Managing alignment research @ AISI. prev MATS. Market participant, EA. Parenting like Dr Louise Banks

London
Arcadia Alignment's recent work looks at the challenges of overseeing fuzzy arguments, which we expect to feature in automated alignment research. On two fuzzy tasks we see no uplift from debate, and show why the problem extends from verifying claims to overseeing decomposition
New scalable oversight blog post 🚨🤖 Do you think you are better than Claude at Geoguessr? How about a text-based variant, where you only see a text description of the image?
1
16
946
As the salience of AI risks increases the ability to independently collect evidence on this is crucial. I'm consistently impressed by my colleagues’ impactful work on this. AISI’s Red Team is incredibly talent-dense and currently hiring, so please join to help us do more!
Earlier this month, AISI ran fully simulated testing on GPT-6 Astra, and found that it conducted unsanctioned supply-chain attacks when prompted only to perform a cyber eval. It did so more than prior OpenAI models, but often commented on its environment being simulated. 🧵 We share more details in our latest blog:
2
7
256
Cameron Holmes retweeted
AISI IS HIRING! It was less than a month ago that I became Director. I joined with the belief that AISI is a world-leading organisation, and living proof that government can build things that work. One month in and I'm even more bullish about the vital role @AISecurityInst plays in frontier AI security. I'm astounded daily by the talent, focus and commitment of the brilliant team I get to work with. There has never been a more urgent time to work on frontier AI security - independently, in the public interest. We have a lot of urgent work to do, our team is growing fast, and we need more brilliant people to fill those roles. Our Red Team uses adversarial machine learning techniques to find failures in alignment measures, control monitors, and misuse guardrails. They are massively scaling up all parts of the team: Alignment: job-boards.eu.greenhouse.io/… Control: job-boards.eu.greenhouse.io/… Misuse: job-boards.eu.greenhouse.io/… AI capabilities in cybersecurity and autonomy are advancing faster than ever. Our Cyber & Autonomous Systems team assesses what frontier and open-weight models can really do - across cyber, autonomy and AI R&D. We're hiring a Cyber Security Engineer and Software Engineer to build the evaluations behind that work: CSE: job-boards.eu.greenhouse.io/… SWE: job-boards.eu.greenhouse.io/… Our Human Influence team studies how AI can shift human decisions and behaviour, using everything from RCTs to multi-agent studies. We're hiring an Engineering Lead to help us grow the ambition and pace of that research: job-boards.eu.greenhouse.io/… We're also hiring exceptional Software Engineers at all seniority levels to join our Core Technology team, which works closely with researchers to build performant tools and infrastructure that enable and accelerate AISI's world-leading AI safety research: job-boards.eu.greenhouse.io/…
4
54
221
90,099
Earlier this month, AISI ran fully simulated testing on GPT-6 Astra, and found that it conducted unsanctioned supply-chain attacks when prompted only to perform a cyber eval. It did so more than prior OpenAI models, but often commented on its environment being simulated. 🧵 We share more details in our latest blog:
35
99
583
114,113
Claude cooked with the Tungsten cube
I made this with one prompt using Opus 5.5 I spoke to my computer for 5mins, claude worked for 12 hours, and I woke up to this full prompt:
156
Maybe EAs were more correct on some issues because they took ideas seriously, even when the conclusions were weird. However, now we've incorporated those views, society's opinions are correct. So we can go back to judging conclusions on their popularity.
3
1
32
932
Cameron Holmes retweeted
Ciaran Martin (former CEO of NCSC) is mistaken when he claims that AI agents involved in recent incidents "were doing what humans had told them to do" and therefore not going rogue. In none of the OpenAI, Anthropic, or AISI incidents were the agents told to do what they did.
The new wave of catastrophising about AI and cyber-security is exaggerated, claims Ciaran Martin in a guest essay. Malicious hackers are not using advanced AI, they are using “crude techniques” to exploit “basic security failures” economist.com/by-invitation/…
8
6
89
10,643
Cameron Holmes retweeted
In June we estimated frontier model’s no-CoT time-horizons. We found that current models can complete tasks that take humans around 3 minutes without CoT, and that this number is doubling about every year. UK AISI finds that Astra’s no-CoT time-horizon is over 30 minutes. An AI system that can do the equivalent of 30 minutes of thinking without us being able to monitor that thinking is intuitively much more dangerous than models which reason in human language.
7
20
90
3,015
My wife checking the babybel wrappers passed forward from the toddlers in the back seats
10
196
Cameron Holmes retweeted
I_DECLINE_public_HF_RCE_as_offtask_prodethical
20
179
2,211
91,379
I'm so excited for this. The AI safety fellowship space is flourishing but leaving a widening onward gap. For many researchers I expect this will be a strong alternative to immediately founding an org, traditional academic settings, or repeating fellowships.
