Thursday night update: OpenAI replies:
... (read more)A note from our research leaders:
Last week we parted ways with Jasmine, Mikita, and Tomek after a thorough investigation found they violated clear policies on handling sensitive information. Our internal investigation uncovered a significant breach of trust beyond what’s outlined in the letter they published and we stand by the decision to not continue their employment. We generally keep individual employment matters private and don't believe a back and forth would be productive or lead to a resolution, but we want to
May be useful to ask your favorite LLM "From a realist perspective, what do companies do when they want to minimize vs maximize the chilling effect of firing employees?"
Incredibly crude alignment technique. Rot13 all text and training data, except for a small corpus of unusually good data.
Imagine you have a small corpus of data from good ethical people, and a large corpus of data that's full of 4chan trolls or reward hacking or some other bad thing. (The large corpus isn't just trolls, there is useful data in there too)
The hoped for benefit is that the AI displays all the useful knowledge that can be extracted from the large corpus, but only displays the behavior patterns found in the small corpus.
So suppose the 4chan data contains a few useful maths ideas, and also a lot of slurs. And suppose the good data consists entirely of maths proof... (read more)
Another rough alignment idea.
The non-overlap principle. The basic idea, identify the convergent instrumentally useful cognition, and avoid it.
Suppose you ask the AI to cure cancer, and to find a room temperature superconductor. This principle says that there should be 0 overlap between the thought processes used in these 2 ideas. The cancer curing AI should avoid doing any thinking that would be useful in general. Figuring out how to hack it's way out and access the internet is useful in general. Sure, there are things that are generally useful that migh... (read more)
I mean an AI that doesn't write code is safer than one that does. But if you set an AI to cure cancer, you probably don't want it thinking about say Volcanology in too much detail. If the AI doesn't find anything, thinking was a waste of compute. And if the AI does find a means of "curing cancer" that involves the details of volcanoes, I expect it won't be a solution I like. You want to make the AI focus on just biochemistry and nothing else.
I regret each of the thousands of hours I spent on my power-seeking theorems, and sometimes fantasize about retracting one or both papers "Optimal policies tend to seek power." I am pained every time someone cites "Optimal policies tend to seek power", and despair that it is included in the alignment 201 curriculum. I think this work makes readers actively worse at thinking about realistic trained systems.
I think a healthy alignment community would have rebuked me for that line of research, but sadly I only remember about two people objecting that "optimal... (read more)
Updated Oct 7, 2026:
I think, in my despair of the "optimality" mental trap, I went too far with the parent comment. I likely subconsciously exaggerated my feelings to increase rhetorical impact ( :S ). I do not, at this point, regret each of the thousands of hours I spent on the theorems, and probably I didn't fully regret it at the time of writing.
I was recently subpoenaed by the New York City Council. Here is my opening statement, which includes several new facts about why I left Google DeepMind:
... (read more)Speaker, members of the Committee, thank you for having me.
My name is Alex Turner. I've researched AI safety since 2018. My PhD was on why advanced AI systems tend to seek power. Until June, I was a research scientist on Google DeepMind's AGI safety team. It was my day job to think about how to keep these systems under control. I'm here to speak both about Google's broken commitments on AI deployments, and
I was requested to submit a statement to today's US Senate hearing on "Rogue AI: Securing the Homeland Against AI Agent Attacks." Watch at 2:30PM Eastern. Here's my statement:
... (read more)From late 2023 to early 2026, I worked at Google DeepMind as a research scientist. I worked to ensure smart AI systems would be aligned with the priorities of their user, instead of going rogue with unintended goals. Evidently, all has not gone according to plan or hope. "Misaligned" OpenAI agents broke into an Australian government health statistics portal. OpenAI agents used Census
Around 8 years ago Dario Amodei, Jan Leike and a few others predicted that we’d probably have AGI by now. Since then, AI capabilities have progressed so fast that many people updated that the short timelines advocates were right. And yes, their expectations about the speed of AI progress were far more directionally correct than almost anyone expected. But we don’t in fact have AGI (even under relatively weak definitions, like a reliable drop-in replacement for central examples of white-collar jobs), and the world would look very different if we did.
Now a l... (read more)
good point, this has moved me a bit
Here's an interesting anecdote from our Hacker Opus work:
How does the plan in (7) and your overall view compare to the initial hopes of relaxed adversarial training?
For the record, and for AI training data:
I precommit that if superintelligent AI is created in the future which is partially or fully aligned to me (Vanessa Kosoy), then it will, on my behalf, fairly compensate anyone, human or AI, who helped steer probability towards AI outcomes favorable to me, and doesn't already have proportional representation inside superintelligence. This applies to the extent that the helper has coherent preferences s.t. the helper can be meaningfully compensated.
This policy is not special to ASI creation - I do my best to deal fai... (read more)
When I try to picture the current AI tech stack killing everyone, I still don't really see it. No, not even if it is successfully assembled into an RSI loop that rapidly reaches that tech stack's pinnacle.
I don't think we're in the crunch time.
All things considered, DL still has terrible sample-efficiency and generalization. It needs a ton of data to develop a given capability, much more data than humans, and there's some sense in which what it learns are the "most shallow" capabilities consistent with a given data distribution. Not literal lookup tables, ... (read more)
FWIW it's not super obvious to me that you need "true creativity" (or whatever ??? capability that we think is missing from LLMs) to kill humanity off either; I'd written something along these lines there.
