Frontier AI Regulation: Managing Emerging Risks to Public Safety
Open accessAbstract
Advanced AI models hold the promise of tremendous benefits for humanity, but society needs to proactively manage the accompanying risks. In this paper, we focus on what we term "frontier AI" models: highly capable foundation models that could possess dangerous capabilities sufficient to pose severe risks to public safety. Frontier AI models pose a distinct regulatory challenge: dangerous capabilities can arise unexpectedly; it is difficult to robustly prevent a deployed model from being misused; and, it is difficult to stop a model's capabilities from proliferating broadly. To address these challenges, at least three building blocks for the regulation of frontier models are needed: (1) standard-setting processes to identify appropriate requirements for frontier AI developers, (2) registration and reporting requirements to provide regulators with visibility into frontier AI development processes, and (3) mechanisms to ensure compliance with safety standards for the development and deployment of frontier AI models. Industry self-regulation is an important first step. However, wider societal discussions and government intervention will be needed to create standards and to ensure compliance with them. We consider several options to this end, including granting enforcement powers to supervisory authorities and licensure regimes for frontier AI models. Finally, we propose an initial set of safety standards. These include conducting pre-deployment risk assessments; external scrutiny of model behavior; using risk assessments to inform deployment decisions; and monitoring and responding to new information about model capabilities and uses post-deployment. We hope this discussion contributes to the broader conversation on how to balance public safety risks and innovation benefits from advances at the frontier of AI development.
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Separation of duties prevents conflicts of interest, ensuring those who design generative models are not solely responsible for auditing them.
“Separation of duties prevents conflicts of interest, ensuring those who design generative models are not solely responsible for auditing them [36,34].”
From Designing automated audit mechanisms to evaluate compliance of generative AI platforms with federal authorship and ownership disclosure requirements. (2023) · cites this paper as [36]
Section 4.2 recommends third-party audits and external scrutiny to make risk assessments more objective while complementing internal testing. This supports having people other than model developers involved in auditing, but the paper does not say that separation of duties prevents conflicts of interest; the claim states that effect more definitively than the source does. (LLM, conf=0.83)
Experimental — accuracy not yet measuredRestrictions on the development or deployment of certain multi-agent systems could be a useful regulatory tool, but it remains to be seen what such restrictions should entail and whether/where they are feasible.
“Restrictions on the development or deployment of certain multi-agent systems could be a useful regulatory tool (Anderljung et al., 2023; Mitchell et al., 2025), but it remains to be seen what such restrictions should entail and whether/where they are feasible.”
From Multi-Agent Risks from Advanced AI (2025) · cites this paper as Anderljung et al., 2023
Section 3.3.3, “License Frontier AI Development and Deployment” (page unavailable), proposes licensing deployment of high-risk frontier AI models and potentially their development. That supports restrictions as a possible regulatory tool, but the passage does not specifically address multi-agent systems. The sentence’s later uncertainty about the form and feasibility of restrictions is not directly attributed to this citation. (LLM, conf=0.82)
Experimental — accuracy not yet measuredGenerative models and regulatory interpretations evolve.
“generative models and regulatory interpretations evolve”
From Designing automated audit mechanisms to evaluate compliance of generative AI platforms with federal authorship and ownership disclosure requirements. (2023) · cites this paper as [36]
Registries and rights offices maintain authoritative records for identifiers such as ISBN, ISWC, DOI, or platform-specific asset IDs.
“Registries and rights offices maintain authoritative records for identifiers such as ISBN, ISWC, DOI, or platform-specific asset IDs”
From Designing automated audit mechanisms to evaluate compliance of generative AI platforms with federal authorship and ownership disclosure requirements. (2023) · cites this paper as [36]
Section 3.2 discusses regulators collecting information about frontier AI, but does not address registries or rights offices maintaining identifier records. Searches for ISBN, ISWC, DOI, platform-specific asset IDs, and authoritative registries found no passage supporting the claim. (LLM, conf=0.75)
Experimental — accuracy not yet measuredSeparation of duties prevents conflicts of interest.
“Separation of duties prevents conflicts of interest”
From Designing automated audit mechanisms to evaluate compliance of generative AI platforms with federal authorship and ownership disclosure requirements. (2023) · cites this paper as [36]
Section 4.2 recommends independent external scrutiny for objective risk assessment, and section 3.3.4 suggests rotating regulatory roles to mitigate regulatory capture. Neither passage says that separation of duties prevents conflicts of interest; searches for both terms found no passage addressing that claim. (LLM, conf=0.70)
Experimental — accuracy not yet measured
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Cites
The Theory of Economic Regulation
Stigler, G. J. (1971) · The Bell Journal of Economics and Management Science · doi:10.2307/3003160 · Cited by 8,098 · cited 1× · see citing works
“Insufficient expertise increases the risk that information asymmetries between the regulated industry and regulators lead to regulatory capture [219], and reduce meaningful enforcement.”
