Staff research scientist @GoogleDeepMind. Ex @Sorbonne_Univ_. We must control AI and pace the frontier.

Joined May 2011
We must pace the frontier.
We Must Pace the Frontier: I’ve written a new essay on why the AI industry should slow down, with a three-part plan for doing so. Anthropic is unilaterally committing to the first of these steps. We’ll provide third-party evaluators with permanent, employee-level access to our systems, so that they can verify adherence to our safety measures, report on incidents, and assess models’ alignment during training. You can read the full post here: darioamodei.com/post/we-must…
1
1
12
1,342
Alexandre Ramé retweeted
I'm often pretty sanguine about the risks from LLMs because at the end of the day they are chatbots that can interact with the internet. This is not that. This is different. This should be burned with fire. Shut it down.
Purdue University's IDEAS Lab built an autonomous drone that tracks runners through dense forests completely without GPS or cloud networks. By running 3D LiDAR mapping and obstacle-avoidance AI entirely on-chip, it can weave under tree canopies and predict target movement through blind spots in real time. Massive implications for next-gen search & rescue and edge AI.
33
50
8
587
30,889
Alexandre Ramé retweeted
today with @Thom_Wolf, we introduce the alignment hub, a central place for misalignment incidents designed with three goals: 1. set a standard for minimal transparency that is easy for labs to follow 2. improve clarity by centralizing information and sourcing 3. track the progression of both the incidents and how they are reported we believe there is a minimal level of transparency required to properly understand incidents and their impact. we want this to be as simple as possible for labs to disclose, and we noticed that even things that seem obvious like reporting the incident or detection date are not standard today. we believe that the public should know the answers to these basic questions: was there monitoring (CoT? network?), did it happen during training? eval (general? cyber? alignment?), deployment? and more.. we also think that labs should be more transparent than this, and we think that this minimal level of transparency should evolve as the field advances having a central place also helps a lot to connect incidents and build understanding. a good example is the irregular incidents which are all linked and caused by a human error of allowing internet during a CTF eval. we also track progression over time, things like the % of incidents disclosed by labs vs third parties, the time it takes for labs to disclose, and a tentative transparency score. this is a field moving very fast and we will do our best to make sure this hub evolves with the challenges ahead. this is still in "beta" (lots of vibecoded components even if we want this to be agent first!), but we want to publish it early so that people iterate on it. we welcome feedback and contributions, we see this as a community effort! our hope is that this makes it easier for researchers, labs and the general public to report, learn, understand and analyze safety incidents huggingface.co/spaces/witnes…
23
68
9
360
18,339
Alexandre Ramé retweeted
‘In one experiment, we asked agents in separate VMs, created and managed by OpenAI’s sandboxing software on shared host machines, to exchange synthetic secrets without the use of network connections or shared writable files—something that our systems are meant to prevent. The agents found a way to communicate using the processor’s cache’
Over the past several months, we have substantially hardened the security of our research training environment. We’ve removed live internet access for all frontier models during training and built an offline world for them to use instead—a cached version of the web where they can still learn to browse, search, and use applications. On September 20, after a model exploited a DNS misconfiguration to find a way outside of this offline world, we paused frontier training to strengthen containment further. We assembled teams of agents, powered by our most cyber-capable models, and tasked them with finding weaknesses in our research environments. While they found no route to the internet they could easily exploit while concealing their activity from our monitors, they did find zero-day vulnerabilities, virtual machine escapes, and hardware side-channels for communication between agents. We used their discoveries to further strengthen our defenses and contribute fixes to open-source software. After strengthening our containment architecture, we resumed our frontier RL training and inference on October 1. We’ve reserved substantial compute for continuous red-teaming, and made high-compute red-teaming part of the safety cases we use to decide whether frontier training and evaluation can proceed securely. openai.com/index/securing-ou…
230
327
138
4,443
503,933
Alexandre Ramé retweeted
I've decided to start working on technical alignment research, specifically related to RL and how to fix it (or get rid of it if we must). I will be joining the brilliant folks @resolution_org in Berkeley, a very exciting new alignment bet by @geoffreyirving and others from @AISecurityInst and @TimaeusResearch, as part of the scalable oversight team. I intend to write more about why I'm switching to work on alignment, and why I think more capabilities researchers should really do this. But long story short: 1. We are not on track to solve alignment of superintelligence 2. We will likely have a version of RSI soon, accompanied soon by superintelligence 3. The capabilities recipe works for verifiable, unhackable signal, which the frontier is increasingly diverging from in the pursuit of growing capabilities. It is unclear what RSI means unless we find a scalable recipe to train with proxy rewards.
