Supervising strong learners by amplifying weak experts. - Paul F. Christiano; Buck Shlegeris; Dario Amodei (CoRR, 2018)

Adversarial training for high-stakes reliability. - Daniel M. Ziegler; Seraphina Nix; Lawrence Chan; Tim Bauman; Peter Schmidt-Nielsen; Tao Lin; Adam Scherlis; Noa Nabeshima; Ben Weinstein-Raun; Daniel de Haas; Buck Shlegeris; Nate Thomas (NeurIPS, 2022)

Polysemanticity and Capacity in Neural Networks. - Adam Scherlis; Kshitij Sachan; Adam S. Jermyn; Joe Benton; Buck Shlegeris (CoRR, 2022)

Interpretability in the Wild: a Circuit for Indirect Object Identification in GPT-2 Small. - Kevin Ro Wang; Alexandre Variengien; Arthur Conmy; Buck Shlegeris; Jacob Steinhardt (ICLR, 2023)

Measurement Tampering Detection Benchmark. - Fabien Roger; Ryan Greenblatt; Max Nadeau; Buck Shlegeris; Nate Thomas (CoRR, 2023)

Generalized Wick Decompositions. - Chris MacLeod; Evgenia Nitishinskaya; Buck Shlegeris (CoRR, 2023)

AI Control: Improving Safety Despite Intentional Subversion. - Ryan Greenblatt; Buck Shlegeris; Kshitij Sachan; Fabien Roger (ICML, 2024)

Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training. - Evan Hubinger; Carson Denison; Jesse Mu; Mike Lambert; Meg Tong; Monte MacDiarmid; Tamera Lanham; Daniel M. Ziegler; Tim Maxwell; Newton Cheng; Adam S. Jermyn; Amanda Askell; et al. (CoRR, 2024)

Sycophancy to Subterfuge: Investigating Reward-Tampering in Large Language Models. - Carson Denison; Monte MacDiarmid; Fazl Barez; David Duvenaud; Shauna Kravec; Samuel Marks; Nicholas Schiefer; Ryan Soklaski; Alex Tamkin; Jared Kaplan; Buck Shlegeris; Samuel R. Bowman; et al. (CoRR, 2024)

Games for AI Control: Models of Safety Evaluations of AI Deployment Protocols. - Charlie Griffin; Louis Thomson; Buck Shlegeris; Alessandro Abate (CoRR, 2024)

Sabotage Evaluations for Frontier Models. - Joe Benton; Misha Wagner; Eric Christiansen; Cem Anil; Ethan Perez; Jai Srivastav; Esin Durmus; Deep Ganguli; Shauna Kravec; Buck Shlegeris; Jared Kaplan; Holden Karnofsky; et al. (CoRR, 2024)

Towards evaluations-based safety cases for AI scheming. - Mikita Balesni; Marius Hobbhahn; David Lindner; Alexander Meinke; Tomek Korbak; Joshua Clymer; Buck Shlegeris; Jérémy Scheurer; Charlotte Stix; Rusheb Shah; Nicholas Goldowsky-Dill; Dan Braun; et al. (CoRR, 2024)

Subversion Strategy Eval: Evaluating AI's stateless strategic capabilities against control protocols. - Alex Mallen; Charlie Griffin; Alessandro Abate; Buck Shlegeris (CoRR, 2024)

Alignment faking in large language models. - Ryan Greenblatt; Carson Denison; Benjamin Wright; Fabien Roger; Monte MacDiarmid; Samuel Marks; Johannes Treutlein; Tim Belonax; Jack Chen; David Duvenaud; Akbir Khan; Julian Michael; et al. (CoRR, 2024)

Language Models Are Better Than Humans at Next-token Prediction. - Buck Shlegeris; Fabien Roger; Lawrence Chan; Euan McLean (Trans. Mach. Learn. Res., 2024)

Adaptive Deployment of Untrusted LLMs Reduces Distributed Threats. - Jiaxin Wen; Vivek Hebbar; Caleb Larson; Aryan Bhatt; Ansh Radhakrishnan; Mrinank Sharma; Henry Sleight; Shi Feng 005; He He 001; Ethan Perez; Buck Shlegeris; Akbir Khan (ICLR, 2025)

A sketch of an AI control safety case. - Tomek Korbak; Joshua Clymer; Benjamin Hilton; Buck Shlegeris; Geoffrey Irving (CoRR, 2025)

How to evaluate control measures for LLM agents? A trajectory from today to superintelligence. - Tomek Korbak; Mikita Balesni; Buck Shlegeris; Geoffrey Irving (CoRR, 2025)

Ctrl-Z: Controlling AI Agents via Resampling. - Aryan Bhatt; Cody Rushing; Adam Kaufman; Tyler Tracy; Vasil Georgiev; David Matolcsi; Akbir Khan; Buck Shlegeris (CoRR, 2025)

SHADE-Arena: Evaluating Sabotage and Monitoring in LLM Agents. - Jonathan Kutasov; Yuqi Sun; Paul Colognese; Teun van der Weij; Linda Petrini; Chen Bo Calvin Zhang; John Hughes; Xiang Deng; Henry Sleight; Tyler Tracy; Buck Shlegeris; Joe Benton (CoRR, 2025)

The Singapore Consensus on Global AI Safety Research Priorities. - Yoshua Bengio; Tegan Maharaj; Luke Ong; Stuart Russell 001; Dawn Song; Max Tegmark; Lan Xue; Ya-Qin Zhang; Stephen Casper; Wan Sie Lee; Sören Mindermann; Vanessa Wilfred; et al. (CoRR, 2025)

Chain of Thought Monitorability: A New and Fragile Opportunity for AI Safety. - Tomek Korbak; Mikita Balesni; Elizabeth Barnes; Yoshua Bengio; Joe Benton; Joseph Bloom; Mark Chen 003; Alan Cooney; Allan Dafoe; Anca D. Dragan; Scott Emmons; Owain Evans; et al. (CoRR, 2025)