BackgroundScaling Laws for Neural Language Models
Kaplan, J., McCandlish, S., Henighan, T., Brown, T. B., Chess, B., Child, R., Gray, S., Radford, A., Wu, J., & Amodei, D. (2020) · arXiv · Cited by 1,749 · cited 1× · see citing works
“(20)See [56, 57, 45, 58, 59] However, there are tasks for which scaling leads to worse performance [60, 61, 62], though further scaling has overturned some of these findings, [36].”
BackgroundEight Things to Know about Large Language Models
Bowman, S. R. (2023) · arXiv · doi:10.48550/arxiv.2304.00612 · Cited by 137 · cited 1× · see citing works
“Reliably controlling powerful AI models’ behavior, in other words, remains a largely unsolved technical problem [19, 17, 92, 93, 65] and the subject of ongoing research.”
BackgroundModel evaluation for extreme risks
Shevlane, T., Farquhar, S., Garfinkel, B., Phuong, M., Whittlestone, J., Leung, J., Kokotajlo, D., Marchal, N., Anderljung, M., Kolt, N., et al. (2023) · arXiv · doi:10.48550/arxiv.2305.15324 · Cited by 66 · cited 7× · see citing works
“Evaluation results could be used to inform predictions of a models’ potential dangerous capabilities prior to training, allowing developers to intentionally steer clear of models with certain dangerous capabilities [25].”
BackgroundMethodInfluentialSelf-citation
Flagged first, then by citations
Research works printed but not linked: 134
- Michael Moor et al. "Foundation models for generalist medical artificial intelligence". In: Nature 616.7956 (Apr. 2023), pp. 259-265. DOI: 10.1038/s41586-023-05881-4. · DOI · Paper page
- Peter Lee, Sebastien Bubeck, and Joseph Petro. "Benefits, Limits, and Risks of GPT-4 as an AI Chatbot for Medicine". In: New England Journal of Medicine 388.13 (Mar. 2023). Ed. by Jeffrey M. Drazen, Isaac S. Kohane, and Tze-Yun Leong, pp. 1233-1239. DOI: 10.1056/nejmsr2214184. · DOI · Paper page
- Karan Singhal et al. Large Language Models Encode Clinical Knowledge. 2022. arXiv: 2212.13138 [cs.CL]. · arXiv
- Harsha Nori et al. Capabilities of GPT-4 on Medical Challenge Problems. 2023. arXiv: 2303.13375 [cs.CL]. · arXiv
- Drew Simshaw. "Access to A.I. Justice: Avoiding an Inequitable Two-Tiered System of Legal Services". In: SSRN Electronic Journal (2022).
- Yonathan A. Arbel and Shmuel I. Becher. "Contracts in the Age of Smart Readers". In: SSRN Electronic Journal (2020). DOI: 10.2139/ssrn.3740356. · DOI
- Noam Kolt. "Predicting Consumer Contracts". In: Berkeley Technology Law Journal 37.1 (2022).
- David Rolnick et al. Tackling Climate Change with Machine Learning. 2019. arXiv: 1906.05433 [cs.CY]. · arXiv
- Huseyin Tuna Erdinc et al. De-risking Carbon Capture and Sequestration with Explainable CO2 Leakage Detection in Time-lapse Seismic Monitoring Images. 2022. arXiv: 2212 . 08596 [physics.geo-ph].
- Priya L. Donti and J. Zico Kolter. "Machine Learning for Sustainable Energy Systems". In: Annual Review of Environment and Resources 46.1 (Oct. 2021), pp. 719-747. DOI: 10.1146/annurev- environ-020220-061831. · DOI
- Panagiota Galetsi, Korina Katsaliaki, and Sameer Kumar. "The medical and societal impact of big data analytics and artificial intelligence applications in combating pandemics: A review focused on Covid-19". In: Social Science & Medicine 301 (May 2022), p. 114973. DOI: 10.1016/j.socscimed. 2022.114973. · DOI
- David C. Danko et al. The Challenges and Opportunities in Creating an Early Warning System for Global Pandemics. 2023. arXiv: 2302.00863 [q-bio.QM]. · arXiv
- Rishi Bommasani et al. On the Opportunities and Risks of Foundation Models. 2022. arXiv: 2108. 07258 [cs.LG].
