Safe Predictive Agents with Joint Scoring Rules — LessWrong