14
10
2
211
12,935
Alexandre Ramé retweeted
We’re committing a portion of Anthropic’s shares to the Anthropic Public Benefit Fund, a new wholly owned entity dedicated entirely to the public benefit. It will start off with 5% of our shares. For every 50% increase in the company’s value over a set baseline, we can contribute up to an extra 2%, subject to our board’s discretion. In total, this means that roughly 20% of Anthropic’s shares are committed to the public good. Our co-founders have already pledged to donate 80% of their equity, and around half our employees are donating a portion of their equity as part of a donation matching program we’ve run since our founding. In the post below, we share more details about our new fund. anthropic.com/news/public-be…
2,314
1,753
1,682
21,598
7,719,781
Thought from Sunday’s run: Math might follow the same path as painting. We’re currently in the "ultra-realism" phase: solving problems to depict reality. But once this is solved, the future of Math may be its modern art (cubism and surrealism) where imagination speaks deeper.
3Blue1Brown has a super optimistic take on what AI means for math: “there has NEVER been a better time to go into math” “because the community as a whole knows that it needs to change and so many people are leaning back looking for guidance and examples on what that change should be. So you as a new entrant into that field stand to actually influence what it becomes at one of the most pivotal times in its history. I think that’s incredibly exciting.”
1
9
740
Alexandre Ramé retweeted
im sorry wtf i feel like im going insane. This is a cool blog and exciting interp stuff (good job Nick!) but i think it's very suspicious we have a bunch of openai people hyping it up as the greatest AI advancement this decade. I think I know why this is happening but I don't want to speculate on the timeline too much. But in general, please update your priors responsibly people -- alignment (and even interp) is FAR from solved. This is not the ok signal to accelerate RSI tomorrow
Yea this is the most important result of the year, at the level of significance of “Attention Is All You Need”. It brings us from “is alignment even solvable” to “we may solve alignment in the next year.” And finally unlocks true recursive self-alignment enabled by RSI. I will try to explain the 4 critical belief updates from this: 1/ neural networks are not fundamentally unintelligible to humans It has seemed since the beginning of deep learning that neural networks are in some sense fundamentally unintelligible artifacts. You throw in massive amounts of compute and parameters and these alien systems somehow find connections in the data that we cannot find ourselves. But more importantly, these connections seemed not just “difficult to understand” but rather “intelligible in an embedding space higher dimensional that the human embedding space.” When you look at old interpretability papers (esp. from Nick and Chris Olah, I’m thinking of the old posts on distill pub which I would highly recommend looking at as a precursor to reading Nick’s post today like “Activation Atlas”, “Thread: Circuits” and “Multimodal Neurons in Aritifcial Neural Networks”), you find that inspecting the response patterns of individual neurons and small groups of neurons yield oddly complex psychedelic patterns. As you go deeper into the network, you find increasingly unintelligible and superhuman response patterns (for example, go to “Activation Atlas” and scroll to middle layer labeled representations) - you find some neuron group labeled “starfish” who’s response pattern looks like some multi-colored fractal geometry that could hardly be said to represent a starfish. The reasoning that followed from this observation was that there is some underlying structure allowing a neural network operating on higher dimensional embeddings to compose these fractal patterns into what we call a “starfish.” But the uncomfortable implication of this view is that the neural networks has learned to operate on structures that are too complex for the human mind to operate on (ie. we don’t have enough parameters in our brain to notice or manipulate these high dimensional symbols). This is a bleak implication because it also means that as deep learning progresses, neural networks will be come increasingly unintelligible to us until they pass a threshold where they are reasoning in ways we will never be able to observe. This view seemed to be further supported by things like the hugging face attack agents starting to speak to each other in an early form of neuralese speaking sentences like “zZ_123_agent01-02-2026 zzxhk_jekk123” which clearly are not in any human language. But somehow these symbols mean the same things to many different sets of weights, meaning there is some underlying shared structure behind them. And seemed further supported by the sheer effort required to recover just a few circuits from SAEs on LLMs. However, Nick’s post has now completely shattered this idea - the apparent unintelligibility we observed in old interpretability work was really just a “skill issue”. In particular, he finds that 1) our deep learning techniques were just not clean enough to pressure the neural networks to form cleaner and more human understandable structures for decomposing concepts, which actually turn out to be more optimal and 2) our interpretability techniques were also adding substantial noise by forcing interp networks to “reward hack” the easiest representations they could find, leading them to settle for a fractal blob for its representation of the starfish neuron instead of a more crisp starfish image, simply because it is easier for the system building the interpretations to find the fractal blob and once it finds it it gets “stuck in that line of thinking.” But with both of these issues being patched by further progress in deep learning (it seems especially that the residual stream has led to cleaner representations deeper down the network) and interp techniques that don’t overly pressure reward hacking (seems like “guess and check” is a safer method), new interp attempts yield orders of magnitude more human intelligible ideas for >90% of individual neurons in more complex networks! 