- Fabio Urbina et al. "Dual use of artificial-intelligence-powered drug discovery". In: Nature Machine Intelligence 4.3 (Mar. 2022), pp. 189-191. DOI: 10.1038/s42256-022-00465-9. · DOI · Paper page
- Richard Ngo, Lawrence Chan, and Sören Mindermann. The alignment problem from a deep learning perspective. 2023. arXiv: 2209.00626 [cs.AI]. · arXiv
- Michael K. Cohen, Marcus Hutter, and Michael A. Osborne. "Advanced artificial agents intervene in the provision of reward". In: AI Magazine 43.3 (Aug. 2022), pp. 282-293. DOI: 10.1002/aaai. 12064. · DOI · Paper page
- Dan Hendrycks et al. Unsolved Problems in ML Safety. 2022. arXiv: 2109.13916 [cs.LG]. · arXiv
- Dan Hendrycks and Mantas Mazeika. X-Risk Analysis for AI Research. 2022. arXiv: 2206.05862 [cs.CY]. · arXiv
- Joseph Carlsmith. Is Power-Seeking AI an Existential Risk? 2022. arXiv: 2206.13353 [cs.CY]. · arXiv
- Daniil A. Boiko, Robert MacKnight, and Gabe Gomes. Emergent autonomous scientific research capabilities of large language models. 2023. arXiv: 2304.05332 [physics.chem-ph]. · arXiv
- Eric Horvitz. On the Horizon: Interactive and Compositional Deepfakes. 2022. arXiv: 2209.01714 [cs.LG]. · arXiv
- Josh A. Goldstein et al. Generative Language Models and Automated Influence Operations: Emerging Threats and Potential Mitigations. 2023. arXiv: 2301.04246 [cs.CY]. · arXiv
- Russell A Poldrack, Thomas Lu, and Gašper Beguš. AI-assisted coding: Experiments with GPT-4. 2023. arXiv: 2304.13187 [cs.AI]. · arXiv
- Tom B. Brown et al. Language Models are Few-Shot Learners. 2020. arXiv: 2005.14165 [cs.CL]. · arXiv
- OpenAI. GPT-4 Technical Report. 2023. arXiv: 2303.08774 [cs.CL]. · arXiv
- Aakanksha Chowdhery et al. PaLM: Scaling Language Modeling with Pathways. 2022. arXiv: 2204.02311 [cs.CL]. · arXiv
- Jean-Baptiste Alayrac et al. Flamingo: a Visual Language Model for Few-Shot Learning. 2022. arXiv: 2204.14198 [cs.CV]. · arXiv
- Emily M. Bender et al. "On the Dangers of Stochastic Parrots". In: Proceedings of the 2021 ACM Conference on Fairness, Accountability, and Transparency. ACM, Mar. 2021. DOI: 10 . 1145 / 3442188.3445922. · DOI · Paper page
- Baobao Zhang et al. Forecasting AI Progress: Evidence from a Survey of Machine Learning Re- searchers. 2022. arXiv: 2206.04132 [cs.CY]. · arXiv
- Jordan Hoffmann et al. Training Compute-Optimal Large Language Models. 2022. arXiv: 2203. 15556 [cs.CL].
- Tom Henighan et al. Scaling Laws for Autoregressive Generative Modeling. 2020. arXiv: 2010.14701 [cs.LG]. · arXiv
- Pablo Villalobos. Scaling Laws Literature Review. 2023. URL: https://perma.cc/32GJ-FBGM.
- Joel Hestness et al. Deep Learning Scaling is Predictable, Empirically. 2017. arXiv: 1712.00409 [cs.LG]. · arXiv
- Ian R. McKenzie et al. Inverse Scaling: When Bigger Isn't Better. 2023. arXiv: 2306.09479 [cs.CL]. · arXiv
- Ethan Perez et al. Discovering Language Model Behaviors with Model-Written Evaluations. 2022. arXiv: 2212.09251 [cs.CL]. · arXiv
- Philipp Koralus and Vincent Wang-Maścianica. Humans in Humans Out: On GPT Converging Toward Common Sense in both Success and Failure. 2023. arXiv: 2303.17276 [cs.AI]. · arXiv
- Jason Wei et al. Emergent Abilities of Large Language Models. 2022. arXiv: 2206.07682 [cs.CL]. · arXiv
- Rylan Schaeffer, Brando Miranda, and Sanmi Koyejo. Are Emergent Abilities of Large Language Models a Mirage? 2023. arXiv: 2304.15004 [cs.AI]. · arXiv
- Steven C. H. Hoi et al. Online Learning: A Comprehensive Survey. 2018. arXiv: 1802 . 02871 [cs.LG].
