WAPR

Worldwide AI Proliferation Registry

AI compute cannot be spoofed. It consumes power, and power leaves a public trace.

An independent, deterministic record of where AI infrastructure is, who operates it, what it draws, and what no instrument can reach. Every reading carries its error bar. No figure on this page is produced by a language model.

facilities plotteddeclared frame
Virginia sites the records as data centresVA DEQ layer 294
observedHugging Face, since 2026-09-14
GW of announcedregister · operating shown separately
instruments reporting liveof collectors run in the last 26 h

What you are looking at

The idea

AI runs in buildings full of computers. Those buildings need enormous amounts of electricity, and electricity leaves paperwork: permits, grid filings, pollution reports, equipment orders. WAPR collects that paperwork every day and publishes what it adds up to.

How to read a panel

Each panel below is one instrument. It shows a number, where the number came from, how fresh it is, and what is wrong with it. The coloured tag in the corner says whether the instrument is working: Live is current, Degraded is stale or uncalibrated, Blind means it cannot see right now, Contested means the method itself is disputed. Panels also list their own known defects: FATAL breaks the method, BIAS skews the answer, GAP means something needed is missing.

Why it says "blind" instead of zero

If an instrument cannot see, this page says so rather than printing a zero — a quiet instrument is not the same as a quiet world. Numbers carry an drawn to scale: a wide bar means do not trust the number. No number on this page is produced or estimated by an AI.

Who runs this, and how new it is

WAPR is operated by BATECH LLC, a private company. It is not run for profit, carries no advertising, and nobody pays to appear here or to be left out. It is also young: several of the daily records below began collecting in September 2026. Where a panel speaks about change over time it is either drawing on an older published figure — labelled a — or saying plainly that it cannot yet. A long-run record has to start somewhere. How this is kept independent →

WAPR Condition

One overall condition level, set by the fixed rules WCI-1 over the verified registers — never over raw anomaly counts. Anomaly volume is what chance looks like (protocol MV-1); scan output stops at the watchlist. Blind · Awaiting feed

In plain terms: one overall reading, from 5 (nothing open) down to 1 (critical). It moves only when a verified finding is entered in the registers — never because a scan noticed something unusual. The lines beside it say what is currently open at each rung of the , and how much of the instrument is currently .

  1. 5NOMINAL
  2. 4ATTENTION
  3. 3ELEVATED
  4. 2SEVERE
  5. 1CRITICAL
  • Awaiting data feed

Rules WCI-1 — recompute this level yourself
LevelRule — first match wins, top down
1 · CRITICALAny open L3-published finding of an uncontrolled agent, or a verified multi-channel critical event (two independent channels agreeing, per MV-1.8 and the TRACKER §0 escalation rule), ≤ 90 days old.
2 · SEVERE≥ 1 open L2 candidate on a critical claim, or ≥ 2 open L2 candidates of any kind.
3 · ELEVATED≥ 1 open L2 candidate.
4 · ATTENTION≥ 1 open L1 watchlist item, OR more than 2 panels blind — the index degrades when the instrument cannot see. Blindness is never "all clear".
5 · NOMINALNone of the above.

Ladder terms are protocol MV-1.8: L1 = watchlist (one channel at p<0.01, or a BH survivor) · L2 = candidate (two independent channels at p<0.01, in band, controls flat) · L3 = published (the full gate, registration hash cited). The registers live in the repository at data/wci/, are hand-curated with provenance, and scan output never enters them directly (MV-1.0). Watchlist deltas could at most separate level 5 from 4, and only with a null-expected count beside them (MV-1.1); no null model exists yet — the archive is too young — so today they are shown as context and move nothing.

An instrument, not a report. Panels set their own lamp from data age. A wide means do not trust the number. A panel says blind rather than zero when it cannot see.

LiveDegradedBlindContested

What the readings mean

Each conclusion is a fixed rule over the numbers above, drawn only when its inputs are present, and carries its own caveat.

In plain terms: these sentences are produced by fixed rules applied to the numbers below — not by someone deciding what to say, and not by an AI. When a rule’s inputs are missing, its sentence simply does not appear.

