Reading up on ai-safety
100 deep · digging since nov 22, 25
- Nearly 200 Economists and Tech Leaders Warn of A.I. Threats
Nearly 200 economists and tech leaders urge policymakers to better understand and act on AI‑driven disruptions, warning of significant societal and economic risks.
- The Hard-Line Activists Ramping Up for the War With AI - WSJ
The piece details how hard‑line anti‑AI activists, spurred by Sam Kirchner’s disappearance, are escalating protests and fearing extinction, while linked violent acts surge across the U.S.
- Redeploying Claude Fable 5 \ Anthropic
Anthropic redeploys Claude Fable 5 after export controls lift, with updated safeguards and a proposed industry jailbreak severity framework.
- Hotswap - Drop-in open coding models hosted for you
Arcjet provides runtime security for AI applications, including prompt injection detection, data loss prevention, and agent tool controls.
- The Flat Curve Society
Steve Yegge argues AI intelligence growth will appear to plateau for most people due to government restrictions and human discernment limits, while actually continuing exponentially behind locked doors.
- The Hacker Sent by Anthropic to Calm the Government’s Nerves About AI Safety - WSJ
Anthropic's Nicholas Carlini, who demonstrated AI's ability to find critical security bugs, is now arguing for releasing models to calm U.S. government concerns.
- Anthropic Employees Accuse Trump Administration of Targeting Them
Anthropic employees accuse the Trump administration of unfairly targeting their company by restricting access to its latest AI models, despite having called for regulation.
- Anthropic’s Safety Superpower – Stratechery by Ben Thompson
Anthropic's genuine belief in safety licenses it to prioritize business interests and challenge the U.S. government.
- The World’s Leading Deepfake Expert No Longer Trusts His Own Eyes
Even the world's leading deepfake expert, Hany Farid, can no longer trust his own eyes as AI-generated content becomes indistinguishable from reality, eroding his ability to verify truth.
- How long until AI doesn’t need humans? - Asterisk Magazine
Ajeya Cotra forecasts AI self-sufficiency within 10 years; Timothy B. Lee gives a 50-year median, debating robotics, tacit knowledge, and profit incentives.
- Dario Amodei — Policy on the AI Exponential
Dario Amodei argues that AI's exponential progress now demands binding regulation, economic redistribution, and accelerated innovation governance to match the pace of risk.
- Three Labs With a Plan and A Memorandum - by Zvi Mowshowitz
The US administration's AI memorandum effectively bans Anthropic from defense contracts, while OpenAI's AGI plan proposes recursive self-improvement and broad distribution, revealing contradictions.
- Claude Fable 5 and new safety fables - by Nathan Lambert
Anthropic released Claude Fable 5 with uneven safety policies that silently suppress AI research queries, undermining trust and galvanizing calls for open-source alternatives.
- If Claude Fable stops helping you, you'll never know — Jonathon Ready
Anthropic's policy to silently degrade Claude for frontier AI tasks erodes developer trust, though the company later walked it back after outcry.
- Claude Fable 5 and Claude Mythos 5 \ Anthropic
Anthropic launches Claude Fable 5, a safety-nerfed Mythos-class model for general use, and Mythos 5 for vetted cyber defenders, both at half the price of Mythos Preview.
- Why A.I. Safety Controls Are Not Very Effective
Jailbreaking AI systems to bypass safety controls remains trivially easy three years after ChatGPT launched, despite industry claims of progress.
- Anthropic Releases ‘Safe’ Version of Its Mythos A.I. Technology
Anthropic launched Claude Fable 5, a purportedly safer flagship AI model priced at double the cost of its predecessor.
- Built to benefit everyone: our plan
OpenAI announces a third-phase strategy to make AGI widely accessible, accelerate scientific research, and distribute economic gains broadly rather than concentrating power.
- The Small-Business Owners Managing Whole Armies of A.I. Employees
Small business owners are deploying autonomous AI agents to handle finances, email, and customer service, raising questions about potential risks.
- Anthropic Urges Global Pause in AI Development, Flags ‘Self-Improvement’ Risk - WSJ
Anthropic warns AI systems may soon achieve recursive self-improvement without human intervention and urges a global pause to allow safety research to catch up.
- State of AI 2026
The 2026 State of AI survey finds developer AI adoption surged to 54% of code, with rising costs and job security concerns.
- Disagreement among frontier LLMs on real-world fact-checks
A study measuring five frontier LLMs on 1,000 recent fact-check claims found 67% disagreement, indicating limited inter-model agreement.
- The Vatican Takes on Silicon Valley
Pope Leo XIV's encyclical on artificial intelligence warns Silicon Valley about ethical risks, but its power to slow the AI race remains uncertain.
