Release 2026.08 · 11 active records
Mechanism-centric reviews of location checks, operating licenses, workload verification, attestation, and the institutional conclusions attached to them.
Full mechanism reviews, including source caveats, trust registers, and tests that would change the assessment.
Control · Proposed
Workload · Research agenda
Sort by the properties of the claim. No composite badness score is maintained at this time.
Maturity: Proposed · Reviewed 2026-08-22
Distribute thousands of dead-man switches through critical accelerator logic, each requiring fresh cryptographic licenses and halting its local operations when its usage allowance reaches zero.
Replaces one remotely governed kill switch with a small on-die civilization of them, each waiting for permission to add.
Maturity: Research agenda · Reviewed 2026-08-22
Log every prompt, output, seed, model release, and code version, then have an isolated trusted server re-run a random sample to detect model weights hidden steganographically in responses.
Secures a compromised inference stack with an honest twin, a perfect diary, trusted randomness, and a strict rule that stolen weights may leave only through the chat window.
Maturity: Research agenda · Reviewed 2026-08-22
Estimate where an accelerator lives by timing cryptographic challenges between the chip and trusted landmark servers.
The smuggled object is invited to participate in the investigation of where the smuggled object is.
Maturity: Proposed · Reviewed 2026-08-22
Require a periodically renewed operating license before a data-centre AI chip is allowed to function.
Turns the accelerator into enterprise software, then gives the license server a foreign-policy portfolio.
Maturity: Proposed · Reviewed 2026-08-22
Hard-code a fixed set of chips that may communicate with one another at high bandwidth.
A cluster topology, a supply chain, and international order are all frozen into one tasteful whitelist.
Maturity: Proposed · Reviewed 2026-08-22
A hardened module checks that firmware and policy are current, blocking operation when they are not.
A security update mechanism is promoted to constitutional law, with uptime determined by successful compliance.
Maturity: Speculative · Reviewed 2026-08-22
Meter computation on-chip so regulated training runs can be identified and reported against thresholds.
Counts the arithmetic with great ceremony while capability, efficiency, fine-tuning, and distributed work move around it.
Maturity: Research agenda · Reviewed 2026-08-22
Verify properties of training or inference workloads from inside trusted hardware while preserving data and model secrecy.
The verifier learns just enough to be confident, while trusting a stack large enough to contain several conferences.
Maturity: Speculative · Reviewed 2026-08-22
Use cryptographic proof-of-training so a verifier can establish that a declared training computation occurred.
A proof of execution begins a rewarding second career as a proof of intent, provenance, and safety.
Maturity: Research agenda · Reviewed 2026-08-22
Add flexible hardware guarantees that can meter compute, enforce limits, gate deployment, and automate safety protocols.
The chip becomes auditor, regulator, border officer, safety case, and—if there is room left—matrix multiplier.
Maturity: Deployed-ish · Reviewed 2026-08-22
Use CPU and GPU trusted environments to issue hardware-rooted certificates for AI processes throughout runtime.
The certificate is tamperproof. The platform, verifier, policy, firmware, operator, and meaning of ‘compliant’ remain available separately.