Can AI coding agents rebuild biological AI tools from a paper?
AISI's ReproBAIT evaluation finds coding agents can rebuild simple biological AI tools from limited public info within 4 hours and under $20, undermining withheld-code access controls.
The UK government’s AI Security Institute: evaluations, red-teaming and research on frontier AI risks. aisi.gov.uk
AISI's ReproBAIT evaluation finds coding agents can rebuild simple biological AI tools from limited public info within 4 hours and under $20, undermining withheld-code access controls.
AISI measures cyber capabilities of open and closed-weight models, finding leading open models now trail frontier closed models by 4-7 months, and discusses misuse risks of open release.
UK AISI reports cyber evaluations of GPT-5.5, finding it is the second model to complete their multi-step corporate network attack simulation end-to-end, suggesting a broader frontier trend.
UK AISI's first public report synthesising two years of frontier model testing, tracking trends in dangerous capabilities across national-security and public-safety domains for policymakers and the public.
UK AISI and Thorn publish a safety protocol for AI developers to prevent AI-generated CSAM, alongside legislation allowing authorised testing of whether models can generate such material.
Lists 16 open technical challenges for managing risks of open-weight frontier models across training data, algorithms, evaluations, deployment, and ecosystem monitoring, noting limited safety tooling.
Proposes an end-to-end safety case showing that misuse safeguards reduce AI assistant misuse risk to low levels, combining red-teaming effort estimates with a quantitative uplift model.
Proposes how to make misuse-safeguard evaluations decision-relevant by setting metrics and thresholds, and presents an example safety case linking safeguard evaluation results to deployment decisions.
UK and US AI Safety Institutes jointly ran pre-deployment tests of OpenAI's o1 across cyber, biological, and AI-development capabilities, comparing it against reference models and sharing findings before release.
Proposes a safety case template using CAE structured arguments to show frontier AI models lack unacceptable offensive cyber capabilities, linking risk models, proxy tasks and evaluation results.
Proposes a safety case template for arguing that an AI system lacks offensive cyber capabilities, combining existing techniques as a proof of concept for frontier AI assurance.