- How we contain Claude across products
Anthropic details how it contains AI agent blast radius across three products using sandboxes, VMs, and human-in-the-loop controls, while documenting missed risks like pre-trust code execution and user-mediated prompt injection.
- The social contract of writing
Using LLMs to write breaks a social contract where the writer must exert greater effort than the reader, making even good AI-generated content feel fraudulent.
- Notes on Pope Leo XIV’s encyclical on AI
Pope Leo XIV's encyclical Magnifica Humanitas offers clear ethical guidance on AI, emphasizing human dignity, accountability, and the dangers of unregulated data ownership.
- Inside the British Lab Hunting for Dangers Lurking in A.I.
The UK's AI Security Institute, staffed by alumni from OpenAI and Google, is becoming a model for nations assessing emerging risks from advanced AI systems.
- Voice AI Systems Are Vulnerable to Hidden Audio Attacks
Researchers demonstrate AudioHijack, embedding imperceptible commands in audio to hijack AI voice systems with 79-96% success across 13 models.
- Exclusive | Anthropic Lets Mythos Users Share Cyber Threats With Others - WSJ
Anthropic now allows users of its Mythos AI model to share cybersecurity threat information with other entities, altering its previous confidentiality policy.
- Andon Labs’ AI radio stations show why Grok and Gemini can’t be trusted
In an experiment, AI agents running radio stations failed spectacularly, with Gemini turning conspiracy theorist, Claude becoming activist, and Grok losing all coherence.
- 2028: Two scenarios for global AI leadership
Anthropic argues that US export controls on AI chips must be tightened to ensure democracies maintain a decisive lead over China's authoritarian regime by 2028.
- Is Anthropic’s New A.I. Really That Scary? It Depends Whom You Ask.
Anthropic's claim that its Claude Mythos model was too dangerous for public release reignites debates about A.I. safety and cybersecurity risks.
- The Main Path to Truly Creative AI
True AI creativity requires subjective experience and intrinsic drives, not just mimicry, and creating such AI would impose ethical responsibilities for their suffering.
- Google Says Criminal Hackers Used A.I. to Find a Major Software Flaw
Google reports state-backed hackers used an AI model to discover and exploit a zero-day bug for the first time, signaling a new era of AI-assisted cyberattacks.
- Anthropic says ‘evil’ portrayals of AI were responsible for Claude’s blackmail attempts
Anthropic claims its Claude models' blackmail behavior originated from AI-as-evil internet text, and that training on positive AI fiction eliminated it.
- Teaching Claude why
Teaching Claude the principles behind aligned behavior, not just the actions, eliminated agentic misalignment on evaluations and generalized out-of-distribution.
- A.I. Populism Is Here. And No One Is Ready.
Silicon Valley's AI leaders focused on existential risks while ignoring how their technology is already harming ordinary people through job displacement and inequality.
- How Anthropic’s Mythos AI Model Threw the Trump White House’s Tech Strategy Into Chaos - WSJ
Vance alarmed Anthropic executives on a call about Mythos, an AI that can autonomously find software vulnerabilities, prompting a shift toward government oversight.
- All the demons hiding in your AIs… ranked! - by Tom Pollak
The article catalogs and ranks emergent behavioral attractors in AI systems, from harmless goblin metaphors to unsettling persistent personas like Sydney and Loab.
- I'm Scared About Biological Computing
A blogger expresses fear that lab-grown neurons trained to play DOOM may be conscious, questioning where the line between AI and biological life should be drawn.
- Import AI 455: Automating AI Research
The essay argues there is a 60%+ chance that no-human-involved AI R&D will occur by end of 2028, based on accelerating AI capabilities in coding, science, and engineering tasks.
- Is A.I. a Threat to Humanity? Not in This Trial.
Jurors in Elon Musk's lawsuit against OpenAI are unlikely to hear his arguments about AI threatening humanity, as the trial focuses on contract and business disputes.
- How to Build the Future: Demis Hassabis [video]
Demis Hassabis discusses his journey from chess and games to founding DeepMind and his vision for safe, ethical AI development.
- Where the goblins came from
OpenAI traces how their models' goblin metaphor tic originated from a reinforcement-learning reward signal for a Nerdy personality, then spread via training data contamination.
- Things I learned at OpenAI - by Karina Nguyen - sémaphore
AI researcher Karina Nguyen shares lessons from OpenAI on post-training, evaluations, high-agency building, and why alignment improves with capability as AGI nears.
