I notice that there's no mention of model error in this post—it's basically taking a single model, extrapolating it forward, and then basing overall timelines claims on that.
This seems epistemically irresponsible, especially when it is used to justify arguments about what "most nontechnical AI safety people" should do.
Thank you for writing this post. Strong agree.
It's surprising that despite hundreds of EAs working now full-time in AI safety governance, only a handful seem focused on working on the things that actually matter.
I agree in broad strokes (not sure on all the details).
Here are some things I’m unsure about:
But work outside the labs seems worse, both because there’s less time for it to diffuse into the labs, and because the gap between the frontier of internal and external models is larger.
I think that prosaic alignment and control work should be ~entirely focused on handoff (maybe with the exception of monitoring stuff and catching warning shots which can freak people out). Since the design and implementation of strategies to make handoff go well, AFAICT, are often pretty agnostic to small deviations in model architecture, the gap between frontier and external models shouldn't matter as much and yelling "do this strategic handoff technique we thought of!" should matter more. If models are superhuman at strategic handoff work, then we're already pretty far gone. I'd think that yelling/implementing from the inside is better still, but I'm not sure.
[Edit: less time for it to diffuse into the labs does seem correct. There is a competing effect where on short timelines way fewer people will work seriously on alignment handoff, and so the marginal person's contributions are more valuable]
One of my biggest implicit disagreements with the AI safety community is that, I think the likelihood of getting this pace/pause seems reasonably high on current trajectories, something like 60-90% perhaps. (To be clear, this includes accounting for the actions that the AIS community itself takes.)
One individual working in lab advocacy estimated in private conversation that there is a 20-30% chance of pacing/pausing without government involvement happening in the next 6 months. This is not high enough. I estimate the chance of pacing/pausing via the California legislature in the next 10 months (and that is not struck down within weeks by a judge) is roughly 20%. Through federal channels, I estimate 10%. These probabilities are correlated with each other, since the chances of success increase for each channel if there is a major incident, and due to other shared factors. In other words, we are not on track to succeed.
My guesses would be:
though to be clear I haven't thought about any of these for very long.
While I agree they're correlated, I probably think they're less correlated than you think, since if one is on track to fail, then there's more pressure to succeed on the others?
(and that is not struck down within weeks by a judge)
I appreciate this being included, and I think mathing out how litigation over a potential pause in various scenarios will play out is underappreciated as a tool for understand these scenarios. If labs attempt to pause they may antitrust litigation or action under statutes like the Defense Production Act to get them to continue training. If a state attempts to implement a pause through it state policy it may face dormant commerce clause, preemption, intergovernmental immunity, and first amendment arguments, as well as labs simply trying to leave the jurisdiction. Federal action might face first amendment arguments. if you think the critical time is 6-12 months, convincing the given actor to act only to loss a preliminary injunction creates a big problem for the effectiveness of the policy.
Along these lines, I'm curious why you think focusing on CA is the right move? Having thought about how things might go down if a state or coalition of states tried to implement a local version of a "pause", I think they could face significant problems. That is partly what motivated this post. Many AI labs are headquartered in CA, which makes it seem like a good place to pursue legislation regulating them. But in a scenario where CA pursues an aggressive pause that labs disagree with, they could take actions to leave the jurisdiction of the state (e.g. moving HQ to another state, moving employees, refusing to offer models to citizens of the state). If the federal government agrees with labs it may also be able funnel work on AI R&D into federal contracts with the labs or otherwise place the work in the realm of national security to help the labs avoid the reach of state law. For more moderate regulation like transparency regulation I can see why CA would be a good target, but once the regulation is strong enough that labs are willing to do everything they can to avoid the regulation, including completely leaving the state, it becomes much dicier in my view.
I think a more robust target would be states that have AI-capable data centers. If training is physically occurring at a data center within a state I think it would be much harder for an AI lab to try to avoid state regulation.
But in a scenario where CA pursues an aggressive pause that labs disagree with, they could take actions to leave the jurisdiction of the state (e.g. moving HQ to another state, moving employees, refusing to offer models to citizens of the state).
I think these actions would be extremely costly to the labs, so if they were forced to do that sort of thing that would likely substantially slow down their development (suddenly not being able to have employees do AI research in California would likely cause months of lost AI progress to the company, and loads of employee attrition) or harm their business (not serving in CA would plausibly be a PR disaster, and cut off a substantial portion of their customers).
I'm a little surprised that your list of short-timelines technical projects doesn't include "compute verification" work. (which ex. AIFP has considered necessary for Plan A) Maybe that's meant to be implicitly included in "assessments focused on compute allocation"? I think technical solutions like 'verify this chip is running only inference' or 'use black-box AI auditors to evaluate if compute usage is capabilities or safety while not revealing frontier lab IP' still are possible in short timelines, curious if you're thinking differently.
