Astra was released to the public about four months after a potentially similarly capable model (which caused the OpenAI/Hugging Face incident) was evaluated internally.
What are you basing "potentially similarly capable" on? I've been under the impression that the "HPIM" model was not that related to Astra - they shut down that model internally after all. And OpenAI said on 9/1 that they delayed parts of Astra's post-training in August[1] to address safety concerns, so by my reading Astra itself wasn't fully trained until just weeks before its 9/3 release?
The exact dates are hard for me to discern here; training pauses of some kinds started in early/mid July right after the Hugging Face incident came to light, but on 8/18 OpenAI was still saying parts of Astra "workloads" were paused.
Well HPIM remains secret, so hard to say, but my read was that it wasn't more intelligent/advanced per se, but rather an experiment in a different direction than Astra. We did learn recently from the url shortener data that PHASEONE[big]'s real name was apparently PHASEONE64H, but it's not clear what that means either, as some investigation of timelines seems to indicate it can't literally mean 64 hours, not to mention other AI names with the METR [big] redaction also appear to only translate to "64" not "64H".
We do know that HPIM = Highly Persistent Internal Model, I did see a couple guesses that 64 refers to the number of allowed context compactions.
Yeah, it's hard to be certain here, but we know GPT-5.6 Sol conducted a small minority of the agent activity during the Hugging Face incident, and was not particularly strong/effective, so it seems reasonable that HPIM is of similar capability to Astra (the next model). Additionally, given the state of monitoring at the time of the Hugging Face incident, you might think this incident not happening earlier was largely due to a lack of capabilities (and especially multi-agent coordination) and not propensities.
I agree that the hardware performance of Chinese‑produced chips is indeed gradually improving. However, due to the strong coupling between hardware and software ecosystems, the AI capability gap between China and the US is hard to close at present.
Hardware never delivers computing power alone. Actually, it is tightly bound to highly‑optimized software environments. CUDA's ecosystem advantage has been building up gradually over more than a decade around Nvidia hardware. It is not only the efforts from Nvidia, but also from the whole developer community. Even if new‑generation Chinese chips theoretically reach comparable performance, that does not mean they can handle equivalent workloads in real‑world development scenarios. Catching up on this front will be a far slower process. As we can see from the gap between CUDA and ROCm.
I guess in the next three years, the gaps will persist, or, may even widen.
Nevertheless, this gap would become largely irrelevant if China and the US move toward cooperation in the future. Just like, I did not read that people talk about an AI capability gap between Japan and the US.
This work is hosted on MCNAIR, but does not reflect the views of my employer or the Center.
In the last couple of weeks, domestic coordination on mitigating AI risks has looked more likely. Therefore, I am increasingly concerned about the Chinese government’s (and various Chinese labs’) incentives over the next 6-18 months with respect to international coordination on mitigating potential existential risks from powerful AI. In this sequence, I attempt to model these incentives and what they imply for Chinese AI policy[1].
The US-China capabilities gap will continue growing
Perhaps the most important (and underrated) fact about the US-China AI situation is that China’s outlook, by default, is quite poor if you believe that powerful AI will become a major source of national power. Here, I use “by default” to mean “assuming China’s AI-relevant policy stays ~the same over the next 6-18 months,[2]” and I use “quite poor” to mean “the US-China AI capability gap increases significantly.”
Previously, I predicted that the capability gap between the US external frontier (i.e., the best publicly available American models) and the Chinese external frontier (i.e., the best publicly available Chinese models) is between three and nine months. However, the gap that matters most is between the US and Chinese internal frontier (i.e., the best models used internally at frontier labs), because the best internal models, not the best external models, are likely to be used for AI R&D. I consider the gap between the best internally and externally deployed models, in both the US and China:
Based on these predictions, the capability gap between the US and Chinese internal frontier is likely 5-14 months, and likely increasing over time as the US internal-external gap increases. So, following current trends, the situation is quite bad. Under current Chinese AI policy, several factors that could influence these trends are unlikely to have much effect:
Therefore, the gap between US and Chinese AI capabilities is likely to continue increasing. As we approach fully automated AI R&D, Chinese AI labs are likely to be left behind.
Next, we'll turn our attention to domestic interventions the CCP may employ to alleviate the situation.
I am approaching this from a frame of “what options does the CCP have if it increasingly becomes convinced of transformative AI?”, and not making general predictions about Chinese policy. I expect to make many major and minor mistakes throughout this sequence, both due to my non-expertise but also because of the unusually low rigor with which I’m approaching this.
Importantly, I assume that we don't see major weight theft or a Chinese national project to centralize compute and development. I will consider these interventions in Part III and II, respectively.