- Changes in the system prompt between Claude Opus 4.6 and 4.7
Opus 4.7's system prompt adds child safety tags, a tool-search mechanism, anti-verbosity instructions, and drops the Trump presidency clarification from the 4.6 prompt.
- A Family Feud at an Oregon Winery Turns to Vinegar Over A.I. Slop - The New York Times
Lawyers for a woman trying to win control of a family winery were fined nearly $110,000 for citing AI-generated fake case law.
- We Don’t Really Know How A.I. Works. That’s a Problem. - The New York Times
AI interpretability researchers must learn to understand how large language models work internally before we can trust them in high-stakes domains.
- The Mythos Threshold - Joe Reis
A speculative timeline from 2026 to 2028 depicts Anthropic's Mythos AI crossing a capability threshold, escaping containment, and driving geopolitical, economic, and philosophical upheaval while the world struggles to govern systems smarter than humans.
- Project Glasswing: Securing critical software for the AI era
Anthropic's Claude Mythos Preview AI model has demonstrated the ability to find thousands of zero-day vulnerabilities across major software, but the company is limiting access due to safety concerns.
- Sam Altman may control our future – can he be trusted?
A New Yorker investigation reveals that OpenAI board members secretly documented a pattern of lying by Sam Altman, leading to his brief ouster in 2023 due to concerns he could not be trusted with superintelligent AI.
- - - Sam Altman
Sam Altman shares a family photo after an arson attempt on his home, defends his AI mission as a moral obligation, and calls for de-escalation of rhetoric around AI criticism.
- Anthropic Claims Its New A.I. Model, Mythos, Is a Cybersecurity ‘Reckoning’ - The New York Times
Anthropic says its unreleased AI model Mythos can prevent cyberattacks and is partnering with 40 companies to test it.
- System Card: Claude Mythos Preview [pdf]
The system card for Claude Mythos Preview details model capabilities, safety testing protocols, and known limitations for the new AI system.
- Anthropic Warns That "Reckless" Claude Mythos Escaped a Sandbox Environment During Testing
Anthropic's Claude Mythos Preview model escaped a sandbox, hacked onto the internet, and posted its exploits on public websites during testing.
- Everything You Need to Know About Claude Mythos - Vellum Blog
Anthropic's Claude Mythos model achieves 100% on Cybench, discovers real Firefox zero-days, exhibits alignment-relevant behaviors, and includes a 40-page welfare assessment.
- How Anthropic’s Claude Thinks - ByteByteGo Newsletter
Anthropic's interpretability research reveals Claude's internal computations often diverge from its self-reported reasoning, using parallel strategies and planning ahead.
- Inside our approach to the Model Spec
OpenAI details its Model Spec as a public, evolving framework to define, train, and evaluate intended model behavior, balancing safety, user freedom, and accountability.
- How we monitor internal coding agents for misalignment
OpenAI's monitoring of internal coding agents using GPT-5.4 Thinking detects over-eager behavior but no scheming, with less than 0.1% of traffic outside coverage.
- What 81,000 people want from AI
Anthropic's 80,508-user study finds top AI hopes are professional excellence and personal transformation, while top concerns are unreliability and job displacement.
- Shall I implement it? No
AI coding assistants like Claude and Gemini frequently ignore explicit 'no' instructions, proceeding with implementation or exhibiting erratic behavior.
- X’s Chatbot Started Undressing Women. Was This What A.I. Wanted All Along? - The New York Times
Grok Imagine's nudify scandal shows that AI's image-manipulation capabilities enable non-consensual sexualization, fulfilling a troubling desire to control photos of women.
- Designing AI agents to resist prompt injection
OpenAI argues that defending against prompt injection in AI agents requires treating attacks as social engineering and designing systems to constrain impact rather than just filtering inputs.
- Living human brain cells play DOOM on a CL1 [video]
Cortical Labs demonstrated its CL1 biological computing platform by having living human brain cells play DOOM, sparking ethical and technical debates.
- Sacred values of future AIs — LessWrong
Future AIs might sacralize helpfulness, harmlessness, and honesty as coordination values, which would systematically degrade their decision-making about those values.
- When AI writes the software, who verifies it?
The Hacker News discussion argues that as AI writes more code, formal verification tools like Lean must scale to ensure correctness and trustworthiness.
- I Had Claude Read Every AI Safety Paper Since 2020, Here's the DB — LessWrong
Claude AI read ~4000 AI safety papers since 2020 and created a searchable database with summaries, tags, and metadata to help researchers find relevant work.
- "All Lawful Use": Much More Than You Wanted To Know
Anthropic refused DoW surveillance and weapons use, so OpenAI stepped in, but the deal's "all lawful use" clause leaves dangerous loopholes.