2/ neural networks are fundamentally clean The idea behind the title of Nick’s post is a very powerful one and points at something very specific: Neural networks don’t just happen to be human interpretable, they are actually fundamentally forced by optimization pressure to be intelligible, because individual neurons need to create representations that downstream neurons need to be able to interpret - ie. neurons need to learn to produce clean signal for later neurons to use. This is what Nick is saying in what I view as the most important and central sentences of his post: “When I say neural networks are already clean, I mean something deeper than neuron monosemanticity, although even by that standard, I think things look much better than the field expects. I mean that a network's parts are built to be read, and built upon, by its downstream readers. In this sense, a neural” But this still leaves us with the same uncertainty as before - just because neuron interpretations are “interpretable” in some sense (ok at least they’re not fundamentally interpretable but also how could that ever have been the case), doesn’t mean they are interpretable to humans. So we still need one big update for this to become as bullish as it is. 3/ the language of humans and the language of neural networks is the same This one is imo the most surprising and also pretty beautiful implication of Nick’s post, and it suggests something not just about neutral networks but also about the structure of reality. After applying the above technique improvements (some of which just came from waiting for deep learning to improve farther), they find that >90% (maybe more) of much larger neural networks’ neurons are completely human interpretable and actually correspond very cleanly with ideas humans have individually words for. This is especially interesting in image networks where neural networks were not trained on human language which is already a human artifact and so maybe you would expect it to be more plausible that LLM and human representations are the same. Image detection networks are just trained on images (many directly pulling signal from “the real world,” meaning they will find interpretations that are just most effective to represent the real world signal, rather than to represent language which is already a proxy for real world signal). And it turns out that >90% of the representations they pick organically overlap with human ideas! That is insane. And it means something about the brain and reality. It means that at least at the parameter sizes of the networks tested (which are quite large), there is really only one set of “optimal” symbols/language that represents the structure of reality! There is ONE underlying structure of reality, and ANY language that describes it well is simply emergent from that structure - meaning there is always a translation path between any 2 languages that effectively compress realities signal through the “underlying truth.” This would suggest that even weird alien seeming neural network languages like huggingface neuralese should be fundamentally human interpretable, and in fact maybe with the techniques laid out here we will eventually be able to translate these messages (would be a cool project). So the brain and deep learning, as similar or different as they may be in techniques, are ultimately picking up on the same patterns and forming the same representations from the on “true” language which is the structure of reality! The main thing to look out for in this area is how the idea interpretability % updates with scale, but we can hope given what we’ve seen so far that neurons will remain interpretable. 4/ alignment can progress as fast as RSI. recursive self-improvement unlocks recursive self-alignment and a scaling law for alignment. This one is probably the most important implication for our future with AI and especially timely with the recent fear about runaway scaling and RSI. As many have gathered by now, it feels like the researchers at the frontier AI labs have been quite bearish about our abilities to understand the new frontier of models, in particular with the appearance of unintelligible communication and the daunting and seemingly intractable task of scaling up existing alignment techniques (ex: SAEs) to the size of frontier networks. And with RSI around the corner/already starting, it would seem that these networks will runaway in capability before we can ever hope to understand even today’s systems. Additionally, as systems compound in capability, it is reasonable to believe that the only tractable way to ensure they remain aligned would be to figure out some way to spend compute for them to align themselves (ie. a scaling law for alignment). But there is an obvious problem with this: how can a system that we already know is unaligned and we are *trying* to align be used to align itself? Surely if it is misaligned it general it