Tim Fist

or using it for things that we've agreed not to do.

Like let's say we've agreed to a slowdown and we're not going to train like the next big model.

And so fundamentally, you're trying to verify things about like how these chips are being used.

And I think it's worth sort of talking a little bit more about what makes this possible, which is the fact that this is just such a concentrated supply chain.

So if you look at these chips, and Janet mentioned some of the features that are already on them, but the reason why it's possible to intervene on this supply chain this way is like something like 90%,

of the world's AI chips are made by one company, which is Nvidia.

So they're designed by Nvidia.

90% of those are manufactured by one company, which is TSMC.

So they like manufacture the chips at sort of a fab or like a fabrication plant.

And then, you know, around 70% of those chips, when they're sent out into the world and are actually being used, are used by big US cloud computing providers like AWS, Microsoft, and Google.

So we have this kind of hyper-concentrated supply chain

where you only need to coordinate among a few actors to, let's say, propagate design changes to chips throughout the ecosystem or sort of get visibility over where the chips are or ensure sort of like the chips are all being used according to like a common set of rules.

And yeah, there's like a couple of technologies today, as you mentioned, that makes all this possible.

One is just cryptography, which is a very widely used kind of technology.

So you can kind of say, hey, I have a piece of secret data

that I want to reveal to you.

I don't want to reveal it directly, but it contains the sensitive information that I want to prove to you.

So let's say this is like a log of how you're using your chips over a given time period, and you don't want to reveal this data directly as it might contain sensitive IP that you don't want to reveal to an adversary, but you can share a fingerprint of that data publicly.

where the fingerprint only ever corresponds to your private data being this log of how you use the chips.

And so in that way, you can kind of like have a secret, use cryptography to prove it.