# Shallow review of live agendas in alignment & safety

Summary
=======

You can’t optimise an allocation of resources if you don’t know what the current one is. Existing maps of alignment research are mostly too old to guide you and the field has nearly no *ratchet*, no common knowledge of what everyone is doing and why, what is abandoned and why, what is renamed, what relates to what, what is going on. 

This post is mostly just a big index: a link-dump for as many currently active AI safety agendas as we could find. But even a linkdump is plenty subjective. It maps work to conceptual clusters 1-1, aiming to answer questions like “I wonder what happened to the exciting idea I heard about at that one conference” and “I just read a post on a surprising new insight and want to see who else has been working on this”, “I wonder roughly how many people are working on that thing”. 

This doc is unreadably long, so that it can be Ctrl-F-ed. Also this way you can fork the list and make a smaller one. 

Our taxonomy:

1.  Understand existing models (evals, interpretability, science of DL)
2.  Control the thing (prevent deception, model edits, value learning, goal robustness)
3.  Make AI solve it (scalable oversight, cyborgism, etc)
4.  Theory (galaxy-brained end-to-end, agency, corrigibility, ontology, cooperation)  
     

Please point out if we mistakenly round one thing off to another, miscategorise someone, or otherwise state or imply falsehoods. **We will edit.**

Unlike the late [Larks reviews](https://forum.effectivealtruism.org/posts/BNQMyWGCNWDdP2WyG/2021-ai-alignment-literature-review-and-charity-comparison), we’re not primarily aiming to direct donations. But if you enjoy reading this, [consider](https://www.alignmentforum.org/posts/SbC7duHNDHkd3PkgG/alignment-grantmaking-is-funding-limited-right-now) donating to [Manifund](https://manifund.org/about/donate), [MATS](https://manifund.org/projects/mats-funding), or [LTFF](https://www.givingwhatwecan.org/en-GB/charities/long-term-future-fund?utm_source=eafunds), or to [Lightspeed](mailto:funds@lightspeedgrants.org) for big ticket amounts: some good work is bottlenecked by money, and you have free access to the service of specialists in giving money for good work.  
 

Meta
====

When I (Gavin) got into alignment (actually it was still ‘AGI Safety’) people [warned](http://www.foldl.me/2018/conceptual-issues-ai-safety-paradigmatic-gap/) me it was pre-paradigmatic. They were right: in the intervening 5 years, the live agendas have [changed](https://arxiv.org/pdf/1805.01109.pdf) completely.[^06qm74k93eh7] So here’s an update. 

***Chekhov’s evaluation***: I include Yudkowsky’s operational [criteria](https://www.lesswrong.com/posts/keiYkaeoLHoKK4LYA/six-dimensions-of-operational-adequacy-in-agi-projects) (Trustworthy command?, closure?, opsec?, commitment to the common good?, alignment mindset?) but don’t score them myself. The point is not to throw shade but to remind you that we often know little about each other. 

See you in 5 years.  
 

Editorial 
==========

*   Alignment is now famous enough that Barack Obama is [sort of](https://barackobama.medium.com/statement-on-the-biden-administrations-executive-order-on-artificial-intelligence-91a5ddac6238) talking about it. This will attract climbers, grifters, goodharters and those simply misusing the word because it’s objectively confusing and attracts money and goodwill. We already had to half-abandon “AI safety” because of motivated semantic creep. 
*   Low confidence: Mech interp probably has its share of people by now (though I accept that it is an excellent legible \[ha\] on-ramp and there’s lots of pre-chewed projects ready to go).
*   [MATS](https://www.matsprogram.org/) works well (on average, with high variance). The London extension is a very good idea. They just got $185k from SFF but [are](https://manifund.org/projects/mats-funding) still constrained.
*   Not including governance work leaves out lots of cool “technical policy”: [forecasting](https://epochai.org/), [compute monitoring](https://arxiv.org/abs/2303.11341), [trustless model verification](https://arxiv.org/abs/2210.08674), [safety cases](https://www.matsprogram.org/safety).
*   Whole new types of people are contributing, which is nice. I have in mind PIBBSS and the CAIS philosophers and the SLT mob and Eleuther’s discordant energy. 
*   The big labs seem to be betting the farm on scalable oversight. This relies on no huge capabilities spikes and no irreversible misgeneralisation.
*   The de facto agenda of the uncoordinated and only-partially paradigmatic field is [process-based supervision](https://www.lesswrong.com/posts/D4gEDdqWrgDPMtasc/thoughts-on-process-based-supervision-1) / [defence in depth](https://onlinelibrary.wiley.com/doi/full/10.1111/1758-5899.12786) / [hodgepodge](https://www.lesswrong.com/posts/YnGRBADQwpYRbuCbz/towards-hodge-podge-alignment-1) / [endgame safety](https://www.lesswrong.com/posts/MCWGCyz2mjtRoWiyP/endgame-safety-for-agi) / [Shlegeris v1](https://forum.effectivealtruism.org/posts/yCx3kCReJtucpdd33/the-current-alignment-plan-and-how-we-might-improve-it-or#v1_Plan). We will throw together a dozen things which work in sub-AGIs and hope: RLHF/DPO + [mass](https://www.greaterwrong.com/posts/JcLhYQQADzTsAEaXd/ai-as-a-science-and-three-obstacles-to-alignment-strategies#comment-7iBb7aF4ctfjLH6AC) [activation patching](https://twitter.com/jd_pressman/status/1718798739266212325) \+ scoping models down + boxing + dubiously scalable oversight + myopic training + [data curation](https://arxiv.org/abs/2302.08582) \+ passable automated alignment research (proof assistants) + … We will also slow things down by creating a (hackable, itself slow OODA) safety culture. Who knows.  
     

Agendas
=======

1\. Understand existing models
------------------------------

[*characterisation*](https://en.wikipedia.org/wiki/Characterization_(materials_science))  
 

### Evals

(Figuring out how a trained model behaves.)  
 

*Various *[*capability evaluations*](https://www.openphilanthropy.org/research/rfps-on-llm-impacts/)

*   *One-sentence summary*: make tools that can actually check whether a model has a certain capability / misalignment mode. We default to low-n sampling of a vast latent space but aim to do better.
*   *Theory of change:* most models have a capabilities overhang when first trained and released; we should keep a close eye on what capabilities are acquired when so that frontier model developers are better informed on what security measures are already necessary (and hopefully they extrapolate and eventually panic).
*   Grouping together [ARC Evals](https://evals.alignment.org/)*, *[Deepmind](https://arxiv.org/abs/2305.15324), [Cavendish](https://cavendishlabs.org/publications/), [situational awareness](https://arxiv.org/abs/2309.00667) crew, [Evans and Ward](https://www.matsprogram.org/evals), [Apollo](https://www.apolloresearch.ai/blog/understanding-da-and-sd). See also [Model Psychology](https://www.lesswrong.com/s/SAjYaHfCAGzKsjHZp); neuroscience : psychology :: interpretability : model psychology. See also [alignment evaluations](https://www.alignmentforum.org/posts/dBmfb76zx6wjPsBC7/when-can-we-trust-model-evaluations). See also [capability](https://arxiv.org/abs/2304.11158) [prediction](https://arxiv.org/abs/2202.07785) and the hundreds of trolls doing *ahem *[decentralised](https://www.youtube.com/watch?v=g7YJIpkk7KM) [evals](https://twitter.com/jbrowder1/status/1652387444904583169).
*   *Some names: *Mary Phuong, Toby Shevlane, Beth Barnes, Holden Karnofsky, Lawrence Chan, Owain Evans, Francis Rhys Ward, Apollo, Palisade, OAI Preparedness
*   *Estimated # FTEs: *13 (ARC), ~50 elsewhere
*   *Some outputs in 2023*: [AI AI research](https://arxiv.org/abs/2310.03302), [autonomy](https://evals.alignment.org/Evaluating_LMAs_Realistic_Tasks.pdf), [Do the Rewards Justify the Means?](https://arxiv.org/abs/2304.03279), [Stubbornness](https://arxiv.org/abs/2304.12280). [Naming](https://www.lesswrong.com/posts/43C3igfmMrE9Qoyfe/scaffolded-llms-as-natural-language-computers) the thing that GPTs have become was useful. [Tag](https://www.alignmentforum.org/tag/ai-evaluations).
*   *Critiques: *[*Hubinger*](https://www.alignmentforum.org/posts/uqAdqrvxqGqeBHjTP/towards-understanding-based-safety-evaluations)*, *[*Hubinger*](https://www.alignmentforum.org/posts/dBmfb76zx6wjPsBC7/when-can-we-trust-model-evaluations)*, *[*Shovelain & Mckernon*](https://www.lesswrong.com/posts/XCRsg2ZnHBNAN862T/improving-the-safety-of-ai-evals)
*   *Funded by: *Various.
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources:* ~~$20,000,000 not counting the new government efforts  
     

[*Various*](https://www.anthropic.com/index/frontier-threats-red-teaming-for-ai-safety)[*red-teams*](https://www.deepmind.com/blog/red-teaming-language-models-with-language-models)

*   *One-sentence summary*: let’s attack current models and see what they do / deliberately induce bad things on current frontier models to test out our theories / methods. See also [gain of function](https://forum.effectivealtruism.org/posts/yCx3kCReJtucpdd33/the-current-alignment-plan-and-how-we-might-improve-it-or#Gain_of_function) experiments (producing demos and toy models of misalignment. See also “Models providing Critiques”. See also: threat modelling ([Model Organisms](https://www.alignmentforum.org/posts/ChDH335ckdvpxXaXX/model-organisms-of-misalignment-the-case-for-a-new-pillar-of-1), [Powerseeking](https://arxiv.org/abs/2304.06528), [Apollo](https://www.apolloresearch.ai/blog/understanding-da-and-sd)); [steganography](https://arxiv.org/abs/2310.18512); [part](https://www.lesswrong.com/posts/Hna4aoMwr6Qx9rHBs/linkpost-introducing-superalignment?commentId=phFqC2EdDALCFwr56) of OpenAI’s superalignment schedule; [Trojans](https://arxiv.org/abs/2302.10894) ([CAIS](https://trojandetection.ai/tracks)); [Latent Adversarial Training](https://www.alignmentforum.org/posts/atBQ3NHyqnBadrsGP/latent-adversarial-training#comments) is an unusual example.
*   *Some names: *Stephen Casper, Lauro Langosco, Jacob Steinhardt, Nina Rimsky, Jeffrey Ladish/Palisade, Ethan Perez, Geoffrey Irving, [ARC Evals](https://www.vice.com/en/article/jg5ew4/gpt4-hired-unwitting-taskrabbit-worker), Apollo, Dylan Hadfield-Menell/[AAG](https://algorithmicalignment.csail.mit.edu/team/)
*   *Estimated # FTEs:* ?
*   *Some outputs in 2023*: [Rimsky](https://www.alignmentforum.org/posts/iHmsJdxgMEWmAfNne/red-teaming-language-models-via-activation-engineering), [Wang](https://far.ai/publication/wang2022adversarial/), [Wei](https://arxiv.org/abs/2307.02483), [Tong](https://arxiv.org/abs/2306.12105), [Casper](https://arxiv.org/abs/2306.09442), [Ladish](https://arxiv.org/abs/2311.00117), [Langosco](https://docs.google.com/document/d/1xdidMGrzHDIJ5sG2h1TKb-HiGh-hgsMY3jugnvd6Aqo/edit#heading=h.9axbdg9kpll0), [Shah](https://arxiv.org/abs/2311.03348), [Scheurer](https://arxiv.org/abs/2311.07590), [AAG](https://algorithmicalignment.csail.mit.edu/research/), 2022: [Irving](https://arxiv.org/abs/2202.03286)
*   *Critiques:* ?
*   *Funded by: Various*
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: *Large  
      
     

*Eliciting model anomalies* 

*   *One-sentence summary*: finding weird features of current models, in a way which isn’t fishing for capabilities nor exactly red-teaming. Think [inverse Scaling](https://arxiv.org/abs/2306.09479), [SolidGoldMagikarp](https://www.alignmentforum.org/posts/aPeJE8bSo6rAFoLqg/solidgoldmagikarp-plus-prompt-generation), [Reversal curse](https://arxiv.org/abs//2309.12288), [out of context](https://openreview.net/forum?id=X3JFgY4gvf). Not an agenda but a multiplier on others.
*   *Theory of change:* maybe anomalies and edge cases tell us something deep about the models; you need data to theorise.  
     

[*Alignment of Complex Systems*](https://acsresearch.org/)*: LLM interactions*

*   *One-sentence summary*: understand LLM interactions, their limits, and work up from empirical work towards more general hypotheses about complex systems of LLMs, such as network effects in hybrid systems and scaffolded models.
*   *Theory of change:* Aggregates are sometimes easier to predict / theorise than individuals: the details average out. So experiment with LLM interactions (manipulation, conflict resolution, systemic biases etc). Direct research towards LLM interactions in future large systems (in contrast to the current singleton focus); prevent systemic bad design and inform future models.
*   *Some names: *Jan Kulveit, Tomáš Gavenčiak, Ada Böhm
*   *Estimated # FTEs: *4
*   *Some outputs in 2023*: [software](https://github.com/acsresearch/interlab) and [insights](https://acsresearch.org/posts) into LLMs
*   *Critiques:* [Yudkowsky](https://www.alignmentforum.org/posts/H5iGhDhQBtoDpCBZ2/announcing-the-alignment-of-complex-systems-research-group?commentId=frEufx3c6cRmhDjbh) on the interfaces idea
*   *Funded by: *SFF
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources:* ~$300,000  
     

### The other evals (groundwork for regulation)

Much of Evals and Governance orgs’ work is something different: developing [*politically legible*](https://www.rand.org/content/dam/rand/pubs/testimonies/CTA2700/CTA2723-1/RAND_CTA2723-1.pdf) [metrics](https://www.alignmentforum.org/posts/Zfk6faYvcf5Ht7xDx/compute-thresholds-proposed-rules-to-mitigate-risk-of-a-lab), [processes](https://www.matsprogram.org/safety) / [shocking](https://twitter.com/apolloaisafety/status/1721594465716928751) [case](https://www.bbc.co.uk/news/technology-67302788.amp) studies. The aim is to motivate and underpin actually sensible regulation. 

