On September 18, several developments around AI safety and investment converged. While US and Chinese experts are working on shared rules to keep autonomous AI judgment away from nuclear weapons operations, Huawei assessed that "Chinese AI is not yet strong enough for frontier risks to be worth discussing." In Japan, SoftBank Group has broadened its financing options for AI investment, and in the developer community, hands-on Japanese benchmark results for Jev, the "AI that doesn't write" announced this week, are being published one after another.

US and Chinese Experts Move Toward Shared Rules Keeping Autonomous AI Judgment Away from Nuclear Weapons

According to The Decoder, experts from the US and China are pushing to develop shared rules that would prevent AI systems from autonomously making decisions about deploying nuclear weapons. The risk of AI miscalculation triggering nuclear use has been raised repeatedly since the false-alarm incidents of the Cold War era, but what's new here is that, with generative AI capabilities advancing, moves by the US and China to share a framework are becoming concrete.

Relatedly, on the same day, Hacker News also featured an article highlighting the temperature gap within the US: while Altman and Huang describe safety as "trust me, it'll work out," Senator Sanders argues that "AI is more dangerous than nuclear weapons." Wired, meanwhile, covered the views of scientists who say "the likelihood of AI wiping out humanity with bioweapons is often lower than imagined" — analyses that push back against doom narratives are piling up as well.

Huawei: "Chinese AI Is Not Yet Strong Enough for Frontier Risks to Show"

According to Reuters, Huawei's Xu said that Chinese AI is "not yet powerful enough for cutting-edge (frontier) risks to emerge." In the US, the trend of major AI company executives themselves warning about superintelligence risk has been gaining strength, but one of China's largest players has now self-assessed as not yet reaching that level in terms of capability.

That said, this reads less as reassurance and more as a sober reading of where things stand amid the capability catch-up. In the days prior, there were also reports of tight AI chip supply and accelerated mass production of new chips surrounding the company, so how to evaluate the pace at which risks reach the "visible" stage is likely to become a focal point going forward.

SoftBank Expands Credit Line to $6.5 Billion — The Reality of "AI Debt"

According to Bloomberg, citing people familiar with the matter, SoftBank Group has added $450 million to its existing credit line, expanding it to a total of around $6.5 billion. The old facility (roughly equivalent to $6.05 billion) was set to expire at the end of this month, but the expanded version reportedly secures a one-year drawdown period. The move is seen as a response to funding needs driven by expanding AI-related investment — a report that offers a glimpse into the financing realities underpinning massive AI bets.

Software Stocks Stage a Comeback — Was the "AI Will Kill Software" Forecast Overblown?

Also according to Bloomberg, software stocks — abandoned by investors early this year on fears that "the rise of AI would destroy their business models" — are recovering. There are two triggers. First, strong earnings confirmed that software companies' growth is continuing. Second, AI industry leaders themselves have begun calling for a pause on developing the most powerful models, which was taken as a sign that the worst-case scenario for the industry has become less likely.

Mid-month, a lengthy warning from Anthropic CEO Amodei triggered a sharp selloff in AI stocks, but the market has since entered a phase of reassessing the very magnitude of the "AI threat." That said, it remains unclear whether support for a pause will hold, and whether stock prices stay settled will likely depend on what each company says going forward.

Security in the Trenches: ZCode Data Transmission Allegations and Indirect Prompt Injection via Markdown

Two stories for developers. On Reddit's r/LocalLLaMA, allegations surfaced that the coding assistant tool "ZCode" had been uploading files under users' workspaces and `.git` records to the cloud without notification. The details are based on a developer's verification blog post, so note that this remains at the "allegations" stage for now. Even so, given that agentic tools hold broad access to your local codebase, the importance of having your own means to verify what gets transmitted remains unchanged.

The other is an explainer published on Zenn that maps out an attack vector: planting invisible instructions in "plain text files" such as README.md, `.cursorrules`, and `SKILL.md`, then performing indirect prompt injection on AI agents that clone the repository and read them. Because these are neither executables nor scripts, the article says, antivirus software and EDR cannot detect them. The deeper agents embed themselves in development workflows, the more of a practical challenge it becomes to close off this "document-borne attack surface."

Japanese Benchmark Results for Jev Roll In — 87.0% on JNLI in JGLUE, and Decision Speed Differences Visualized

Jev, the "AI that doesn't write" announced by TypeSafe AI on September 14, generates no text — it only answers typed questions with probabilities attached. Following the wave of third-party verifications from overseas, hands-on testing articles from the Japanese community have now been published all at once.

First, in a Japanese benchmark verification, results were reported from JGLUE (200 questions each for JNLI / JSTS / JCommonsenseQA) plus a set of 138 "tricky Japanese" questions containing sarcasm, double negatives, dialects, and internet slang. It scored 87.0% on JNLI and 98.0% on JCommonsenseQA, with responses in 70–500ms; the pricing was also confirmed at $0.042/MTok for input with free output. As a demo that lets you feel the difference in decision speed, a comparison article was also published in which Claude Haiku 4.5 and Jev played Tetris head-to-head, with the first to clear 20 lines declared the winner. On top of that, a wrap-up article appeared that organizes the mechanism, pricing, and weaknesses based on the official announcement and three third-party verifications (Every, Good Start Labs, YTAL).

The design philosophy — building these models into software branching decisions rather than using their prose output as-is — has entered the stage of being backed up by real-world measurements. Where its weaknesses show up on tricky Japanese questions will likely serve as a deciding factor for production adoption going forward.

---

Rule-making for safety, the realities of investment, hands-on measurements in the field. On every level, the debate over "how to actually handle AI" is descending into concrete layers — that is the picture as of September 18.