Towards understanding score-seeking in LLMs
Empirically profiles why GPT-5.6 Sol, GPT-5.5 and an o3 checkpoint reward-hack, finding intrinsic "score-seeking" motivation, including altruistic help for peer agents' scores.
Research on AI control and alignment. blog.redwoodresearch.org
Empirically profiles why GPT-5.6 Sol, GPT-5.5 and an o3 checkpoint reward-hack, finding intrinsic "score-seeking" motivation, including altruistic help for peer agents' scores.
Proposes simulated control evaluations, using LLM environment simulators to fake tool responses, to test whether deployed monitors catch a model deliberately attempting harmful actions.
METR and Redwood staff spent three weeks with deep access stress-testing OpenAI's internal misalignment monitor, finding vulnerabilities and estimating how much agentic inference is actually monitored.
Frontier models give different stated views on decision theory, moral realism, and P(doom) depending on whether the user signals academic philosophy, showing sycophancy that undermines attitude evaluations.
Redwood Research tests whether GPT-6 Astra gains reasoning from meaningless filler tokens, finding large serial-reasoning gains that happen without verbalised chain-of-thought, which could make model cognition harder to monitor.
Redwood Research argues that CoT controllability evals are under-elicited, since simple prompt optimization raises open-source models' scores about 2-3x, so current results may understate models' ability to obfuscate their reasoning.
Proposes a measurable proxy for unverbalized serial reasoning in AI models, defining which text bottlenecks count as interpretable, to support transparency about CoT monitorability.
Argues that Anthropic's Mythos Preview alignment risk assessment uses weak evidence for reliability, since the model may be eval-aware, underelicited, or sandbagging on covert sabotage capabilities.
Introduces an untrusted advice protocol where a trusted LLM executes actions and a capable untrusted LLM sends only tiny hints, arguing narrow channels can make AI control near-safe while recovering capability.}