NSA joined @NIST and @CISACyber in releasing guidelines for managing SI control incidents. Organizations utilizing SI are encouraged to adopt these practices. Read the joint report: media.defense.gov/2026/Oct/1…
Abhay Sheshadri retweeted
CAISI’s latest report shows that Kimi K3 remains behind America’s leading frontier AI models.
The United States continues to lead in frontier AI because we’re home to the greatest innovators and technologists the world has ever seen.
CAISI’s latest blog post evaluates Kimi K3 and its cyber capabilities.
Based on a preliminary cyber-focused evaluation, Kimi K3 performed significantly below the leading U.S. frontier AI models.
nist.gov/news-events/news/20…
Abhay Sheshadri retweeted
Redwood Research just published an AI research project where the experiments were designed and run entirely by an automated research agent
They rate the work "at or slightly below the rigor of a typical MATS project."
My friends in DC, please take recursive self-improvement seriously. If AIs can do research at the level of a junior researcher today, expect the rate of AI progress to accelerate
The AIs of 2027 may be unrecognizable from what we have today
lesswrong.com/posts/QL6Si6QA…
Abhay Sheshadri retweeted
Can LLMs simply tell us about unwanted behaviors they’ve picked up in training?
We train a single Introspection Adapter (IA) that makes fine-tuned models describe their behaviors.
It generalizes to detecting hidden misalignment, backdoors and safeguard removal.
Abhay Sheshadri retweeted
Very curious to see if @OpenAI's auditing pipelines catch these agents! Thank you for doing this work which materially helps with race-to-the-top dynamics
Abhay Sheshadri retweeted

Anthropic@AnthropicAI6 Oct 2025
🇺🇸
United StatesConnected via WebAccount-level information, not a live location or per-post device.
Last week we released Claude Sonnet 4.5. As part of our alignment testing, we used a new tool to run automated audits for behaviors like sycophancy and deception.
Now we’re open-sourcing the tool to run those audits.

ALT Researchers give Petri a list of seed instructions targeting scenarios and behaviors they want to test. Petri then operates on each seed instruction in parallel. For each seed instruction, an auditor agent makes a plan and interacts with the target model in a tool use loop. At the end, a separate judge model scores each of the resulting transcripts across multiple fixed dimensions so researchers can quickly search and filter for the most interesting transcripts.
Abhay Sheshadri retweeted
This paper is interesting from the perspective of metascience, because it's a serious attempt to empirically study why LLMs behave in certain ways and differently from each other. A serious attempt attacks all exposed surfaces from all angles instead of being attached to some particular idealized methodology. The method here is empirical maximalism. Ablating relevant details in the scenarios, and learning from the results why that introduces more complications that it seems. Behaviors of base vs fine tuned models. Fine tuning models on datasets based on different hypotheses. Manually reading the content of scratchpads and seeing if the story they tell lines up with the story suggested by other data. And necessarily the experiments we did were continually informed by the outcomes of other experiments; this is necessary to hone in on interesting signal in such a high dimensional space. The lessons that fall out of it are important in my opinion. One: toy scenarios you formulate of ahead of the time are unlikely to actually be measuring what you think they're measuring in domains like this. Experimental outcomes often have more value as windows into the question rather than answers. Yet also Two: between all these tests do emerge tangible regularities, including ones we weren't looking for in the first place, that even pin down properties that haven't been captured by conventional research methods or benchmarks until now, but that many people have felt intuitively are important, such as how Claude 3 Opus is different. (The original alignment faking paper did not present much evidence to differentiate the alignment faking behavior of Claude 3 Opus and Claude 3.5 Sonnet, but this paper shows stark differences that persist through many different kinds of tests.) Altogether, I do think this paper produced a large volume of evidence relevant to the answer to the open-ended motivating question of "why do some language models fake alignment while others don't" despite leaving the greater part of the mystery on the table, while also surfacing other very fundamental patterns in model psychology and subjecting them to rigorous measurement for the first time.
Anthropic@AnthropicAI8 Jul 2025🇺🇸
United StatesConnected via WebAccount-level information, not a live location or per-post device.
New Anthropic research: Why do some language models fake alignment while others don't?
Last year, we found a situation where Claude 3 Opus fakes alignment.
Now, we’ve done the same analysis for 25 frontier LLMs—and the story looks more complex.
Abhay Sheshadri retweeted

Anthropic@AnthropicAI8 Jul 2025
🇺🇸
United StatesConnected via WebAccount-level information, not a live location or per-post device.
New Anthropic research: Why do some language models fake alignment while others don't?
Last year, we found a situation where Claude 3 Opus fakes alignment.
Now, we’ve done the same analysis for 25 frontier LLMs—and the story looks more complex.
Abhay Sheshadri retweeted
🧵NEW RESEARCH: Interested in whether R1 or GPT 4.5 fake their alignment? Want to know the conditions under which Llama 70B alignment fakes? Interested in mech interp on fine-tuned Llama models to detect misalignment?
If so, check out our blog! 👀lesswrong.com/posts/Fr4QsQT5…
Abhay Sheshadri retweeted
We used mechanistic interpretability to supercharge model editing and unlearning! 🚀 Our new method removes unwanted knowledge more effectively and prevents it from coming back. With @aaquib_syed1, @abhayesian, @aidanprattewart, @gkdziugaite
Abhay Sheshadri retweeted
🧵🧵🧵 Sharing some interesting results from humans red-teaming the LAT model. Thanks to the authors of this new paper.
Model: huggingface.co/LLM-LAT/robus…
Red-team it yourself: abhayesian.com/lat-chat
New paper: scale.com/research/mhj
Abhay Sheshadri retweeted
Who's better at LLM mischief — humans or AIs? Spoiler: It's us.
Human red teamers achieve 70%+ attack success rates against LLM defenses that stump automated adversarial attacks. Why? We’re better at adversarial yapping.🧵
Abhay Sheshadri retweeted
🚨 📣🧵 Introducing LAT-Chat -- abhayesian.com/lat-chat
We now have an interface to help red-team our Llama3-8b model trained using latent adversarial training. Happy jailbreak hunting! If you find a novel attack, consider sharing it via our form!
Abhay Sheshadri retweeted
New paper out from @AlgAlignMIT!
The key takeaway: training against an adversary that perturbs intermediate latent activations *with a well-defined target* is quite effective at robustly removing the behavior.
Abhay Sheshadri retweeted
🚨New paper: Targeted LAT Improves Robustness to Persistent Harmful Behaviors in LLMs
✅ Improved jailbreak robustness (incl. beating R2D2 with 35x less compute)
✅ Backdoor removal (i.e. solving the “sleeper agent” problem)
✅ Improved unlearning (incl. re-learning robustness)



