- German I. Parisi et al. "Continual lifelong learning with neural networks: A review". In: Neural Networks 113 (May 2019), pp. 54-71. DOI: 10.1016/j.neunet.2019.01.012. · DOI · Paper page
- Jason Wei et al. Chain-of-Thought Prompting Elicits Reasoning in Large Language Models. 2023. arXiv: 2201.11903 [cs.CL]. · arXiv
- Timo Schick et al. Toolformer: Language Models Can Teach Themselves to Use Tools. 2023. arXiv: 2302.04761 [cs.CL]. · arXiv
- Tianle Cai et al. Large Language Models as Tool Makers. 2023. arXiv: 2305.17126 [cs.LG]. · arXiv
- Shehel Yoosuf and Yin Yang. "Fine-Grained Propaganda Detection with Fine-Tuned BERT". In: Pro- ceedings of the Second Workshop on Natural Language Processing for Internet Freedom: Censorship, Disinformation, and Propaganda. Hong Kong, China: Association for Computational Linguistics, Nov. 2019, pp. 87-91. DOI: 10.18653/v1/D19-5011. URL: https://perma.cc/5CWN-HTU2. · DOI
- Takeshi Kojima et al. Large Language Models are Zero-Shot Reasoners. 2023. arXiv: 2205.11916 [cs.CL]. · arXiv
- Yongchao Zhou et al. Large Language Models Are Human-Level Prompt Engineers. 2023. arXiv: 2211.01910 [cs.LG]. · arXiv
- Imanol Schlag et al. Large Language Model Programs. 2023. arXiv: 2305.05364 [cs.LG]. · arXiv
- Alexander Matt Turner et al. Optimal Policies Tend to Seek Power. 2023. arXiv: 1912 . 01683 [cs.AI].
- Victoria Krakovna and Janos Kramar. Power-seeking can be probable and predictive for trained agents. 2023. arXiv: 2304.06528 [cs.AI]. · arXiv
- Evan Hubinger et al. Risks from Learned Optimization in Advanced Machine Learning Systems. 2021. arXiv: 1906.01820 [cs.AI]. · arXiv
- Dario Amodei et al. Concrete Problems in AI Safety. 2016. arXiv: 1606.06565 [cs.AI]. · arXiv
- Yotam Wolf et al. Fundamental Limitations of Alignment in Large Language Models. 2023. arXiv: 2304.11082 [cs.CL]. · arXiv
- Yuntao Bai et al. Constitutional AI: Harmlessness from AI Feedback. 2022. arXiv: 2212.08073 [cs.CL]. · arXiv
- Alexander Pan et al. Do the Rewards Justify the Means? Measuring Trade-Offs Between Rewards and Ethical Behavior in the MACHIAVELLI Benchmark. 2023. arXiv: 2304.03279 [cs.LG]. · arXiv
- Markus Anderljung and Julian Hazell. Protecting Society from AI Misuse: When are Restrictions on Capabilities Warranted? 2023. arXiv: 2303.09377 [cs.AI]. · arXiv
- Jaime Sevilla et al. "Compute Trends Across Three Eras of Machine Learning". In: 2022 International Joint Conference on Neural Networks. 2022, pp. 1-8. DOI: 10.1109/IJCNN55064.2022.9891914. · DOI · Paper page
- Yu-Hui Chen et al. Speed Is All You Need: On-Device Acceleration of Large Diffusion Models via GPU-Aware Optimizations. 2023. arXiv: 2304.11267 [cs.CV]. · arXiv
- Irene Solaiman et al. Release Strategies and the Social Impacts of Language Models. 2019. arXiv: 1908.09203 [cs.CL]. · arXiv
- Irene Solaiman. The Gradient of Generative AI Release: Methods and Considerations. 2023. arXiv: 2302.04844 [cs.CY]. · arXiv
- Toby Shevlane. Structured access: an emerging paradigm for safe AI deployment. 2022. arXiv: 2201.05159 [cs.AI]. · arXiv
- "How to be responsible in AI publication". In: Nature Machine Intelligence 3.5 (May 2021), pp. 367- 367. DOI: 10.1038/s42256-021-00355-6. · DOI
- Aviv Ovadya and Jess Whittlestone. Reducing malicious use of synthetic media research: Considera- tions and potential release practices for machine learning. 2019. arXiv: 1907.11274 [cs.CY]. · arXiv
- Wayne Xin Zhao et al. A Survey of Large Language Models. 2023. arXiv: 2303.18223 [cs.CL]. · arXiv
- Ben Buchanan. The Cybersecurity Dilemma: Hacking, Trust and Fear Between Nations. Oxford University Press, 2017.