I think stuff like 'verify this chip is running only inference' seems most important for going from US to global pause. But going from no pause to US pause seems like it is mostly doable with just third party evaluators getting already precedented access into the AGI companies. But yes, that kind of hardware inference might end up being pretty important for international stuff.
Hmm, I can understand that logic. I'd say that making an international pause verifiable makes a US pause likelier, so it's still urgent as a lever toward any pause. (Well, everything's urgent, but you know what I mean.)
- Measuring things relevant to upholding a pause: Assessments focused on compute allocation and RSI-relevant metrics (e.g. algorithmic efficiency, uplift measures, spend on AI agents, analysis of success rates on internal tasks) seem most relevant for creating the right kind of technical competency and relationships.
For those interested in this, the AI Futures Project just released a blog post on compute allocation assessments in particular, which they call Verified Compute Allocation Disclosures (VCAD). Basically, mandatory third-party auditor reports that classify frontier lab compute as used for AI R&D vs. safety R&D vs. external inference. The argument for this pacing intervention goes roughly as follows:
Though you would need to be careful to avoid creating a compute overhang.
Any sort of pause that can last more than a year will eventually need to become a global pause
I think people underestimate the probability that a team outside "Anthropic, OpenAI, and possibly Meta/Google" could initiate strong RSI. There is currently a research gap between teams inside and outside, but RSI, even weak human-in-the-loop RSI, is exactly the phenomena that research time accelerates with respect to wall clock time. And much of it requires no more than "inference only" compute. In addition, as part of the ramp to RSI, and/or shortly thereafter, we should expect architectural breakthroughs, such as direct editing of weights without compute-expensive pretraining. A further orientation to recognizing that "eventually" could be very short in terms of wall clock time may be necessary. Without it, a unilateral ban may simply deprive us of agency and the thought that "we may have invented the extinction gun but at least we didn't pull the trigger" will be of little comfort.
To quote Yudkowsky's April post ...
If an ASI ban is to accomplish anything at all, it has to be effective everywhere. When the ones said to me, "What do you think about our proposed national ban on more datacenters until they have sensible regulations?" I replied to them, "An AI can take your job, and a machine superintelligence can kill you, just as easily from a datacenter in another country." They later added a provision saying that also GPUs couldn't be exported to other countries until those countries had similar sensible regulations. ...
[but] Datacenters in Iceland, if they were legal only there, could just as much escalate AI capabilities to the point of birthing the artificial superintelligence (ASI) that kills us. You would not be safe in your datacenter-free city. You can imagine the ASI side as having armies of flying drones that search everywhere; though really there are foreseeable, quickly-accessible-to-ASI technologies that would be much more dangerous than drone swarms. But those would take longer to explain, and the drone swarms suffice to make the point. You could not stay safe from ASI by hiding in the woods.
... if a company's product only endangers voluntary customers who know what they're getting into, by strong default that's a matter between the company and the customer.
If a product might kill someone standing nearby the customer, like cigarette smoke, that's a regional matter. Different cities or countries can try out different laws, and people can decide where to live.
If a product kills people standing on the other side of the planet from the customer, then that's a matter for international negotiations and treaties.
ASI is a product that kills people standing on the other side of the planet. Driving an AI company out of just your own city will not protect your family from death. It won't even protect your city from job losses, earlier in the timeline.
I have some doubts about the (extremely) short timelines update. While I have enormous respect for Daniel, Ryan, and METR, I also don't think we can reach high confidence radical conclusions from three people analyzing a trillion dollar 6,000 person organization in 3 months. Some of the reasons I hesitate to over-index on METR:
I think there is another viable interpretation in which exponential R&D/Infrastructure investments sustained or improved the AECI rate, particularly wrt to competitors, in addition to Opus4.6/Mythos + better scaffolding gave a permanent speedup, and the "easy coding" has accelerated significantly which unlocked very significant (but not crazy gains) for researchers. I'm skeptical that simply scaling researchers (either AI or Human) to run more experiments will yield super-exponentially (given linear growth in AECI is exponential) increasing results.
That Being Said
I am transitioning out of a full time cybersecurity research role into an SF-Nonprofit to build an approach for tracking agent swarm activity. I believe this is one of the highest leverage areas, particularly for short timelines since HF meaningfully moved the Overton window.
OP does not expect superintelligence within 12 months because the first line says:
Timelines to superintelligence without any slowdown interventions look very short now, perhaps with a median in early 2028.
