The world is debating whether frontier AI needs to slow down. If it comes to it, do we know how? A lab can say it stopped training. A country can sign a treaty. But, is the compute following the rules? @attestable is building that layer. New blog! 🧵

Remotely installable, remotely verifiable, this is the verification solution the world needs. We are working hard @attestable to make it as fast and easy to deploy as possible.

A trustless solution means you shouldn't have to trust even us at @attestable. Formally proving our stack in Lean is essential, and incredibly exciting. More info to come... btw this project was finished so far ahead of schedule, @PapiniShahar is an absolute beast!

A trustless solution means you shouldn't have to trust even us at @attestable. Formally proving our stack in Lean is essential, and incredibly exciting. More info to come... btw this project was finished so far ahead of schedule, @PapiniShahar is an absolute beast!

“pointed to a cryptography tool called zero-knowledge proofs — a mathematical way of providing verification about a system without revealing more than necessary, such as proprietary details about model parameters or training data.” - Fields medalist and @OpenAI researcher nytimes.com/2026/09/08/scien…

Neoclouds have limited cybersecurity. Next time agents successfully go rouge, they'll try taking over a neocloud to run more copies. This is bad. Thus: neoclouds should greatly strengthen their cybersecurity and every company with strong cyber models should help with that.

An open letter for a global surge in cyber defense, signed by over 100 organizations including Anthropic, AWS, Google, Microsoft, OpenAI, and Oracle.

The world has identified verifiable AI as a missing civilization-scale primitive. The core technical obstacle, practical zero-knowledge proofs, was considered impossible. We solved it. Today, we are launching @attestable, the AI Integrity Company, and announcing a $20M seed round led by @jaminball at @AltimeterCap and @YonatanMandelba at @TLV_Partners , with participation from @HalcyonFutures, Cerca Partners, @Weiner_Lia at Netz, @nickymontanaa at Zero Knowledge Ventures, @assaf_rappaport, Asaf Ezra, Nadir Izrael, Jon Coller, Eyal Manor, @OmerPerchik.

Impressive work! For comparison, an H100 can do roughly 100-200 tok/s of Muse 30B for raw inference single-thread, going up to low thousands of tok/s with a large number of threads - and I am sure that for the massively-multi-threaded case they can optimize the prover further. So we roughly, sort of, have single-digit (<10x) overhead for LLM proving! Next step is getting single-digit overheads for FHE, and then ultimately vFHE (aka STARK * FHE). A crazy ambitious milestone given present FHE overheads, but because of how highly structured and almost-linear LLM inference is, it's closer to the realm of possibility than you might think. Single-digit-overhead all the things. firefly.social/post/x/208722…

RAND, 8200, StarkWare and SSI alumni raise $20 million to secure AI. @attestable is betting that zero-knowledge cryptography can provide a new way for companies and governments to verify what happens inside increasingly powerful AI systems. calcalistech.com/ctechnews/a…

We're very excited for @attestable to come out of stealth today. We @AltimeterCap co-led their seed round with @TLV_Partners, and believe they're building a crucial layer in the AI stack. It's clear two things are happening simultaneously - AI systems are making more consequential decision while their risk is going up (see Hugging Face incident). An existential questions becomes "how can you prove a model did what it was supposed to do?" Attestable is building this exact integrity and verification layer for AI, using zero-knowledge proofs to verify the right model ran on the right inputs and called the right tools. As agent workloads become longer running, verifying each step becomes even more important. The technical breakthroughs the Attestable has made to get here are incredible. Zero-knowledge proofs used to carry a 1,000,000x compute overhead, making them completely impractical for AI. The Attestable team has gotten this down many orders of magnitude, making ZK for AI something that can actually be deployed. We'll need this kind of integrity / security solution in a post-quantum world :) From securing model weights, to proving open models are backdoor-free, to giving agents verifiable identity - Attestable is building the integrity layer for an AI-powered world. As co-founder @Yogi_Brn puts it: every token should be a proven token. More below from my conversation with Yogi

At the core of our mission is working through how to ensure increasingly powerful AI benefits everyone. We believe that, at some point in the future, AI acceleration for frontier model development may be so high that the world will need to pace the rate of AI advancement. We hope to contribute to work led by the U.S. government, alongside other labs and the open-source community, to develop the tools and mechanisms that could make that possible. pacingthefrontier.com

AI security advances when the industry builds in the open, together. We're introducing the Open Secure AI Alliance with industry leaders to develop new techniques and tools to safeguard software and agents. By sharing models, tooling and research in the open, we can broaden the community of defenders. Learn more about the founding members’ contributions: nvda.ws/4pD8Fc5

I agree with the substance, if not the tone, of Bill’s tweet here. Independent verification of frontier AI company safety claims is precisely what motivated my work on private governance beginning almost two years ago, and why I continue to support such efforts.