Workload Identification with Physical Side Channels for AI Governance
It is shown that an external observer can identify the class of the workload running on an NVIDIA H200 from its power draw, and adversarial traces are recorded, offering initial insights beyond genuine activities and a dataset for developing and testing stronger evasion mechanisms.