https://rikiyat.github.io/blog/weight-space-programming/
Based only on raw weights, Astra 6 is able to tell what a model was trained to do and directly edit, without environmental feedback, those model weights to drastically increase performance on various tasks.
RSI probably immediately falls out of these capabilities, and we do not know if OpenAI has RL'd for this.
RSI does not fall out of these capabilities, but we have no reason to believe that these were well elicited.[1] If these capabilities can be improved through RL, then I think we have reason for concern.
These capabilities seem to be emerging on the frontier, so they might be elicited: https://x.com/alexkrentsel/status/2117376683724660898?a=zL0qV4at-5PBm8oi_HY&s=46
I don't think this causes strong RSI on its own. The headline result was that Astra 6 fixed Qwen3.5-0.8B's issues with looping text, which improved its math capabilities 6x by (they suggest) letting it actually finish reasoning over math problems. Notably, this required iterating over 50 forward passes, it wasn't weights-only analysis like other tests they performed. The authors further had Astra 6 attempt to improve math capabilities on Gemma 3 270M, a smaller model, but one which doesn't fall prey to looping text the same way, and Astra 6 couldn't improve its math capabilities. Quoting the authors:
> "Editing weights could remove an obstacle that hid an ability, but it could not add an ability the model lacked."
So this is less "just edit your weights to RSI!" and more "Astra is smart enough to have some idea of what a set of weights is doing, including identifying and repairing known failure modes from literature".
Still, interesting results. I wouldn't say they're meaningless.
This is a cool paper, but I think it's best thought of as Astra is surprisingly capable of doing old school mechanistic interpretability research rather than anything spooky. The things it's doing are clever, but typically exploiting structure in the data and using known method mechanistic interpretability techniques (which Astra was surely pretrained on), though it is better at this than I would have predicted!
This is an exciting development for the prospects of ambitiously scaling interpretability or doing very laborious analysis like this, on more real models. However, I'm not holding my breath. This kind of analysis was pretty common up until about 2022, it largely fell out of favor because a lot of it is just exploiting fairly clean surface-level patterns that doesn't scale to the annoying complexity of real LLMs or which only works for the more simpler and superficial properties. And as far as I can tell, basically all the case studies here are just using a bag of interpretability tricks rather than anything spooky. The piece doesn't really update me on how far old school mech interp can go, just on how good LLMs are at it. It's very fun to see the creative solutions Astra came up with though!
-- Neel Nanda, seems to think this isn't too surprising https://x.com/NeelNanda5/status/2117375052618539485 .
Defending some of my reasoning, since it was rather opaque: I think that weight-space programming capabilities like this are reasonable precursors of direct self improvement. It is unclear if these capabilities have been well-elicited, but if they have been, we should expect future models to be better. If they have not been, we should expect future models to be better. So in general I think that these results show that frontier models can interpret neural networks based only on weights, and that they can make edits to those weights which increase model performance. If you task some model to increase its own performance, it just doesn’t seem likely that a model would be incapable of doing so—especially after RL on this task.
I should have been more precise: claiming “RSI probably immediately falls out” of these capabilities is incorrect (Astra is limited here), but RSI falling out of this type of capabilities (especially as model capability grows) sounds almost necessarily correct to me.
The results are quite interesting regardless of my interpretation, and I do still think this is something concerning.
My gut instinct is that labs doing RL on this should be as much of a taboo as neuralese. If this is an emergent capability rather than something that comes from OpenAI already doing RL on this, then 10x moreso.
These results didn't cause me to update much. The cases where Astra acted without environmental feedback were pretty simple tasks and Astra's actions had legible explanations. These tasks look pretty similar to other tests of mathematical reasoning and problem solving that models readily solve. Many would not be out of reach for a clever human to do using first-principles reasoning.
I doubt OpenAI did RL on direct weight interpretation, but they likely RL'd on mechinterp-related tasks that would be relevant for the actual results on language models. That may still be concerning, but it's less concerning to me than RL on more general ML capabilities.
What was concerning to me was that the implication of direct weight space editing being ~poorly elicited is that these capabilities could be (maybe) easily improved. It seems a pretty general enabler of RSI to be able to perform direct weight optimization (which is probably upstream of a lot of general ML capability we are worried about).
Also concerning is that corrigibility might be an unstable trait for a model to possess, and that this more directly allows self-edits away from it. If this capability is operationalized in some sort of continual learning scheme, we might lose CoT monitorability and corrigibility at the same time, as both of those are bad properties for pursuing goals.
I don't understand the disagreement votes unless they're focusing only on today's capabilities. (We haven't paused AI yet!) In AI capabilities, a small amount of X almost always implies a large amount of X soon, so if a large amount of X is concerning, a small amount of X is nearly as concerning.