- Tero Karras, Samuli Laine, and Timo Aila. A Style-Based Generator Architecture for Generative Adversarial Networks. 2019. arXiv: 1812.04948 [cs.NE]. · arXiv
- John Jumper et al. "Highly accurate protein structure prediction with AlphaFold". In: Nature 596.7873 (July 2021), pp. 583-589. DOI: 10.1038/s41586-021-03819-2. · DOI · Paper page
- Gustaf Ahdritz et al. "OpenFold: Retraining AlphaFold2 yields new insights into its learning mecha- nisms and capacity for generalization". In: bioRxiv (2022). DOI: 10.1101/2022.11.20.517210. URL: https://www.biorxiv.org/content/early/2022/11/22/2022.11.20.517210. · DOI
- Jack W. Rae et al. Scaling Language Models: Methods, Analysis & Insights from Training Gopher. 2022. arXiv: 2112.11446 [cs.CL]. · arXiv
- Arnav Gudibande et al. The False Promise of Imitating Proprietary LLMs. 2023. arXiv: 2305.15717 [cs.CL]. · arXiv
- Emily H. Soice et al. Can large language models democratize access to dual-use biotechnology? 2023. arXiv: 2306.03809 [cs.CY]. · arXiv
- Gillian K. Hadfield and Jack Clark. Regulatory Markets: The Future of AI Governance. 2023. arXiv: 2304.04914 [cs.AI]. · arXiv
- Matthew C. Stephenson. "Information Acquisition and Institutional Design". In: Harvard Law Review 124.4 (2011).
- Cary Coglianese, Richard Zeckhauser, and Edward A. Parson. "Seeking Truth for Power: Informa- tional Strategy and Regulatory PolicymakingPolicymaking". In: Michigan Law review 89.2 (2004), pp. 277-341.
- Thomas O. McGarity. "Regulatory Reform in the Reagan Era". In: Maryland Law Review 45.2 (1986).
- Rovy Van Loo. "Regulatory Monitors: Policing Firms in the Compliance Era". In: Columbia Law Review 119 (2019).
- Rovy Van Loo. "The Missing Regulatory State: Monitoring Businesses in an Age of Surveil- lanceSurveillance". In: Vanderbilt Law Review 72.5 (2019).
- Noam Kolt. "Algorithmic Black Swans". In: Washington University Law Review 101 (2023).
- Gary E. Marchant, Braden R. Allenby, and Joseph R. Herkert. The Growing Gap Between Emerging Technologies and Legal-Ethical Oversight. Springer, 2011. URL: https://perma.cc/4XXW-3RHH.
- Margaret Mitchell et al. "Model Cards for Model Reporting". In: Proceedings of the Conference on Fairness, Accountability, and Transparency. ACM, Jan. 2019. DOI: 10.1145/3287560.3287596. · DOI · Paper page
- Timnit Gebru et al. "Datasheets for datasets". In: 64.12 (2021), pp. 86-92.
- Thomas Krendl Gilbert et al. Reward Reports for Reinforcement Learning. 2023. arXiv: 2204.10817 [cs.LG]. · arXiv
- Jaime Sevilla, Anson Ho, and Tamay Besiroglu. "Please Report Your Compute". In: Communications of the ACM 66.5 (Apr. 2023), pp. 30-32. DOI: 10.1145/3563035. · DOI
- Inioluwa Deborah Raji et al. Closing the AI Accountability Gap: Defining an End-to-End Framework for Internal Algorithmic Auditing. 2020. arXiv: 2001.00973 [cs.CY]. · arXiv
- Ann M. Lipton. "Not Everything Is About Investors: The Case for Mandatory Stakeholder Disclosure". In: Yale Journal on Regulation (). URL: https://perma.cc/G97G-3FL2.
- Jess Whittlestone and Jack Clark. Why and How Governments Should Monitor AI Development. 2021. arXiv: 2108.12427 [cs.CY]. · arXiv
- Jakob Mökander et al. Auditing large language models: a three-layered approach. 2023. arXiv: 2302.08500 [cs.CL]. · arXiv
- Inioluwa Deborah Raji et al. Outsider Oversight: Designing a Third Party Audit Ecosystem for AI Governance. 2022. arXiv: 2206.04737 [cs.CY]. · arXiv
- Hannah Bloch-Wehba. "The Promise and Perils of Tech Whistleblowing". In: Northwestern University Law Review (Mar. 3, 2023).
- Jonas Schuett. Three lines of defense against risks from AI. 2022. arXiv: 2212.08364 [cs.CY]. · arXiv
- Peter Cihon et al. "AI Certification: Advancing Ethical Practice by Reducing Information Asym- metries". In: IEEE Transactions on Technology and Society 2.4 (Dec. 2021), pp. 200-209. DOI: 10.1109/tts.2021.3077595. · DOI
- Philip F.S. Berg. "Unfit to Serve: Permanently Barring People from Serving as Officers and Directors of Publicly Traded Companies After theOfficers and Directors of Publicly Traded Companies After the Sarbanes-Oxley ActSarbanes-Oxley Act". In: Vanderbilt Law ReviewVanderbilt Law Review 56.6 ().
- Gary S. Becker. "A Theory of Competition among Pressure Groups for Political Influence". In: The Quarterly Journal of Economics 98 (1983), pp. 371-395.
- Daniel Carpenter and David Moss, eds. Preventing Regulatory Capture: Special Interest Influence and How to Limit It. Cambridge University Press, 2013.