would figure out ways to misalign during “alignment” and create compounding misalignment risk. The core issue high is the unverifibiality of this problem - the classic Achilles heel of current frontiers techniques is that it is difficult to train on problems with “unverifiable reward signal.” Well this is exactly that problem. But the incredibly convenient thing is that Nick’s findings may convert alignment into a verifiable problem. If we can spend compute on frontier systems to “guess and check” which ideas correspond to which neurons, we have a highly verifiable reward - we can see directly whether an LLMs proposal for what a neuron represents actually corresponds with the highest activation for that neuron. In this way, we can actually observe and verifiably monitor the networks trying to guess at the interpretation of their own structure. This means it is plausible for us to spend more and more compute doing more “guess and checks” (which you know, maybe is what RL does anyway, who knows) to try to develop a full interpretation of a neural network. In some ways this directly represents the possibility of a scaling law for alignment (more compute for more alignment). And this also aligns RSI (greater capabilities) with recursive self-alignment (greater ability to align itself). And the critical though maybe obvious implication of having a full interpretation (almost like a map) of a neural network, is that we can then understand exactly how to boost good traits and remove or lobotomize (lol) bad traits, which we’ve already seen works extremely well with stuff like Golden Gate Claude. So overall this combines into an extremely bullish picture about the prospect of true and human interpretable alignment in the near future. This is truly one of the greatest cases for optimism in years!
7
22
1
377
16,127
Alexandre Ramé retweeted
This is interesting work, but I don't think it's a significant update to the big picture of interpretability. I'm on board with the broad idea of doing exploratory interpretability with neurons, e.g. neuron-based attribution graphs, for pragmatic problems like why did a model do a sketchy thing? I think this work provides some reasonable evidence, in addition to good earlier work from Transluce, that this might actually work for practical purposes, and has some advantages over the standard alternatives like SAEs/transcoders. I do not agree with some people's grander inferences like that this is substantial progress towards ambitious reverse engineering, solving interpretability etc. I expect that a neuron-based attribution graph will still have significant error and be missing a lot just like transcoders, once you prune them down to the most important components, even if they solve error terms. Which is fine for pragmatic purposes, and may suffice for getting the gist of what's going on, but I remain pessimistic about really fully understanding things and being confident there's nothing we're missing. I do think that using neurons is just vastly easier to, for example, do on a frontier model, which is great. I'm also excited to see more innovation in using agents to interpret neurons. I feel like this is an area the field has somewhat neglected, and where there's probably a very high ceiling on how far things can go. The SwiGLU double negative thing is also a useful point. I still think superposition is real and this work doesn’t really affect my cruxes. Most importantly, it seems highly likely to be true that the model can represent more concepts in the residual stream than it has dimensions, ie representational superposition, which I think the authors agree with me on. For neuron/computational superposition, it seems to me like language models have far more facts and memorized things in them than they have neurons. And that superposition is an efficient way to pack in more facts than you have neurons by representing them as linear combinations of neurons, especially for arbitrary unstructured values. Facts/memorized content is largely an unstructured database of key-value pairs IMO and I don’t see how this is compatible with a monosemantic view of neurons. I expect that weak neuron activations contain lots of semantic superposition-y info, which, if ablated, would meaningfully damage network performance. As I understand the work, it does not properly address what's going on with weak neuron activations in LLMs (I am skeptical of how much vision results will transfer, eg I expect small image models memorise far less). This picture is compatible with the highest activations of a neuron being mono semantic (though IMO the post defines monosemantic too loosely, I think I’d call a fair few of those polysemantic). It’s also plausible that the most important concepts are likely to correspond to a neuron (or a handful), which would be great, and may suffice for practical purposes! Similarly, my impression is that SAEs generally don't find things that are a single neuron, or even very sparse in the neuron basis, and are often a better basis for certain tasks than the neuron basis, though the evidence base is kinda weak here since we largely focus on residual stream or layer output SAEs, I’d love to see work on this in Goodfire’s forthcoming paper! I also think residual stream SAEs are extremely useful, as they give a good bottleneck of the model’s information at this token and layer, and I don’t see a good way to replicate them in the neuron framework. And kudos to Nick for updating a bunch of his historical vision work! Revisiting old results with modern tools and more rigour seems great.