But this is a technical alignment post. I include this section to emphasise that these other evals (which seek confirmation) are different from understanding whether dangerous capabilities have or might emerge.  
 

### Interpretability 

(Figuring out what a trained model is actually computing.)[^0q1picyzu4d]  
 

[*Ambitious mech interp*](https://forum.effectivealtruism.org/posts/zcHdehWJzDpfxJpmf/what-i-would-do-if-i-wasn-t-at-arc-evals#Ambitious_mechanistic_interpretability)

*   In the sense of complete bottom-up circuit-level reconstruction of learned algorithms.
*   *One-sentence summary*: find circuits for everything automatically, then figure out if the model will do bad things (which algorithm implementing which plan; a full causal graph with a sensible number of nodes); any model that will do bad things can then be deleted or edited.
*   *Theory of change:* aid alignment through ontology identification, auditing for deception and planning, force-multiplier for alignment research, intervening to make training safer, inference-time controls to act on hypothetical real-time monitoring. Iterate towards things which don’t scheme. See also scalable oversight.
*   *Some names: *Chris Olah, Lee Sharkey, Neel Nanda, Steven Bills, Nick Cammarata, Leo Gao, William Saunders, Apollo (private work)
*   *Estimated # FTEs: *80? (Anthropic, Apollo, DeepMind, OpenAI, various smaller orgs)
*   *Some outputs in 2023*: [monosemantic features](https://transformer-circuits.pub/2023/monosemantic-features), the [linear representations hypothesis](https://arxiv.org/pdf/2311.03658.pdf) seems well on the way to being confirmed. [Jenner](https://www.lesswrong.com/posts/L8LHBTMvhLDpxDaqv/research-agenda-formalizing-abstractions-of-computations-1), [Universality](https://arxiv.org/abs/2302.03025), [Lieberum](https://arxiv.org/abs/2307.09458), [distilled rep](https://www.lesswrong.com/posts/wjQkQ8bgWWFym8zF9/distilled-representations-research-agenda-1)...
    *   *Automated: *[ACDC](https://arxiv.org/abs/2304.14997), [Larger models reading smaller models](https://openai.com/research/language-models-can-explain-neurons-in-language-models), [sparse models of larger models](https://arxiv.org/pdf/2309.08600.pdf)
    *   [*Manual*](https://www.alignmentforum.org/posts/DZk6mRo9vhCXN9Rfn/a-walkthrough-of-interpretability-in-the-wild-w-authors)  [*reverse engineering*](https://www.neelnanda.io/blog/interlude-a-mechanistic-interpretability-analysis-of-grokking)*.* \[EDIT: alive and well: [McDougall et al](https://arxiv.org/abs/2310.04625), [Tigges et al](https://arxiv.org/abs/2310.15154), [Quirke et al](https://arxiv.org/abs/2311.00863)\]
*   *Critiques: *[Summarised here](https://docs.google.com/document/d/e/2PACX-1vTd5abxOSLcbq5wkUln7v2bVWvrEdsazQZZXfufEhgDycEktM_0jxvRAePEtFQNA2T84bXsJqeeEVl_/pub): [Charbel](https://www.lesswrong.com/posts/LNA8mubrByG7SFacm/against-almost-every-theory-of-impact-of-interpretability-1), [Bushnaq](https://www.lesswrong.com/posts/FDrgcfY8zs5e2eJDd/charbel-raphael-and-lucius-discuss-interpretability), [Casper](https://www.alignmentforum.org/s/a6ne2ve5uturEEQK7/p/7TFJAvjYfMKxKQ4XS), [Shovelain & Mckernon](https://www.lesswrong.com/posts/HdqdqNC3MyABHzSqf/the-risk-reward-tradeoff-of-interpretability-research), [RicG](https://www.lesswrong.com/posts/pQqoTTAnEePRDmZN4/agi-automated-interpretability-is-suicide), [Kross](https://www.lesswrong.com/posts/uhMRgEXabYbWeLc6T/why-and-when-interpretability-work-is-dangerous), [Hobbhahn](https://www.lesswrong.com/posts/iDNEjbdHhjzvLLAmm/should-we-publish-mechanistic-interpretability-research).
*   *Funded by: *Various (Anthropic, Deepmind, OpenAI, MATS)
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources:* many millions  
     

[*Concept-based interp*](https://www.matsprogram.org/concept)

*   *One-sentence summary*: if ground-up understanding of models turns out to be too hard/impossible, we might still be able to jump in at some high level of abstraction and still steer away from misaligned AGI. AKA “high-level interpretability”.
*   *Theory of change:* build tools that can output a probable and predictive representation of internal objectives or capabilities of a model, thereby solving inner alignment.
*   *Some names: *Erik Jenner, Jessica Rumbelow, Stephen Casper, Arun Jose, Paul Colognese
*   *Estimated # FTEs: ?*
*   *Some outputs in 2023*: [High-level Interpretability](https://www.lesswrong.com/posts/tFYGdq9ivjA3rdaS2/high-level-interpretability-detecting-an-ai-s-objectives), [Internal Target Information for AI Oversight](https://www.lesswrong.com/posts/hhKpXEsfAiyFLecyF/internal-target-information-for-ai-oversight)
*   *Critiques:*
*   *Funded by: ?*
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: ?*  
     

[*Causal abstractions*](https://ai.stanford.edu/blog/causal-abstraction/)

*   *One-sentence summary*: Wentworth [2020](https://www.lesswrong.com/s/ehnG4mseKF6xALmQy); partially describe the “algorithm” a neural network or other computation is using, while throwing away irrelevant details.
*   *Theory of change:* find all possible abstractions of a given computation -> translate them into human-readable language -> identify useful ones like deception -> intervene when a model is doing it. Also develop theory for interp more broadly as a multiplier; more mathematical (hopefully, more generalizable) analysis.
*   *Some names: *Eric Jenner, Atticus Geiger
*   *Estimated # FTEs: ?*
*   *Some outputs in 2023*: [Jenner’s agenda](https://www.alignmentforum.org/posts/L8LHBTMvhLDpxDaqv/research-agenda-formalizing-abstractions-of-computations-1), [Causal Abstraction for Faithful Model Interpretation](https://arxiv.org/abs/2301.04709)
*   *Critiques:*
*   *Funded by: ?*
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: ?*  
     

[*EleutherAI*](https://www.eleuther.ai/interpretability) *interp*

*   *One-sentence summary*: tools to investigate questions like path dependence of training.
*   *Theory of change:* make amazing tools to push forward the frontier of interpretability.
*   *Some names: *Stella Biderman, Nora Belrose, AI_WAIFU, Shivanshu Purohit
*   *Estimated # FTEs: ~*12 plus ~~50 part-time volunteers
*   *Some outputs in 2023*: [LEACE](https://arxiv.org/abs/2306.03819) (see also Surgical Model Edits); [Tuned Lens](https://arxiv.org/abs/2303.08112); Improvements on CCS: [VINC](https://www.theojaffee.com/p/7-nora-belrose#details); [ELK generalisation](https://github.com/EleutherAI/elk-generalization)
*   *Critiques:*
*   *Funded by: Hugging Face, Stability AI, Nat Friedman, Lambda Labs, Canva, CoreWeave*
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: $2,000,000? (guess)*  
     

[*Activation engineering *](https://www.lesswrong.com/posts/L4anhrxjv8j2yRKKp/how-discovering-latent-knowledge-in-language-models-without#Our_Paper)*(as unsupervised interp)*

*   *One-sentence summary*: intervene on model representations and so get good causal evidence when dishonesty, powerseeking, and other intrinsic risks show up; also test interpretability theories and editing theories. See also the section of the same name under “Model edits” below.
*   *Theory of change:* test interpretability theories as part of that theory of change; find new insights from interpretable causal interventions on representations. Unsupervised means no annotation bias, which lowers one barrier to extracting superhuman representations.
*   *Some names: *Alex Turner, Collin Burns, Andy Zou, Kaarel Hänni, Walter Laurito, [Cadenza](https://cadenzalabs.org/research/#research-agenda) ([manifund](https://manifund.org/projects/cadenza-labs-ai-safety-research-group-working-on-own-interpretability-agenda))
*   *Estimated # FTEs: ~*15
*   *Some outputs in 2023*: [famously CCS](https://arxiv.org/abs/2212.03827) last year, [steering vectors in RL and GPTs](https://www.lesswrong.com/posts/5spBue2z2tw4JuDCx/steering-gpt-2-xl-by-adding-an-activation-vector), [Cadenza RFC](https://www.lesswrong.com/posts/bFwigCDMC5ishLz7X/rfc-possible-ways-to-expand-on-discovering-latent-knowledge), [the shape of concepts](https://www.lesswrong.com/posts/Go5ELsHAyw7QrArQ6/searching-for-a-model-s-concepts-by-their-shape-a). [Roger experiment](https://www.alignmentforum.org/posts/bWxNPMy5MhPnQTzKz/what-discovering-latent-knowledge-did-and-did-not-find-4). See also [representation engineering](https://arxiv.org/abs/2310.01405).
*   *Critiques:*
*   *Funded by: ?*
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: ?*  
     

[*Leap*](https://www.leap-labs.com/)

*   *One-sentence summary*: research startup selling an interpretability API (model-agnostic feature viz of vision models). Aiming for data-independent (“want to extract information directly from the model with little dependence on training or test data”) and global (“mech interp isn’t going to be enough, we need holistic methods that capture gestalt”) interpretability methods.
*   *Theory of change:* make safety tools people want to use, stress-test methods in real life, develop a strong alternative to bottom-up circuit analysis.
*   *Some names: *Jessica Rumbelow
*   *Estimated # FTEs: *5
*   *Some outputs in 2023*: [Prototype generation](https://arxiv.org/pdf/2309.17144.pdf)
*   *Critiques: ?*
*   *Funded by: private investors*
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: millions on the way*  
     

### Understand learning

(Figuring out how the model figured it out.)  
 

*Timaeus: *[*Developmental interpretability*](https://www.alignmentforum.org/posts/TjaeCWvLZtEDAS5Ex/towards-developmental-interpretability)* & *[*singular learning theory*](https://timaeus.co)

*   *One-sentence summary*: Build tools for detecting, locating, and interpreting phase transitions that govern training and in-context learning in models, inspired by concepts in singular learning theory (SLT), statistical physics, and developmental biology.
*   *Theory of change:* When structure forms in neural networks, it can leave legible developmental traces that we can interpret to figure out where and how that structure is implemented. This paves a way to scalable, automated interpretability. In particular, it may be hopeless to intervene at the end of the learning process, so we want to catch and prevent deceptiveness and other dangerous capabilities and values as early as possible.
*   *Some names: *Jesse Hoogland, Alexander Gietelink Oldenziel, Daniel Murfet, Stan van Wingerden
*   *Estimated # FTEs: *10
*   *Some outputs in 2023*: [Dynamical phase transitions](https://arxiv.org/abs/2310.06301), [degeneracy in singular models](https://arxiv.org/abs/2308.12108); see also [Eleuther](https://arxiv.org/abs/2304.11158)’s [Pythia](https://github.com/EleutherAI/pythia)
*   *Critiques: *[self](https://www.lesswrong.com/s/SfFQE8DXbgkjk62JK/p/TjaeCWvLZtEDAS5Ex#Reasons_it_won_t_work), [Ege](https://www.lesswrong.com/posts/DqLHvJjuPdtrzuoas/my-impression-of-singular-learning-theory), [Skalse](https://www.alignmentforum.org/posts/ALJYj4PpkqyseL7kZ/my-criticism-of-singular-learning-theory)
*   *Funded by: *[Manifund](https://manifund.org/projects/scoping-developmental-interpretability-xg55b33wsfc)
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: $145,000*  
      
     

Various other efforts:

*   Grokking ([Lieberum & Nanda](https://www.neelnanda.io/blog/interlude-a-mechanistic-interpretability-analysis-of-grokking), [Shah followup](https://www.lesswrong.com/posts/JK2QGfNGLjuFnrEvz/explaining-grokking-through-circuit-efficiency)). [Critique by Pope](https://www.lesswrong.com/s/5omSW4wNKbEvYsyje/p/GpSzShaaf8po4rcmA).
*   Old: [Science of DL](https://docs.google.com/document/d/1AyuTphQ31rLHDtpZoEwEPb4fWbZna1H3hGx_YUACxk4/edit) agenda
*   [Anthropic: tracing outputs to training data](https://www.anthropic.com/index/influence-functions)
*   [Scaling training process transparency](https://manifund.org/projects/scaling-training-process-transparency) (Krzyzanowski)
*   [Out of context learning interpretability](https://docs.google.com/document/d/1qs0v6emq3Sn1UbDbstmsz7rzT38qklvIl4q3gw9lvaU/edit#heading=h.9lmc73wscx1r) (Levoso)
*   [Algorithm Distillation Interpretability](https://docs.google.com/document/d/1CdPvKZQzrkTCFIMfHNr0uukbTGhNF0ohZn_am4Z8kzo/edit#heading=h.9lmc73wscx1r) (Levoso)

* * *

2\. Control the thing
---------------------

(Figuring out how to predictably affect model behaviour.)  
 

