WAPR

Worldwide AI Proliferation Registry

AI compute cannot be spoofed. It consumes power, and power leaves a public trace.

An independent, deterministic record of where AI infrastructure is, who operates it, what it draws, and what no instrument can reach. Every reading carries its error bar. No figure on this page is produced by a language model.

facilities plotteddeclared frame
Virginia sites flagged by the regulatorVA DEQ layer 294
model repositories observedHugging Face, since 2026-09-14
GW of islanded prime power announcedregister · operating shown separately
instruments reporting liveof collectors run in the last 26 h

WAPR Condition

One overall condition level, set by the fixed rules WCI-1 over the verified registers — never over raw anomaly counts. Anomaly volume is what chance looks like (protocol MV-1); scan output stops at the watchlist. Awaiting feed
0
  1. 5NOMINAL
  2. 4ATTENTION
  3. 3ELEVATED
  4. 2SEVERE
  5. 1CRITICAL
  • Awaiting data feed

Rules WCI-1 — recompute this level yourself
LevelRule — first match wins, top down
1 · CRITICALAny open L3-published finding of an uncontrolled agent, or a verified multi-channel critical event (two independent channels agreeing, per MV-1.8 and the TRACKER §0 escalation rule), ≤ 90 days old.
2 · SEVERE≥ 1 open L2 candidate on a critical claim, or ≥ 2 open L2 candidates of any kind.
3 · ELEVATED≥ 1 open L2 candidate.
4 · ATTENTION≥ 1 open L1 watchlist item, OR more than 2 panels blind — the index degrades when the instrument cannot see. Blindness is never "all clear".
5 · NOMINALNone of the above.

Ladder terms are protocol MV-1.8: L1 = watchlist (one channel at p<0.01, or a BH survivor) · L2 = candidate (two independent channels at p<0.01, in band, controls flat) · L3 = published (the full gate, registration hash cited). The registers live in the repository at data/wci/, are hand-curated with provenance, and scan output never enters them directly (MV-1.0). Watchlist deltas could at most separate level 5 from 4, and only with a null-expected count beside them (MV-1.1); no null model exists yet — the archive is too young — so today they are shown as context and move nothing.

An instrument, not a report. Panels set their own lamp from data age. A wide error bar means do not trust the number. A panel says blind rather than zero when it cannot see.

LiveDegradedBlindContested

What the readings mean

Each conclusion is a fixed rule over the numbers above, drawn only when its inputs are present, and carries its own caveat.
  1. Awaiting data feed

Latest, sourced

Titles are verbatim from the publisher. Nothing is summarised or rewritten. Every item carries its publisher and link. Tier: primary = regulator or filing · company = operator statement · trade = industry press · aggregator = Google News, publisher shown.
  1. Loading feed…
Model publicationAwaiting feed
0000repositories
quantized (deployable)
safety-stripped
merge / derivative

Quantization mechanically precedes deployment. A safety-stripped repository is a census dimension, not an accusation — abliteration is legal and published.

huggingface.co/api/models · keyless ·
Identity substrateAwaiting feed
0000sources archived
stable content
sliding field masked

OpenAI's Web Bot Auth directory recomputes exp = now + 7 days on every request. Hashing the document reports a key rotation on every fetch, always falsely. The detector hashes key material only. The 7-day window is not documented publicly.

5 operators · WBA JWKS + crawler CIDRs ·
Facility inventoryAwaiting feed
0000in declared frame
operator attributed
wikidata ID (clean join)
build date present
  • OSM coverage is uneven by region. North America and Western Europe run far denser than APAC and Latin America — a cross-region count measures mapping effort, not infrastructure.
  • Build dates are absent from OSM and must come from permits or satellite.

A declared frame, not a world total. Open the plot →

OpenStreetMap telecom=data_center · ODbL ·
Virginia — regulator-flagged sites and reported NOxAwaiting feed
0000sites flagged data centre
sites with 2024 NOx filed
NOx reported, tonnes

The regulator already tracks the fuel — as NOx. Reported tonnes are fuel burned × emission factor, filed under penalty. Year-over-year NOx at a site with no permit change is "did the generators run." The emissions table holds the current year only and overwrites itself; this record began 2026-09-14.

VA DEQ ArcGIS layers 294 / 298 / table 292 · keyless ·
Islanded prime power — announced vs. operatingRegister
0000MW announced
announced
operating
  • of the register's projects trace to a permit, filing, or transcript. Nothing publishes below that gate.
  • The "3× generator-to-grid ratio for AI campuses" is refuted — JLARC 1.0–1.25×, AWS New Carlisle and Microsoft Fairwater ~1.07×. The only ~3× cases are prime turbines at off-grid sites.
OEM 10-Qs via data.sec.gov · call transcripts · air permits
Overnight demand — Dominion VirginiaUncalibrated
+3,667MW+42.5%
weather-normalisation not applied±unquantified

Jul–Dec 2019 vs 2025. 15 of 18 other PJM sub-regions flat or negative — a built-in placebo set.