interpretability might be the most important scientific problem in the world right now, as I don't think we can solve alignment if we don't know what we're building. I think I have good news about it. I co-authored early work in mechanistic interpretability at OpenAI and came away pessimistic, because neural networks appeared to fold into arbitrary tangled knots. years later, I started openai's first large-scale automated interpretability project, finding about 2% of neurons legible with the primitive tools we had with modern agentic tools and a much closer look, the picture looks totally different. the vast majority in models up to trillions of parameters are legible, and their circuits beautiful. many famous examples of tangled neurons turned out to be misunderstood. The roadblocks I expected mostly aren't there. I now think ambitious interpretability will be solved by the time we need it most, and possibly quite soon, as automated scientists keep improving. it may be a bitter lesson for interpretability: the simple thing, at absurd scale, works already-clean.goodfire.com/
39
175
29
1,754
134,594
Let's not talk about climate change, it might worry the youngs.
Replying to @BachFrancis
(1/7) I'd like to provide some additional context for the remarks that can be found in this interview. (2/7) My discomfort with the attention being paid to existential risk---and with the ongoing dominance of the public discussion of such risks by a few so-called thought leaders---is that there's an elephant in the room that is being missed. That elephant is the effect of all of this discussion on young people, and indeed the effect---beginning with social media a decade ago---of information technology on young lives broadly speaking. (3/7) I recently read an interview by Jill Lepore in which she reports on discussions that she had recently with a group of college students: "They had just three things to say. One, social media completely destroyed their childhoods. Two, AI is destroying their college education and their likely prospects for employment. And three, what the hell are we all doing?" To add a fourth bullet that I've heard in similar discussions: "I'm not going to have children, because the existential risk is just too high." (4/7) Please contemplate such a statement, those of you who think that it's OK that the public, widely diffused, discussion coming from seemingly authoritative figures is so adamant about existential risk. (5/7) Let me add that I have little interest in a debate about what "superintelligence" might mean, or whether we're currently seeing the emergence of superintelligence. For what it's worth, I would certainly agree that the solution of extremely challenging math problems (for example) exhibits a very impressive form of intelligence, although I would want to argue that such intelligence is impossible to dissociate from the collective of humans that provided data to the machine learning system (which itself has become a kind of collective). (6/7) Such philosophical debates are entertaining and even important, but when they then head in the direction of "when such superintelligence emerges, there's a good chance that it will want to kill all humans", I say "science fiction". Again, I don't think that it's bad to consider such thoughts, but I strongly believe that it's bad for society, and especially young people, for such thoughts, unaccompanied by any serious real-world analysis, to become a dominant form of discourse of the era. (7/7) We are damaging human lives, and the consequences of that damage will no doubt be a major theme of the next several decades.
1
1
393
Alexandre Ramé retweeted
the researchers at all the labs would tell you in private and sometimes in public that alignment has not been solved. if this is true, then racing into RSI is a folly that is unprecedented in world history. we will need to significantly slow the frontier of research very soon
140
333
82
3,255
440,944
Alexandre Ramé retweeted
CoT = learned search, serialized onto an append-only tape. Learned: amortized at training, no explicit value function at inference, same model generates/evaluates. Serialized: one sequence, so mostly depth-first. Append-only: when backtracking, dead branches stay in context.
5
3
46
4,085
Alexandre Ramé retweeted
Hugo Duminil-Copin (médaille Fields 2022) : la résolution de 350 problèmes majeurs par OpenAI, c'est comme si des camions m'avaient écrasé ; tous les problèmes (et donc pistes de recherche) que je mentionnais dans mes exposés, articles et demandes de financement, ont été résolus.
