标题： 灵活硬件支持的保证的技术选项 显示英文标题

标题： Technical Options for Flexible Hardware-Enabled Guarantees

摘要： 前沿人工智能模型对公共安全和国际安全构成日益增大的风险，迫切需要人工智能开发者在不泄露专有信息的情况下，对其开发活动提供可信的保证。 我们提出了灵活硬件支持的保证机制（flexHEG），这是一个与人工智能加速器硬件集成的系统，能够验证人工智能开发中的计算使用情况。 flexHEG 系统主要包括两个主要组件：可审计的保证处理器，用于监控加速器的使用并验证是否符合指定规则；以及安全外壳，提供物理防篡改保护。 在三部分系列的第二份报告中，我们分析了从固件修改到定制硬件方法的各种技术实现选项，重点是一种“联锁”设计，该设计为保证处理器提供了直接访问加速器数据路径的能力。 我们提出的架构可以支持各种类型的保证，从基本的使用审计到复杂的自动化验证。 这项工作为基于硬件的人工智能治理机制奠定了技术基础，这些机制可以解决前沿人工智能开发中出现的监管和国际安全需求。 显示英文摘要

摘要： Frontier AI models pose increasing risks to public safety and international security, creating a pressing need for AI developers to provide credible guarantees about their development activities without compromising proprietary information. We propose Flexible Hardware-Enabled Guarantees (flexHEG), a system integrated with AI accelerator hardware to enable verifiable claims about compute usage in AI development. The flexHEG system consists of two primary components: an auditable Guarantee Processor that monitors accelerator usage and verifies compliance with specified rules, and a Secure Enclosure that provides physical tamper protection. In this second report of a three part series, we analyze technical implementation options ranging from firmware modifications to custom hardware approaches, with focus on an "Interlock" design that provides the Guarantee Processor direct access to accelerator data paths. Our proposed architecture could support various guarantee types, from basic usage auditing to sophisticated automated verification. This work establishes technical foundations for hardware-based AI governance mechanisms that could address emerging regulatory and international security needs in frontier AI development.