  • Not weather-normalised. 3 a.m. load on a 26 °C night exceeds a 14 °C night, and Jul–Dec 2025 was warmer in the mid-Atlantic.
  • Control pool is contaminated. AEP and DAY are both Ohio and both treated; the flattest remaining controls carry behind-meter solar and manufacturing decline, which pushes the null down and inflates the effect.
  • Two six-month windows cannot test parallel trends. Dominion was already PJM's fastest-growing zone before 2019.
  • Not yet anchored. Dominion publishes contracted data-centre load in its IRP. Until this is within ~20% of that figure, the instrument is unvalidated.
EIA-930 hourly · free API
Queue vs. reality — ERCOTLive
9,042MW approved
approved large load
9,042
observed peak
3,883

57% of approved load has never appeared. Phantom demand — the same project shopped across utilities — quantified from the operator's own figures. Grid planners cannot currently separate real from speculative.

ERCOT large-load interconnection · public
Thermal footprint — off-siteContested
0.079K ceiling at 4.5 km
  • Latent partition. A 300 MW evaporatively cooled site rejects ~120 kg/s as latent heat — no surface temperature, thermodynamically invisible to a radiometer.
  • Roof decoupling. R-30+ insulation passes 3–15 W/m², 1–2% of the 650 W/m² rejected. Most of the polygon is blind to whether the servers are on.
  • Emissivity. Cooling gear is finned aluminium, LWIR ε 0.05–0.30. It reflects cold sky; a 50 °C coil bank can read at or below adjacent asphalt — the sign is not guaranteed.
  • Systematic offset. Per-campus control mismatch is ±0.5–1.5 K and does not shrink with sample size — comparable to the whole-parcel signal.
  • ECOSTRESS on Earth Engine holds only the LA metro. A bounds filter over Ashburn returns an empty collection with no error — indistinguishable from total cloud.
  • 52°N–52°S coverage. Dublin, Amsterdam and the Nordic belt have no free night-thermal option.

Still worth measuring: within-site change over time. Differencing a site against itself cancels the offset, and the waste-heat quadrant — night-positive, day-neutral — is discriminating. The off-site claim is bounded at 0.079 K; the on-site change is not.

Landsat C2 ST_B10 · ECOSTRESS via LP DAAC
Compute capacity estimateContested
——GW · not publishable at achievable precision
MW → rack density → PUE → W/GPU → utilisation×/÷3.9 at 95%
  • Whitespace W/sq ft spans 100–600 (legacy colo to AI halls). σ(ln) = 0.545 — the single dominant term, larger than every other combined.
  • Aggregation does not rescue it. W/sq ft, PUE and utilisation are one shared assumption applied to every facility — systematic, not independent. The national total is still ×/÷3.3.
  • Floor area exists for 246 buildings in one county — ~2% of a 10,000-facility inventory. The rest is imputed from operator and metro at ×/÷5–10.
  • Attribution. Building-versus-campus assignment alone contributes σ(ln) = 0.200.

A facility estimated at 30 MW has a 95% interval of 8 to 118 MW. Published only as a screening bound with the interval attached — never as a point estimate, never without this list beside it.

error propagation · wapr-system-design · interconnection + disclosure + Nvidia denominator
Register of the unmeasurableeach row backed by an executed queryBlind by design

The most defensible output of this instrument is a precise account of what no instrument can reach. It cannot be scooped by a commercial database, because the commercial databases are part of the finding.

What is unknowableMechanismEvidence
Data centre emissions, US federalGHGRP Subpart C excludes "emergency generators and emergency equipment" from the source category, so the sector never crosses the reporting threshold. Virginia publishes CO₂e per site anyway — at state level.40 CFR 98.30(b)(2), verbatim
GHGRP NAICS 518210 → 6 facilities
all 6 are flare-gas sites (re-run 2026-09-14)
VA DEQ table 292 → CO2E present
Data centre water withdrawalNo federal category has ever existed and none is coming: USGS county compilations ended 2015, the modeled replacement (2000–2020 only) has no DC class, and municipally supplied sites are absorbed into "public supply". Exception, one region: Loudoun Water meters its data-centre class — 4.5 MGD avg / 10.9 MGD peak-day 2024, disclosed via ICPRB's five-yearly Potomac study.USGS NWIS + ScienceBase reanalysis → no DC class
ICPRB WMA study 2025 §6.2 (re-run 2026-09-14)
Per-site load, TexasAggregated by the operator's stated policy "to protect Customer data".ERCOT → zone totals only
Hyperscaler site waterOf the four hyperscalers checked, one publishes it. Owned sites only, consumption only, PDF only, layout changes annually.Google → 36 cities, 2024
AWS · Meta · MSFT → none
Discharge volumesThe operator states most sites are not metered for it.Microsoft, in writing
Runaway agent behaviourAccount-scoped by construction. No cross-account read path exists at any price.AWS docs, verbatim:
"same account and Region"
Self-directed AI loose on the webNo confirmed public case; no scanner would find one. A capable system trying not to be found would not leave a homepage.Palisade: 24,111,509 → 3