[*Prosaic*](https://ai-alignment.com/prosaic-ai-control-b959644d79c2)[*alignment*](https://www.lesswrong.com/posts/ziNCZEm7FE9LHxLai/don-t-dismiss-simple-alignment-approaches) */*[*alignment by default*](https://www.alignmentforum.org/posts/Nwgdq6kHke5LY692J/alignment-by-default)

*   *One-sentence summary*: nudging base models by optimising their output. ([RLHF](https://www.alignmentforum.org/posts/vwu4kegAEZTBtpT6p/thoughts-on-the-impact-of-rlhf-research), [Constitutional](https://arxiv.org/abs/2212.08073), [DPO](https://arxiv.org/abs/2310.16944), [SFT](https://www.superannotate.com/blog/llm-fine-tuning#supervised-fine-tuning-sft), [HHH](https://arxiv.org/abs/2112.00861), [RLAIF](https://arxiv.org/abs/2309.00267).) Not really an agenda, but part of agendas, like [Korbak](https://tomekkorbak.com/papers/) or [Lindner](https://www.research-collection.ethz.ch/bitstream/handle/20.500.11850/635156/Doctoral_Thesis_David_Lindner_RC.pdf?sequence=6&isAllowed=y), or Redwood’s defunct harmlessness finetunes, or the [Karnofsky plan](https://www.lesswrong.com/posts/rCJQAkPTEypGjSJ8X/how-might-we-align-transformative-ai-if-it-s-developed-very). I like the name “blind output alignment” for this but “prosaic alignment” is well-established.
*   *Imputed assumptions:* things are generally smooth, relevant capabilities are harder than alignment, assume no mesaoptimisers, that [zero-shot deception is hard](https://arxiv.org/pdf/2311.08379.pdf), assume a humanish ontology is learned, assume no simulated agents, assume that noise in the data means that human preferences are not ruled out. Assume that alignment is a [superficial](https://arxiv.org/pdf/2305.11206.pdf#:~:text=We%20define%20the%20Superficial%20Alignment,used%20when%20interacting%20with%20users.) feature. Maybe assume that thoughts are [translucent](https://www.lesswrong.com/posts/r3xwHzMmMf25peeHE/the-translucent-thoughts-hypotheses-and-their-implications).
*   *Theory of change (steelman)*: we can observe some forms of overoptimisation and correct for them, which might reduce misgeneralisation risk, maybe a lot.
*   *Some names:* [Anthropic](https://www.lesswrong.com/posts/BfN88BfZQ4XGeZkda/concrete-reasons-for-hope-about-ai), OpenAI, [Scale](https://scale.com/blog/safety-evaluations-analysis-lab), [Hugging Face H4](https://huggingface.co/HuggingFaceH4), Eleuther, [LeCun](https://www.lesswrong.com/posts/C5guLAx7ieQoowv3d/lecun-s-a-path-towards-autonomous-machine-intelligence-has-1). Nora Belrose and Quintin Pope state a related view well [here](https://docs.google.com/document/d/18tF9z3OhmKsyQCj93NkrcDwGBquat8BTMma-f3kW7sM/edit#heading=h.1639u7i4jrb3). [JD Pressman](https://twitter.com/jd_pressman/status/1613965694168883201?t=jPuSVkkLMTBcG4ngyj2QHg&s=19) is indefatigable.
*   *Estimated # FTEs: ~~1,000*
*   *Some outputs in 2023*: [CCAI](https://www.anthropic.com/index/collective-constitutional-ai-aligning-a-language-model-with-public-input). [DPO](https://arxiv.org/abs/2310.16944) seems to be the big advance.
*   *Critique: *[hoo](https://www.lesswrong.com/posts/vwu4kegAEZTBtpT6p/thoughts-on-the-impact-of-rlhf-research#The_case_for_a_negative_impact) [boy](https://www.lesswrong.com/posts/d6DvuCKH5bSoT62DB/compendium-of-problems-with-rlhf). Just the very most recent: [Open Problems with RLHF](https://arxiv.org/abs/2307.15217), [neo-Arrow](https://arxiv.org/abs/2310.16048), [Jain & Kirk](https://arxiv.org/abs/2311.12786).
*   *Funded by: *big tech, VCs
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: *some large fraction of the AI industry.  
     

[*Redwood: control evaluations*](https://manifold.markets/RyanGreenblatt/redwood-research-will-we-publish-a-98d97ff076da)

*   *One-sentence summary*: evaluate the humans/org instead: assess the risk of a particular protocol for deploying your model in a particular scenario, by silently swapping in an intentionally misaligned model. Play out the scenario in sim until 1) a catastrophe occurs, 2) your protocol confidently spots the red team model, or 3) the scenario ends without catastrophe. Also do adversarial evaluation (monitoring untrusted model outputs with both trusted and untrusted models). [Predecessor](https://www.alignmentforum.org/posts/MbWWKbyD5gLhJgfwn/meta-level-adversarial-evaluation-of-oversight-techniques-1).
*   *Theory of change:* prevent high-stakes failures by automating risk assessment of eval and deployment plans.
*   *Some names: *Buck Shlegeris, Ryan Greenblatt, Kshitij Sachan
*   *Estimated # FTEs: *10?
*   *Some outputs in 2023*: [big post](https://www.alignmentforum.org/posts/MbWWKbyD5gLhJgfwn/meta-level-adversarial-evaluation-of-oversight-techniques-1), another [in the works](https://www.lesswrong.com/posts/zaaGsFBeDTpCsYHef/shallow-review-of-live-agendas-in-alignment-and-safety?commentId=EjMRdKyFwqbuok4rv).
*   *Critiques: *[of org in general](https://forum.effectivealtruism.org/posts/DaRvpDHHdaoad9Tfu/critiques-of-prominent-ai-safety-labs-redwood-research)
*   *Funded by: OpenPhil*
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: *[$5,300,000](https://www.openphilanthropy.org/grants/redwood-research-general-support-2023/) (whole org last year)
*   Conceived as the same initiative as:

*Safety scaffolds*

*   *One-sentence summary*: Soft [boxing](https://www.lesswrong.com/tag/ai-boxing-containment). Just as people are wrapping LLMs in tooling to boost their capabilities, so can we put up security layers: detectors and classifiers and censors and anomaly detectors and debate partners and "trusted dumb agents" and so on.  See also [process-based supervision](https://www.lesswrong.com/posts/D4gEDdqWrgDPMtasc/thoughts-on-process-based-supervision-1).
*   *Theory of change:* beating every scaffold is conjunctive (and some of the scaffolds are fairly smart), so takeover attempts are more likely to be caught.
*   *Some names:* Buck Shlegeris, Fabien Roger. (Lots of people are doing this de facto but Redwood are the ones reifying it in public.) See also [OAI Preparedness](https://openai.com/blog/frontier-risk-and-preparedness).
*   *Estimated # FTEs: *?
*   *Some outputs in 2023*: [first principles](https://www.lesswrong.com/posts/LhxHcASQwpNa3mRNk/untrusted-smart-models-and-trusted-dumb-models), [nice diagram](https://www.youtube.com/watch?v=Vc51kCFHWFA&t=177s), [defenses against encoded reasoning](https://arxiv.org/abs/2310.18512), [coup probes](https://www.lesswrong.com/posts/WCj7WgFSLmyKaMwPR/coup-probes-catching-catastrophes-with-probes-trained-off). See also [Herd](https://www.lesswrong.com/posts/Q7XWGqL4HjjRmhEyG/internal-independent-review-for-language-model-agent).
*   *Critique: *[I mean kinda these](https://www.lesswrong.com/tag/ai-boxing-containment).
*   *Funded by: ?*
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: ?*
*   h/t Zach Stein-Perlman for resolving this.

### Prevent deception 

Through methods besides mechanistic interpretability.  
 

[*Redwood: mechanistic anomaly detection*](https://www.alignmentforum.org/posts/inALbAqdx63KTaGgs/benchmarks-for-detecting-measurement-tampering-redwood)

*   *One-sentence summary*: measurement tampering is where the AI system manipulates multiple measurements to create the illusion of good results instead of achieving the desired outcome.
*   *Theory of change:* find out when measurement tampering occurs -> build models that don’t do that.
*   See also CAIS
*   *Some names:* Fabien Roger, Ryan Greenblatt, Max Nadeau, Buck Shlegeris, Nate Thomas
*   *Estimated # FTEs: *2.5?
*   *Some outputs in 2023*: [measurement tampering](https://arxiv.org/abs/2308.15605), [password-locked](https://www.alignmentforum.org/posts/rZs6ddqNnW8LXuJqA/password-locked-models-a-stress-case-for-capabilities), [coup probes](https://www.alignmentforum.org/posts/WCj7WgFSLmyKaMwPR/coup-probes-catching-catastrophes-with-probes-trained-off)
*   *Critiques:* [general, of the org](https://forum.effectivealtruism.org/posts/DaRvpDHHdaoad9Tfu/critiques-of-prominent-ai-safety-labs-redwood-research), [critique of past agenda](https://www.alignmentforum.org/posts/wt7HXaCWzuKQipqz3/eis-vi-critiques-of-mechanistic-interpretability-work-in-ai) 
*   *Funded by: *OpenPhil
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: *[$5,300,000](https://www.openphilanthropy.org/grants/redwood-research-general-support-2023/) (whole org, last year)  
     

*Indirect deception monitoring *

*   *One-sentence summary*: build tools to find whether a model will misbehave in high stakes circumstances by looking at it in testable circumstances. This bucket catches work on [lie classifiers](https://www.alignmentforum.org/posts/khFC2a4pLPvGtXAGG/how-to-catch-an-ai-liar-lie-detection-in-black-box-llms-by), [sycophancy](https://arxiv.org/abs/2310.13548), [Scaling Trends For Deception](https://www.alignmentforum.org/posts/pip63HtEAxHGfSEGk/tall-tales-at-different-scales-evaluating-scaling-trends-for).
*   *Theory of change:* maybe we can catch a misaligned model by observing dozens of superficially unrelated parts, or tricking it into self-reporting, or by building the equivalent of brain scans.
*   *Some names:* Dan Hendrycks, Owain Evans, Jan Brauner, Sören Mindermann. See also Apollo, [CAIS](https://www.safe.ai/), CAIF, and the two activation engineering sections in this post.
*   *Estimated # FTEs: 20?*
*   *Some outputs in 2023*: [AI deception survey](https://arxiv.org/abs/2308.14752), [Natural selection](https://arxiv.org/abs/2303.16200), [Overview](https://arxiv.org/abs/2306.12001), [RepEng](https://arxiv.org/pdf/2310.01405.pdf) again
*   *Critique (of related ideas): *[*1%*](https://www.lesswrong.com/posts/RTkatYxJWvXR4Qbyd/deceptive-alignment-is-less-than-1-likely-by-default)
*   *Funded by: *[*OpenPhil*](https://www.openphilanthropy.org/grants/?organization-name=center-for-ai-safety)
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: *$10,618,729 (CAIS, whole org)  
     

*Anthropic: *[*externalised reasoning oversight*](https://www.alignmentforum.org/posts/FRRb6Gqem8k69ocbi/externalized-reasoning-oversight-a-research-direction-for)

*   *One-sentence summary*: Train models that print their actual reasoning in English (or another language we can read) every time. Give negative reward for dangerous-seeming reasoning, or just get rid of models that engage in it.
*   *Theory of change:* “Force a language model to think out loud, and use the reasoning itself as a channel for oversight. If this agenda is successful, it could defeat deception, power-seeking, and other disapproved reasoning.”
*   See also sycophancy.
*   *Some names: *Tamera Lanham, Ansh Radhakrishnan
*   *Estimated # FTEs: ?*
*   *Some outputs in 2023*: [CoT faithfulness](https://arxiv.org/abs/2307.13702), [Question decomposition faithfulness](https://arxiv.org/abs/2307.11768)
*   *Critiques: *[*Samin*](https://www.lesswrong.com/posts/3dFogxGK8uNv5xCSv/you-won-t-solve-alignment-without-agent-foundations)
*   *Funded by: *Anthropic investors
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: *large  
      
     

### Surgical model edits

(interventions on model internals)  
 

[*Weight editing*](https://arxiv.org/abs/2305.13172)

*   *One-sentence summary*: targeted finetuning aimed at changing single fact representations and maybe higher-level stuff
*   *Theory of change*: the other half of mech interp; one family of methods to delete bad things, how to add good things.
*   *Some outputs in 2023*: [multi-objective weight masking](https://arxiv.org/abs/2310.03084). See also concept erasure.
*   *Critiques: *[*of ROME*](https://www.lesswrong.com/posts/QL7J9wmS6W2fWpofd/but-is-it-really-in-rome-an-investigation-of-the-rome-model)

[*Activation engineering *](https://www.lesswrong.com/tag/activation-engineering)

*   *One-sentence summary*: let’s see if we can programmatically modify activations to steer outputs towards what we want, in a way that generalises across models and topics. As much or more an intervention-based approach to interpretability than about control (see above).
*   *Theory of change:* maybe simple things help: let’s build more stuff to stack on top of finetuning. Activations are the last step before output and so interventions on them are less pre-emptable. Slightly encourage the model to be nice, add one more layer of defence to our [bundle](https://www.lesswrong.com/posts/YnGRBADQwpYRbuCbz/towards-hodge-podge-alignment-1) of partial alignment methods.
*   *Some names:* [Alex Turner](https://arxiv.org/abs/2308.10248), Andy Zou, Nina [Rimsky](https://www.alignmentforum.org/posts/raoeNarFYCxxyKAop/modulating-sycophancy-in-an-rlhf-model-via-activation), Claudia Shi, Léo Dana, Ole Jorgensen. See also [Li](https://arxiv.org/abs/2306.03341) and [Bau](https://baulab.info/publications.html) [Lab](https://www.lesswrong.com/posts/iNaaBAEkAy9nAgs3o/turning-off-lights-with-model-editing).
*   *Estimated # FTEs: ~*20
*   *Some outputs in 2023*: [famously CCS](https://arxiv.org/abs/2212.03827) last year, [steering vectors in RL and GPTs](https://www.lesswrong.com/posts/5spBue2z2tw4JuDCx/steering-gpt-2-xl-by-adding-an-activation-vector), [Cadenza RFC](https://www.lesswrong.com/posts/bFwigCDMC5ishLz7X/rfc-possible-ways-to-expand-on-discovering-latent-knowledge), [the shape of concepts](https://www.lesswrong.com/posts/Go5ELsHAyw7QrArQ6/searching-for-a-model-s-concepts-by-their-shape-a). [Roger experiment](https://www.alignmentforum.org/posts/bWxNPMy5MhPnQTzKz/what-discovering-latent-knowledge-did-and-did-not-find-4). See also [representation engineering](https://arxiv.org/abs/2310.01405)
*   *Critiques: *[*of ROME*](https://www.lesswrong.com/posts/QL7J9wmS6W2fWpofd/but-is-it-really-in-rome-an-investigation-of-the-rome-model)
*   *Funded by: Deepmind? Anthropic? MATS?*
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: ?*  
     

### Getting it to learn what we want

(Figuring out how to control what the model figures out.)  
 