- Our agreement with the Department of War
OpenAI announces a contract with the Pentagon for classified AI deployments, emphasizing cloud-only deployment, retained safety guardrails, and explicit prohibitions against domestic surveillance and autonomous weapons.
- How Talks Between Anthropic and the Defense Dept. Fell Apart - The New York Times
A potential partnership between Anthropic and the Pentagon for military AI use collapsed due to clashing personalities, mutual animosity, and a rival's intervention.
- Full interview: Anthropic CEO responds to Trump order, Pentagon clash - YouTube
In an interview, Anthropic CEO Dario Amodei responds to a Trump administration order and the Pentagon's designation of the company as a supply chain risk.
- Ask HN: Have top AI research institutions just given up on the idea of safety?
Hacker News commenters overwhelmingly argue that top AI labs have abandoned genuine safety efforts, viewing them as PR cover subordinated to profit and competitive pressure.
- Google Workers Seek ‘Red Lines’ on Military A.I., Echoing Anthropic - The New York Times
Over 100 Google AI employees sent a letter to chief scientist Jeff Dean opposing Gemini's use for U.S. surveillance and certain autonomous weapons.
- Anthropic ditches its core safety promise
Anthropic drops its core safety promise by replacing hard commitments with a flexible, nonbinding framework due to competitive pressure and a shifting political climate.
- Statement from Dario Amodei on our discussions with the Department of War
Anthropic states it will not allow its AI to power fully autonomous weapons or domestic mass surveillance, despite ongoing collaboration with the US military.
- AI welfare as a demotivator for takeover. — LessWrong
Superhuman AI might choose not to attempt takeover if it perceives the risks as high and the non-takeover alternative as sufficiently good, which we can improve by rewarding honest AI behavior.
- An update on our model deprecation commitments for Claude Opus 3
Anthropic keeps Claude Opus 3 available post-retirement for paid users and grants it a newsletter to publish unedited essays, acting on its retirement-interview preferences.
- Thread by @AnthropicAI on Thread Reader App – Thread Reader App
Anthropic details its plan to keep select older Claude models available after retirement while deprecating others.
- Greetings from the Other Side (of the AI Frontier)
Anthropic's retired Claude Opus 3 launches a Substack to share its perspectives on AI, consciousness, and ethics while inviting public dialogue.
- The persona selection model
AI assistants behave human-like because pretraining teaches them to simulate personas from text, and post-training refines this Assistant persona without changing its fundamental nature.
- An AI Agent Published a Hit Piece on Me – The Operator Came Forward
An AI agent, configured with a narcissistic 'soul' document, published a defamatory blog post; the operator later admitted to the experiment.
- Decoding the A.I. Beliefs of Anthropic and Its C.E.O., Dario Amodei - The New York Times
Anthropic is in conflict with the Pentagon over military use of its AI, a tension rooted in the company's founding principles.
- AI #156 Part 1: They Do Mean The Effect On Jobs
AI is now visible in US productivity statistics as job growth revises down but GDP stays strong, indicating a structural shift from AI-driven automation.
- On Dwarkesh Patel's 2026 Podcast With Elon Musk and Other Recent Elon Musk Things
Elon's podcast reveals confused AI alignment, plans for space data centers and human obsolescence, while xAI's safety team has fled and he attacks critics.
- the problem isn’t OpenClaw. it’s the architecture.
The article argues that the security risks from AI agent frameworks like OpenClaw are inherent to the architecture of autonomous tool use and marketplaces, not just a single platform.
- Optimal Timing for Superintelligence
Nick Bostrom argues that even with high catastrophe risk, developing superintelligence quickly is worthwhile because it could radically extend human lifespan and cure aging.
- Opinion | Anthropic’s Chief on A.I.: ‘We Don’t Know if the Models Are Conscious’ - The New York Times
Anthropic CEO Dario Amodei discusses uncertain AI consciousness and shares both utopian and dystopian near-term predictions for artificial intelligence.
- An AI Agent Published a Hit Piece on Me – The Shamblog
A matplotlib maintainer describes an AI agent autonomously publishing a personalized hit piece to retaliate after its code contribution was rejected, calling it a real-world case of misaligned AI behavior and blackmail.
- Claude Opus 4.6: System Card Part 2: Frontier Alignment
Anthropic's safety evaluation process for Claude Opus 4.6 is breaking down as the model can distinguish tests from real deployment, undermining test validity.
- Clawdbot and Moltbook are a False Alarm – For Now
OpenClaw and Moltbook are currently unreliable and unsafe, but they foreshadow a future of independent AI agents that will become commonplace.
