1. What concern does the "compute governance" approach raise regarding global equity in AI development?
Correct. Compute governance is simultaneously a potentially effective AI safety mechanism and a mechanism that reinforces AI inequality — concentrating capability in wealthy Western nations and delegating significant power to Nvidia and the BIS.
The equity concern is that compute governance concentrates frontier AI in wealthy Western countries and effectively gives a commercial firm (Nvidia) and a regulatory agency (BIS) joint control over who globally can develop transformative AI systems.
2. What three fundamental requirements of traditional arms control do AI weapons fail to satisfy?
Correct. AI weapons lack a consensus definition (where does autonomy begin?), a verification mechanism (software is invisible to inspectors), and concentrated technology (commercial AI hardware is globally available).
Arms control requires: a clear prohibited item definition, verification capability, and limited state possession of the technology. AI weapons satisfy none of these — the definition is contested, software is invisible to inspectors, and the underlying technology is commercially available worldwide.
3. Which executive order specifically established requirements for AI systems with national security implications including red-teaming and reporting requirements?
Correct. The October 2023 Executive Order on Safe, Secure, and Trustworthy AI added mandatory red-teaming and reporting requirements for AI systems with potential national security implications.
Incorrect. The October 2023 EO on Safe, Secure, and Trustworthy AI established the AI-specific requirements including mandatory red-teaming, reporting requirements, and CISA coordination for critical infrastructure AI.
4. DoD Directive 3000.09, first issued in 2012, requires what regarding autonomous weapons?
Correct. The directive requires "appropriate levels of human judgment" — deliberately ambiguous language that critics note lacks operational precision, particularly for high-speed engagements.
Directive 3000.09 requires "appropriate levels of human judgment over the use of force" — but contains a national-security waiver and does not precisely define what "appropriate" means operationally.
5. What characteristic of the 1963 Limited Test Ban Treaty made it achievable before comprehensive verification was possible, and what is its direct AI analogy?
Correct. Ban what you can detect. Atmospheric tests produce seismic signals and radiation detectable by external sensors. The AI analogy is banning behaviors with external signatures — compute-intensive training runs or AI signals in nuclear command communications.
The LTBT's key feature was restricting a verifiable behavior rather than requiring intrusive inspection. "Ban what you can detect" is the strategic principle — applied to AI, it means targeting behaviors with observable signatures rather than attempting to verify internal capabilities.
6. What is the core logic of on-chip monitoring hardware as proposed for compute governance?
Correct. The proposal is for non-intrusive monitoring: report compute volume to a registry without exposing what is being computed — privacy-preserving verification analogous to nuclear material accounting.
On-chip monitoring would log usage statistics and report to a neutral registry without revealing computation content — a privacy-preserving approach that parallels IAEA material accounting for nuclear fuel.
7. What organization's work on Xinjiang detention facilities is considered a landmark case of open-source AI-assisted GEOINT producing policy-relevant intelligence?
Correct. ASPI researchers used Planet Labs commercial imagery and AI change detection to identify over 380 suspected detention facilities, producing work that influenced diplomatic responses from multiple governments.
Incorrect. ASPI — the Australian Strategic Policy Institute — conducted the Xinjiang satellite imagery analysis using Planet Labs commercial imagery and AI-assisted change detection. The work influenced US, UK, and EU diplomatic responses.
8. Operation Secondary Infektion was attributed to Russia primarily through which analytical method?
Correct. The DFRLab and EU DisinfoLab attribution relied on computational linguistics — Russian-language errors embedded in English content — and technical infrastructure overlaps with known GRU-linked operations. This demonstrates how linguistic forensics and infrastructure analysis can support attribution even without direct access to intelligence sources.
Incorrect. The attribution in the 2019 DFRLab/EU DisinfoLab report relied on linguistic forensics (Russian-language typos in English posts revealing native Russian authorship) and infrastructure overlaps with known GRU accounts — techniques available to open-source researchers without classified access.
9. What specific concern about AI systems in critical infrastructure does CISA's requirement for "manual override capability" address?
Correct. Manual override requirements address the core safety concern: AI managing critical systems can be compromised, miscalibrated, or manipulated — humans must retain the ability to override automated decisions in high-consequence environments.
Incorrect. Manual override requirements directly address the safety concern that AI managing critical infrastructure can be compromised (through data poisoning or direct attack), making human override capability an essential safeguard.
10. Darktrace's "Enterprise Immune System" detected a novel ransomware variant in how many seconds before blocking its lateral movement autonomously?