[*Social-instinct AGI*](https://www.lesswrong.com/posts/qusBXzCpxijTudvBB/my-agi-safety-research-2022-in-review-and-plans#2__Second_half_of_2022__1_3___My_main_research_project)

*   *One-sentence summary*: Social and moral instincts are (partly) implemented in particular hardwired brain circuitry; let's figure out what those circuits are and how they work; this will involve symbol grounding. Newest iteration of [a sustained and novel agenda](https://sjbyrnes.com/agi.html).
*   *Theory of change:* Fairly direct alignment via changing training to reflect actual human reward. Get actual data about (reward, training data) → (human values) to help with theorising this map in AIs; "understand human social instincts, and then maybe adapt some aspects of those for AGIs, presumably in conjunction with other non-biological ingredients".
*   *Some names: *Steve Byrnes
*   *Estimated # FTEs:* 1
*   *Some outputs in 2023*:
*   *Critiques: ?*
*   *Funded by:* Astera,
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: ?*

[*Imitation learning*](https://www.alignmentforum.org/posts/LTFaD96D9kWuTibWr/just-imitate-humans)

*   *One-sentence summary*: train models on human behaviour (such as monitoring which keys a human presses when in response to what happens on a computer screen); contrast with [Strouse](https://arxiv.org/abs/2110.08176).
*   *Theory of change:* humans learn well by observing each other -> let’s test whether AIs can learn by observing us -> outer alignment and moonshot at safe AGI.
*   If you squint, this is what 'alignment by default' is doing, in the form of a self-supervised learning imitating the human web corpus. But the proposed algorithms in imitation learning proper are very different and more obviously Bayesian.
*   *Some names: *Jérémy Scheurer, Tomek Korbak, Ethan Perez
*   *Estimated # FTEs: ?*
*   *Some outputs in 2023*: [Imitation Learning from Language Feedback](https://www.lesswrong.com/posts/mCZSXdZoNoWn5SkvE/imitation-learning-from-language-feedback-1), [survey](https://arxiv.org/abs/2309.02473), [nice theory from 2022](https://www.jmlr.org/papers/v23/21-0618.html)
*   *Critiques: *[*many*](https://www.alignmentforum.org/posts/LTFaD96D9kWuTibWr/just-imitate-humans?commentId=kgZxwD3Wm96tNDKxu)
*   *Funded by: ?*
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: ?*  
     

*Reward learning *

*   *One-sentence summary*: People like CHAI are still looking at [reward learning](https://arxiv.org/abs/2203.07475) to “reorient the general thrust of AI research towards provably beneficial systems”. (They are also doing a lot of advocacy, like everyone else.)
*   *Theory of change: *understand what kinds of things can go wrong when humans are directly involved in training a model -> build tools that make it easier for a model to learn what humans want it to learn.
*   See also RLHF and recursive reward modelling, the industrialised forms.
*   *Some names: *[CHAI](https://humancompatible.ai/progress-report/) among others
*   *Estimated # FTEs: ?*
*   *Some outputs in 2023*: [Multiple teachers](https://arxiv.org/abs/2303.00894), [Minimal knowledge](https://arxiv.org/pdf/2306.09309.pdf), [etc](https://humancompatible.ai/progress-report/), [Causal confusion](https://arxiv.org/abs/2204.06601)
*   *Critiques: *[*nice summary*](https://www.lesswrong.com/posts/i5kijcjFJD6bn7dwq/evaluating-the-historical-value-misspecification-argument) *of historical problem statements*
*   *Funded by: *[*mostly OpenPhil*](https://donations.vipulnaik.com/donee.php?donee=Center+for+Human-Compatible+AI)
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources:* $12,222,246 ([CHAI, whole org, 2021](https://donations.vipulnaik.com/donee.php?donee=Center%20for%20Human-Compatible%20AI&cause_area_filter=AI%20safety), not counting the UC Berkeley admin tax)  
     

### Goal robustness 

(Figuring out how to make the model keep doing ~what it has been doing so far.)  
 

[*Measuring OOD*](https://towardsdatascience.com/out-of-distribution-generalization-66b6f8980ef3)

*   *One-sentence summary*: let’s build models that can recognize when they are out of distribution (or at least give us tools to notice when they are). See also anomaly detection.
*   *Theory of change: *bad things happen if powerful AI “learns the wrong lesson” from training data, we should make it not do that.
*   *Some names: *Steinhardt, Tegan Maharaj, [Irina Rish.](https://arxiv.org/abs/2210.03150) Maybe [this](https://www.nsf.gov/awardsearch/showAward?AWD_ID=2331669&HistoricalAwards=false).
*   *Estimated # FTEs: ?*
*   *Some outputs in 2023*: [Alignment from a DL perspective](https://arxiv.org/abs/2209.00626), [Goal Misgeneralization](https://arxiv.org/abs/2210.01790), [CoinRun: Solving Goal Misgeneralisation](https://arxiv.org/abs/2309.16166), [Modeling ambiguity](https://arxiv.org/abs/2304.14399).
*   *Critiques: ?*
*   *Funded by: ?*
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: ?*  
     

[*Concept extrapolation*](https://arxiv.org/abs/2306.10999)

*   *One-sentence summary*: continual learning to make model internals more stable as they learn / as the world changes; safely extending features an agent has learned in training to new datasets and environments.
*   *Theory of change: *get them to generalise our values roughly correctly and OOD. Also ‘let's make it an industry standard for AI systems to "become conservative and ask for guidance when facing ambiguity", and gradually improve the standard from there as we figure out more alignment stuff.’ – Bensinger’s gloss.
*   *Some names:* Stuart Armstrong
*   *Estimated # FTEs: *4?
*   *Some outputs in 2023*: [good primer](https://arxiv.org/abs/2306.10999), [solved a toy problem](https://arxiv.org/abs/2309.16166)
*   *Critiques: *[*Soares*](https://www.lesswrong.com/posts/3pinFH3jerMzAvmza/on-how-various-plans-miss-the-hard-bits-of-the-alignment#Stuart_Armstrong___Concept_Extrapolation)
*   *Funded by: ?*
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: ?*  
     

[*Mild optimisation*](https://www.lesswrong.com/tag/mild-optimization)

*   *One-sentence summary*: avoid Goodharting by getting AI to satisfice rather than maximise.
*   *Theory of change:* if we fail to exactly nail down the preferences for a superintelligent agent we die to Goodharting -> shift from maximising to satisficing in the agent’s utility function -> we get a nonzero share of the lightcone as opposed to zero; also, moonshot at this being the recipe for fully aligned AI.
*   *Some names:*
*   *Estimated # FTEs: *2?
*   *Some outputs in 2023*: [Gillen](https://www.lesswrong.com/posts/9fL22eBJMtyCLvL7j/soft-optimization-makes-the-value-target-bigger), [Soft-optimisation, Bayes and Goodhart](https://www.lesswrong.com/posts/XXrGhqSNZjcG2nNiy/aisc-team-report-soft-optimization-bayes-and-goodhart)
*   *Critiques: *[*Dearnaley*](https://www.lesswrong.com/posts/q9yPYG2St2L4SEtKW/requirements-for-a-stem-capable-agi-value-learner-my-case-1)*?*
*   *Funded by: ?*
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: ?*

* * *

3. [Make AI solve it](https://www.lesswrong.com/tag/ai-assisted-ai-automated-alignment)
---------------------------------------------------------------------------------------

(Figuring out how models might help figure it out.)  
 

### Scalable oversight

(Figuring out how to help humans supervise models. Hard to cleanly distinguish from ambitious mechanistic interpretability.)

*OpenAI: *[*Superalignment*](https://openai.com/blog/introducing-superalignment)

*   *One-sentence summary*: be ready to align a human-level automated alignment researcher.
*   *Theory of change: *get it to help us with scalable oversight, Critiques, recursive reward modelling, and so solve inner alignment. [See also](https://www.lesswrong.com/posts/fYf9JAwa6BYMt8GBj/link-a-minimal-viable-product-for-alignment?commentId=uv8pteZJSzJeiqFA8) seed.
*   *Some names:* Ilya Sutskever, Jan Leike, Leopold Aschenbrenner, Collin Burns
*   *Estimated # FTEs: *30?
*   *Some outputs in 2023*: [whole org](https://openai.com/research?topics=safety-alignment )
*   *Critiques: *[*Zvi*](https://www.lesswrong.com/posts/NSZhadmoYdjRKNq6X/openai-launches-superalignment-taskforce)*, *[*Christiano*](https://www.lesswrong.com/posts/Hna4aoMwr6Qx9rHBs/linkpost-introducing-superalignment?commentId=NsYXBdLY6edAXavsM)*, *[*MIRI*](https://www.lesswrong.com/posts/tD9zEiHfkvakpnNam/a-challenge-for-agi-organizations-and-a-challenge-for-1)*, *[*Steiner*](https://www.lesswrong.com/posts/pxiaLFjyr4WPmFdcm/take-2-building-tools-to-help-build-fai-is-a-legitimate)*, *[*Ladish*](https://www.lesswrong.com/posts/6RC3BNopCtzKaTeR6/thoughts-on-the-openai-alignment-plan-will-ai-research)*, *[*Wentworth*](https://www.lesswrong.com/posts/DwqgLXn5qYC7GqExF/godzilla-strategies)*, *[*Gao*](https://www.lesswrong.com/posts/YiRsCfkJ2ERGpRpen/leogao-s-shortform?commentId=qmfPJspzsXaR7xCYj) *lol*
*   *Funded by: *Microsoft
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: *~[$100m](https://www.bloomberg.com/news/articles/2023-03-13/microsoft-built-an-expensive-supercomputer-to-power-openai-s-chatgpt?sref=ExbtjcSG) of compute alone (20% of OpenAI’s secured compute)  
     

[*Supervising AIs improving AIs*](https://www.lesswrong.com/posts/7e5tyFnpzGCdfT4mR/research-agenda-supervising-ais-improving-ais)

*   *One-sentence summary*: researching scalable methods of tracking behavioural drift in language models and benchmarks for evaluating a language model's capacity for stable self-modification via self-training.
*   *Theory of change:* early models train ~only on human data while later models also train on early model outputs, which leads to early model problems cascading; left unchecked this will likely cause problems, so we need a better iterative improvement process.
*   *Some names:* Quintin Pope, Jacques Thibodeau, Owen Dudney, Roman Engeler
*   *Estimated # FTEs:* 2
*   *Some outputs in 2023*: ?
*   *Critiques:*
*   *Funded by: *LTFF, Lightspeed, OpenPhil, tiny Lightspeed grant,
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: *~$100,000   
     

[*Cyborgism*](https://www.lesswrong.com/posts/bxt7uCiHam4QXrQAA/cyborgism)

*   *One-sentence summary*: Train human-plus-LLM alignment researchers: with humans in the loop and without outsourcing to autonomous agents. More than that, an active attitude towards risk assessment of AI-based AI alignment.
*   *Theory of change: *Cognitive prosthetics to amplify human capability and preserve values. More alignment research per year and dollar.
*   *Some names:* Janus, Kees Dupuis. See also [this](https://www.lesswrong.com/posts/k93NEoXZq6CdXegdx/philosophical-cyborg-part-1) team doing similar things.
*   *Estimated # FTEs: 6?*
*   *Some outputs in 2023*: [agenda statement](https://www.lesswrong.com/posts/bxt7uCiHam4QXrQAA/cyborgism), [role play](https://arxiv.org/abs/2305.16367)
*   *Critiques: *[*self*](https://www.lesswrong.com/posts/bxt7uCiHam4QXrQAA/cyborgism#Failure_Modes)
*   *Funded by: ?*
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: ?*

*See also *[Simboxing](https://www.lesswrong.com/posts/WKGZBCYAbZ6WGsKHc/love-in-a-simbox-is-all-you-need) (Jacob Cannell).  
 

### Task decomp

Recursive reward modelling is supposedly not dead but instead one of the tools Superalignment will build.

Another line tries to make something honest out of [chain of thought](https://arxiv.org/abs/2305.04388) / [tree of thought](https://arxiv.org/abs/2305.10601).  
 