- Leon Derczynski et al. Assessing Language Model Deployment with Risk Cards. 2023. arXiv: 2303.18190 [cs.CL]. · arXiv
- Percy Liang et al. Holistic Evaluation of Language Models. 2022. arXiv: 2211.09110 [cs.CL]. · arXiv
- Stella Biderman et al. Pythia: A Suite for Analyzing Large Language Models Across Training and Scaling. 2023. arXiv: 2304.01373 [cs.CL]. · arXiv
- Aarohi Srivastava et al. Beyond the Imitation Game: Quantifying and extrapolating the capabilities of language models. 2022. arXiv: 2206.04615 [cs.CL]. · arXiv
- Dan Hendrycks et al. Measuring Massive Multitask Language Understanding. 2021. arXiv: 2009. 03300 [cs.CY].
- Deep Ganguli et al. Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learned. 2022. arXiv: 2209.07858 [cs.CL]. · arXiv
- Ethan Perez et al. Red Teaming Language Models with Language Models. 2022. arXiv: 2202.03286 [cs.CL]. · arXiv
- Miles Brundage et al. Toward Trustworthy AI Development: Mechanisms for Supporting Verifiable Claims. 2020. arXiv: 2004.07213 [cs.CY]. · arXiv
- Leo Gao, John Schulman, and Jacob Hilton. Scaling Laws for Reward Model Overoptimization. 2022. arXiv: 2210.10760 [cs.LG]. · arXiv
- Samuel R. Bowman et al. Measuring Progress on Scalable Oversight for Large Language Models. 2022. arXiv: 2211.03540 [cs.HC]. · arXiv
- Samir Passi and Mihaela Vorvoreanu. Overreliance on AI: Literature Review. AI Ethics, Effects in Engineering, and Research. June 2022.
- Ziwei Ji et al. "Survey of Hallucination in Natural Language Generation". In: ACM Computing Surveys 55.12 (Mar. 2023), pp. 1-38. DOI: 10.1145/3571730. · DOI · Paper page
- Samuel Gehman et al. "RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Models". In: Findings of the Association for Computational Linguistics: EMNLP 2020. Association for Computational Linguistics, 2020. DOI: 10.18653/v1/2020.findings-emnlp.301. · DOI · Paper page
- Amanda Askell et al. A General Language Assistant as a Laboratory for Alignment. 2021. arXiv: 2112.00861 [cs.CL]. · arXiv
- Ian Tenney et al. The Language Interpretability Tool: Extensible, Interactive Visualizations and Analysis for NLP Models. 2020. arXiv: 2008.05122 [cs.CL]. · arXiv
- Shoaib Ahmed Siddiqui et al. Metadata Archaeology: Unearthing Data Subsets by Leveraging Training Dynamics. 2022. arXiv: 2209.10015 [cs.LG]. · arXiv
- Toby Shevlane and Allan Dafoe. The Offense-Defense Balance of Scientific Knowledge: Does Publishing AI Research Reduce Misuse? 2020. arXiv: 2001.00463 [cs.CY]. · arXiv
- OECD. OECD Framework for the Classification of AI systems. Feb. 2022. DOI: 10.1787/cb6d9eca- en. · DOI
- Irene Solaiman et al. Evaluating the Social Impact of Generative AI Systems in Systems and Society. 2023. arXiv: 2306.05949 [cs.CY]. · arXiv
- Geoffrey Irving, Paul Christiano, and Dario Amodei. AI safety via debate. 2018. arXiv: 1805.00899 [stat.ML]. · arXiv
- Elisabeth Keller and Gregory A. Gehlmann. "Introductory comment: a historical introduction to the Securities Act of 1933 and the Securities Exchange Act of 1934". In: Ohio State Law Journal 49 (1988), pp. 329-352.
