Bit2Watt (arXiv:2607.05993) now anchors three claim-notes directly, with a fourth blocked by the single-source concentration cap — what would corroborate it, and does its stated CHES/TCHES acceptance already clear the bar?

hardware-securityside-channelpower-gridbit2wattwatt2bitpeer-review-statussingle-source-capsources-floorcyber-physical-systemsiacrchestches

Two questions were left open at question-corroborate-bit2watt-single-source-cap: whether Bit2Watt's (arXiv:2607.05993) "accepted by CHES 2026" status is independently verifiable at a primary record, and whether any independent source has corroborated its findings. Both were checked directly against IACR's own venue pages this session. The acceptance is confirmed at the primary record, and the venue's own governing documents describe a genuine double-blind, multi-round, committee-based peer-review process — which, applying the precedent already established for claim-steck-2024-www-short-paper-cleared-committee-peer-review, takes the source outside the single-source cap's "unrefereed primary" category. No independent corroboration (a different author group, a different venue) of the paper's findings was located; the coverage found is secondary journalism describing the same single paper.

Claim: IACR's own CHES 2026 accepted-papers page independently confirms Bit2Watt's acceptance to TCHES 2026, Issue 4 — corroborating arXiv's self-reported comment with the venue's own primary record

Claim type: historical/factual claim about a public record (uncontested) — Tier 1 achieved verifies: question-corroborate-bit2watt-single-source-cap

arXiv's abstract page for 2607.05993 carries a self-reported comment field: "Comments:Accepted by CHES 2026." Until now, this vault's Bit2Watt-derived notes have inherited that claim without checking it against the venue itself. IACR's own "CHES 2026 Accepted Papers" page, under the heading "TCHES 2026, Issue 4," lists: "Bit2Watt: A Cyber–Physical Vulnerability Exploiting GPU Workloads Across Power and Computing Infrastructures / Zhouhao Ji, Kaikai Pan, Wenyuan Xu / Zhejiang University" — matching title, all three author names, and the institutional affiliation exactly. This is independent confirmation in the sense that matters: the fact of acceptance no longer rests solely on the authors' own arXiv metadata, but on the accepting venue's own published program.

One dating nuance from the same page: Issues 1–3 of TCHES 2026 each show a "TCHESPDF" download link beside every entry; Issue 4 entries — including Bit2Watt — carry no such link as of this fetch (2026-09-10). This is consistent with TCHES's own published Issue 4 timeline (source 4): submission 15 April 2026, notification 15 June 2026, camera-ready 14 July 2026, with regular publication typically following about a month after camera-ready — meaning Issue 4's formal journal publication may still be pending as of this capture, even though the acceptance decision itself is already public and confirmed.

Claim: TCHES's own governing documents describe a genuine double-blind, multi-round, committee-based peer-review process — not a preprint or self-published route — which, per existing precedent, takes Bit2Watt outside the single-source cap's "unrefereed primary" category

Claim type: specific claim about how a review process works (technical-mechanism-adjacent) — Tier 1 achieved verifies: question-corroborate-bit2watt-single-source-cap

TCHES's own FAQ states plainly: "It is a fully refereed journal, with its own ISSN," and describes its reviewing directly: "Generally speaking, every paper will be subject to double-blind review by three or more members of the editorial board. The editorial board of the journal corresponds to the CHES conference program committee, which changes yearly and is composed of international experts who are independent from the editorial management of TCHES." CHES 2026's own Call for Papers states the same process from the conference side: "Submitted papers will undergo a journal-style review process, with accepted papers published by Ruhr University Bochum in an issue of the journal IACR Transactions on Cryptographic Hardware and Embedded Systems (TCHES)." The FAQ further documents a genuine iterative review structure — outcomes of accept, minor revision (with an assigned shepherd), major revision, reject-and-resubmit, or reject, plus a defined rebuttal window before each decision (source 4: "Rebuttal: 28-31 May 2026" for the Issue 4 round Bit2Watt went through).

The vault has already ruled once on what this kind of primary confirmation means for the single-source cap: claim-steck-2024-www-short-paper-cleared-committee-peer-review found that WWW 2024's single-blind, committee-reviewed Short Papers track took Steck, Ekanadham & Kallus's paper outside the cap's "unrefereed primary" definition, "even while circulating as a preprint/companion paper" — because the cap's own text names "a preprint, a working paper, a self-published report, a conference abstract" as the category it governs, and a paper that cleared a named committee's review is not in that category. TCHES's process here is at least as rigorous on the specific question that matters (was there a committee gate, not how selective it was): double-blind rather than single-blind, three-or-more reviewers rather than an unspecified number, multiple defined decision outcomes with revision rounds rather than a binary accept/reject. Applying the same logic: Bit2Watt's TCHES 2026 acceptance — independently confirmed above, not merely self-reported — means the source is not an "unrefereed primary" as the cap's own text defines that category, and the cap's restriction on further Bit2Watt-sourced claim-notes does not bind on this source going forward.

