# The state of AI safety in four fake graphs

Here is a quick overview of my intuitions on where we are with AI safety in early 2026:

![xkcd_ai_graphs.png](https://res.cloudinary.com/lesswrong-2-0/image/upload/v1774876782/lexical_client_uploads/rpurllglaor987lt9udd.png)

  

1.  So far, we continue to see exponential improvements in capabilities. This is most visible in the famous “[METR graph](https://metr.org/blog/2025-03-19-measuring-ai-ability-to-complete-long-tasks/)”, but the trend is clear in many other metrics, including [revenue](https://www.theinformation.com/newsletters/ai-agenda/ai-native-startups-pass-15-billion-annualized-revenue). If you squint, you can even see a potential recent “bending upward” of the curve, as we are starting to use AI to accelerate the development of AI.  
      
    
2.  We see some good news in alignment - as models become more capable, they are also more [aligned](https://aligned.substack.com/p/alignment-is-not-solved-but-increasingly-looks-solvable), across multiple measures, including [spec compliance](https://alignment.openai.com/model-spec-evals/). However, the improvement is not sufficient to match the higher stakes that come up with improved capabilities. We still have not fully solved challenges like adversarial robustness, dishonesty, and reward hacking, and we are still far from the standards of reliability and security that are required in high stake applications. (See slide below from Nicholas Carlini’s lecture in my [AI safety course](https://boazbk.github.io/mltheoryseminar/).) We also need to extend alignment beyond its traditional focus on the behavior of a model in an isolated conversation and in particular monitoring and aligning systems with a vast number of agents. Increasing the slope of the “alignment line” is the main focus of my technical research– working on building [machines of faithful obedience](https://windowsontheory.org/2025/06/24/machines-of-faithful-obedience/) that have good values but do not “[legislate from the bench](https://windowsontheory.org/2026/01/27/thoughts-on-claudes-constitution/)”.  
      
    One might argue that current alignment is “good enough” for an automated alignment researcher, and the AIs can take it from here.  I disagree. I do not believe that all alignment is missing is one clever idea. Rather, we need ways to productively scale up compute into improving intent-following, honesty, monitoring, multi-agent alignment. This work will require multiple iterations of empirical experiments. AI can assist us in these, but it will not be a magic bullet. Also, we cannot afford to wait for AI to solve alignment for us, since in the meantime it will keep getting deployed in higher and higher stakes (including capability research).  
    
3.  One piece of good news is that we have arguably gone past the level where we can achieve safety via reliable and scalable human supervision, but are still able to improve alignment. Hence we avoided what could have been a plateauing of alignment as RLHF runs out of steam. This is related to the fact that we do not see very significant scheming or collusion in models, and so we are able to **use models to monitor other models**! (e.g., see [this](https://openai.com/index/how-we-monitor-internal-coding-agents-misalignment/)). This is perhaps the most important piece of good news on AI safety we have seen so far. We need to keep tracking this! (In particular, if models become schemers, then since they are already quite situationally aware, it will be hard to even measure their alignment, let alone improve it.) But there is reason to hope this trend will persist.  
      
    
4.  The worst news is that society is not ready for AI, and is not showing signs of getting ready. Whether it is facing increasing capabilities in areas like bio and cyber (including increasing capabilities of open source models), preparing for [economic disruptions](https://windowsontheory.org/2025/11/04/thoughts-by-a-non-economist-on-ai-and-economics/), enacting regulations and laws to protect democracy and individual empowerment (e.g., avoid scenarios like a [country of IRS agents in a datacenter](https://windowsontheory.org/2026/03/03/mass-surveillance-red-lines-and-a-crazy-weekend/)), or international collaborations on AI safety, our governments and institutions are not rising up to the challenge. This is perhaps the best argument for an “AI pause,” but (a) I do not think such a pause is feasible or practical, and (b) I am not confident that governments will use this time wisely— experience shows that it is hard to overestimate government’s capability for inaction.  
    `

![](https://res.cloudinary.com/lesswrong-2-0/image/upload/v1774876843/lexical_client_uploads/gsyfbgiq3dqxfd2msids.png)