  1. Awaiting data feed

Instruments

Each panel below is one instrument: one public trace, read by its own collector, with its own lamp, source and known defects.
Model publicationBlind · Awaiting feed

How many AI models are being published to the public model-sharing site this instrument tracks, and how many of those are packaged to run on ordinary hardware.

repositories
(deployable)
merge / derivative

Quantization mechanically precedes deployment. A safety-stripped repository is a census dimension, not an accusation — abliteration is legal and published.

huggingface.co/api/models · keyless ·
Identity substrateBlind · Awaiting feed

Whether the major AI companies still publish the address lists that let a website tell their web-crawling apart from an impostor.

sources archived
stable content
sliding field masked

OpenAI's Web Bot Auth directory recomputes exp = now + 7 days on every request. Hashing the document reports a key rotation on every fetch, always falsely. The detector hashes key material only. The 7-day window is not documented publicly.

5 operators · WBA JWKS + crawler CIDRs ·
Facility inventoryBlind · Awaiting feed

Data-centre buildings that volunteer mappers have recorded, and how often the map also records who operates them.

in declared frame
operator attributed
ID (clean join)
build date present
  • Fewer sites shown in a region can mean fewer people mapping it, not fewer data centres. Counts are not comparable between regions.OSM coverage is uneven by region. North America and Western Europe run far denser than APAC and Latin America — a cross-region count measures mapping effort, not infrastructure.
  • The underlying map does not record when a site was built. That date has to be found in permits or satellite imagery instead.Build dates are absent from OSM and must come from permits or satellite.

A declared frame, not a world total. Open the plot →

OpenStreetMap telecom=data_center · ODbL ·
Virginia — sites the regulator records as data centres, and their reported NOxBlind · Awaiting feed

Virginia’s regulator publishes air-pollution figures for individual data-centre sites — figures the . At a site whose permit has not changed, a rise means its ran.

sites recorded as data centres
sites with 2024 NOx filed
NOx reported, tonnes

The regulator already tracks the fuel — as NOx. Reported tonnes are fuel burned × emission factor, filed under penalty. Year-over-year NOx at a site with no permit change is "did the generators run." The emissions table holds the current year only and overwrites itself; this record began 2026-09-14.

VA DEQ ArcGIS layers 294 / 298 / table 292 · keyless ·
On-site power — announced vs. operatingRegister

Campuses that intend to generate their own electricity instead of drawing it from the public grid. Announced capacity is what a permit or filing carries; operating capacity is what a document says is actually running — and where a document says a plant runs but none states the megawatts, the reading is left blank rather than written as zero.

MW announced
announced
operating
  • Only projects with a document behind them are listed here. An announcement on its own does not qualify. register projects trace to a permit, filing, or transcript. A document can prove a project exists without proving its size, so a documented project is not a documented megawatt figure.
  • The claim that these campuses install about three times as much generation as they draw from the grid does not hold up.The "3× generator-to-grid ratio for AI campuses" is refuted — JLARC 1.0–1.25×, AWS New Carlisle and Microsoft Fairwater ~1.07×. The only ~3× cases are prime turbines at off-grid sites.
OEM 10-Qs via data.sec.gov · call transcripts · air permits
Overnight demand — Dominion VirginiaDegraded

Electricity demand at night across ’s Virginia territory, against the same months six years earlier. Night is when ordinary demand falls away and steady industrial loads stand out.

MW
awaiting collector — research anchor +3,667 MW · +42.5% (EIA-930, Jul–Dec 2019 vs 2025)
weather-normalisation not applied±unquantified

Jul–Dec 2019 vs 2025. 15 of 18 other PJM sub-regions flat or negative — a built-in placebo set.

  • Some of this rise is weather. Hot nights push electricity use up on their own, and the later period was the warmer one — that has not been corrected for.Not weather-normalised. 3 a.m. load on a 26 °C night exceeds a 14 °C night, and Jul–Dec 2025 was warmer in the mid-Atlantic.
  • The comparison regions are meant to show what normal looks like, and they do not: two of them have the same kind of load, and the rest are falling for unrelated reasons, which makes the gap here look bigger than it is.Control pool is contaminated. AEP and DAY are both Ohio and both treated; the flattest remaining controls carry behind-meter solar and manufacturing decline, which pushes the null down and inflates the effect.
  • Two snapshots six years apart cannot show whether this region was already pulling ahead of its neighbours — and it was.Two six-month windows cannot test parallel trends. Dominion was already PJM's fastest-growing zone before 2019.
  • Nobody has yet checked this figure against the utility’s own published data-centre load. Until it lands near that number, treat it as untested.Not yet anchored. Dominion publishes contracted data-centre load in its IRP. Until this is within ~20% of that figure, the instrument is unvalidated.
EIA-930 hourly · collector + research anchor ·
Queue vs. reality — ERCOTBlind · Awaiting feed

Power plants to the , and how much of that capacity has actually signed a .