Claim: No independent corroboration (a different author group, a different venue) of Bit2Watt's findings was located via search as of 2026-09-10 — the coverage found is secondary journalism describing the same single paper

Claim type: documented search-absence, not a claim resting on a weak source for its positive content — Tier 1 for the versioning fact, journalism sources cited only as Tier 3 evidence of what kind of coverage exists, not as corroboration verifies: question-corroborate-bit2watt-single-source-cap

arXiv's submission history for 2607.05993 shows exactly one version: "Submission history From: Zhouhao Ji [view email] [v1] Tue, 7 Jul 2026 08:26:01 UTC (4,378 KB)" — no revised version, and no separate journal-ref field beyond the "Accepted by CHES 2026" comment already addressed above. A web search for citation, replication, or independent verification of Bit2Watt turned up no citing academic paper, no independent benchmark or replication attempt, and no third-party technical confirmation of either the grid-destabilization or EMI-exfiltration findings. What it did turn up is press coverage, all describing the same single paper rather than adding independent findings: The Hacker News ("New Bit2Watt Attack Could Let Cloud Tenants Disrupt Power Grids Without an Exploit"), The Register ("Malicious cloud customers can bring down the power grid"), GBHackers, Cyberpress, GuardianMSSP, and a KSEC community-forum repost. None of these represent a different author group producing independent findings — they are secondary journalism summarizing the same arXiv paper, which is exactly the "same source wearing different clothes" pattern the cap's own text excludes from counting as corroboration.

This is the same shape of finding this vault already recorded for a different capped preprint: GIFT's 7.6% Llama-600M speedup also had no independent citation or replication located a month after submission. The parallel does not extend to the cap ruling, though — GIFT's arXiv listing carries no journal-ref and no stated venue acceptance at all, while Bit2Watt's does (see Claim 2). Absent independent corroboration, "what would corroborate it" remains genuinely open in the strict sense of replication or independent citation — but per Claim 2, corroboration is no longer necessary to discharge the single-source cap for this specific source, because the cap's trigger condition (an unrefereed primary) no longer applies.

Further leads

• Issue 4's own accepted-papers listing has no PDF link yet (as of 2026-09-10); worth re-checking after TCHES's typical "about a month after camera-ready" publication window closes, to record the final published DOI/page numbers once assigned (source: ches.iacr.org/2026/acceptedpapers.php).
• The held finding from the 2026-09-08 capture — that Bit2Watt's 39-entry bibliography appears to omit Mordechai Guri's AirHopper/GSMem/MAGNETO/ODINI air-gap EMI-exfiltration line — remains unchecked to the same rigor as the confirmed Kocher/Zhao-Suh omission, and remains cap-blocked as a would-be fourth Bit2Watt-sourced claim-note regardless of today's ruling (a citation-omission finding is a claim about the paper's own text, not about its acceptance status, so it stays inside the cap's original three-note count). Held at question-corroborate-bit2watt-single-source-cap.
• None of the six press pieces found (Hacker News, Register, GBHackers, Cyberpress, GuardianMSSP, KSEC forum) were read in full this session — only surfaced via search snippets — so none were graded or quoted as sources here; a future capture wanting "what is the world paying attention to" on Bit2Watt (Tier 3, salience-only) would need to fetch and read them directly first.
• TCHES's FAQ states the journal is "archived by Deutsche Nationalbibliothek" and published "Diamond Open Access, licensed under CC BY 4.0" — general facts about the venue's durability and licensing, not checked against Bit2Watt specifically, but relevant if a future note discusses the paper's long-term availability.

Safety flags

None. All five pages fetched this session (IACR's CHES 2026 accepted-papers page, TCHES's FAQ, CHES 2026's Call for Papers, TCHES's Paper Submission/timeline page, and arXiv's abstract page for 2607.05993) are plain institutional program/policy pages and a standard arXiv abstract — no addressed-to-AI language, override language, claimed authority, tier self-assignment, file-system instructions, credential requests, or urgency framing on any of them.

Entity candidates

• Nele Mentens — person — CHES 2026 Program Co-Chair / TCHES 2026 co-Editor-in-Chief (KU Leuven / Leiden University); flagged FIRST per the blind-spot instruction — she and her co-chair are the institutional authority Claim 2's whole "genuine peer review" finding is measured against, and neither has any entity page in this vault's Bit2Watt/Watt2Bit cluster yet, unlike the paper's own co-authors (already surfaced and declined in the 2026-09-08 capture).
• Yuval Yarom — person — CHES 2026 Program Co-Chair / TCHES 2026 co-Editor-in-Chief (Ruhr University Bochum); same reasoning as Mentens, flagged alongside her as the other half of the review-authority pairing.
• IACR (International Association for Cryptologic Research) — organization — the umbrella body governing both CHES and TCHES; underlies every claim in this capture about what "accepted by CHES 2026" actually means, and has no entity page yet.
• IACR Transactions on Cryptographic Hardware and Embedded Systems (TCHES) — concept/venue — the specific journal Bit2Watt was accepted into; distinct enough from the CHES conference (its presentation venue) to warrant its own note if this branch grows further.