[*Elicit*](https://blog.elicit.com/) (previously [Ought](https://www.lesswrong.com/posts/pYcFPMBtQveAjcSfH/supervise-process-not-outcomes))

*   A [pivot/spinoff](https://ought.org/updates/2023-09-25-spinoff) of some sort happened. “most former Ought staff are working at the new organisation”, details unclear.
*   *One-sentence summary*: “a) improved reasoning of AI governance & alignment researchers, particularly on long-horizon tasks and (b) pushing supervision of process rather than outcomes, which reduces the optimisation pressure on imperfect proxy objectives leading to “safety by construction”.
*   *Theory of change: “*The two main impacts of [Elicit on AI Safety](https://blog.elicit.com/ai-safety/) are improving epistemics and pioneering process supervision.”
*   *Some names: Charlie George, Andreas Stuhlmüller*
*   *Estimated # FTEs: ?*
*   *Some outputs in 2023*: [factored verification](https://blog.elicit.com/factored-verification-detecting-and-reducing-hallucinations-in-frontier-models-using-ai-supervision/)
*   *Critiques:*
*   *Funded by: *[*public benefit corporation*](https://blog.elicit.com/elicit-raises-9-million-and-becomes-a-public-benefit-corporation/)
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: $9,000,000*  
     

### Adversarial 

[*Deepmind Scalable Alignment*](https://www.alignmentforum.org/posts/nzmCvRvPm4xJuqztv/deepmind-is-hiring-for-the-scalable-alignment-and-alignment)

*   *One-sentence summary*: “make highly capable agents do what humans want, even when it is difficult for humans to know what that is”.
*   *Theory of change:* \[“Give humans help in supervising strong agents”\] + \[“Align explanations with the true reasoning process of the agent”\] + \[“Red team models to exhibit failure modes that don’t occur in normal use”\] are necessary but probably not sufficient for safe AGI.
*   *Some names: *Geoffrey Irving
*   *Estimated # FTEs: ?*
*   *Some outputs in 2023: ?*
*   *Critiques:*
*   *Funded by: ?*
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: ?*  
     

[*Anthropic / NYU Alignment Research Group / Perez collab*](https://docs.google.com/document/d/173SpCyspboHBp3bHqWvUiduzatbuuv7QAvWVamwcGbk/edit#heading=h.y688a3xvk7nc)

*   *One-sentence summary*: debate 2.0. scalable oversight of truthfulness: is it possible to develop training methods that incentivize truthfulness even when humans are unable to directly judge the correctness of a model’s output? / scalable benchmarking how to measure (proxies for) speculative capabilities like situational awareness.
*   *Theory of change: *current methods like RLHF will falter as frontier AI tackles harder and harder questions -> we need to build tools that help human overseers continue steering AI -> let’s develop theory on what approaches might scale -> let’s build the tools.
*   *Some names: Samuel Bowman, Ethan Perez, Alex Lyzhov, David Rein, Jacob Pfau, Salsabila Mahdi, Julian Michael*
*   *Estimated # FTEs:* ?
*   *Some outputs in 2023*: [Specific versus General Principles for Constitutional AI](https://www.anthropic.com/index/specific-versus-general-principles-for-constitutional-ai), [Debate Helps Supervise Unreliable Experts](https://arxiv.org/abs/2311.08702), [Language Models Don't Always Say What They Think](https://arxiv.org/abs/2305.04388), full [rundown](https://www.alignmentforum.org/posts/QtqysYdJRenWFeWc4/anthropic-fall-2023-debate-progress-update)
*   *Critiques: *[*obfuscation*](https://www.lesswrong.com/posts/PJLABqQ962hZEqhdB/debate-update-obfuscated-arguments-problem)*, *[*local inadequacy*](https://www.alignmentforum.org/posts/MbWWKbyD5gLhJgfwn/meta-level-adversarial-evaluation-of-oversight-techniques-1)*?, *[*it doesn’t work right now*](https://arxiv.org/abs/2210.10860) *(2022)*
*   *Funded by: ?*
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: ?*

See also [FAR](https://far.ai/) (below).

* * *

4\. Theory 
-----------

(Figuring out what we need to figure out, and then doing that. This used to be all we could do.)  
 

### Galaxy-brained end-to-end solutions  
 

[*The Learning-Theoretic Agenda*](https://www.alignmentforum.org/posts/ZwshvqiqCvXPsZEct/the-learning-theoretic-agenda-status-2023)

*   *One-sentence summary*: try to formalise a more realistic agent, understand what it means for it to be aligned with us, translate between its ontology and ours, and produce desiderata for a training setup that points at coherent AGIs similar to our model of an aligned agent.
*   *Theory of change: *work out how to train an aligned AI by first fixing formal epistemology.
*   *Some names:* Vanessa Kosoy
*   *Estimated # FTEs: *2
*   *Some outputs in 2023*: [quantum??](https://www.lesswrong.com/posts/cYJqGWuBwymLdFpLT/non-unitary-quantum-logic-seri-mats-research-sprint), [mortal pop](https://www.lesswrong.com/posts/HNnRCPe2CejfupSow/fixed-points-in-mortal-population-games), [a logic](https://www.lesswrong.com/posts/nEFAno6PsCKnNgkd5/infra-bayesian-logic)
*   *Critiques: *[*Matolcsi*](https://www.lesswrong.com/posts/StkjjQyKwg7hZjcGB/a-mostly-critical-review-of-infra-bayesianism)
*   *Funded by: *MIRI, MATS, Effective Ventures, Lightspeed
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: ?*  
     

[*Open Agency Architecture*](https://www.lesswrong.com/posts/pKSmEkSQJsCSTK6nH/an-open-agency-architecture-for-safe-transformative-ai)

*   *One-sentence summary*: Get AI to build a detailed world simulation which humans understand, elicit preferences over future states from humans, formally verify that the AI adheres to coarse preferences; plan using this world model and preferences. See also [Provably safe systems](https://arxiv.org/abs/2309.01933) (which I hope merges with it); see also [APTAMI](https://openreview.net/forum?id=BZ5a1r-kVsf).
*   *Theory of change: *ontology specification, unprecedented formalisation of physical situations, unprecedented formal verification of high-dimensional state-action sequences. Stuart Russell’s Revenge. Notable for not requiring that we solve ELK; does require that we solve ontology though.
*   *Some names:* Davidad, Evan Miyazono, Daniel Windham. See also: [Cannell](https://www.lesswrong.com/posts/pKSmEkSQJsCSTK6nH/an-open-agency-architecture-for-safe-transformative-ai?commentId=p3QSNw6AMc6MtC4QF).
*   *Estimated # FTEs: *5?
*   *Some outputs in 2023*: [Several](https://www.lesswrong.com/posts/pHJtLHcWvfGbsW7LR/roadmap-for-a-collaborative-prototype-of-an-open-agency) [teams](https://www.lesswrong.com/posts/jRf4WENQnhssCb6mJ/davidad-s-bold-plan-for-alignment-an-in-depth-explanation) [working](https://atlascomputing.org/) out the details a bit more
*   *Critiques: *[Soares](https://www.lesswrong.com/posts/pKSmEkSQJsCSTK6nH/an-open-agency-architecture-for-safe-transformative-ai?commentId=ZuWsoXApJqD4PwfXr)
*   *Funded by: *the estate of Peter Eckersley / Atlas Computing’s future funder / [the might of the post-Cummings British state](https://twitter.com/davidad/status/1719770184565530890)
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: *Very roughly £50,000,000  
      
     

[*Provably safe systems*](https://arxiv.org/abs/2309.01933)

*   *One-sentence summary*: formally model the behavior of physical/social systems, define precise “guardrails” that constrain what actions can occur, require AIs to provide safety proofs for their recommended actions, automatically validate these proofs. Closely related to OAA.
*   *Theory of change:* make a formal verification system that can act as an intermediary between a human user and a potentially dangerous system and only let provably safe actions through.
*   *Some names:* Steve Omohundro, Max Tegmark
*   *Estimated # FTEs: *1??
*   *Some outputs in 2023*: plan announcement. [Omohundro’s org](https://www.google.com/search?q=beneficial+ai+research+omohundro&client=ubuntu-chr&hs=YtH&sca_esv=585404198&sxsrf=AM9HkKnEEdAHVYIgzqf7eSVTTtoNxsq0vw%3A1700999001104&ei=WS9jZar5BdOQhbIPiJCEuAE&ved=0ahUKEwjqieWJy-GCAxVTSEEAHQgIARcQ4dUDCBA&uact=5&oq=beneficial+ai+research+omohundro&gs_lp=Egxnd3Mtd2l6LXNlcnAiIGJlbmVmaWNpYWwgYWkgcmVzZWFyY2ggb21vaHVuZHJvSO0gUIYCWKAfcAJ4AZABAJgBfKAB2giqAQM1Lja4AQPIAQD4AQHCAgoQABhHGNYEGLADwgIGEAAYFhgewgILEAAYgAQYigUYhgPCAgUQIRigAcICBBAhGBXCAggQIRgWGB4YHcICBxAhGKABGAriAwQYACBBiAYBkAYI&sclient=gws-wiz-serp#ip=1) are quite enigmatic.
*   *Critiques: *[*Zvi*](https://thezvi.substack.com/p/ai-28-watching-and-waiting?utm_source=%2Fsearch%2Fomohundro&utm_medium=reader2#:~:text=Max%20Tegmark%20and%20Steve%20Omohundo%20drop%20a%20new%20paper)
*   *Funded by: unknown*
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: ?*  
     

*Conjecture: *[*Cognitive Emulation*](https://www.lesswrong.com/posts/ngEvKav9w57XrGQnb/cognitive-emulation-a-naive-ai-safety-proposal) *(CoEms)*

*   *One-sentence summary*: restrict the design space to (partial) emulations of human reasoning. If the AI uses similar heuristics to us, it should default to not being extreme.
*   *Theory of change: *train a bounded tool AI which will help us against AGI without being very dangerous and will make banning unbounded AIs more politically feasible.
*   *Some names: Connor Leahy, Gabriel Alfour?*
*   *Estimated # FTEs: *11?
*   *Some outputs in 2023*: ?
*   *Critiques: *[*Scher*](https://www.lesswrong.com/posts/ngEvKav9w57XrGQnb/cognitive-emulation-a-naive-ai-safety-proposal?commentId=vvurB4rZFEPoHwnpz)*, *[*Samin*](https://www.lesswrong.com/posts/ngEvKav9w57XrGQnb/cognitive-emulation-a-naive-ai-safety-proposal?commentId=sEknDwrJ4WdxMz66c)*, *[*org*](https://www.lesswrong.com/posts/9jvrQToSq3CYvoeHf/critiques-of-prominent-ai-safety-labs-conjecture)
*   *Funded by: private investors (Plural Platform, Metaplanet, secret)*
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources:* millions USD.  
     

[*Question-answer counterfactual intervals (QACI)*](https://www.lesswrong.com/posts/4RrLiboiGGKfsanMF/the-qaci-alignment-plan-table-of-contents)

*   *One-sentence summary*: Get the thing to work out its own objective function (a la HCH).
*   *Theory of change:* “The aligned goal should be made of fully formalized math, not of human concepts that an AI has to interpret in its ontology, because ontologies break and reshape as the AI learns and changes. \[..\] a computationally unbounded mathematical oracle being given that goal would take desirable actions; and then, we should design a computationally bounded AI which is good enough to take satisfactory actions.”
*   *Some names*: Tamsin Leake
*   *Estimated # FTEs: 3?*
*   *Some outputs in 2023*: see [agenda post](https://www.lesswrong.com/posts/4RrLiboiGGKfsanMF/the-qaci-alignment-plan-table-of-contents)
*   *Critiques: *[Hobson](https://www.lesswrong.com/posts/CYtzXadXFtBSBYm3J/a-narrative-explanation-of-the-qaci-alignment-plan?commentId=uFofk2t7XEsqxGsTZ), [Anom](https://www.lesswrong.com/posts/CYtzXadXFtBSBYm3J/a-narrative-explanation-of-the-qaci-alignment-plan?commentId=8wqGNfotgeTp4G9gu)
*   *Funded by: SFF*
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources:* $438,000+  
     

### Understanding agency 

(Figuring out ‘what even is an agent’ and how it might be linked to causality.)  
 

[*Causal foundations*](https://causalincentives.com/)

*   *One-sentence *[intro](https://www.alignmentforum.org/s/pcdHisDEGLbxrbSHD): using causal models to understand agents and so design environments with no incentive for defection.
*   *Theory of change*: [Path-specific objectives](https://arxiv.org/pdf/2204.10018.pdf) avoid stringent demands on value specification, bottleneck is instead ensuring stability (how prone to unintentional side-effects a state is).
*   *Some names*: Tom Everitt, Lewis Hammond, Francis Rhys Ward, Ryan Carey, Sebastian Farquhar
*   *Estimated # FTEs*: 4-8
*   *Some outputs in 2023*: [sequence](https://www.alignmentforum.org/s/pcdHisDEGLbxrbSHD), [Defining Deception](https://causalincentives.com/pdfs/deception-ward-2023.pdf), [unifying the big decision theories](https://arxiv.org/abs/2307.10987), [first causal discovery](https://arxiv.org/abs/2208.08345) algorithm for discovering agents
*   *Critiques*:
*   *Funded by*: ?
*   *Trustworthy command, closure, opsec, common good, alignment mindset*: ?
*   *Resources*: small fraction of Deepmind  
     

[*Alignment of Complex Systems*](https://acsresearch.org/)*: Hierarchical agency*

*   *One-sentence summary*: Develop formal models of subagents and superagents, use the model to specify desirable properties of whole-part relations (e.g. how to prevent human-friendly parts getting wiped out). Currently using active inference as inspiration for the formalism. Study human and societal preferences and cognition; make a game-theoretic extension of active inference.
*   *Theory of change:* Solve [self-unalignment](https://www.alignmentforum.org/posts/9GyniEBaN3YYTqZXn/the-self-unalignment-problem), prevent procrustean alignment, allow for scalable noncoercion.
*   *Some names:* Jan Kulveit, Tomáš Gavenčiak
*   *Estimated # FTEs: 4*
*   *Some outputs in 2023*: [insights](https://acsresearch.org/posts) into LLMs, a deep dive into [active inference](https://arxiv.org/abs/2311.10215).
*   *Critiques: *[indirect](https://www.alignmentforum.org/posts/H5iGhDhQBtoDpCBZ2/announcing-the-alignment-of-complex-systems-research-group?commentId=frEufx3c6cRmhDjbh)
*   *Funded by: *SFF
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: *$425,000?
*   See also the "[ecosystems of intelligence](https://arxiv.org/abs/2212.01354)" collab involving Karl Friston and Beren Millidge among many others.  
     