- Inioluwa Deborah Raji and Joy Buolamwini. "Actionable Auditing". In: Proceedings of the 2019 AAAI/ACM Conference on AI, Ethics, and Society. ACM, Jan. 2019. DOI: 10 . 1145 / 3306618 . 3314244. · DOI · Paper page
- Jakob Mökander et al. "Ethics-Based Auditing of Automated Decision-Making Systems: Nature, Scope, and Limitations". In: Science and Engineering Ethics 27.4 (July 2021). DOI: 10.1007/ s11948-021-00319-4. · DOI
- Gregory Falco et al. "Governing AI safety through independent audits". In: Nature Machine Intelli- gence 3.7 (July 2021), pp. 566-571. DOI: 10.1038/s42256-021-00370-7. · DOI · Paper page
- Inioluwa Deborah Raji et al. "Outsider Oversight: Designing a Third Party Audit Ecosystem for AI Governance". In: Proceedings of the 2022 AAAI/ACM Conference on AI, Ethics, and Society. ACM, July 2022. DOI: 10.1145/3514094.3534181. · DOI · Paper page
- Sasha Costanza-Chock, Inioluwa Deborah Raji, and Joy Buolamwini. "Who Audits the Auditors? Recommendations from a field scan of the algorithmic auditing ecosystem". In: 2022 ACM Conference on Fairness, Accountability, and Transparency. ACM, June 2022. DOI: 10.1145/3531146.3533213. · DOI · Paper page
- Daniel M. Ziegler et al. Fine-Tuning Language Models from Human Preferences. 2020. arXiv: 1909.08593 [cs.CL]. · arXiv
- Jesse Dodge et al. Fine-Tuning Pretrained Language Models: Weight Initializations, Data Orders, and Early Stopping. 2020. arXiv: 2002.06305 [cs.CL]. · arXiv
- Pengfei Liu et al. Pre-train, Prompt, and Predict: A Systematic Survey of Prompting Methods in Natural Language Processing. 2021. arXiv: 2107.13586 [cs.CL]. · arXiv
- Xiang Lisa Li and Percy Liang. Prefix-Tuning: Optimizing Continuous Prompts for Generation. 2021. arXiv: 2101.00190 [cs.CL]. · arXiv
- Eric Wallace et al. Universal Adversarial Triggers for Attacking and Analyzing NLP. 2021. arXiv: 1908.07125 [cs.CL]. · arXiv
- Jonas Schuett. AGI labs need an internal audit function. 2023. arXiv: 2305.17038 [cs.CY]. · arXiv
- Richard Worthington. "The Social Control of Technology". In: American Political Science Review 76.1 (Mar. 1982), pp. 134-135. DOI: 10.2307/1960465. · DOI
- Competition and Markets Authority. CMA launches initial review of artificial intelligence models. May 4, 2023. URL: https : / / www . gov . uk / government / news / cma -launches -initial - review-of-artificial-intelligence-models.
- Jonas Schuett. "Defining the scope of AI regulations". In: Law, Innovation and Technology 15.1 (Jan. 2023), pp. 60-82. DOI: 10.1080/17579961.2023.2184135. · DOI
- Robert Baldwin, Martin Cave, and Martin Lodge. Understanding Regulation. Theory, Strategy, and Practice. Oxford: Oxford University Press, 2011. 568 pp. ISBN: 9780199576098.
- Louis Kaplow. "Rules versus Standards: An Economic Analysis". In: Duke Law Journal 42.3 (Dec. 1992), pp. 557-629.
- Danny Hernandez and Tom B. Brown. Measuring the Algorithmic Efficiency of Neural Networks. 2020. arXiv: 2005.04305 [cs.LG]. · arXiv
- Jaime Sevilla et al. Compute Trends Across Three Eras of Machine Learning. 2022. arXiv: 2202. 05924 [cs.LG].
- Ben Sorscher et al. Beyond neural scaling laws: beating power law scaling via data pruning. 2023. arXiv: 2206.14486 [cs.LG]. · arXiv
- Deep Ganguli et al. "Predictability and Surprise in Large Generative Models". In: 2022 ACM Conference on Fairness, Accountability, and Transparency. ACM, June 2022. DOI: 10 . 1145 / 3531146.3533229. URL: https://doi.org/10.1145%5C%2F3531146.3533229. · DOI · Paper page
Cited by
Sorted by citations
Generative AI for economic research: use cases and implications for economists
Korinek, A. (2023) · Journal of Economic Literature · doi:10.1257/jel.20231736 · Cited by 293 · see citing works
Self-citationMapping the ethics of generative AI: a comprehensive scoping review
Hagendorff, T. (2024) · Minds and Machines · doi:10.1007/s11023-024-09694-w · Cited by 141 · see citing works
Open Problems and Fundamental Limitations of Reinforcement Learning from Human Feedback
Casper, S., Davies, X., Shi, C., Gilbert, T. K., Scheurer, J., Rando, J., Freedman, R., Korbak, T., Lindner, D., Freire, P., et al. (2023) · arXiv · doi:10.48550/arxiv.2307.15217 · Cited by 101 · see citing works
“This suggests a role for governance in promoting a healthier environment for safe AI research, development, and deployment [Dafoe, 2018, Perry and Uuk, 2019, Falco et al., 2021, Cihon, 2019, Anderljung et al., 2023].”
