Communication between compute groups is bounded
On this page
Mechanisms
- Caps or removes communication between declared groups of accelerators 1 2.
- Bounds the capacity of physical covert channels out of an enclosure, so that monitored links carry all significant traffic.
- Bounds effective unexplained output bandwidth rather than raw link bandwidth.
- R2Tamper evidence for verifier devicessupportingProtects network devices that enforce or monitor bandwidth boundaries 12.
- Interlocks on NVLink or NICs, and RAND's fixed-set pods, would bound communication 2 5.
Implementations
- Assessed use: showing that retrofitted data centres run only inferenceRemoving back-end networking limits communication between inference units.
- Assessed use: the operator's own weight security, with no outside verification describedPhysically isolated realms communicate only through one-way data diodes in a fixed topology 1; no external check of that boundary is described.