[*The ronin sharp left turn crew *](https://www.lesswrong.com/posts/qbcuk8WwFnTZcXTd6/thomas-kwa-s-miri-research-experience)

*   *One-sentence summary*: ‘started off as "characterize the sharp left turn" and evolved into getting fundamental insights about idealized forms of [consequentialist cognition](https://arbital.com/p/consequentialist)’.
*   *Theory of change:* understand general properties of consequentialist agents -> figure out which subproblem is likely to actually help -> formalise the relevant insights -> fewer ways to die to AI.
*   *Some names: *(Kwa, Barnett, Hebbar) in the past
*   *Estimated # FTEs:* 2?
*   *Some outputs in 2023*: postmortem
*   *Critiques: *[Gabs](https://www.lesswrong.com/posts/v6zZaR7aDD6vkuPmx/science-of-deep-learning-more-tractably-addresses-the-sharp), [Soares](https://www.lesswrong.com/posts/3pinFH3jerMzAvmza/on-how-various-plans-miss-the-hard-bits-of-the-alignment#Vivek_Hebbar__summarized__perhaps_poorly__from_last_time_we_spoke_of_this_in_person), [Pope](https://www.lesswrong.com/posts/hvz9qjWyv8cLX9JJR/evolution-provides-no-evidence-for-the-sharp-left-turn), [etc](https://www.lesswrong.com/tag/sharp-left-turn), [tangentially EJT](https://www.lesswrong.com/posts/yCuzmCsE86BTu9PfA/there-are-no-coherence-theorems)
*   *Funded by: *Lightspeed
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: *$269,200 (Hebbar)  
     

[*Shard theory*](https://www.lesswrong.com/tag/shard-theory)

*   *One-sentence summary*: model the internal components of agents, use humans as a model organism of AGI (humans seem made up of shards and so might AI).
*   *Theory of change:* “If policies are controlled by an ensemble of influences ("shards"), consider which training approaches increase the chance that human-friendly shards substantially influence that ensemble.”
*   See also Activation Engineering.
*   *Some names: *Quintin Pope, Alex Turner
*   *Estimated # FTEs: 4*
*   *Some outputs in 2023*: [really solid](https://www.lesswrong.com/posts/JusJcepE2qohiC3hm/predictions-for-shard-theory-mechanistic-interpretability) empirical stuff in control / interventional interpretability
*   *Critiques: *[*Chan*](https://www.lesswrong.com/posts/8ccTZ9ZxpJrvnxt4F/shard-theory-in-nine-theses-a-distillation-and-critical#My_opinions_on_the_validity_of_each_of_the_nine_theses)*, *[*Soares*](https://www.lesswrong.com/posts/Aet2mbnK7GDDfrEQu/contra-shard-theory-in-the-context-of-the-diamond-maximizer)*, *[*Miller*](https://www.lesswrong.com/posts/dRsrfC8LN4z2oehJg/the-heritability-of-human-values-a-behavior-genetic-critique)*, *[*Lang*](https://www.lesswrong.com/posts/L4e7CqqpDxea2x4Gg/disentangling-shard-theory-into-atomic-claims)*, *[*Kwa*](https://www.lesswrong.com/posts/xsieF8SXw4J5LkzEg/failure-modes-in-a-shard-theory-alignment-plan)
*   *Funded by: *?
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources:* ?  
     

[*boundaries / membranes*](https://www.lesswrong.com/posts/fjgoMaBenyXcRDrbX/boundaries-membranes-and-ai-safety-compilation)

*   *One-sentence summary*: Formalise one piece of morality: the causal separation between agents and their environment. See also Open Agency Architecture.
*   *Theory of change: *[Formalise (part of) morality/safety](https://www.lesswrong.com/posts/KX3xx8LTnE7GKoFuj/boundaries-for-formalizing-an-mvp-morality), solve outer alignment.
*   *Some names: *[Chris Lakin](mailto:chris@chrislakin.com) (full-time), [Andrew Critch](https://www.lesswrong.com/s/LWJsgNYE8wzv49yEc), [Davidad](https://www.lesswrong.com/posts/fjgoMaBenyXcRDrbX/boundaries-membranes-and-ai-safety-compilation#Davidad_s_OAA)
*   *Estimated # FTEs: *1
*   *Some outputs in 2023*: problem statements, planning a workshop early 2024
*   *Critiques:*
*   *Funded by:* private donor & Foresight
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: *<$100k  
     

*A *[*disempowerment formalism*](https://manifund.org/projects/agency-and-disempowerment)

*   *One-sentence summary*: offer formal and operational notions of (dis)empowerment which are conceptually satisfactory and operationally implementable.
*   *Theory of change:* formalisms will be useful in the future.
*   *Some names: Damiano Fornasiere, Pietro Greiner*
*   *Estimated # FTEs: 2*
*   *Some outputs in 2023*: ?
*   *Critiques:*
*   *Funded by: *Manifund
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: $60,300*  
     

[*Performative prediction*](https://manifund.org/projects/avoiding-incentives-for-performative-prediction-in-ai)

*   *One-sentence summary*: “how incentives for performative prediction can be eliminated through the joint evaluation of multiple predictors”.
*   *Theory of change:* “If powerful AI systems develop the goal of maximising predictive accuracy, either incidentally or by design, then this incentive for manipulation could prove catastrophic” -> notice when it’s happening -> design models that don’t do that.
*   *Some names: *Rubi Hudson
*   *Estimated # FTEs: 1*
*   *Some outputs in 2023*: [Conditional Prediction with Zero-Sum Training Solves Self-Fulfilling Prophecies](https://www.alignmentforum.org/posts/A48amesEmqD8KNSmY/conditional-prediction-with-zero-sum-training-solves-self) (a precursor)
*   *Critiques: ?*
*   *Funded by: *Manifund
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: *$33,200  
     

*Understanding optimisation*

*   *One-sentence summary*: what is “optimisation power” (formalised), how do we build tools that track it, how relevant is any of this anyway. See also developmental interpretability?
*   *Theory of change:* existing theories are either rigorous OR good at capturing what we mean; let’s find one that is both -> use the concept to build a better understanding of how and when an AI might get more optimisation power. Would be nice if we could detect or rule out speculative stuff like gradient hacking too.
*   *Some names: *[Alex Altair](https://www.lesswrong.com/posts/7nDvJiikgiawHAp6z/my-research-agenda-in-agent-foundations), Jacob Hilton, Thomas Kwa
*   *Estimated # FTEs: ?*
*   *Some outputs in 2023*: Altair drafts ([1](https://www.lesswrong.com/posts/csiAvRMGG5aAWvKWb/draft-introduction-to-optimization), [2](https://www.lesswrong.com/posts/h3Nqjy75xoqJ3Tvup/draft-the-optimization-toolbox), [3](https://www.lesswrong.com/posts/8CSJvfcvDGioNQF87/draft-detecting-optimization), [4](https://www.lesswrong.com/posts/ouXqWFxHZGsC3B8D7/draft-inferring-minimizers)), [How Many Bits Of Optimisation Can One Bit Of Observation Unlock?](https://www.lesswrong.com/posts/6rZroG3mztowktJzp/how-many-bits-of-optimization-can-one-bit-of-observation) (Wentworth), [but at what cost?](https://www.lesswrong.com/posts/dfTm26pvq7yQp8mR3/one-bit-of-observation-can-unlock-many-of-optimization-but), [Towards Measures of Optimisation](https://www.alignmentforum.org/posts/X6ZjFShxNBNM5QCg4/towards-measures-of-optimisation-3) (MacDermott, Oldenziel); Goodharting: [RL stuff](https://www.alignmentforum.org/posts/Eu6CvP7c7ivcGM3PJ/goodhart-s-law-in-reinforcement-learning), [Krueger](https://arxiv.org/abs/2209.13085), [overopt](https://arxiv.org/abs/2210.10760), [catastrophic Goodhart](https://www.lesswrong.com/posts/fuSaKr6t6Zuh6GKaQ/when-is-goodhart-catastrophic).
*   *Critiques: ?*
*   *Funded by:* LTFF, OpenAI, ?
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: ?*  
      
     

### Corrigibility

(Figuring out how we get superintelligent agents to keep listening to us. Arguably scalable oversight and superalignment are ~atheoretical approaches to this.)

  
[*Behavior alignment theory*](https://www.michael-k-cohen.com/publications) 

*   *One-sentence summary*: predict properties of AGI (e.g. powerseeking) with formal models. Corrigibility as the opposite of powerseeking.
*   *Theory of change:* figure out hypotheses about properties powerful agents will have -> attempt to rigorously prove under what conditions the hypotheses hold, test them when feasible.
*   *Some names: *Marcus Hutter, Michael Cohen ([1](https://arxiv.org/abs/2006.08753), [2](https://onlinelibrary.wiley.com/doi/10.1002/aaai.12064)), Michael Osborne
*   *Estimated # FTEs: *3
*   *Some outputs in 2023*: ?
*   *Critiques:* [Carey & Everitt (against corrigibility)](https://arxiv.org/abs/2305.19861)
*   *Funded by: Deepmind*
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: ?*  
     

The comments in [this thread](https://www.lesswrong.com/posts/AqsjZwxHNqH64C2b6/let-s-see-you-write-that-corrigibility-tag) are extremely good – but none of the authors are working on this!! See also [Holtman’s neglected result](https://arxiv.org/abs/1908.01695). See also [EJT](https://philpapers.org/rec/THOTSP-7) (and formerly [Petersen](https://www.lesswrong.com/posts/sHGxvJrBag7nhTQvb/invulnerable-incomplete-preferences-a-formal-statement-1#comments)). See also [Dupuis](https://www.lesswrong.com/posts/gLyRQCg6kp5cqTQTm/collective-identity).

### Ontology identification 

(Figuring out how superintelligent agents think about the world and how we get superintelligent agents to actually tell us what they know. Much of interpretability is incidentally aiming at this.)  
 

[*ARC Theory*](https://www.alignment.org/theory/) 

*   *One-sentence summary*: train an AI that we can extract the latent, and seeming, and encrypted knowledge of, even when it has incentives to hide it. ELK, formalising heuristics, [mechanistic anomaly detection](https://www.alignment.org/blog/mechanistic-anomaly-detection-and-elk/)
*   *Theory of change*: formalise notions of models having access to some bit(s) of information -> design training objectives that incentivize systems to honestly report their internal beliefs
*   *Some names:* Paul Christiano, Mark Xu.
*   *Some outputs in 2023*: Nothing public; ‘we’re trying to develop a framework for “formal heuristic arguments” that can be used to reason about the behavior of neural networks.’
*   Critiques: [clarification](https://www.lesswrong.com/posts/8xCtJHAbzyA2oA6J4/clarifying-what-elk-is-trying-to-achieve), [alternative](https://www.lesswrong.com/posts/NxApPkbjt9hXraSts/for-elk-truth-is-mostly-a-distraction) formulation
*   *Funded by: ?*
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: ?*  
     

[*Natural abstractions*](https://www.alignmentforum.org/posts/cy3BhHrGinZCp3LXE/testing-the-natural-abstraction-hypothesis-project-intro)

*   *One-sentence summary*: check the hypothesis that our universe abstracts well and many cognitive systems learn to use similar abstractions.
*   *Theory of change:* build tools to check the hypothesis, run the experiments, if the hypothesis holds we don’t need to worry about finicky parts of alignment like whether an AGI will know what we mean by love.
*   *Some names: *John Wentworth
*   *Estimated # FTEs: *2?
*   *Some outputs in 2023*: [tag](https://www.alignmentforum.org/tag/natural-abstraction?sortedBy=new)
*   *Critiques: *[*Summary and critique*](https://www.lesswrong.com/posts/gvzW46Z3BsaZsLc25/natural-abstractions-key-claims-theorems-and-critiques-1)*, *[*Soares*](https://www.alignmentforum.org/posts/mgjHS6ou7DgwhKPpu/a-rough-and-incomplete-review-of-some-of-john-wentworth-s)
*   *Funded by: ?*
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: ?*  
     

### Understand cooperation

(Figuring out how inter-AI and AI/human game theory should or would work.)  
 

[*CLR*](https://longtermrisk.org/research-agenda)

*   *One-sentence summary*: future agents intentionally creating s-risks is the worst of all possible problems, we should avoid that.
*   *Theory of change:* make present and future AIs inherently cooperative via improving theories of cooperation.
*   *Some names:* Jesse Clifton, Anni Leskelä, Julian Stastny
*   *Estimated # FTEs: *15
*   *Some outputs in 2023*: [open minded updatelessness](https://www.alignmentforum.org/posts/uPWDwFJnxLaDiyv4M/open-minded-updatelessness), [possibly this](https://arxiv.org/pdf/2307.04879.pdf), [spitefulness](https://www.lesswrong.com/posts/92xKPvTHDhoAiRBv9/making-ais-less-likely-to-be-spiteful)
*   *Critiques:*
*   *Funded by: Ruairi Donnelly? Polaris Ventures?*
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: *£3,375,081 income last year  
     

[*FOCAL*](https://www.cs.cmu.edu/~focal/)

*   *One-sentence summary*: make sure advanced AI uses what we regard as proper game theory.
*   *Theory of change: *(1) keep the pre-superintelligence world sane by making AIs more cooperative; (2) remain integrated in the academic world, collaborate with academics on various topics and encourage their collaboration on x-risk; (3) hope our work on “game theory for AIs”, which emphasises cooperation and benefit to humans, has framing & founder effects on the new academic field.
*   *Some names:* Vincent Conitzer, Caspar Oesterheld
*   *Estimated # FTEs: *7
*   *Some outputs in 2023*: [Bounded Inductive Rationality](https://arxiv.org/abs/2307.05068), [Computational Complexity of Single-Player Imperfect-Recall Games](https://arxiv.org/abs/2305.17805), [Game Theory with Simulation of Other Players](https://arxiv.org/abs/2305.11261)
*   *Critiques: *Self-submitted: “our theory of change is not clearly relevant to superintelligent AI”
*   *Funded by: *[Polaris Ventures](https://polaris-ventures.org/grants/)
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: *>$500,000

See also [higher-order game theory](https://www.alignmentforum.org/posts/3ahqzpKvtqkom63cx/game-theory-without-argmax-part-1). We moved [CAIF](https://www.cooperativeai.com/foundation) to the “Research support” appendix. We moved [AOI](https://ai.objectives.institute/) to “misc”.

* * *

5\. Labs with miscellaneous efforts
-----------------------------------

(Making lots of bets rather than following one agenda, which is awkward for a topic taxonomy.)  
 