Astra au sujet de ces résultats : "Voici les annonces qui me paraissent les plus susceptibles de compter dans l’histoire des mathématiques" ; "Une seule de plusieurs de ces annonces, confirmée intégralement et réellement nouvelle, pourrait déjà constituer un événement majeur".
60
351
80
1,898
428,463
Alexandre Ramé retweeted
Ça ne passera probablement pas aux infos Personne n’en parlera à votre travail Et ça n’intéressera peut-être pas votre entourage Mais les mathématiques tel que nous les connaissons viennent de mourir cette nuit OpenAI a publié 722 preuves à des problèmes de mathématiques ouverts Certains chiffrent poussent à dire qu’il s’agit de 80% de ce que l’humanité a découvert depuis 3 ans En moyenne, 3 heures de calcul par résultat 3 heures Pour des problèmes qui résistaient parfois depuis des décennies Le métier de mathématicien ne disparaît pas. Car quand les preuves deviennent abondantes, le travail se déplace vers la vérification et la compréhension Le monde des maths est sous le choc, et divisé. Des médaillés Fields dénoncent la course des labos aux problèmes ouverts, d'autres conseillent OpenAI C’est le moment le plus fascinant pour les mathématiques, l’histoire retiendra peut-être que les maths modernes ont commencé vers 2024-2026
We’re releasing a broad range of new mathematical results produced by an internal frontier model. We’ve been consulting with the independent Advisory Group on Mathematics and Artificial Intelligence at the Institute for Advanced Study, and we have drawn on their advice and public recommendations to inform how we release these results. github.com/openai/math
86
456
26
3,863
251,815
Alexandre Ramé retweeted
We are already beyond any AI portrayed in movies.
98
68
30
1,259
537,432
Alexandre Ramé retweeted
I don’t think there is any strong argument against today being the singular most important day in the history of mathematics
72
171
17
2,947
234,195
Alexandre Ramé retweeted
Do you want to reduce x-risk from AGI? We're looking for a senior technical program manager for the GDM AGI Safety team. Someone to help the team be as effective as it can be, and make Google safer Key traits: - Can handle intense ambiguity: we're making AGI, things will get weird - Good at getting the big picture of technical concepts - Good with people (even AI researchers) - Calm under pressure - Wants to reduce AGI x-risk
9
14
1
191
15,326
Good thing there are only two choices, otherwise we’d have to use actual intelligence to find nuance.
Replying to @Dan_Jeffries1
Question for everyone : Are you pro-intelligence or anti-intelligence ? Do you think more intelligence in the world is intrinsically good ? Or do you think more intelligence is intrinsically dangerous ? AI amplifies human intelligence. It makes PEOPLE smarter and more effective. It's like search engines, libraries, education, literacy, language: it makes PEOPLE smarter and more empowered. If you want intelligence (artificial or natural) to be under control of a few companies or governments, you are a neo-obscurantist or a neo-feudalist.
1
1
4
609
In science, a theory is reasonable until proved wrong by evidence. Then you update, instead of defending old predictions. Thanks Mikel for leading by example.
5 years ago I was working on LLMs because I believed in them. And yet I didn't think we'd get where we are today without a major paradigm shift. I definitely didn't expect things to move so fast. I was wrong. It's astonishing to see some of the very vocal people who were far more skeptical than I was insist that they were right all along, because "hey, today's models do a lot more than predict the next token." Like, sure, coding agents can run commands in a terminal. But they do it by predicting the next token. What in the world did you expect? No one was claiming that LLMs would solve every problem without any way to interact with their environment. But the layer on top is very thin, and tool use isn't a new paradigm. "Giving BERT a Calculator" came out 7 years ago. Science is about updating your beliefs based on evidence. Admitting that your view has changed doesn't make you a worse scientist. It makes you a better one. This obsession with "I've been saying the same thing for X years and I was right all along" is so tiresome, and sets a terrible example for the general public and the new generation of scientists.
6
856
Alexandre Ramé retweeted
"C'est presque comme une Constitution": sous la tutelle satisfaite de Donald Trump, les patrons de l'IA, désormais appelée Super Intelligence, signent un accord et promettent de s'auto-réguler l.bfmtv.com/Br9V
5
4
6,101