MW with executed interconnection agreement
generator capacity under study
interconnection agreement executed

Large load — approved vs. appearedDegraded · Static anchor

Large new electricity users approved to connect in Texas, against how much of that demand ever showed up.

approved large load
9,042
observed peak
3,883

57% of approved load has never appeared. Phantom demand — the same project shopped across utilities — quantified from the operator's own figures. Grid planners cannot currently separate real from speculative.

  • You cannot currently reproduce these two numbers from a public source. The report the grid operator publishes covers power stations, not large electricity users.Not re-derivable from public MIS. Report 15933 is the generator-interconnection queue, not large load; the large-load series awaits NPRR1267 or LLWG materials. These figures stand as a dated research anchor.
ERCOT MIS GIS report (monthly vintage) · large-load anchor 2026-09-13
Thermal footprint — off-siteContested

Can a data centre’s waste heat be seen from space? Largely no. This panel records why the method fails, so that no claim gets built on it.

0.079K ceiling at 4.5 km, for a 130 MW campus
  • At a site cooled by evaporation the heat leaves as water vapour, and vapour carries no surface temperature for a satellite to read.Latent partition. A 300 MW evaporatively cooled site rejects ~120 kg/s as latent heat — no surface temperature, thermodynamically invisible to a radiometer.
  • The roof is insulated, so only one or two percent of the heat reaches the surface a satellite can see. Over most of the building the image cannot tell whether the servers are running.Roof decoupling. R-30+ insulation passes 3–15 W/m², 1–2% of the 650 W/m² rejected. Most of the polygon is blind to whether the servers are on.
  • Cooling equipment is bare metal, which reflects the cold sky instead of showing its own heat. Hot machinery can read cooler than the asphalt beside it, so even the direction of the effect is not guaranteed.Emissivity. Cooling gear is finned aluminium, LWIR ε 0.05–0.30. It reflects cold sky; a 50 °C coil bank can read at or below adjacent asphalt — the sign is not guaranteed.
  • Each site is compared against nearby ground that is never quite like it, and that mismatch is about the size of the signal being looked for. Measuring more sites does not shrink it.Systematic offset. Per-campus control mismatch is ±0.5–1.5 K and does not shrink with sample size — comparable to the whole-parcel signal.
  • One of the two sensors covers only Los Angeles in the archive used here. Asking it about a Virginia site returns an empty result that looks exactly like a completely cloudy day.ECOSTRESS on Earth Engine holds only the LA metro. A bounds filter over Ashburn returns an empty collection with no error — indistinguishable from total cloud.
  • The other sensor’s coverage band stops short of northern Europe, so the European sites named here have no free night-time thermal option at all.52°N–52°S coverage. Dublin, Amsterdam and the Nordic belt have no free night-thermal option.

Still worth measuring: within-site change over time. Differencing a site against itself cancels the offset, and the waste-heat quadrant — night-positive, day-neutral — is discriminating. The off-site claim is bounded at 0.079 K; the on-site change is not.

Landsat C2 ST_B10 · ECOSTRESS via LP DAAC
Compute capacity estimateContested

Turning of power into a count of AI chips. The arithmetic is possible; the answer would be wrong by a factor of several — so the reason is published instead of the number.

——GW · not publishable at achievable precision

Read this as a range, not a filled bar. The mark at the centre is the best estimate, the shaded span is where the true figure would fall 95 times in 100 — from about four times smaller to four times larger — and the ends of the track are ten times either way. Equal distances along it are equal multiples, not equal amounts.

÷10÷3.9×3.9×10
log axis, ×/÷⁠10 span · interval ×/÷⁠3.9 at 95%
MW → rack density → PUE → W/GPU → utilisation
  • How much power a square foot of data-centre floor draws varies sixfold between older halls and AI halls. That one unknown is larger than every other source of error combined.Whitespace W/sq ft spans 100–600 (legacy colo to AI halls). σ(ln) = 0.545 — the single dominant term, larger than every other combined.
  • Adding up many facilities does not cancel the error out. The same assumption is applied to every one of them, so it carries straight through to the total instead of averaging away.Aggregation does not rescue it. W/sq ft, PUE and utilisation are one shared assumption applied to every facility — systematic, not independent. The national total is still ×/÷3.3.
  • Real floor area is known for about two percent of the facilities. For the rest it is inferred from who runs the site and which metro area it is in.Floor area exists for 246 buildings in one county — ~2% of a 10,000-facility inventory. The rest is imputed from operator and metro at ×/÷5–10.
  • Deciding whether a figure belongs to one building or to a whole campus is by itself a meaningful part of the error.Attribution. Building-versus-campus assignment alone contributes σ(ln) = 0.200.

