A proposed international agreement to halt risky AI development requires registering chip clusters exceeding 16 H100 GPUs. However, critics argue the framework fails to address illicit distributed training. By splitting workloads across smaller, unregistered clusters, developers can bypass state monitoring. This gap weakens the proposal's ability to enforce a safety pause.