Search papers, labs, and topics across Lattice.
This paper introduces a set of microarchitecture knobs designed to dynamically throttle AI performance by controlling hardware resources at runtime, addressing the need for robust safety mechanisms in increasingly capable AI systems. The authors evaluate various candidate knobs related to GPU memory subsystems, ultimately identifying four effective parameters: L2 size, L2 latency, L2 bandwidth, and shared memory port access rate. The proposed mechanisms demonstrate significant performance sensitivity, achieving up to an 80% reduction in performance with minimal implementation costs and fast stabilization times, while also allowing for synergistic effects when multiple knobs are used together.
Dynamic throttling of AI performance can be achieved with minimal hardware changes, enabling unprecedented control over AI intent in critical systems.
As more capable AI models are increasingly integrated into critical computer systems, the lack of control over AI intent motivates safety mechanisms. Existing software safeguards impose only behavioral constraints that can potentially be bypassed by sufficiently intelligent models. While hardware-level safety enforcement has been recognized as an essential last line of defense, few mechanisms have been proposed beyond policy regulations on unauthorized accesses or coarse full-chip shutdown. What is missing is a fine-grained, dynamic intervention mechanism at the architecture level. In this paper, we introduce a set of microarchitecture knobs which dynamically control the available hardware resources to limit AI performance at runtime. We evaluate candidate knobs spanning the GPU memory subsystem, across capacity, bandwidth, latency and frequency dimensions, and narrow down to four strong candidates: L2 size, L2 latency, L2 bandwidth, and shared memory port access rate. To minimize new logic and extra design cost, we build all four mechanisms from well-established microarchitectural primitives: cache way masking, credit-based rate limiting, latency insertion, and bank arbitration. We show that these knobs achieve high performance sensitivity (up to 80% performance cut at 1/8 resource availability), negligible implementation cost (<~10K flip flops), fast stabilization after dynamic throttling (5-80K cycles), and minimal collateral impact on the rest of the chip. Further, multi-knob analysis reveals combinations of knobs that amplify the performance degradation beyond the effect of each knob individually, which enables a broader range of performance targets.
