水下数据中心是否会对AI条约核查构成风险？
Could Underwater Data Centers Pose a Risk to AI Treaty Verification?
AI总结：
本研究评估水下数据中心作为AI训练规避途径的可行性，发现其虽可建造但受互连和维护制约，且热探测受限，声学及光学/SAR监视在特定阶段有效，总体风险较低但非零。
AI中文摘要：
限制前沿人工智能发展的国际协议提案依赖于核查机制，而核心挑战在于检测用于规避限制的未申报计算设施。水下数据中心（UDCs）已被提议作为此类规避途径之一，但其在前沿规模下的可行性及其可探测性尚未得到认真评估。我们考察了当前水下数据中心的部署情况，评估了相对于陆基设施的建造和维护复杂性，并分析了在水下进行10万块H100等效芯片训练运行的可行性。我们发现，电力输送和冷却是可处理的，但互连以及大型训练运行所需的手动维护是严重障碍——只有资源充足的国家行为体才能克服，且需接受巨大的成本和进度惩罚，并且仅在以隐蔽而非效率为目标的情况下可行。随后，我们通过热学、声学、光学和合成孔径雷达（SAR）监视评估了可探测性。对运行中吊舱的热探测在浅水、平静水域之外不太可能实现；声学探测效果略好，但在归因方面面临限制；而光学/SAR监视在建造和维护期间最为有效，此时压力容器制造基地和电缆铺设船队为AIS跟踪提供了独特特征。我们得出结论，相对于地下或工业伪装的陆基设施，水下数据中心是一种相对不太可能的规避途径，但残余风险并非为零，值得将所讨论的探测模式付诸实施。
英文摘要：
Proposals for international agreements that limit frontier AI development depend on verification, and a central challenge is detecting undeclared compute facilities used to evade restrictions. Underwater data centers (UDCs) have been suggested as one such evasion vector, but their feasibility at frontier scale and their detectability have not been seriously assessed. We examine current UDC deployments, evaluate construction and maintenance complexity relative to land-based facilities, and analyse the feasibility of a 100,000 H100-equivalent training run underwater. We find that power delivery and cooling are tractable, but interconnect and the hands-on maintenance that large training runs require are severe obstacles - surmountable only by a well-resourced state actor accepting large cost and schedule penalties, and only where concealment, rather than efficiency, is the objective. We then assess detectability through thermal, acoustic, optical and synthetic-aperture-radar (SAR) surveillance. Thermal detection of an operational pod is unlikely outside shallow, calm water; acoustic detection is marginally more effective, but faces limitations in attribution; and optical/SAR monitoring is most powerful during construction and maintenance, when the pressure-vessel fabrication base and the cable-laying fleet create distinctive signatures for AIS-tracking. We conclude that UDCs are a comparatively unlikely evasion route relative to underground or industrially disguised land-based facilities, but the residual risk is non-zero and warrants operationalising the detection modalities discussed.