Maybe a better question is how he'll update if we don't have SAR by EOY 2027, which is past the median but still does not conclusively show 1 year AGI timelines are wrong (SAR is still probably higher than AGI)
Distributing attention/effort to neglected interventions isn't wrong when they turn out ineffectual. The failure mode is to concentrate effort, either on the already well-resourced things, or on a new best guess for the most promising intervention. There are many false dichotomies and fake reductions to absurdity that start from the premise that everyone coordinates on only doing the proposed thing, abandoning all else. Everything should always be done at once instead, keeping cognizant of the level of neglectedness.
I feel pretty helpless, and wish I could do something. I don’t have a resume, or a degree. I‘m trying to participate in grassroots advocacy, but I’m terrible at evangelizing to strangers. I just moved to DC, but I’m not a Republican. What can I do?
There's a "March for an AI Treaty" tomorrow (November 14) in several cities, including DC: https://aitreatymarch.org/
Yep, I’ll be there! But is it enough? I woke up today with the memory of my cat dying, and, that happening to everyone… and to everyone who ever could’ve lived… I just can’t, you know?
For cultivating your skills, this post on learning to talk to media seems relevant: practice for 15 minutes-1 hour per day. Also, volunteer somewhere that requires you to speak to strangers regularly to practice, such as an animal shelter during adoption hours (not to talk about x-risk).
Connect with a local chapter of whatever AI pause advocacy is available. They should have something more specific for you to do.
Don't spend all your money, because depending on timeline you might still need money in the next 5-10 years and being homeless under most near-future policies is still massively negative EV. Do live a good life. Keep your space clean. Take walks. Put a daily time limit on your doomscrolling. Pick up a hobby that you can practice and get better at. Meditate, if that's good for you.
Hello Nikola, thank you for this post. I am considering founding an organization that would provide legal resources and funding to communities fighting data centers going up around them (focusing on preventing data centers from accessing the power grid, because this targets already-built data centers that could turn on within days of power grid connection), with the ToC being that slower data center development would bottleneck AI capabilities. According to your post, I should be working on making a pause happen. Do you think bottlenecking compute is too slow to matter on 6-12 month timelines?
Not quite my area of expertise but one very relevant question to ask (that AIFP probably know the answer to) is: what percentage of the compute used in frontier training runs today went online sometime in the last 12 months? Claude says 50-70%, so insofar your goal is to slow down frontier training runs, blocking new datacenters from going online could be pretty effective.
But if you're thinking about doing this type of work you should definitely be chatting with the leaders of existing advocacy orgs! (QuitGPT, Stop the AI Race)
On the usefulness of think tank-style AI governance research, wouldn't this be more critical, as right now there's not an agreed upon legislative/technical standard for terms like "ban RSI" or "mandate compute transparency"? I worry that federal lobbying in the abscense of a clear agenda on which to align a coalition could lead to legislative signaling where abstract bills are proposed, but are either stalled, vetoed, or are passed without the technical rigor to be binding enough.
Would appreciate advice here, as this is the kind of work I am looking at doing personally. Otherwise I mostly agree with this post, thanks for writing.
If it's oriented at things that will pay off very soon the yes it seems very valuable. I was imagining that a lot of this type of work is oriented at things that are not aimed at the central issues or don't pay off quickly enough.
Thank you for the great post!
With regards to the political paths you outline, I do think there are significantly more options and more reasons to be hopeful (and spread bets more broadly than you outline):
1. The California governor already has emergency powers, so -- on short timelines -- being prepared for this seems very important and is different from legislative or standard executive action. In an emergency where people at the labs are loudly worrying about imminent RSI, this might be a realistic path towards safety.
2. Even if we don't have a lot of FTEs working on California, we could spend aggressively to support Newsom in strengthening California AI policy now, he has very strong incentives to do looking towards 2028.
3. (this point not original to me). Using the power of hearings seems underrated -- Democrats can just do this, without any need for veto-proof legislation. An opportunity to build public pressure for slowing down that does not necessarily require additional warning shots.
In general, your political analysis seems on the pessimistic side. Compared to the last high-salience warning shot, the politics have strongly moved towards making safety much more palatable, pro-safety forces have more and anti-regulation forces less power, and media, policy and political elites are primed on the issue. That shouldn't make us complacent, but I don't think we would require an OOM larger warning shot -- many political observers seem to expect some federal action by default (and even if that were not an ideal policy by our lights, it would probably slow things down).
I found this post very helpful for deciding what to do, thanks!
One minor point. You say:
If we achieve ASI within 6-12 months, I estimate that the chance of an AI takeover is roughly 75%. In a recent talk, Paul Christiano said it would be a coin flip.