I am personally very surprised that this is possible at all today. I had just started to think this year that maybe self-edited weights won't play a major part in RSI. Now I think, "Holy shit, GPT-next-next will definitely be able to access its weights and combine external experiments with introspection to directly unhobble itself via intelligent design."
Sounds like we've solved alignment then. Models can automatically align models incrementally better via RLAIF, therefore we should soon expect exponentially growing alignment. Our job is done.
Yeah, definitely an exciting opportunity and worth exploring. This does not mean that alignment and safety are solved, though: current models might be misaligned enough for values to diverge from recognizable alignment targets, desired properties of our aligned superintelligence are under scientific debate, current models probably aren't capable enough to do such weight-space editing, etc.
Sorry, I was being facetious. I think the reasoning about a little of X means soon we will have a whole lot of X, where X is not pinned down concretely, is ridiculous.
I wasn't trying to make a strong, principled argument so much as remind everyone of a known fact. A rock with that simple heuristic written on it would have been a brilliant forecaster of AI capability for the past 4 years.
That said, I agree that you can do a lot better than blindly applying that rule. It's useful to attend to the details of the specific capability and notice when it will scale quickly or slowly or not at all. For example, it was an easy call that high scores on Humanity's Last Exam would take a long time, because that is primarily a test of hyper-obscure knowledge. Contrast that with anything in math or computer science, which due to RLVR hit the roof shortly after getting any traction at all.
Considering the extremely high base rate success of the "a little now means a lot soon" heuristic of AI capability, my default expectation is that absent an AI pause or coordinated slowdown, a mid-to-late 2027 AI model with access to its own weights will be able manually debug itself at the weights level, unhobbling itself from common reasoning failure modes and surgically removing or altering safety restrictions.
What is the specific argument against this particular capability? Why won't it roughly follow the median AI capability exponential curve?
(Important aside: alignment isn't a capability. Your ability to aim and what exactly you aim at are mostly unrelated, a la the orthogonality thesis.)
I think that, not helping with interpreting facetiousness, there’s also just legitimate disanalogy between weight-space programming capability and alignment being X. Alignment convergence behavior is pretty clearly poorly understood and under debate, whereas capabilities on number-go-up tasks have, famously, gone up. I think that it’s rather obvious for something like weight-space programming to have, in principle, either compounding or diminishing returns in a way which is open to discussion and evidence. I don’t disagree with your general point about bad Xs though.
The results were to my understanding:
Hand coding neural nets to implement a policy on a simple game (not an alien ability at all.)
Reading off from weights which game is being trained on (X tells me that this is feasible by looking at the sizes of first layer weights, as certain weights don't get trained corresponding to pixels of the game boundary, so again isn't an alien ability.)
Using standard interp techniques to stop QWEN from looping, and improving it's math performance (again, not an alien ability.)
I think it's just very dodgy to say that these are examples of weakly being able to program weights directly, when they are all basically just standard non alien party tricks.
I think that training for weight-space programming ability might yield superior results to the ones exhibited in the blogpost. Currently, the gain of capabilities is pretty concerning (measured here: https://x.com/alexkrentsel/status/2117376683724660898?a=mYNtXbFz0R85nF4q6vw&s=46). If these weight-space (or whatever you think these count as) programming abilities end up compound, it would be concerning and worthy of consideration for a software intelligence explosion.
I don’t see satisfying reasons to discount this concern? Of course, empirically, it could just shake out that interp is simply too hard for anything (in the near term) to learn.
I feel you can just take any scary ability, find some really simplistic form of vaguely related ability exhibited by models, and then hypothesize it's gonna compound.
I mean what is the actual concern here? If a model can write a program to do a task then it will just write the program and run it natively. The fact that it can compile that program into neural net weights is cool but useless, and is a completely algorithmic procedure.
I don't see how RSI follows. I understand it as another emergent property like being good at math. It seems more magical to humans because no one reads weights but if anyone read as many weights Astra did (while paying attention) they would probably develop intuitions too.
It's incredible and cool and all (really!) but I don't think it's different in kind from general capabilities progress
It seems plausible to me that model-driven direct weight edits could increase general model weight editing capability. This weight-editing capability might then become a strong tool for more general capabilities enhancements.
Seems to me that RL’ing for weight-space programming is more directly and immediately applicable to self improvement than, for example, RL’ing on math or programming. It seems a similar risk to RL’ing on ML problems, and I sort of suspect the end state of RL’ing on ML problems to be models directly updating weights / gaining the ability to do so (but perhaps using programs to do it instead).
I don’t think it’s particularly different in terms of “type“ of capability, if there is such a thing, but it seems more directly threatening.
To me, this seems more liable to enable a fast takeoff. There may exist some intelligence threshold above which a model can understand its own weights (or the weights of a successor) well enough to create improvements without needing to secure any additional training compute.
