Abstract
This disclosure describes SI KYC, a continuous verification function for AI systems in which "KYC" means Know Your Compute and Know Your Client. Know Your Compute establishes that the hardware an AI system runs on, or draws work from, is genuine, of its declared class, in its declared location and with its declared parts. Know Your Client establishes that the compute from which a request reaches the AI system, such as a person's device or a calling agent, is attested and acts for an accountable principal. Verification is not performed once at start-up only: it is repeated at every session, at every renewal of a lease or mandate, on any significant change, at declared intervals and on risk events, and each result carries an expiry. The strength and freshness of evidence required are scaled to the capability being requested, so that a read-only answer needs little while an action in the world, access to sensitive data or large-scale computing needs fresh hardware attestation and a verified principal. The compute environment is fingerprinted from attested measurements, and drift, such as relocation, changed parts, pooling of many devices, implausible timing or a sudden change in workload, is detected and answered in grades, from a further check, to a reduced tier, to refusal. When agents call other agents, every link of the chain must present attested compute and a delegation from the link before it, within declared limits on depth and fan-out, back to an accountable person; a broken or unattested link stops the chain. KYC results feed other safeguards: a failed or anomalous result can suspend a compute lease, mark hardware as possibly stolen or diverted, or send a signed report to a quarantine network. Personal data is never held by the AI system or the registry: identity is proven through references to records kept by accredited verifiers, with only the attributes needed disclosed, and with identifiers that differ between services so that a person cannot be tracked across them. Results may be appealed, and every check is signed and recorded.
Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 License.
Recommended Citation
Wang, Edward D. H., "SI KYC™: Know Your Compute and Know Your Client for AI Systems, Verified Continuously rather than Once, with Evidence Scaled to the Capability Requested, Drift in Compute Detected and Answered in Grades, Every Link of an Agent Chain Attested back to an Accountable Person, Results Feeding Compute Leases and Quarantine, and Personal Data Never Held", Technical Disclosure Commons, ()
https://www.tdcommons.org/dpubs_series/12647