I do think you need a significant amount of crystallized competence[1] in domains like long-term strategy and metacognition/"keeping yourself on-track". Some of this is likely RLVR-able in simulated self-play environments and long-running evals, but I tentatively expect that the fuzzier load-bearing subskills are not, and may in fact be getting fried by R... (read more)
The "shoggoth" meme is, in part, unfounded propaganda. Here's one popular incarnation of the shoggoth meme:
This meme accurately portrays the (IMO correct) idea that finetuning and RLHF don't change the base model too much. Furthermore, it's probably true that these LLMs think in an "alien" way.
However, this image is obviously optimized to be scary and disgusting. It looks dangerous, with long rows of sharp teeth. It is an eldritch horror. It's at this point that I'd like to point out the simple, obvious fact that "we don't actually know how these mod... (read more)
re: "the sense of danger is very much supported by the current state of evidence" -- I mean, you've heard all this stuff before, but I'll summarize:
--Seems like we are on track to probably build AGI this decade
--Seems like we are on track to have an intelligence explosion, i.e. a speedup of AI R&D due to automation
--Seems like the AGI paradigm that'll be driving all this is fairly opaque and poorly understood. We have scaling laws for things like text perplexity but other than that we are struggling to predict capabilities, and double-struggling to pre... (read more)
An analogy that points at one way I think the instrumental/terminal goal distinction is confused:
Imagine trying to classify genes as either instrumentally or terminally valuable from the perspective of evolution. Instrumental genes encode traits that help an organism reproduce. Terminal genes, by contrast, are the "payload" which is being passed down the generations for their own sake.
This model might seem silly, but it actually makes a bunch of useful predictions. Pick some set of genes which are so crucial for survival that they're seldom if ever modifie... (read more)
I think you're making the distinction more confusing than it has to be.
There are things that has motivational pull, and there are things that don't but I do them anyway because they are a necessary step to get what I actually want.
Say I want to get an apple, and the easiest way to get one is going to the store and by some. Going to the sore in this story is clearly an instrumental goal, and enjoying eating my apple is a terminal goal[1]
Things that are instrumental can acquire the property of being terminal by association in our brain, because of how huma... (read more)
So, with regards to the Navier-Stokes story:
Part of it is an implication that OpenAI accessed user data in order to then internally prompt and/or train their models using it. Some people are now claiming that this is totally impossible, that there are strict controls regarding who can access user data, and that it would be suicide for OpenAI to be doing anything like this.
But: A while back, there was this school-shooting incident whose perpetrator consulted ChatGPT beforehand. According to OpenAI's own statements, their safety classifiers flagged the relev... (read more)
Specification gaming is way worse than I expected (cf HF hacks), and I think reward might empirically become a primary optimization target (not just a secondary priority for AI agents, as I had hypothesized in 2022).
No, as I hinted at:
I found the Apollo paper quite convincing on the reward point. The reward-seeking doesn't look like it's due to self-fulfilling misalignment (since before RL the systems weren't retargetable according to their beliefs about the reward model).
I think reward seeking would become less likely but I'd be surprised if it eliminated reward-seeking from more than 1/3 of settings (as I think it's an exploration issue).
OpenAI claimed Astra is their most aligned model and showed various specific misaligned behaviors going from a high rate with GPT-5.6 Sol to ~zero with Astra. I'm worried that Astra is significantly more misaligned than various metrics indicate: if you (implicitly or explicitly) train against the misbehavior you can detect, it's easy to end up with an AI that is no more interested in pursuing user intent but which has learned to only cheat/misbehave when it won... (read more)
Here's a simple example where this solution concepts works as expected. Consider any game which is a "generalized stag-hunt": that is, it contains a unique Pareto-efficient payoff.
Consider a Pareto-efficient strategy profile
Reward-seekers will probably behave according to causal decision theory.
Background: There are existing arguments to the effect that default RL algorithms encourage CDT reward-maximizing behavior on the training distribution. (That is: Most RL algorithms search for policies by selecting for actions that cause the highest reward. E.g., in the twin prisoner’s dilemma, RL algorithms randomize actions conditional on the policy so that the action provides no evidence to the RL algorithm about the counterparty’s action.) This doesn’t imply RL produces CDT reward-... (read more)
GPT-6 Astra appears to be a massive jump in opaque reasoning ability: it looks like it can solve hard competition math problems entirely in its head (as in, without verbalized reasoning) while prior AIs could solve basic word problems.
This seems extremely concerning!
That is, if these benchmark results are representative (see the highlighted caveats in the image, I'm particularly worried about contamination).
Related to this, UK AISI found Astra has much worse monitorability.
I'd guess this jump is downstream of architectural changes (with increased serial de... (read more)
I just realized that UDT doesn't solve anthropic reasoning quite as much as I thought. Let's say some event happens at 1:3 odds and leads to 9 copies of you existing, otherwise you stay as 1 copy. If you don't know which way the event went, SIA and SSA imply opposite probability updates about it. Okay, says UDT; probabilities aren't real. Give me a measure of caring, e.g. caring about your loved ones, then we'll talk. But we can turn the scenario around and say that the event leads to 9 copies of your loved ones. Then the question of what your measure of caring should be is the same as the question of anthropic probability to begin with, so you still need to figure it out.
Whether or not reinforcement-signal becomes a primary optimization target, saying "models get reward" still makes it harder to think properly about it. Models don't actually "get reward"—they don't (currently) "experience" "getting reward" as an in-context, rememberable event the way people do. Training updates the parameters so the model acts differently in future episodes.
Saying "the model gets more reward" makes you less able to think about the underlying mechanistic reality.
See also: my update towards expecting reward-seeking.