This doesn't end well. It's censorship on the user's machine. There will have to be multiple versions for different markets.
- MAGA (US red states)
- Woke (US blue states)
- Xi Thought (China)
- Monarchy criticism lockout (Thailand)
- Promotion of the gay lifestyle lockout (Russia)
Think SSH keys, not DRM. SSH lets you verify you're talking to the right server without restricting which servers exist. Similarly, VC lets you verify properties of AI models (like training data lineage or inference characteristics) without restricting which models can run.
The regional censorship concern isn't relevant here since VC doesn't enable content restriction. It's a mathematical verification tool, not an enforcement mechanism.
> It's a mathematical verification tool, not an enforcement mechanism.
enforcement comes from the rubber hose. The maths is what makes the enforcement possible.
Unless you are able to prevent attestations from being made with your machine (presumably against your will).
This is true. But this is an ability of the hardware owners. Intel and NVIDIA are not setting the rules - and there is a real commitment to that because its open source.
It's also confidential. Data, code, rules, ... all of these are processed together in secure enclaves. It's up to the hardware owner/users to determine that processing and to stamp/verify what they want.
"How can we ensure that the system enforces the rules that I want"