Tristan Harris

So just even right here, if there is some agreement that we're going to do entropic set, we're going to do a pause of some kind,

you would theoretically be able to know is anyone training any AI anywhere in the world if all of the chips were activated to use this feature on the chip versus is everybody just using the chips that they have to run the existing AI model.

So you're saying right now the chips that are shipping in the world have that capacity?

I see.

So it's not on the chip.

It's if the person who's running it wanted to run this thing, then they could, and that could be feeding into some kind of structure.

Tim, what are your thoughts on this?

So the basic fact here is that if I'm US or China, I don't want to tell my adversary exactly what I'm doing, but I do want to give them the kind of confidence and trust that I'm not doing the thing I said I wouldn't do in the agreement.

And so you're saying there's a way that I can keep some of the data of what I'm doing private, but then have a cryptographically

verified way that both parties know that the other is not doing the bad thing without revealing the stuff they are doing.

Yeah, that's right.

So it seems like there's two things here that I want to raise.

So one is you just mentioned that part of the reason why any of this would be possible is because of technically kind of a problem too, which is a massive concentration of power that there happens to be essentially a hand

And so can you talk a little bit about

What are the things that we need to know about all the compute in the world?

And do we have the mechanisms to know that or know enough of it that this scheme would work at all?

Janet or Tim, do you want to jump in that?

Essentially, we're building up the stack of what are the different mechanisms at each level that we would need to have some kind of verification.

So one is monitoring the supply of compute.

One second is knowing where all the data centers are.