01 / The mechanism and its boundary
What is being described
Researchers in the University of Cambridge's Department of Computer Science and Technology developed Attestable Audits, protocols for binding AI safety benchmark results and later inference to the same model S-0009:
- The Attestable Audits paper runs AI safety benchmarks inside a trusted execution environment and publishes an attestation that binds the model hash, the audit code and data, and the result to a transparency log S-0009; see Attestable Audits and Confidential multi-party verification.
- In the paper's inference protocol, each response carries an attestation that links the model, its earlier audit result, the prompt and the response S-0009; see Safeguard attestation and Model identity attestation.
- A prototype ran a 4-bit, 8-billion-parameter model in CPU-only AWS Nitro Enclaves S-0009; see TEE remote attestation for AI workloads.
Connections in the research map
Related research
Sources and provenance
- S-0009 / Tier B
Attestable Audits: Verifiable AI Safety Benchmarks Using Trusted Execution Environments ↗
C. Schnabl, D. Hugenroth, B. Marino, A. R. Beresford · 2025 · ICML 2025 Workshop on Technical AI Governance
Supports: Attestable Audits: author affiliations, audit and inference protocols, prototype
Version and catalogue details
- Source review date
- 2026-10-08
- Drafted by (source map)
- ai
- Review handles (source map)
- codex-review