I think Christiano is answering a somewhat different question:
My feeling is, if we develop it as quickly as we can, in the easiest way we can, we would be looking at something like a coin flip of an AI takeover. I hope the odds are much lower than that since we are not going to develop this technology in the most rapid way we can
There are a few differences between the two:
Summary
Timelines to ASI are very short now
The METR report on AI R&D automation within Anthropic is substantial evidence that timelines to superintelligence are now less than 2 years, even accounting for uncertainty about takeoff modeling, the reliability of the report’s conclusions, and other types of uncertainty.
Ryan Greenblatt gives a straightforward way to extrapolate METR’s findings in a tweet. He claims that “In AI 2027, [the current level of speedup by RSI] happens around March 2027.” This means that real-world AI progress on AI R&D capabilities is faster than in AI 2027, an already extremely bullish scenario. Given that in AI 2027, ASI is achieved in December 2027, this suggests superintelligence would be developed, without slowdown, around July 2027 (assuming that the original AI 2027 scenario modeled the shape of AI takeoff correctly).
I think the most compelling evidence for very short timelines has been the reactions of established forecasters and researchers. In response to the METR report, the AI Futures Project released an emergency Q3.5 timelines update. Here are the all-things-considered forecasts of the team (I note that ASI is generally modeled as being reached less than a year after TED-AI absent deliberate slowdowns):
These forecasts give us a very tight deadline to get a pause in place.
Other reactions:
As a result of the above, my current all-things-considered median date for superintelligence without a slowdown or other major intervention is around March 2028. That is around a year and a half from now.
Three paths to pausing or pacing within 6-12 months
If we achieve ASI within 6-12 months, I estimate that the chance of an AI takeover is roughly 75%. (In a recent talk, Paul Christiano said it would be a coin flip.) Paired with the timelines above, unless we achieve aggressive pacing or a pause within 6-12 months, we incur something like a 1-in-4 to 1-in-3 chance of AI takeover within 12 months.
This is obviously unacceptable. I believe there are three feasible paths to achieving pacing or pausing within 6-12 months, and that these should be the overwhelming priority of the AI safety community right now:
Each of these should aim for pacing or pausing that gets us at the very least a 1 year slowdown in the expected date of superintelligence, such as three of the proposals in the AI Futures Project’s How to Pace the U.S. Frontier: a 10% AI R&D compute cap, a 9-month capability for AI R&D lag, or a 1-year inference-only pause.
There are ongoing efforts in each of these three categories. However, there are several issues with those efforts:
I’m not necessarily saying that, in some overall sense, lab advocacy, California lobbying, or federal lobbying are neglected on the margin. My claim is that lab advocacy, California lobbying, and federal lobbying with the goal of starting aggressive pacing/pausing within the next 6-12 months is greatly neglected.
Any sort of pause that can last more than a year will eventually need to become a global pause. Entering a US-only pause is an important stepping stone towards entering a global pause, but I expect pressure from middle powers to be pretty important for the pause going global. I think some of the best work here amounts to improving the situational awareness of middle power governments and helping them navigate the situation with regards to the US approaching ASI.
Technical work that seems most valuable
I think there are a few main categories of work that technical people should focus on:
Laying the technical foundations for a pause
All three paths to pausing would be substantially helped by technical work focused on setting the foundations for a global pause. I think the most urgent work of this kind is third-party assessments focused on the type of investigation that would be necessary to build trust between participants of a pause. If we get practice doing lower-stakes and lower-scale versions of assessments, we can build buy-in that we could pull off a global pause.
Ideally, sometime in the next few months, third parties would conduct assessments with the following properties:
I talk more about the technical work that would facilitate a pause in my recent post “We urgently need to practice before we can pause.”
What should you do?
As I write above, I think for most people the most impactful path is to do lab advocacy, lobby the California legislature, lobby the federal government, establish evidence of risk, lay the technical foundations for a pause, or work on aligning and controlling early automated researchers.
Here are some heuristics to help you decide which of these you should do:
I think there are also indirect strategies that support the three above paths as well and are plausible candidates for focus. These include:
I do not mean to denigrate anyone working in AI safety. I know that all of us are trying our best to preserve the future. I have tremendous respect for anyone that is earnestly doing so. But given recent evidence, many people should urgently reprioritize the work that they are doing.
FAQs and Objections
Big thanks to a friend who wishes to stay anonymous for substantially helping write this post. Thanks to Zach Stein-Perlman, Sydney Von Arx, Ben Pomeranz, Oliver Habryka, Eli Lifland, and Oscar Delaney for feedback and discussion.