A facility estimated at 30 MW has a 95% interval of 8 to 118 MW. Published only as a screening bound with the interval attached — never as a point estimate, never without this list beside it.

error propagation · wapr-system-design · interconnection + disclosure + Nvidia denominator
Grid mix where each operator's sites sitBlind · Awaiting feed

What kinds of power station are actually running on the grid where each company's data centres sit. This is the electricity physically flowing in those places, not what a company says it buys.

Awaiting data feed
What these figures do and do not mean — every one of them applies
    EIA-930 hourly net generation by balancing authority
    Live anomalies near mapped sitesBlind · Awaiting feed

    Unusual conditions happening right now near the mapped sites. These are things happening to the sites, not things the sites cause.

    conditions outside their normal range

    Deliberately not scored. This list is never totted up into a severity total — many things happening at once is what ordinary chance looks like, and level-setting belongs to the WAPR Condition rules alone.

      typed anomaly feeds
      Ireland — the one country that counts data centresBlind · Awaiting feed

      Ireland is the only country that officially counts data-centre electricity as its own category. Everywhere else the sector disappears into general business use.

      GWh
      data centres
      earliest quarter

      CSO Ireland
      How far a campus's heat actually reachesComputed bound · not a feed

      People expect a data centre to warm the land around it, and to see that heat spreading on a map. Drawn at true size, there is no plume to draw — this panel is the honest version of that picture.

      Awaiting data feed

      What this bound does and does not say — every one of them applies

        WAPR environmental research synthesis · computed, not asserted
        Crane notices near mapped sitesBlind · Awaiting feed

        Before a tall crane goes up, someone has to file a public notice with the aviation authority — so the paperwork appears months before a building does.

        sites where cranes cluster far more tightly than the neighbourhood is building anyway
        Awaiting data feed

        A watchlist signal, not a finding. It suggests where to look and settles nothing on its own.

        What this signal does and does not mean — every one of them applies
          FAA obstruction-evaluation case archives ·
          Register of the unmeasurableeach row backed by an executed queryBlind by design

          Things nobody can currently measure, each with the precise reason it is out of reach and the search that proves it.

          The most defensible output of this instrument is a precise account of what no instrument can reach. It cannot be scooped by a commercial database, because the commercial databases are part of the finding.

          What is unknowableMechanismEvidence
          Data centre emissions, US federalGHGRP Subpart C excludes "emergency generators and emergency equipment" from the source category, so the sector never crosses the reporting threshold. Virginia publishes CO₂e per site anyway — at state level.40 CFR 98.30(b)(2), verbatim
          GHGRP NAICS 518210 → 6 facilities
          all 6 are flare-gas sites (re-run 2026-09-14)
          VA DEQ table 292 → CO2E present
          Data centre water withdrawalNo federal category has ever existed and none is coming: USGS county compilations ended 2015, the modeled replacement (2000–2020 only) has no DC class, and municipally supplied sites are absorbed into "public supply". Exception, one region: Loudoun Water meters its data-centre class — 4.5 MGD avg / 10.9 MGD peak-day 2024, disclosed via ICPRB's five-yearly Potomac study.USGS NWIS + ScienceBase reanalysis → no DC class
          ICPRB WMA study 2025 §6.2 (re-run 2026-09-14)
          Per-site load, TexasAggregated by the operator's stated policy "to protect Customer data".ERCOT → zone totals only
          Hyperscaler site waterOf the four hyperscalers checked, one publishes it. Owned sites only, consumption only, PDF only, layout changes annually.Google → 36 cities, 2024
          AWS · Meta · MSFT → none
          Discharge volumesThe operator states most sites are not metered for it.Microsoft, in writing
          Runaway agent behaviourAccount-scoped by construction. No cross-account read path exists at any price.AWS docs, verbatim:
          "same account and Region"
          Self-directed AI loose on the webNo confirmed public case; no scanner would find one. A capable system trying not to be found would not leave a homepage.Palisade: 24,111,509 → 3

          Latest, sourced

          Titles are verbatim from the publisher. Nothing is summarised or rewritten. Every item carries its publisher and link. Tier: primary = regulator or filing · company = operator statement · trade = industry press · aggregator = Google News, publisher shown.

          Plain-language glossary

          Every term this page uses that is not everyday English. Dotted words anywhere on the page open their definition where they stand.