Jan 19, 2025

Enhancing human intelligence with neurofeedback

Thomas Rialan, Nicole Dobreva, Anthony Kirilov

Build brain-computer interfaces that enhance focus and rationality, provide this preferentially to AI alignment researchers to bridge the gap between capabilities and alignment research progress.

Reviewer's Comments

Reviewer's Comments

Arrow
Arrow
Arrow

Interesting application of BCI! Curious about why you chose to focus on fNIRS in particular - the line of reasoning for this does not seem to be convincingly developed in your write-up. Given its effectiveness as a feedback modality is still a matter of debate due to its low spatial resolution and inconsistent signal quality amongst other concerns, it would be interesting to compare to alternative approaches (EEG/TMS/ECoG etc). It would also be valuable to think through the current competitive landscape in the space a bit more thoroughly, along with methodology both in terms of technical implementation and go-to-market strategy.

The idea for the underlying is interesting, but also wasnt developed during the last weekend, and there is no demo/simulation. Would also somehow question if the "fooling oneself" is that much of an issue for researchers. I would imagine that this tech would be used for many other things, before being useful for detecting whether researchers are fooling themselves -> Please prove me wrong, I would love to have this not be the case. More straight forward path would probably to do BCI work in order to to come up with new mech interp approaches, but maybe this will become a byproduct further down the line. Obviously big dual use risk here.

I think trying to give a BCI product to AI Safety researcher is unlikely to make ai safety researchers much smarter than the rest, and don't see it scaling faster than other general BCIs. Lacks empirical exploration.

Cite this work

@misc {

title={

Enhancing human intelligence with neurofeedback

},

author={

Thomas Rialan, Nicole Dobreva, Anthony Kirilov

},

date={

1/19/25

},

organization={Apart Research},

note={Research submission to the research sprint hosted by Apart.},

howpublished={https://apartresearch.com}

}

Recent Projects

Feb 2, 2026

Markov Chain Lock Watermarking: Provably Secure Authentication for LLM Outputs

We present Markov Chain Lock (MCL) watermarking, a cryptographically secure framework for authenticating LLM outputs. MCL constrains token generation to follow a secret Markov chain over SHA-256 vocabulary partitions. Using doubly stochastic transition matrices, we prove four theoretical guarantees: (1) exponentially decaying false positive rates via Hoeffding bounds, (2) graceful degradation under adversarial modification with closed-form expected scores, (3) information-theoretic security without key access, and (4) bounded quality loss via KL divergence. Experiments on 173 Wikipedia prompts using Llama-3.2-3B demonstrate that the optimal 7-state soft cycle configuration achieves 100\% detection, 0\% FPR, and perplexity 4.20. Robustness testing confirms detection above 96\% even with 30\% word replacement. The framework enables $O(n)$ model-free detection, addressing EU AI Act Article 50 requirements. Code available at \url{https://github.com/ChenghengLi/MCLW}

Read More

Feb 2, 2026

Prototyping an Embedded Off-Switch for AI Compute

This project prototypes an embedded off-switch for AI accelerators. The security block requires periodic cryptographic authorization to operate: the chip generates a nonce, an external authority signs it, and the chip verifies the signature before granting time-limited permission. Without valid authorization, outputs are gated to zero. The design was implemented in HardCaml and validated in simulation.

Read More

Feb 2, 2026

Fingerprinting All AI Cluster I/O Without Mutually Trusted Processors

We design and simulate a "border patrol" device for generating cryptographic evidence of data traffic entering and leaving an AI cluster, while eliminating the specific analog and steganographic side-channels that post-hoc verification can not close. The device eliminates the need for any mutually trusted logic, while still meeting the security needs of the prover and verifier.

Read More

Feb 2, 2026

Markov Chain Lock Watermarking: Provably Secure Authentication for LLM Outputs

We present Markov Chain Lock (MCL) watermarking, a cryptographically secure framework for authenticating LLM outputs. MCL constrains token generation to follow a secret Markov chain over SHA-256 vocabulary partitions. Using doubly stochastic transition matrices, we prove four theoretical guarantees: (1) exponentially decaying false positive rates via Hoeffding bounds, (2) graceful degradation under adversarial modification with closed-form expected scores, (3) information-theoretic security without key access, and (4) bounded quality loss via KL divergence. Experiments on 173 Wikipedia prompts using Llama-3.2-3B demonstrate that the optimal 7-state soft cycle configuration achieves 100\% detection, 0\% FPR, and perplexity 4.20. Robustness testing confirms detection above 96\% even with 30\% word replacement. The framework enables $O(n)$ model-free detection, addressing EU AI Act Article 50 requirements. Code available at \url{https://github.com/ChenghengLi/MCLW}

Read More

Feb 2, 2026

Prototyping an Embedded Off-Switch for AI Compute

This project prototypes an embedded off-switch for AI accelerators. The security block requires periodic cryptographic authorization to operate: the chip generates a nonce, an external authority signs it, and the chip verifies the signature before granting time-limited permission. Without valid authorization, outputs are gated to zero. The design was implemented in HardCaml and validated in simulation.

Read More

This work was done during one weekend by research workshop participants and does not represent the work of Apart Research.
This work was done during one weekend by research workshop participants and does not represent the work of Apart Research.