[*Deepmind Alignment Team*](https://www.alignmentforum.org/posts/nzmCvRvPm4xJuqztv/deepmind-is-hiring-for-the-scalable-alignment-and-alignment)

*   *One-sentence summary*: theory generation, threat modelling, and toy methods to help with those. “Our main threat model is basically a combination of specification gaming and goal misgeneralisation leading to misaligned power-seeking.” See [announcement post](https://www.alignmentforum.org/posts/nzmCvRvPm4xJuqztv/deepmind-is-hiring-for-the-scalable-alignment-and-alignment) for full picture.
*   *Theory of change:* direct the training process towards aligned AI and away from misaligned AI: build enabling tech to ease/enable alignment work -> apply said tech to correct missteps in training non-superintelligent agents -> keep an eye on it as capabilities scale to ensure the alignment tech continues to work.
*   See also (in this document): Process-based supervision, Red-teaming, Capability evaluations, Mechanistic interpretability, Goal misgeneralisation, Causal alignment/incentives
*   Some names: Rohin Shah, Vika Krakovna, Janos Kramar, Neel Nanda
*   *Estimated # FTEs: ~*40
*   *Some outputs in 2023*: [Tracr](https://arxiv.org/abs/2301.05062), [Does Circuit Analysis Interpretability Scale?](https://arxiv.org/abs/2307.09458), [The Hydra Effect](https://arxiv.org/abs/2307.15771)*; *understanding / distilling threat models: "[refining the sharp left turn](https://www.alignmentforum.org/posts/usKXS5jGDzjwqv3FJ/refining-the-sharp-left-turn-threat-model)" (2022) and *"*[will capabilities generalise more](https://www.alignmentforum.org/posts/cq5x4XDnLcBrYbb66/will-capabilities-generalise-more)*"* (2022); [doubly-efficient debate](https://arxiv.org/abs/2311.14125) (including a Lean proof)
*   *Critiques: *[Zvi](https://thezvi.substack.com/p/ai-9-the-merge-and-the-million-tokens?utm_source=%2Fsearch%2Fdeepmind&utm_medium=reader2)
*   *Funded by: ?*
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: ~*$10,000,000?  
     

[*Apollo*](https://www.apolloresearch.ai/)

*   *One-sentence summary*: conceptual work (currently on deceptive alignment), auditing, and model evaluations; conceptual? Also a non-public interp agenda and deception evals in major labs.
*   *Theory of change:* “Conduct foundational research in interpretability and behavioral model evaluations, audit real-world models for deceptive alignment, support policymakers with our technical expertise where needed.”
*   *Some names: *Marius Hobbhahn, Lee Sharkey, Lucius Bushnaq et al
*   *Estimated # FTEs: *14
*   *Some outputs in 2023*: [Understanding strategic deception and deceptive alignment](https://www.apolloresearch.ai/blog/understanding-da-and-sd), [Research on strategic deception](https://www.apolloresearch.ai/research/summit-demo), [Causal Framework for AI Regulation and Auditing](https://www.apolloresearch.ai/research/causal-framework-ai-auditing), non-public stuff
*   *Critiques:* No public critiques yet
*   *Funded by: *OpenPhil, SFF, Manifund, “multiple institutional and private funders”
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources:* >$2,000,000  
     

*Anthropic Assurance / Trust & Safety / RSP Evaluations / Interpretability*

*   *One-sentence summary*: remain ahead of the capabilities curve/maintain ability to figure out what’s up with state of the art models, keep an updated risk profile, propagate flaws to relevant parties as they are discovered.
*   [Theory of change](https://www.lesswrong.com/posts/9TWReSDKyshfA66sz/alignment-org-cheat-sheet?commentId=wkcCybFvcq3QuBBX8): “hands-on experience building safe and aligned AI… We'll [invest in mechanistic interpretability](https://transformer-circuits.pub/) because [solving that would be awesome](https://80000hours.org/podcast/episodes/chris-olah-interpretability-research/#ways-that-interpretability-research-could-help-us-avoid-disaster-014550), and even modest success would help us detect risks before they become disasters. We'll [train near-cutting-edge models to study](https://arxiv.org/abs/2112.00861) how [interventions like RL from human feedback](https://arxiv.org/abs/2204.05862) and model-based supervision succeed and fail, iterate on them, and study [how novel capabilities emerge as models scale up](https://arxiv.org/abs/2202.07785). We'll also share information so policy-makers and other interested parties can understand what the state of the art is like, and provide an example to others of how responsible labs can do safety-focused research.”
*   *Some names: *Chris Olah, Nina Rimsky, Tamera Lanham, Zac Hatfield-Dodds, Evan Hubinger
*   *Estimated # FTEs: *60?
*   *Some outputs in 2023*: [Moral Self-Correction in LLMs](https://arxiv.org/abs/2302.07459), [LLM Generalization with Influence Functions](https://arxiv.org/abs/2308.03296)
*   *Critiques: *of [RSPs](https://forum.effectivealtruism.org/posts/zaSagsDjRmStfJ7MW/responsible-scaling-policies-are-risk-management-done-wrong)
*   *Funded by:* Google, Amazon, Menlo Ventures, Salesforce, Spark Capital, Sahin Boydas, Eric Schmidt, Jaan Tallinn, …
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources:* ~a hundred million dollars  
     

[*FAR*](https://www.lesswrong.com/posts/ncsxcf8CkDveXBCrA/ai-safety-in-a-world-of-vulnerable-machine-learning-systems-1)

*   *One-sentence summary*: a science of robustness / [fault tolerant alignment](https://far.ai/post/2023-03-safety-vulnerable-world/#fault-tolerant-alignment) is their stated aim, but they do lots of interpretability papers and other things.
*   *Theory of change:* make AI systems less exploitable and so prevent one obvious failure mode of helper AIs / superalignment / oversight: attacks on what is supposed to prevent attacks. In general, work on overlooked safety research others don’t do for structural reasons: too big for academia or independents, but not totally aligned with the interests of the labs (e.g. prototyping moonshots, embarrassing issues with frontier models).
*   *Some names: *Adam Gleave, Ben Goldhaber, Adrià Garriga-Alonso, Daniel Pandori
*   *Estimated # FTEs: *10
*   *Some outputs in 2023*: [papers](https://far.ai/publication/); [impressive adversarial finding](https://arxiv.org/pdf/2211.00241.pdf)
*   *Critiques: *[*tangential from Demski*](https://www.lesswrong.com/posts/qQuLCAqbZf9ETgNoB/robustness-as-a-path-to-ai-alignment#Limits_of_the_Approach)
*   *Funded by: ?*
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: *$1,507,686 (2022 income)  
     

[*Krueger Lab*](https://www.kasl.ai/)

*   *One-sentence summary*: misc. Understand Goodhart’s law; reward learning 2.0; demonstrating safety failures; understand DL generalization / learning dynamics.
*   *Theory of change:* misc. Improve theory and demos while steering policy to steer away from AGI risk.
*   *Some names: *David Krueger, Dima Krasheninnikov, Lauro Langosco
*   *Estimated # FTEs: *12
*   *Some outputs in 2023*: [a formal definition of goodharting](https://arxiv.org/abs/2209.13085), [how LLMs weigh sources](https://openreview.net/forum?id=X3JFgY4gvf), [grokking as double descent](https://arxiv.org/abs/2303.06173), proof-of-concept for an approach to automated interpretability (in review).
*   *Critiques: ?*
*   *Funded by:* SFF
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources:* ~$1m  
     

*AI Objectives Institute (*[*AOI*](https://ai.objectives.institute/)*)*

*   *One-sentence summary*: Hard to classify. How to apply AI to enhancing human agency, individual agency and collective agency? what goals should scalable delegated intelligence be aligned to? how to use AI to improve the accountability of institutions?
*   *Theory of change:* Think about how regulation “aligns” corporations, and insights about how to safely integrate AI into society will come, as will insights into technical alignment questions. Develop socially beneficial AI now and it will improve chances of AI being beneficial in the long run, including by paths we haven’t even thought of yet.
*   *Some names: *Deger Turan, Matija Franklin, Peli Grietzer, Tushant Jha
*   *Estimated # FTEs: *7 researchers
*   *Some outputs in 2023*: [one OAA fork](https://ai.objectives.institute/blog/roadmap-for-a-collaborative-prototype-of-an-open-agencynbsparchitecture), plans for [concrete tools](https://ai.objectives.institute/blog/talk-to-the-city-an-open-source-ai-tool-to-scale-deliberation) with [actual users](https://ai.objectives.institute/blog/straightlines-surfaces-the-content-beneath-the-headline)
*   *Critiques: ?*
*   *Funded by: *Future of Life Institute, Plurality Institute, Survival and Flourishing Project, private individuals
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: *in flux, low millions.

* * *

More meta
=========

We don’t distinguish between massive labs, individual researchers, and sparsely connected networks of people working on similar stuff. The funding amounts and full time employee estimates might be a reasonable proxy.

The categories we chose have substantial overlap and see the “see also”s for closely related work.

I wanted this to be a straight technical alignment doc, but people pointed out that would exclude *most* work (e.g. evals and nonambitious interpretability, which are safety but not alignment) so I made it a technical AGI safety doc. Plus ça change.

The only selection criterion is “I’ve heard of it and >= 1 person was recently working on it”. I don’t go to parties so it’s probably a couple months behind. 

Obviously this is the Year of Governance and Advocacy, but I exclude all this good work: by its nature it gets attention. I also haven’t sought out the notable amount [by](https://arxiv.org/abs/2205.01447) [ordinary](https://arxiv.org/abs/2211.14946) [labs](https://blog.normalcomputing.ai/posts/2023-09-12-supersizing-transformers/supersizing-transformers.html) [and](https://huggingface.co/papers/2310.16944) [academics](https://arxiv.org/abs/2306.03341) [who](https://openreview.net/forum?id=RdJVFCHjUMI) [don’t](https://papers.ssrn.com/sol3/papers.cfm?abstract_id=4573321) [frame](https://www.nsf.gov/awardsearch/showAward?AWD_ID=2331669&HistoricalAwards=false) their work as alignment. Nor the secret work.

You are unlikely to like my partition into subfields; [here](https://docs.google.com/document/d/e/2PACX-1vRyMTQQprqaFrpydGTwsHm0BnFQf5CXC9T754UeXtkwiNVQx7N5LGki51L05_L3g1wK4_n1llVGvZ9R/pub) are others.

No one has read all of this material, including us. Entries are based on public docs or private correspondence where possible but the post probably still contains >10 inaccurate claims. **Shouting at us is encouraged.** If I’ve missed you (or missed the point), please draw attention to yourself. 

If you enjoyed reading this, consider donating to [Lightspeed](mailto:funds@lightspeedgrants.org), [MATS](https://manifund.org/projects/mats-funding), [Manifund](https://manifund.org/about/donate), or [LTFF](https://funds.effectivealtruism.org/funds/far-future): some good work is bottlenecked by money, and some people specialise in giving away money to enable it.

*Conflicts of interest*: I wrote the whole thing without funding. I often work with [ACS](https://acsresearch.org/) and PIBBSS and have worked with Team Shard. Lightspeed gave a nice open-ended grant to my org, Arb. CHAI once bought me a burrito. 

If you’re interested in doing or funding this sort of thing, get in touch at [hi@arbresearch.com](mailto:hi@arbresearch.com). I never thought I’d end up as a journalist, but stranger things will happen.

  
 

Thanks to Alex Turner, Neel Nanda, Jan Kulveit, Adam Gleave, Alexander Gietelink Oldenziel, Marius Hobbhahn, Lauro Langosco, Steve Byrnes, Henry Sleight, Raymond Douglas, Robert Kirk, Yudhister Kumar, Quratulain Zainab, Tomáš Gavenčiak, Joel Becker, Lucy Farnik, Oliver Hayman, Sammy Martin, Jess Rumbelow, Jean-Stanislas Denain, Ulisse Mini, David Mathers, Chris Lakin, Vojta Kovařík, Zach Stein-Perlman, and Linda Linsefors for helpful comments.

* * *

Appendices
==========

Appendix: Prior enumerations
----------------------------

*   [Everitt et al (2018)](https://arxiv.org/abs/1805.01109)
*   [Ji (2023)](https://arxiv.org/abs/2310.19852)
*   [Soares (2023)](https://www.lesswrong.com/posts/3pinFH3jerMzAvmza/on-how-various-plans-miss-the-hard-bits-of-the-alignment)
*   [Gleave and MacLean (2023)](https://www.lesswrong.com/posts/ncsxcf8CkDveXBCrA/ai-safety-in-a-world-of-vulnerable-machine-learning-systems-1)
*   [Krakovna and Shah on Deepmind (2023)](https://www.alignmentforum.org/posts/a9SPcZ6GXAg9cNKdi/linkpost-some-high-level-thoughts-on-the-deepmind-alignment)
*   [AI Plans (2023)](https://ai-plans.com/), mostly irrelevant
*   [Macdermott (2023)](https://www.lesswrong.com/posts/3vDb6EzBpaHqDqQif/some-summaries-of-agent-foundations-work-1)
*   [Kirchner et al (2022): unsupervised analysis](https://www.alignmentforum.org/posts/FgjcHiWvADgsocE34/a-descriptive-not-prescriptive-overview-of-current-ai)
*   [Krakovna (2022)](https://vkrakovna.wordpress.com/2022/06/02/paradigms-of-ai-alignment-components-and-enablers/), Paradigms of AI alignment
*   [Hubinger (2020)](https://arxiv.org/abs/2012.07532)
*   [Perret (2020)](https://www.alignmentforum.org/posts/4az2cFrJp3ya4y6Wx/resources-for-ai-alignment-cartography)
*   [Nanda (2021)](https://www.lesswrong.com/posts/SQ9cZtfrzDJmw9A2m/my-overview-of-the-ai-alignment-landscape-a-bird-s-eye-view)
*   [Larsen (2022)](https://www.lesswrong.com/posts/QBAjndPuFbhEXKcCr/my-understanding-of-what-everyone-in-technical-alignment-is)
*   [Zoellner (2022)](https://www.lesswrong.com/posts/8ibDJeoiDuxJkPwfa/various-alignment-strategies-and-how-likely-they-are-to-work)
*   [McDougall (2022)](https://www.perfectlynormal.co.uk/blog-ai-risk-intro-2)
*   [Sharkey et al (2022)](https://www.alignmentforum.org/posts/Jgs7LQwmvErxR9BCC/current-themes-in-mechanistic-interpretability-research#Approaches_grounded_in_the_theory_of_causality) on interp
*   [Koch (2020)](https://www.alignmentforum.org/posts/HEZgGBZTpT4Bov7nH/mapping-the-conceptual-territory-in-ai-existential-safety)
*   [Critch (2020)](https://www.lesswrong.com/posts/hvGoYXi2kgnS3vxqb/some-ai-research-areas-and-their-relevance-to-existential-1)
*   [Hubinger on types of interpretability](https://www.lesswrong.com/posts/nbq2bWLcYmSGup9aF/a-transparency-and-interpretability-tech-tree) (2022)
*   [Tai\_safety\_bibliography (2021)](https://www.zotero.org/groups/2420932/tai_safety_bibliography/collections/2BR54QX6)
*   [Akash and Larsen (2022)](https://www.lesswrong.com/posts/9TWReSDKyshfA66sz/alignment-org-cheat-sheet)
*   [Karnofsky prosaic plan](https://www.lesswrong.com/posts/rCJQAkPTEypGjSJ8X/how-might-we-align-transformative-ai-if-it-s-developed-very) (2022)
*   [Steinhardt (2019)](https://docs.google.com/document/d/1FbTuRvC4TFWzGYerTKpBU7FJlyvjeOvVYF2uYNFSlOc/edit#heading=h.n1wk9bxo847o)
*   [Russell (2016)](https://arxiv.org/abs/1602.03506)
*   [FLI (2017)](https://futureoflife.org/landscape/ResearchLandscapeExtended.pdf)
*   [Shah (2020)](https://www.alignmentforum.org/posts/dKxX76SCfCvceJXHv/ai-alignment-2018-19-review)
*   [things which claim to be agendas](https://www.lesswrong.com/tag/research-agendas?sortedBy=new)
*   [Tekofsky listing indies (2023)](https://docs.google.com/spreadsheets/d/1Us_eYfpzM5qg52aZh2Cc8O13Fdfiy5CMKmzZhN5ItOY/edit#gid=1246461801)
*   [This thing called boundaries (2023)](https://www.lesswrong.com/posts/fjgoMaBenyXcRDrbX/boundaries-membranes-and-ai-safety-compilation)
*   [Sharkey et al (2022), mech interp](https://www.alignmentforum.org/posts/Jgs7LQwmvErxR9BCC/current-themes-in-mechanistic-interpretability-research)
*   [FLI Governance scorecard](https://pbs.twimg.com/media/F98iVeGX0AAxOoU?format=jpg&name=medium)
*   [The money](https://donations.vipulnaik.com/?cause_area_filter=AI+safety#donationAmountsByDoneeAndYear)  
     

