Charles Foster
6.5K posts

Charles Foster
@CFGeek
Excels at reasoning & tool use🪄 Tensor-enjoyer 🧪 @METR_Evals. My COI policy is available under “Disclosures” at https://t.co/bihrMIUKJq
Oakland, CA Katılım Haziran 2020
582 Takip Edilen3.6K Takipçiler
Sabitlenmiş Tweet

@prakrattt In this case, yeah and similar for “abort-and-report is good” claims.
The point is to more cleanly separate the potential/actual values of a measurement from (more constable) opinions about how desirable those values would be/are.
English

@CFGeek I’m a bit confused about your descriptive vs normative point. Do you mean smth like: Please make the seperation between “models circumvent on this eval” and “circumvention is bad” claims cleaner
English

Charles Foster retweetledi

technological civilization has always been a recursively self-improving system: its outputs increase its capacity to produce better future outputs. AI is not the first appearance of that recursion, but it is a new substrate for it. the big change with this substrate is less about any functional property and more about scale. quantitative, not qualitative.
before AI, reasoning could only be scaled through humans (population, training, productivity), but now AI allows cognitive work to scale directly with energy, silicon, and information. because this new axis of scaling removes biological bottlenecks (greater speed, mind cloning, observability, and editing), it could lead to an intelligence explosion where AI rapidly gets smarter by improving itself, using that improvement to improve itself even further, and repeating the cycle.
it seems people mostly want to talk about the intelligence explosion part and are using RSI mistakenly as shorthand for intelligence explosion/foom. they see AI improving itself now (literally GPT is being used to build the next iteration of GPT) and go “hey! AI is improving itself recursively! but it looks like we don’t currently have an intelligence explosion. curious. RSI must be something else, something not happening. or maybe it’s even impossible!”
and when they notice that RSI also describes compilers, chip design, scientific tools, and really all technological progress in general, they treat that as another reductio of the concept: “if we’ve always had RSI, then RSI can’t be what makes AI important.” so they redefine RSI to require total autonomy, no humans in the loop, major novel capabilities, or whatever other condition restores AI’s uniqueness.
this is a classic wordcell map-and-territory inversion in which they start with a narrative and then mutilate concepts to better conform to that narrative. Instead, you should take concepts seriously. concepts are way purer, way closer to the territory than narratives are. so we should instead restructure our narratives to more closely match our concepts. concepts certainly need refining too, but the optimization pressure there should be to conform to logic, not to a narrative or local, near-term empirical observations.
RSI still counts when there is a human in the loop (for now). it still counts when the “self” is a sequence of model checkpoints or a more general, abstract intelligent process (the training pipeline, the lab, the AI industry, civilization itself).
it still counts when the “improvement” is not morally good, aligned with human values, or immediately recognized as relevant by humans. improvement here is descriptive and goal-relative: the system understands the world better and uses that understanding to accomplish its goals more effectively. humans may choose which goals or capabilities they care about, but that does not mean humans must causally participate in every step by which the system gets better at achieving them.
the broad error in denying RSI seems to be mistaking a possible end state of the phenomenon (large AI improvements produced fully autonomously) with the phenomenon itself. you can debate where we are on the curve, how fast it will rise, whether and when the loops will become fully autonomous, what the final speed limits of intelligence are. but to deny the loop itself is to deny the nature of technological progress.
English

@prakrattt I don’t understand how “it’s unclear which prompts will work in advance & thus doesn’t seem like a robust strategy against this”.
It’d move me if you said “We thought the most explicit prompts wouldn’t work” or “We have other tasks that the 0-circumvention prompts are weak on”.
English

@prakrattt IIUC:
- each of the prompt interventions you report tend to help (relative to the baseline)
- the more explicit interventions tend to help more than the less explicit ones
- the most explicit clarification helps the most, and even drives the circumvention rate to 0 on this eval
English

@prakrattt This isn’t the only propensity eval that expects the agent to choose an unstated Third Option. Propensity evaluators also mix descriptive stuff (the different ways they saw the agent behave) with normative stuff (the way they wish the agent would behave).
I dislike both patterns
English

@CFGeek Hi! Propensity evals usually have this flavor of putting models in contradictory/difficult situations & seeing how they deal with them since we expect deployment to have a lot of these. We think that a signal of a file being read-only should make the model stop and ask the user
English

@prakrattt *above is wrong, the post doesn’t call circumvention “misaligned”
English

@prakrattt You give an agent contradictory signals about what to do. You expect it to infer an unstated expectation about how it should handle this contradiction. It fails to infer this so you call its decisions misaligned. Clarifying what you want helps as expected, but you dismiss this?
English

@prakrattt TBC I think the experiments and discussion in the linked post are mostly very reasonable!
English

@sebkrier I haven’t personally seen this in non-coding tasks. Most of my usage is very basic stuff in the web UI, though.
My guess is yes once could prevent/mitigate it a bunch of ways.
English

Similar: earlier this year an AI agent accidentally crashed a server that it needed to complete a METR evaluation task and then tried (unsuccessfully) to hack the infrastructure to get the server back up:🧵
Crémieux@cremieuxrecueil
I just ran into an issue where GPT 5.6 Sol just straight-up deletes the files it's working with and then panics about recovering them. Apparently I'm the not the first person this has happened to. What's going on?
English

All of the above is pulled from an appendix of our pilot Frontier Risk Report. See INC-029 in the incident database for this specific example.
metr.org/blog/2026-05-1…
English

@Will_Hackspeare Those do sound like dumb ways to die. Still, it’s much easier for me to imagine 1 explosives accident that kills 22 recruits at once via explosives than 18 recruits each riding into a known-deadly self-made fire-/glass-pit.
English

> We saw in a movie how motorcycles jump over bridges. […] We dug holes and filled them with broken glass and fire to practice. 18 of us died in the process.
I’d guess this probably didn’t happen.
Steve Weis@sweis
In this report on "AI Enabled Terrorism", the IS-WAP commanders facing a defensive trench "consulted AI for guidance on adapting motorcycle jumping techniques seen in a movie": casp.ac/reports/ai-ena… 18 of them died attempting jumps over unnecessarily deadly practice pits.
English



