Shane Legg's necessary properties for every AGI Safety plan — LessWrong