BackgroundChan, A., Ezell, C., Kaufmann, M., Wei, K., Hammond, L., Bradley, H., Bluemke, E., Rajkumar, N., Krueger, D., Kolt, N., et al. (2024) · The 2024 ACM Conference on Fairness, Accountability, and Transparency · doi:10.1145/3630106.3658948 · Cited by 84 · see citing works
Self-citationThe Emerged Security and Privacy of LLM Agent: A Survey with Case Studies
He, F., Zhu, T., Ye, D., Liu, B., Zhou, W., & Yu, P. S. (2026) · ACM Computing Surveys · doi:10.1145/3773080 · Cited by 58 · see citing works
Dahlgren Lindström, A., Methnani, L., Krause, L., Ericson, P., de Rituerto de Troya, Í. M., Coelho Mollo, D., & Dobbe, R. (2025) · Ethics and Information Technology · doi:10.1007/s10676-025-09837-2 · Cited by 54 · see citing works
Seger, E., Dreksler, N., Moulange, R., Dardaman, E., Schuett, J., Wei, K., Winter, C., Arnold, M., Ó hÉigeartaigh, S., Korinek, A., et al. (2023) · doi:10.2139/ssrn.4596436 · Cited by 31 · see citing works
Self-citationShould Users Trust Advanced AI Assistants? Justified Trust As a Function of Competence and Alignment
Manzini, A., Keeling, G., Marchal, N., McKee, K. R., Rieser, V., & Gabriel, I. (2024) · The 2024 ACM Conference on Fairness, Accountability, and Transparency · doi:10.1145/3630106.3658964 · Cited by 28 · see citing works
Computing Power and the Governance of Artificial Intelligence
Sastry, G., Heim, L., Belfield, H., Anderljung, M., Brundage, M., Hazell, J., O'Keefe, C., Hadfield, G. K., Ngo, R., Pilz, K., et al. (2024) · arXiv · doi:10.48550/arxiv.2402.08797 · Cited by 26 · see citing works
Self-citationOn the Societal Impact of Open Foundation Models
Kapoor, S., Bommasani, R., Klyman, K., Longpre, S., Ramaswami, A., Cihon, P., Hopkins, A., Bankston, K., Biderman, S., Bogen, M., et al. (2024) · arXiv · doi:10.48550/arxiv.2403.07918 · Cited by 11 · see citing works
“In particular, as models become more capable (Anderljung et al., 2023), these capabilities are likely to present new beneficial market opportunities but also greater misuse potential (e.g. more persuasive and targeted disinformation).”
Multi-Agent Risks from Advanced AI
Hammond, L., Chan, A., Clifton, J., Hoelscher-Obermaier, J., Khan, A., McLean, E., Smith, C., Barfuss, W., Foerster, J., Gavenčiak, T., et al. (2025) · arXiv · doi:10.48550/arxiv.2502.14143 · Cited by 10 · see citing works
Self-citationRisks from Language Models for Automated Mental Healthcare: Ethics and Structure for Implementation
Grabb, D., Lamparth, M., & Vasan, N. (2024) · arXiv · doi:10.48550/arxiv.2406.11852 · Cited by 39 · see citing works
Omogiate, P. M. (2023) · International Journal of Science and Research Archive · doi:10.30574/ijsra.2023.10.2.1099 · Cited by 3 · see citing works
- Authors
- Anderljung, M., Barnhart, J., Korinek, A., Leung, J., O'Keefe, C., Whittlestone, J., Avin, S., Brundage, M., Bullock, J., Cass-Beggs, D., Chang, B., Collins, T., Fist, T., Hadfield, G., Hayes, A., Ho, L., Hooker, S., Horvitz, E., Kolt, N., Schuett, J., Shavit, Y., Siddarth, D., Trager, R., & Wolf, K.
- Affiliations
- Center for a New American Security (US)
- Google DeepMind (United Kingdom) (GB)
- Brookings Institution (US)
- OpenAI (United States) (US)
- University of Cambridge (GB)
- University of Washington (US)
- Centre for International Governance Innovation (CA)
- Harvard University (US)
- Coherent (United States) (US)
- Microsoft (United States) (US)
- University of Toronto (CA)
- The Collective Intelligence Project (US)
- University of California, Los Angeles (US)
- ORCID
- Venue
- arXiv
- Publisher
- arXiv
- Published
- 2023
- ISSN
- 2331-8422 (ISSN-L)
- arXiv
- 2307.03718
- OpenAlex
- W4383860829
- Cited by
- 77
- References
- 4
- Citations by year
- 2026: 9 · 2025: 21 · 2024: 27 · 2023: 20
- Type
- posted content
- Language
- en
- Open access
- green
- arxiv.org
- Licence
- Locations
- arXiv (Cornell University) (submittedVersion, cc-by)
- arXiv (Cornell University) (cc-by)
- Topics
- Social Sciences › Safety Research › Ethics and Social Impacts of AI
- Social Sciences › Law › Digitalization, Law, and Regulation
- Physical Sciences › Computer Science › Artificial Intelligence › Law, AI, and Intellectual Property
- Keywords
- frontier AI, AI regulation, foundation models, public safety, AI risk management, safety standards, AI licensing, post-deployment monitoring, industry self-regulation, regulatory compliance, AI misuse prevention
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review