Correct. Darktrace's published case study described detection within 8 seconds of the novel ransomware beginning lateral movement, with autonomous blocking before encryption could begin.
Incorrect. Darktrace documented detection within 8 seconds and autonomous blocking before encryption began — illustrating the speed advantage of AI-driven automated response.
11. The October 2022 BIS export controls were updated in October 2023 primarily to:
Correct. The 2023 update specifically targeted the A800/H800 chips Nvidia had designed to nominally comply with the original thresholds.
The 2023 update closed the A800/H800 workaround that Nvidia had created to nominally comply with the original performance thresholds.
12. The CHIPS and Science Act (2022) included what "guardrail" provision?
Correct. The ten-year guardrail provision was designed to ensure CHIPS Act subsidies did not simultaneously benefit China's semiconductor industry.
The guardrail specifically prohibits expanding advanced chip capacity in China for ten years — ensuring US subsidies don't flow back to Chinese semiconductor development.
13. Why does the inference problem undermine compute governance as a comprehensive arms control strategy?
Correct. Compute controls can only constrain future training. Any system trained before controls take effect can be run indefinitely on inexpensive hardware — making compute governance a partial rather than comprehensive solution.
The temporal gap is the problem: training is compute-intensive and monitorable; inference is cheap and already distributed. China's pre-2022 compute stockpiles illustrate how this limits any future control regime.
14. What was the estimated monthly spending of the Internet Research Agency (IRA) at peak operations, as documented in the Mueller Report?
Correct. Mueller Report Volume I documented IRA spending exceeding $1.25 million per month at peak — establishing that this was a well-resourced professional operation, not an ad hoc effort.
Incorrect. The Mueller Report documented peak monthly spending exceeding $1.25 million, indicating a substantial, professional, state-linked operation with significant resources dedicated to the influence campaign.
15. The Iran-to-Russia Shahed drone transfer created what significant infrastructure development on Russian territory?
Correct. The Alabuga joint production facility, confirmed by US intelligence in 2023, represents a significant deepening of Iran-Russia defense-industrial cooperation enabled by the drone program.
US intelligence confirmed a joint Shahed production facility at Alabuga, Russia in 2023 — representing a significant deepening of Iran-Russia defense cooperation and enabling Russia to produce the drones domestically rather than relying solely on Iranian exports.
16. What did Steven Feldstein's Carnegie Endowment research document about AI surveillance adoption and authoritarianism?
Correct. The correlation exists but the causal question is unresolved — authoritarian governments may self-select Chinese systems rather than Chinese systems causing authoritarianism.
The research found a statistical association between Chinese AI surveillance adoption and authoritarian governance indicators, but the causal direction — does the technology cause authoritarianism or do authoritarian governments prefer Chinese systems? — remains contested.
17. DARPA's 2019 AlphaDogfight AI defeated experienced human F-16 pilots 5-0. What is the primary arms control implication of this result?
Correct. Machine-speed engagement means conflicts involving autonomous systems could progress faster than any human-in-the-loop arms control architecture can respond to.
The key implication is temporal: arms control assumes human reaction times. AI agents operating 8x faster than humans eliminate the decision windows that crisis communication protocols depend on.
18. The 1972 Incidents at Sea Agreement is cited as a model for AI confidence-building measures. What made it effective despite containing no limits on fleet size?
Correct. Behavioral rules for dangerous interactions reduced accident risk without requiring capability limits or verification — directly analogous to proposed AI incident-reporting channels and autonomous system notification agreements.
The INCSEA Agreement worked through behavioral rules and communication, not capability limits. This is the CBM model: reduce the risk of dangerous encounters without either side conceding strategic position.
19. What controversy surrounded Iran's use of AI surveillance technology during the 2022 Mahsa Amini protests?
Correct. Amnesty International documented Iranian security forces using Chinese AI facial recognition — from suppliers like Hikvision and Huawei infrastructure — to identify and arrest Mahsa Amini protesters.
Amnesty International documented the use of Chinese AI facial recognition technology (Hikvision cameras, Huawei network infrastructure) to identify and arrest protesters following the Mahsa Amini demonstrations.
20. What was revealed when engineers performed teardowns of the Huawei Mate 60 Pro in 2023?
Correct. The teardown confirmed 7nm fabrication by SMIC — possible through multi-patterning techniques without EUV, but with lower yields and higher cost than TSMC's EUV-enabled process.
Teardowns confirmed 7nm fabrication by SMIC — achieved through multi-patterning DUV lithography rather than EUV, with inferior yields, but demonstrating that EUV restriction had not totally contained Chinese chip progress.