如何管控GPU：国际人工智能协议的验证与执行机制分类法
How to Catch a GPU: A Taxonomy of Verification and Enforcement Mechanisms for International AI Agreements
浏览论文内容
中文总结 AI 辅助
针对国际人工智能协议缺乏评估其可执行性等结构化方法的问题，提出基于能力须处控制机制的分类法，定义执行断点并引入评估因素，揭示现有提议重点及差距，助研究人员和政策制定者明确工作优先级。
中文摘要 AI 辅助
为应对灾难性风险，已提出多项国际协议来规范前沿人工智能发展。然而，尚无结构化方法来评估这些提议是否可执行、评估其在实践中可能失败的地方，或确定哪种政策组合最有效。我们基于这样的原则提出一种分类法：只要存在足够违反协议的能力，就必须处于控制机制之下。这将确保协议合规的问题分解为防止无控制的资源获取、检测控制机制之外的所有能力以及防止逃离控制机制。现有提议由解决一个或多个这些子问题的个别政策组成。由于危险能力所需的计算可能随时间减少，更多行为者可能违反协议，这些政策的执行变得更加困难。我们将执行断点定义为政策在解决子问题时失去效力的FLOP阈值或等效指标，并引入一组因素来评估这种失效如何以及为何发生。这揭示了任何给定提议充分解决的三个子问题中的哪一个，以及可执行性首先在何处失效。将这种分类法应用于现有提议表明，更多关注放在防止逃离控制机制上，而防止资源获取和检测控制机制之外的所有能力受到的关注较少。通过明确这些差距，这种分类法可帮助研究人员和政策制定者确定未来执行和验证工作的优先级。
英文摘要
Several international agreements have been proposed to regulate frontier AI development in response to catastrophic risks. However, there is no structured way to evaluate whether these proposals are enforceable, to assess where they might fail in practice, or to determine which combination of policies is most effective. We propose a taxonomy based on the principle that wherever sufficient capacity exists to violate an agreement, it must be under a control regime. This decomposes the problem of ensuring compliance with the agreement into preventing uncontrolled resource acquisition, detecting all capacity outside the control regime, and preventing escape from the control regime. Existing proposals consist of individual policies that address one or more of these sub-problems. Because the compute required for dangerous capabilities may decrease over time, more actors can violate an agreement and enforcement of these policies becomes harder. We define the enforcement breaking point as the FLOP-threshold or equivalent metric at which a policy loses its effectiveness in solving the sub-problem, and introduce a set of factors to assess how and why this breakdown occurs. This reveals which of the three sub-problems any given proposal adequately addresses, and where enforceability breaks down first. Applying this taxonomy to existing proposals reveals that more focus is placed on preventing escape from the control regime, while preventing resource acquisition and detecting all capacity outside the control regime receive less attention. By making these gaps explicit, this taxonomy can help researchers and policymakers prioritize future enforcement and verification efforts.
