OpenAI
Risk assessment 34%
AI companies should do model evals and uplift experiments to determine whether models have dangerous capabilities or how close they are. They should also prepare to check whether models will act well in high-stakes situations.
Evals: domains, quality, elicitation
50%Evals: accountability
20%Adversarial evaluation for alignment
10%Model organisms
0%Scheming risk prevention 3%
AIs show signs that if they were more capable, they would sometimes scheme, i.e. fake alignment and subvert safety measures in order to gain power. AI companies should prepare for risks from models scheming, especially during internal deployment: if they can't reliably prevent scheming, they should prepare to catch some schemers and deploy potentially scheming models safely.
Safety case: process
5%Safety case: accountability
0%Internal deployment protocol
0%External deployment protocol
0%Plan for if an AI is caught scheming
0%Training: remove scheming capabilities
0%Training: adversarial training
0%Training: safe architecture
55%Boosting safety research 35%
AI companies should do (extreme-risk-focused) safety research, and they should publish it to boost safety at other AI companies. Additionally, they should assist external safety researchers by sharing deep model access and mentoring.
Publishing safety research
40%Deep access for external safety researchers
20%Mentoring external safety researchers
20%Misuse prevention 9%
AI companies should prepare to prevent catastrophic misuse for deployments via API, once models are capable of enabling catastrophic harm.
Safety case: process
15%Safety case: accountability
5%Removing dangerous capabilities
10%Emergency protocol
0%Prep for extreme security 0%
AI companies should prepare to protect model weights and code by the time AI massively boosts R&D, even from top-priority operations by the top cyber-capable institutions.
Plan for SL5
0%Red-team resilience
0%Practices: isolated network
0%Practices: secure developers' machines
0%Practices: multiparty controls
0%Practices: secure boot
0%Track record
0%Risk info sharing 32%
AI companies should share information on incidents, risks, and capabilities — but not share some capabilities research.
Incident reporting
10%Talk about extreme risks
25%Describe worst-case outcome
0%Don't publish some capabilities research
70%Planning 0%
AI companies should plan for the possibility that dangerous capabilities appear soon and safety isn't easy: both for evaluating and improving safety of their systems and for using their systems to make the world safer.