On 19 October 2026 three researchers posted an arXiv preprint on detecting AI training from a data center's power use without trusting its operator. They are Tom Kimpson of the University of Melbourne and the Machine Alignment, Transparency & Security (MATS) program, Mauricio Baker of the University of Oxford and Emlyn Graham of MATS. In their simulations, a verifier owns a tamper-evident meter at a rack or facility power input and looks for training hidden in a declared inference workload.[1]

Synchronous training, in which each step waits for the slowest chip, alternates high-power computing with lower-power data exchange about once a second. The authors' Viterbi tracker, an algorithm that traces a changing frequency through noisy data, follows this drifting rhythm. When the operator did not hide training, the tracker detected it in at least 96% of simulated five-minute traces at a 1% false-alarm rate, they report. These results required a meter sampling at least twice a second; at once a second, detection fell to 33%.[1]

Of eight simulated hiding strategies, such as random pauses, the authors say only extreme random variation in the work per step evades the tracker. Its strongest form hid training in up to 73% of five-minute windows, yet a test that accumulates evidence flagged 87% of such runs within a day, at a 0.1% false-alarm rate per run. The strategy leaves processing speed unchanged, they say, but training a 30-million-parameter model with it on one A100 graphics processing unit (GPU) took 93% to 267% more compute to reach the same loss, the error that training reduces.[1]

The authors call the synthetic traces their primary limitation: the training-power model they adopt could not be tested quantitatively, because facility-scale measurements are proprietary. Their planned study of real multi-GPU runs needs equipment that is not currently available. They write that a detection establishes only a persistent, training-shaped rhythm, which permitted fine-tuning and some other periodic loads can also produce.[1]

Sources

  1. Detecting AI Training in Datacentre PowerarXiv (Tom Kimpson, Mauricio Baker and Emlyn Graham) · 19 Oct 2026

Check or correct this page

Correct
Request a correction · Edit the source on GitHub · Corrections policy
Verification record

The digest below shows whether the text you are reading matches the published source. It does not show that the reporting is correct. The build computes it from this page's Markdown source and lists it in the site manifest.

cccfdd67f7fca87824fc94602b5f0af0e4ae7eef96f39bb6f023ba48fbd547a3

View source · Manifest