Appendix: Graveyard
-------------------

*   Ambitious value learning?
*   MIRI youngbloods (see Hebbar)
*   [JW selection theorems](https://www.lesswrong.com/tag/selection-theorems)??
*   [Provably Beneficial Artificial Intelligence](https://people.eecs.berkeley.edu/~russell/papers/russell-bbvabook17-pbai.pdf) (but see Open Agency and Omohundro)
*   [HCH](https://www.lesswrong.com/tag/hch) (see QACI)
*   Iterated distillation and amplification / Iterated amplification / IDA → Critiques and recursive reward modelling
*   Debate is now called Critiques and ERO
*   [Market-making](https://www.alignmentforum.org/posts/YWwzccGbcHMJMpT45/ai-safety-via-market-making) (Hubinger)
*   Logical inductors
*   [Conditioning Predictive Models: Risks and Strategies](https://arxiv.org/abs/2302.00805)?
*   [Impact measures](https://www.lesswrong.com/tag/impact-regularization), conservative agency, side effects → “power aversion”
*   [Acceptability Verification](https://www.lesswrong.com/posts/GeabLEXYP7oBMivmF/acceptability-verification-a-research-agenda)
*   Quantilizers
*   [Redwood](https://www.lesswrong.com/posts/JvZhhzycHu2Yd57RN/causal-scrubbing-a-method-for-rigorously-testing) interp?
*   [AI Safety Hub](https://www.aisafetyhub.org/our-research)
*   [Enabling Robots to Communicate their Objectives](https://arxiv.org/abs/1702.03465) (early stage interp?)
*   [Aligning narrowly superhuman models](https://www.lesswrong.com/posts/PZtsoaoSLpKjjbMqM/the-case-for-aligning-narrowly-superhuman-models) (Cotra idea; [tiny followup](https://www.alignmentforum.org/posts/TSxAXeHHhgSxR5wGZ/a-summary-of-aligning-narrowly-superhuman-models); lives on as scalable oversight?)
*   automation of semantic interpretability
    *   i.e. automatically proposing hypotheses instead of just automatically verifying them
*   [Oracle AI](https://www.lesswrong.com/tag/oracle-ai) is not dead so much as ~everything LLM falls under its purview
    *   [Tool AI](https://www.lesswrong.com/tag/tool-ai), similarly, ~is LLMs plugged into a particular interface
*   [EleutherAI: #accelerating-alignment](https://www.lesswrong.com/posts/AhF8iXLu5PchsmyKf/language-model-tools-for-alignment-research) \- AI alignment assistants are live, but it doesn’t seem like EleutherAI is currently working on this  
      
     

Appendix: Biology for AI alignment
----------------------------------

Lots of agendas but not clear if anyone besides Byrnes and Thiergart are actively turning the crank. Seems like it would need a billion dollars.  
 

### Human enhancement 

*   *One-sentence summary*: maybe we can give people new sensory modalities, or much higher bandwidth for conceptual information, or much better idea generation, or direct interface with DL systems, or direct interface with sensors, or [transfer learning](https://www.youtube.com/watch?v=6vMO3XmNXe4), and maybe this would help. The old [superbaby](https://fantasticanachronism.com/2021/03/23/two-paths-to-the-future/) dream goes here I suppose.
*   *Theory of change:* maybe this makes us better at alignment research

### Merging 

*   *One-sentence summary*: maybe we can form networked societies of DL systems and brains
*   *Theory of change:* maybe this lets us preserve some human values through bargaining or voting or weird politics.
*   [Cyborgism](https://www.lesswrong.com/posts/bxt7uCiHam4QXrQAA/cyborgism), [Millidge](https://www.lesswrong.com/posts/d74pb97TAqNKwJkc5/bcis-and-the-ecosystem-of-modular-minds), [Dupuis](https://www.lesswrong.com/posts/gLyRQCg6kp5cqTQTm/collective-identity). [Davidad sometimes](https://www.lesswrong.com/posts/FEFQSGLhJFpqmEhgi/does-davidad-s-uploading-moonshot-work).

### As alignment aid 

*   *One-sentence summary*: maybe we can get really high-quality alignment labels from brain data, maybe we can steer models by training humans to do activation engineering fast and intuitively, maybe we can crack the true human reward function / social instincts and maybe adapt some of them for AGI.
*   *Theory of change:* as you’d guess
*   *Some names*: [Byrnes](https://www.lesswrong.com/posts/tj8AC3vhTnBywdZoA/intro-to-brain-like-agi-safety-15-conclusion-open-problems-1), [Cvitkovic](https://milan.cvitkovic.net/writing/neurotechnology_is_critical_for_ai_alignment/)*, *[Foresight’s BCI,](https://manifund.org/projects/activation-vector-steering-with-bci) Also (list from Byrnes): Eli Sennesh, Adam Safron, Seth Herd, Nathan Helm-Burger, Jon Garcia, Patrick Butlin

  
Appendix: Research support orgs
----------------------------------

One slightly confusing class of org is described by the sample {CAIF, FLI}. Often run by active researchers with serious alignment experience, but usually not following an obvious agenda, delegating a basket of strategies to grantees, doing field-building stuff like NeurIPS workshops and summer schools.  
 

[CAIF](https://www.cooperativeai.com/foundation) 

*   *One-sentence summary*: support researchers making differential progress in cooperative AI (eg precommitment mechanisms that can’t be used to make threats)
*   *Some names*: Lewis Hammond
*   *Estimated # FTEs: *3
*   *Some outputs in 2023*: [Neurips contest](https://www.cooperativeai.com/contests/melting-pot-2023), [summer school](https://www.cooperativeai.com/summer-school/2023)
*   *Funded by: *[*Polaris Ventures*](https://polaris-ventures.org/grants/)
*   *Critiques:*
*   *Funded by: ?*
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources: *£2,423,943  
     

[AISC](https://aisafety.camp/)

*   *One-sentence summary*: entrypoint for new researchers to test fit and meet collaborators. More recently focussed on a capabilities pause. [Still going!](https://aisafety.camp/#Projects)
*   *Some names*: Remmelt Ellen, Linda Linsefors
*   *Estimated # FTEs: 2*
*   *Some outputs in 2023*: [tag](https://www.lesswrong.com/tag/ai-safety-camp)
*   *Funded by: ?*
*   *Critiques: ?*
*   *Funded by: ?*
*   *Trustworthy command, closure, opsec, common good, alignment mindset: ?*
*   *Resources:* ~$200,000

See also:

*   [FLI](https://futureoflife.org/)
*   [AISS](https://www.aisafetysupport.org/)
*   [PIBBSS](https://www.pibbss.ai/)
*   [Gladstone AI](https://www.aitracker.org/)
*   [Apart](https://apartresearch.com/)
*   [Catalyze](https://www.catalyze-impact.org/team)
*   [EffiSciences](https://ia.effisciences.org/)
*   Students ([Oxford](https://www.oxai.org/ai-safety), [Harvard](https://haist.ai/), [Groningen](https://www.aisig.org/), [Bristol](https://bristolaisafety.org/about), [Cambridge](https://www.cambridgeaisafety.org/start), [Stanford](https://stanfordaialignment.org/), [Delft](https://www.delftaisafety.org/), [MIT](https://www.mitalignment.org/))  
     

Appendix: Meta, mysteries, more
-------------------------------

*   [Metaphilosophy](https://www.lesswrong.com/posts/w6d7XBCegc96kz4n3/the-argument-from-philosophical-difficulty) ([2023](https://www.lesswrong.com/posts/fJqP9WcnHXBRBeiBg/meta-questions-about-metaphilosophy)) – Wei Dai, probably <1 FTE
*   [Encultured](https://www.encultured.ai/blog-experiments.html) \- making a game
*   Bricman: [https://compphil.github.io/truth/](https://compphil.github.io/truth/)
*   [Algorithmic Alignment](https://algorithmicalignment.csail.mit.edu/)
*   McIlrath: [side effects](https://www.southampton.ac.uk/~eg/AAMAS2023/pdfs/p1797.pdf) and [human-aware AI](https://openreview.net/pdf?id=nkn1rcI6wd)
*   [how hard is alignment?](https://www.lesswrong.com/posts/EjgfreeibTXRx9Ham/ten-levels-of-ai-alignment-difficulty#Table)
*   [Intriguing](https://arxiv.org/abs/2012.11538)
*   [The UK government now has an evals/alignment lab of sorts](https://www.gov.uk/government/publications/ai-safety-institute-overview) (Xander Davies, Nitarshan Rajkumar, Krueger, Rumman Chowdhury)
*   [The US government will soon have an evals/alignment lab of sorts, USAISI](https://www.commerce.gov/news/press-releases/2023/11/direction-president-biden-department-commerce-establish-us-artificial). (Elham Tabassi?)
*   [A Roadmap for Robust End-to-End Alignment](https://arxiv.org/abs/1809.01036) (2018)
*   [Not theory but cool](https://arxiv.org/abs/2110.08176)
*   [Greene Lab Cognitive Oversight](https://www.joshua-greene.net/)? Closest they’ve got is AI governance and they only got $13,800
*   [GATO Framework](https://www.gatoframework.org/gato-framework) seems to have a galaxy-brained global coordination and/or self-aligning AI angle
*   Wentworth [2020](https://www.lesswrong.com/s/ehnG4mseKF6xALmQy) \- a theory of abstraction suitable for embedded agency.
*   [https://www.aintelope.net/](https://www.aintelope.net/)
*   [ARAAC](https://araac.au/) \- Make RL agents that can justify themselves (or other agents with their code as input) in human language at various levels of abstraction ([AI apology](https://link.springer.com/article/10.1007/s00521-023-08586-x), [explainable RL for broad XAI)](https://link.springer.com/article/10.1007/s00521-023-08423-1)
*   [Modeling Cooperation](https://www.modelingcooperation.com/research)
*   Sandwiching ([ex](https://www.lesswrong.com/posts/qwQqZtjWdyDLC4JTB/automated-sandwiching-and-quantifying-human-llm-cooperation))
*   [Tripwires](https://www.lesswrong.com/tag/tripwire)
    *   [Meeseeks AI](https://www.lesswrong.com/posts/7yEFHisCQSCpLnqWQ/mr-meeseeks-as-an-ai-capability-tripwire)
    *   [Shutdown-seeking AI](https://www.lesswrong.com/posts/FgsoWSACQfyyaB5s7/shutdown-seeking-ai)
*   Decision theory ([Levinstein](https://www.levinstein.org/research))
*   [*CAIS: Machine ethics*](https://www.alignmentforum.org/s/FaEBwhhe3otzYKGQt/p/5HtDzRAk7ePWsiL2L#Implementing_Moral_Decision_Making) \- Model intrinsic goods and normative factors, vs mere task preferences, as these will be relevant even under extreme world changes; helps us avoid proxy misspecification as well as value lock-in. Present state of research unknown (some relevant bits in [RepEng](https://arxiv.org/pdf/2310.01405.pdf)).
*   [*CAIS: Power Aversion*](https://www.alignmentforum.org/s/FaEBwhhe3otzYKGQt/p/5HtDzRAk7ePWsiL2L#Power_averseness) \- incentives to models to avoid gaining more power than necessary. Related to mild optimisation and powerseeking. Present state of research unknown.  
     

[^06qm74k93eh7]: Unless you zoom out so far that you reach vague stuff like “ontology identification”. We will see if this total turnover is true again in 2028; I suspect a couple will still be around, this time. 

[^0q1picyzu4d]: > one can posit neural network interpretability as the GiveDirectly of AI alignment: reasonably tractable, likely helpful in a large class of scenarios, with basically unlimited scaling and only slowly diminishing returns. And just as any new EA cause area must pass the first test of being more promising than GiveDirectly, so every alignment approach could be viewed as a competitor to interpretability work. – Niplav