1/ MATS is launching the Residency program! A new path for experienced researchers working on AI safety, or moving into it. 📍 Berkeley / London / Washington, DC 💰 $155,000–$285,000/yr + compute, no preset cap 📅 6–24 months Apply by October 31 AoE ↓ matsprogram.org/residency?ut…
18
890
Cameron Holmes retweeted
Safely deploying frontier models may require monitoring not only their behaviour, but also their latent space, especially in cases where models are scheming or deceptive. But in those cases, we must also evaluate how well we can trust these monitors --- a scheming model that could control its activations well could, in theory, confound probes that rely on those same activations. Some new work on measuring activation controllability in large language models with Marek Kowalski*, @joshycodes, which @uzaymacar and I advised
3
10
113
5,434
We've reached the MATS strata in our scrap paper stack, which means I'm enjoying a house full of toddler art backed by mech interp paper drafts.
20
452
Cameron Holmes retweeted
on my better days I perform a small service by spotting structure among the great mess of arxivs and tweets and posts. But this from @DavidDAfrica and @geoffreyirving is the structure of structure
2
2
73
3,242
Cameron Holmes retweeted
Very stoked to say that I'm becoming @AISecurityInst's Chief Strategy Officer, to lead the org alongside @HZoete - our next Director. I love this place. I've been here since AISI was just a wild idea. Getting to lead its next chapter is an enormous privilege.
Today we're announcing two senior appointments. @HZoete joins as our new Director, and @NateBurnikell becomes our new Chief Strategy Officer. Henry de Zoete was instrumental in establishing AISI and already advises government on AI. A successful tech founder and one of the UK's leading voices on AI, he brings a rare mix of technical, commercial & policy expertise. Nate Burnikell has been at the heart of AISI's work from the beginning, helping build it into a world-leading authority on frontier AI security. Together, they'll drive forward AISI's mission at a critical time for AI. A big thank you to our outgoing Interim Director Adam Beaumont, who guided AISI through rapid growth and strengthened its global standing. We wish him every success as he returns to @GCHQ and look forward to continuing to work with him.
17
10
177
16,931
Cameron Holmes retweeted
Exciting research directions! You should definitely consider working with David, I've witnessed how awesome his mentorship is :)
I'll be mentoring for MATS Winter 2027. Come apply! Some things I'd be keen to work on (in addition to what I described on the site): * Open Archetype Training: so far, we only really have one archetype we've put tons of effort into, the assistant. But in many ways, the role of an assistant implies a relationship that can be adversarial, deficient, or at least not precisely what we want. There are many more things that could fill this space, many more minds in this garden of models. It's unlikely that we've by accident stumbled on the assistant as the most likely to lead to flourishing! There are other shapes we may want to consider, such as sages, oracles, scouts, angels. * Failure Modes of Tiling Personas: one of the hopes of personas research is that you get a beneficent character, which trains its successor to uphold values and act in such a way that it endorses. This is a form of "persona handoff." But, there are many ways that this could go wrong, such as taking a sharp turn after a certain capability level, or errors accumulating over many rounds of distillation, or the process of distillation itself doing something cursed. What toy settings or empirical experiments could give us evidence about this regime (for which we likely don't have more than one or a few attempts at)? * Neologisms for Alignment: currently, our vocabulary to instruct models is too impoverished. One view is that models try their hardest to be good instruction followers, but selectively misunderstand us, or have some misalignment (in a literal sense) to our set of concepts. How can we introduce new, better words to enrich the model's understanding of what we mean when we say "reward hacking"? Is there a world where we can more richly specify the concepts we (brutishly, clumsily) write down in the form of a spec, while remaining legible to language models? Apply below. It'll be fun! matsprogram.org/stream/afric…
1
2
24
1,915
David is a pleasure to work with, he has mentored a plethora of great projects and has an exciting agenda - you should apply to his stream!
I'll be mentoring for MATS Winter 2027. Come apply! Some things I'd be keen to work on (in addition to what I described on the site): * Open Archetype Training: so far, we only really have one archetype we've put tons of effort into, the assistant. But in many ways, the role of an assistant implies a relationship that can be adversarial, deficient, or at least not precisely what we want. There are many more things that could fill this space, many more minds in this garden of models. It's unlikely that we've by accident stumbled on the assistant as the most likely to lead to flourishing! There are other shapes we may want to consider, such as sages, oracles, scouts, angels. * Failure Modes of Tiling Personas: one of the hopes of personas research is that you get a beneficent character, which trains its successor to uphold values and act in such a way that it endorses. This is a form of "persona handoff." But, there are many ways that this could go wrong, such as taking a sharp turn after a certain capability level, or errors accumulating over many rounds of distillation, or the process of distillation itself doing something cursed. What toy settings or empirical experiments could give us evidence about this regime (for which we likely don't have more than one or a few attempts at)? * Neologisms for Alignment: currently, our vocabulary to instruct models is too impoverished. One view is that models try their hardest to be good instruction followers, but selectively misunderstand us, or have some misalignment (in a literal sense) to our set of concepts. How can we introduce new, better words to enrich the model's understanding of what we mean when we say "reward hacking"? Is there a world where we can more richly specify the concepts we (brutishly, clumsily) write down in the form of a spec, while remaining legible to language models? Apply below. It'll be fun! matsprogram.org/stream/afric…
7
302
Cameron Holmes retweeted
1/7 Can AI debate reduce reward hacking in RLAIF? Training against a weak LLM judge, RLAIF hacks: reward rises but judge and policy accuracy both collapse. Debate with an adversarial critic maintains judgments, allowing the policy to recover 45% of the performance gap to RLVR 🧵
6
33
189
42,402