-Pacific AI regulation hub
• AI Regulation News hub