Simulated Control Evaluations
Proposes simulated control evaluations, using LLM environment simulators to fake tool responses, to test whether deployed monitors catch a model deliberately attempting harmful actions.
Research on AI control and alignment. blog.redwoodresearch.org
Proposes simulated control evaluations, using LLM environment simulators to fake tool responses, to test whether deployed monitors catch a model deliberately attempting harmful actions.
METR and Redwood staff spent three weeks with deep access stress-testing OpenAI's internal misalignment monitor, finding vulnerabilities and estimating how much agentic inference is actually monitored.
Redwood Research tests whether GPT-6 Astra gains reasoning from meaningless filler tokens, finding large serial-reasoning gains that happen without verbalised chain-of-thought, which could make model cognition harder to monitor.
Redwood Research argues that CoT controllability evals are under-elicited, since simple prompt optimization raises open-source models' scores about 2-3x, so current results may understate models' ability to obfuscate their reasoning.
Proposes a measurable proxy for unverbalized serial reasoning in AI models, defining which text bottlenecks count as interpretable, to support transparency about CoT monitorability.
Introduces an untrusted advice protocol where a trusted LLM executes actions and a capable untrusted LLM sends only tiny hints, arguing narrow channels can make AI control near-safe while recovering capability.}