CoChat
Sign Up
PreprintCited by 30Ethics and Social Impacts of AIPsychiatry, Mental Health, NeuroscienceNatural Language Processing Techniques

Evaluating Language-Model Agents on Realistic Autonomous Tasks

Open access
Kinniment, Megan, Sato, Lucas Jun Koba, Du, Haoxing, Goodrich, Brian, Hasin, Max, Chan, Lawrence, Miles, Luke Harold, Lin, Tao R. +5 more·2023·arXiv
DOI 10.48550/arxiv.2312.11671arXiv 2312.11671
Open this paper in CoChat — free accountOpen PDF

Abstract

In this report, we explore the ability of language model agents to acquire resources, create copies of themselves, and adapt to novel challenges they encounter in the wild. We refer to this cluster of capabilities as "autonomous replication and adaptation" or ARA. We believe that systems capable of ARA could have wide-reaching and hard-to-anticipate consequences, and that measuring and forecasting ARA may be useful for informing measures around security, monitoring, and alignment. Additionally, once a system is capable of ARA, placing bounds on a system's capabilities may become significantly more difficult. We construct four simple example agents that combine language models with tools that allow them to take actions in the world. We then evaluate these agents on 12 tasks relevant to ARA. We find that these language model agents can only complete the easiest tasks from this list, although they make some progress on the more challenging tasks. Unfortunately, these evaluations are not adequate to rule out the possibility that near-future agents will be capable of ARA. In particular, we do not think that these evaluations provide good assurance that the ``next generation'' of language models (e.g. 100x effective compute scaleup on existing models) will not yield agents capable of ARA, unless intermediate evaluations are performed during pretraining. Relatedly, we expect that fine-tuning of the existing models could produce substantially more competent agents, even if the fine-tuning is not directly targeted at ARA.

Integrity signals

Registry

DataCite · 10.48550/arxiv.2312.11671

Cites

0 citation errors · 0 not checkable

Statistics

Recomputing p-values needs the paper’s full text.

Claims the paper makes

We couldn’t retrieve this paper’s full text, so its claims and self-check weren’t run. The registry and citation checks still apply.

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

  • Model evaluations form a crucial part of contemporary AI governance practices, providing a better understanding of a system's potentially dangerous capabilities and dispositions and informing regulatory efforts to restrict the deployment of certain systems in certain domains or increase regulatory scrutiny.

    “Model evaluations form a crucial part of contemporary AI governance practices, providing a better understanding of a system's potentially dangerous capabilities and dispositions (Chen et al., 2024c; Hardy et al., 2024; Kinniment et al., 2023; Reuel et al., 2024a; Shevlane et al., 2023) and informing regulatory efforts to restrict the deployment of certain systems in certain domains or increase”

    From Multi-Agent Risks from Advanced AI (2025) · cites this paper as Kinniment et al., 2023

  • Large language models can strategically deceive third parties even when not instructed to do so.

    “as well as strategically deceiving third parties even when not instructed to do so (Kinniment et al., 2023; ARCevals, 2023; Pan et al., 2023; van der Weij et al., 2023).”

    From Large Language Models can Strategically Deceive their Users when Put Under Pressure (2023) · cites this paper as Kinniment et al., 2023

Cites

The publisher hasn’t deposited this paper’s reference list.

Cited by

Sorted by citations

Related

Authors
Kinniment, M., Sato, L. J. K., Du, H., Goodrich, B., Hasin, M., Chan, L., Miles, L. H., Lin, T. R., Wijk, H., Burget, J., Ho, A., Barnes, E., & Christiano, P.
Affiliations
Align Technology (United States) (US)
ORCID
Venue
arXiv
Publisher
arXiv
Published
2023
ISSN
2331-8422 (ISSN-L)
DOI
10.48550/arxiv.2312.11671
arXiv
2312.11671
OpenAlex
W4390041563
Cited by
15
References
0
Citations by year
2026: 3 · 2025: 5 · 2024: 6 · 2023: 1
Type
posted content
Language
en
Open access
Licence
arxiv.org/licenses/nonexclusive-distrib/1.0/
Locations
  • arXiv (Cornell University) (submittedVersion)
  • arXiv (Cornell University)
Topics
  • Social Sciences › Safety Research › Ethics and Social Impacts of AI
  • Physical Sciences › Computer Science › Artificial Intelligence › Psychiatry, Mental Health, Neuroscience
  • Physical Sciences › Computer Science › Artificial Intelligence › Natural Language Processing Techniques
Keywords
language model agents, autonomous replication, self-replication, tool use, resource acquisition, AI alignment, AI security, AI monitoring, fine-tuning

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review