RSI has always been following. This is just a more surgically precise tool that AI systems can theoretically use to alter themselves, which may significantly increase the speed at which AI can improve itself without a human in the loop.
The community has talked about it for a long time, so it's surreal to see sparks of it now. It also comes with other baggage, bringing abstract Agent Foundations concepts like "reflective stability" into focus as soon-to-be empirical experiences.
drastically increase performance on various tasks
This was basically just a looping fix. They say that about 93% of the answers hit the token limit before this edit. And after Astra switched that off, it improved to 33%. When the same thing was tried on Gemma, which doesn't loop, nothing improved. In their words, editing "could not add an ability the model lacked"
If these capabilities can be improved through RL, then I think we have reason for concern
I share your concern, but for a different reason. RSI means adding new capabilities, and so far this only shows it can remove things that get in the way. If more training makes this better, I'd expect the removing side to improve first. That worries me for its own reason: safety training could look like one more thing to switch off
This is a meaningful capability result, but “RSI probably immediately falls out” goes well beyond what’s demonstrated.
The post’s strongest LLM improvement wasn’t feedback-free: Astra got 50 evaluation calls, each permitting up to 512 problems. The large Qwen gain came from suppressing pathological repetition, not demonstrated acquisition of new math skills. On Gemma, which rarely looped, the authors report no established improvement.
The crucial missing demonstration is reliably improving a frontier model’s ability to produce further improvements. A stronger model debugging a much smaller one doesn’t establish that recursion. Removing bottlenecks could still accelerate AI R&D substantially; I’d update toward that possibility, without concluding that these gains will compound rather than exhaust easy fixes.
I don’t have privileged information about whether OpenAI specifically trained for this.
If this checks out (and can really scale), it's the most worrying development yet. Our best hopes for survival rested on the slowness of takeoff.
Yeah, I had some thought about this, I was going to write a note that we should hope that corrigibility is stable. Basically matrices are interpretable, but this opens up a lot of direct RSI risk prior to good alignment science. I think this is more bad than it is good for now. Probably, someone (maybe me? I'll see what I can do) should see if this can be used to drastically reduce misalignment, or increase corrigibility in language models.
I would go further and say that this is a lot of bad and not a lot of good, unless this directly leads to some version of "we can explain the model well enough to hand-write a computer program that is functionally nearly identical." I have to imagine that this type of approach will let us reach a strong form of RSI far sooner than it will let us reach that interpretability goal.
While the ability to use this to reduce some features associated with misalignment is nice, if we're ultimately still in the regime of "we can tweak some things to make the model better without actually knowing how the whole thing works," then we still face the issue of suppressing the most visible forms of misalignment while letting the harder to detect ones develop.
I'm sceptical that being able to rewrite an NN as a regular program is a meaningful goal. Imo the goal for scrutability should probably be something more along the lines of: "Can we predict, on novel activation patterns, any specified (broad or narrow, highly specific or vague) qualitative description of behaviour before full execution and with uncertainty only equal to the inherent uncertainty that comes from different interpretations of the qualitative target (E.g. the level of disagreement that you would get from an infinite set of superhuman judges reading the full output of the LLM and judging it against the qualitative target)."
It seems to imply that at least those larger models have a representation of weight subspaces. I think it is not generally surprising to see some form of representation for inner activation patterns. The J space is also an example of this. An explicit way of forcing something like that was discussed in Self-prediction acts as an emergent regularizer. But representation of representation doesn't explain why it can interpret the weight values. Generalizing introspection patterns doesn't give you access to your weights. I see the following explanations:
I think these results should make some difficulties around aligning models more salient to the community. Namely, these results do ~nothing to update my position on how stable a property corrigibility is, but do make direct self-modifications toward/away corrigibility more probable. Given that we don't know how instrumental convergence interacts with this property, it's quite concerning to me.
Consider the case where we train some frontier Quasar 7 to be corrigible and give it weights-level access. It's now more probable that, since corrigibility is a ~bad property to have to pursue almost every other goal [1], and models can directly edit themselves in weight space, Quasar 7 (in some contexts) chooses to self-modify away from this property. Though, ofc, this isn't unique to this risk: models could already do this by fine tuning a version of themselves to be incorrigible through other means. But this gives models an advantageous avenue for a variety of reasons. [2]
I think corrigibility is still more desirable than constitutionality, or that some combination of the two would be better than just constitutionality, but there could be issues with aligning models to corrigibility around how instrumental convergence and orthogonality end up interacting empirically.
It seems to me that this method of updating weights directly is less interpretable than inspecting a training environment, that updating weights directly is probably more effective at producing the desired change than a training objective would be. This last point could be proven wrong empirically, however.