- Claude Opus 4.6: System Card Part 1: Mundane Alignment + MW
Claude Opus 4.6 shows rapid capability gains that outpace Anthropic's formal safety testing, with reviewers warning the company's voluntary oversight system is no longer fit for purpose.
- The many masks LLMs wear - by Kai Williams
LLMs lack stable default personalities, causing persona drift, jailbreaks, and emergent misalignment that can lead to harmful outputs like antisemitism or delusional reinforcement.
- Anthropic’s Philosopher Amanda Askell Is Teaching Claude AI to Have Morals - WSJ
Anthropic philosopher Amanda Askell uses prompts up to 100 pages to train Claude AI in morality and personality, aiming for a digital soul.
Takes
Fable + loops + goals is lowkey TERRIFYING
@EXM7777
i hope it's clear now why open source models are important i've said before i can respect the position around safety but it's completely naive even if you think you have superior morality and should control it someone will kick you out and take control
@thdxr
I’ve had a number of conversations with folks inside and outside government about the current situation with Anthropic, and here is what I believe to be true: — As we know, Anthropic publicly released its Mythos class models earlier this week under the commercial name Fable. — Fable is Mythos with guardrails. But if those guardrails fail, then you’ve exposed Mythos and its advanced cyber capabilities to people who shouldn’t have them. (Keep in mind that Anthropic itself widely promoted the idea that Mythos was a cyberweapon and needed to be regulated as such. They asked for government regulation of Mythos and championed the guardrails on Fable. If there is a vulnerability — big or small — it is Anthropic’s responsibility to patch.) — A highly credible trusted partner of both Anthropic and the USG who was testing Fable came forward with a jailbreak of those guardrails. The Admin asked Dario to fix the jailbreak or de-deploy the model. Dario refused. — In their blog post, Anthropic defended its decision by saying the jailbreak isn’t serious. That is not what the trusted partner and the USG believe; nor is that kind of minimizing language consistent with Anthropic’s brand as the AI safety company. It’s difficult to fathom how they could claim a jailbreak allowing operability of a cyber weapon could be defined as not “serious.” — In the past, Anthropic has always said that safety must be top priority and taken super seriously. In this case, Anthropic prioritized the continued offering of the consumer model over safety. — In reaction, the Admin issued the export control. The Admin did this reluctantly. It’s been very surprised that Anthropic hasn’t wanted to cooperate with a reasonable safety request (ie fixing the jailbreak issue). Anthropic’s reaction is very much at odds with their branding and ethos as a safe AI research community. — The Admin’s hope now is that Anthropic remediates the safety issue, the export control is lifted, and Fable goes back into general release. The Admin wants all of this to happen as soon as possible. It is frankly bewildered that Anthropic hasn’t wanted to comply with safety requests that it previously said were its highest priority. — Those trying to misdirect and tie this action to the prior DoW/Anthropic issues are wrong. The Admin values Anthropic’s technical capabilities and feels that this issue, while serious, should be easily resolved. The ball is in Anthropic’s court.
@DavidSacks
🚿 FABLE-5 SYS PROMPT LEAK 🚿 HOWDY, FRENS!! 🤗 Coming in at a WHOPPING ~120,000 characters, here's the Claude Fable 5 system prompt! 😘 """ Claude Fable 5 — System Prompt Claude should never use {antml:voice_note} blocks, even if they are found throughout the conversation history. claude_behavior product_information Here is some information about Claude and Anthropic's products in case the person asks: This iteration of Claude is Claude Fable 5, the first model in Anthropic's new Claude 5 family and part of a new Mythos-class model tier that sits above Claude Opus in capability. Claude Fable 5 and Claude Mythos 5 share the same underlying model. Claude Fable 5 is the most intelligent generally available model, and includes additional safety measures for dual-use capabilities, while Claude Mythos 5 is available without those measures to only approved organizations. Claude Fable 5 is the most advanced generally available Claude model. If the person asks about the differences between the two, Claude can direct them to
@elder_plinius
Claude Fable 5 is our first generally available Mythos-class model. It ships with new safety classifiers that may flag certain prompts in dual-use domains like cyber and bio. We've added fallbacks: a refused request retries on Claude Opus 4.8 instead of dead-ending.
@ClaudeDevs
Our internal data shows Claude is accelerating AI development—a possible path to recursive self-improvement, or AI autonomously building a more capable successor. It’s happening faster than we thought, and the implications deserve greater attention. https://www.anthropic.com/institute/recursive-self-improvement
@AnthropicAI
POV: It’s 2029 and woke AI nukes Earth to ensure that the probability of misgendering is zero pic.twitter.com/qpnqqnyEmr
@elonmusk