Sparse Distributed Memory is a Continual Learner. - Trenton Bricken; Xander Davies; Deepak Singh; Dmitry Krotov; Gabriel Kreiman (ICLR, 2023)

Unifying Grokking and Double Descent. - Xander Davies; Lauro Langosco; David Krueger 001 (CoRR, 2023)

Discovering Variable Binding Circuitry with Desiderata. - Xander Davies; Max Nadeau; Nikhil Prakash; Tamar Rott Shaham; David Bau (CoRR, 2023)

Circuit Breaking: Removing Model Behaviors with Targeted Ablation. - Maximilian Li; Xander Davies; Max Nadeau (CoRR, 2023)

Open Problems and Fundamental Limitations of Reinforcement Learning from Human Feedback. - Stephen Casper; Xander Davies; Claudia Shi; Thomas Krendl Gilbert; Jérémy Scheurer; Javier Rando; Rachel Freedman; Tomasz Korbak; David Lindner; Pedro Freire; Tony Tong Wang; Samuel Marks; et al. (Trans. Mach. Learn. Res., 2023)

AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents. - Maksym Andriushchenko; Alexandra Souly; Mateusz Dziemian; Derek Duenas; Maxwell Lin; Justin Wang; Dan Hendrycks; Andy Zou; Zico Kolter; Matt Fredrikson; Eric Winsor; Jerome Wynne; et al. (CoRR, 2024)

AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents. - Maksym Andriushchenko; Alexandra Souly; Mateusz Dziemian; Derek Duenas; Maxwell Lin; Justin Wang; Dan Hendrycks; Andy Zou; J. Zico Kolter; Matt Fredrikson; Yarin Gal; Xander Davies (ICLR, 2025)

Fundamental Limitations in Defending LLM Finetuning APIs. - Xander Davies; Eric Winsor; Tomek Korbak; Alexandra Souly; Robert Kirk; Christian Schröder de Witt; Yarin Gal (CoRR, 2025)

An Example Safety Case for Safeguards Against Misuse. - Joshua Clymer; Jonah Weinbaum; Robert Kirk; Kimberly Mai; Selena Zhang; Xander Davies (CoRR, 2025)

Existing Large Language Model Unlearning Evaluations Are Inconclusive. - Zhili Feng; Yixuan Even Xu; Alexander Robey; Robert Kirk; Xander Davies; Yarin Gal; Avi Schwarzschild; J. Zico Kolter (CoRR, 2025)

STACK: Adversarial Attacks on LLM Safeguard Pipelines. - Ian R. McKenzie; Oskar Hollinsworth; Tom Tseng; Xander Davies; Stephen Casper; Aaron D. Tucker; Robert Kirk; Adam Gleave (CoRR, 2025)

Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition. - Andy Zou; Maxwell Lin; Eliot Krzysztof Jones; Micha Nowak; Mateusz Dziemian; Nick Winter; Alexander Grattan; Valent Nathanael; Ayla Croft; Xander Davies; Jai Patel; Robert Kirk; et al. (CoRR, 2025)