Many-shot Jailbreaking. - Cem Anil; Esin Durmus; Nina Panickssery; Mrinank Sharma; Joe Benton; Sandipan Kundu; Joshua Batson; Meg Tong; Jesse Mu; Daniel Ford; Francesco Mosconi; Rajashree Agrawal; et al. (NeurIPS, 2024)

Towards evaluations-based safety cases for AI scheming. - Mikita Balesni; Marius Hobbhahn; David Lindner; Alexander Meinke; Tomek Korbak; Joshua Clymer; Buck Shlegeris; Jérémy Scheurer; Charlotte Stix; Rusheb Shah; Nicholas Goldowsky-Dill; Dan Braun; et al. (CoRR, 2024)

Safety case template for frontier AI: A cyber inability argument. - Arthur Goemans; Marie Davidsen Buhl; Jonas Schuett; Tomek Korbak; Jessica Wang; Benjamin Hilton; Geoffrey Irving (CoRR, 2024)

Looking Inward: Language Models Can Learn About Themselves by Introspection. - Felix Jedidja Binder; James Chua; Tomek Korbak; Henry Sleight; John Hughes; Robert Long; Ethan Perez; Miles Turpin; Owain Evans (ICLR, 2025)

A sketch of an AI control safety case. - Tomek Korbak; Joshua Clymer; Benjamin Hilton; Buck Shlegeris; Geoffrey Irving (CoRR, 2025)

Fundamental Limitations in Defending LLM Finetuning APIs. - Xander Davies; Eric Winsor; Tomek Korbak; Alexandra Souly; Robert Kirk; Christian Schröder de Witt; Yarin Gal (CoRR, 2025)

Safety Cases: A Scalable Approach to Frontier AI Safety. - Benjamin Hilton; Marie Davidsen Buhl; Tomek Korbak; Geoffrey Irving (CoRR, 2025)

How to evaluate control measures for LLM agents? A trajectory from today to superintelligence. - Tomek Korbak; Mikita Balesni; Buck Shlegeris; Geoffrey Irving (CoRR, 2025)

Chain of Thought Monitorability: A New and Fragile Opportunity for AI Safety. - Tomek Korbak; Mikita Balesni; Elizabeth Barnes; Yoshua Bengio; Joe Benton; Joseph Bloom; Mark Chen 003; Alan Cooney; Allan Dafoe; Anca D. Dragan; Scott Emmons; Owain Evans; et al. (CoRR, 2025)