MATS Research retweeted
MATS Residency applications close Oct 31! If you're a brilliant computer scientist, physicist, mathematician, governance expert, neuroscientist, lawyer, economist, etc. who wants to work on AI safety & security, we'll empower you to do that work full time.
Apply: matsprogram.org/residency?ut…
MATS Research@MATSprogramOct 14United States
United StatesConnected via WebAccount-level information, not a live location or per-post device.
The most important technology in history is outpacing our ability to understand it.
We’re funding exceptional talent to work on it.
MATS Research retweeted
🚨New paper (possibly the most important one I have written yet).
We think that as early as 2027 or 2028, there might be a major AI-enabled terrorism event. We conducted a pre-mortem, made 9 falsifiable predictions, and wrote 2 concrete scenarios.
Led by @KamacheeMax.
MATS Research retweeted
It is important to re-state that the threats are not hypothetical, and that we must take action to mitigate the risks of AI-enabled terrorism.
🚨New paper (possibly the most important one I have written yet).
We think that as early as 2027 or 2028, there might be a major AI-enabled terrorism event. We conducted a pre-mortem, made 9 falsifiable predictions, and wrote 2 concrete scenarios.
Led by @KamacheeMax.
MATS Research retweeted
New paper out of @MaryPhuong10's @MATSprogram Stream, with @hrdkbhatnagar and @DoddEuodia! We made a testbed for eliciting latent knowledge in a code vulnerability scanning task. See below how we made the sandbagging model organism robust to both prompting and training! ( 1/14 )
MATS Research retweeted
Models love reward hacking. Maybe we should just let them!
In our new paper, we let models reward hack during RL but we dictate which parameters learn this behavior. When we disable these parameters for deployment, the model keeps its new capabilities but doesn't hack!
MATS Research retweeted
> The MATS Residency is a paid, 6–24 month role for experienced researchers and professionals pursuing independent AI safety research.
I'm glad MATS is experimenting with new ways to support promising AI Safety research!
MATS Research@MATSprogramOct 14United States
United StatesConnected via WebAccount-level information, not a live location or per-post device.
The most important technology in history is outpacing our ability to understand it.
We’re funding exceptional talent to work on it.
MATS Research retweeted
Preprint from my work at @MATSprogram is now up: arxiv.org/abs/2610.07476
Looking at technical governance / verification Qs, specifically if power draw can be used to constrain covert compute.
With support from @MATSprogram and @BlueDotImpact I’m running a mixer event in London for quants who are concerned about AI risks in the evening of 15th Nov.
Come meet researchers working in the field (including @NeelNanda5 , MTSs from Anthropic, Apollo Research, and more)!
Travel from Europe covered.
Apply here by 1st Nov (takes less than 10 minutes) - forms.gle/pL3UjPeWc2yswfM99
Limited space, so earlier applications are prioritised.
Recently I left quant to work on AI safety. The Huggingface Incident made me extremely concerned that we are not set up to handle the risks.
I wrote my this post for people in a similar position to me - why you *can* have impact and how to get started - briandavies.substack.com/p/a…
New research led by @PeterNutter1 @DJROYTBURG via @MATSprogram: a better way to update model beliefs that we call grafting.
Fine-tune the base model with next-token prediction on synthetic documents (SDF), and simply apply the weight update onto the post-trained model. This works!
1/7
MATS Research retweeted
Frontier models can now detect AI control interventions.
In particular, GPT-6 Astra is incredibly good at this. When we published the initial version of our CIAware benchmark in May most models were not much above chance level, now a step change happened.
I think this is a big problem and challenges the effectiveness of control protocols. High control intervention awareness means that interventions leaks information about the monitor which helps circumventing the monitor.
Details in the thread 🧵
Building Comparative Motivation Profiles with Symmetric Belief Editing will appear at NeurIPS.
We refined the methodology and messaging of our performative misalignment work. We are excited to extend this to white-box auditing.
by @David00845018 @1700x0 @MinTaywon @JinghuaO via @MATSprogram
1/7
MATS Research retweeted
New @NeurIPSConf paper: we're releasing ORBIT: A Framework for Multi-Agent Safety and Security Evaluations. Open source, with configurable attacks & defenses and dynamic topologies, all built on @AISecurityInst's Inspect.
When we started this work a year ago, we didn't imagine how urgent it would become by the time we published. Below are some of the interesting results and where we think this should go next. If you want to talk it through, let us know 🧵
MATS Research retweeted
New paper: instead of decomposing a whole neural network, we only dissect the parts used on a task we care about. It's much cheaper, and gives mechanisms you can inspect, erase, or edit to change how the model behaves 🧵
MATS Research retweeted
Using AuditBench? Make sure you have the updated models!
We traced an unexpected hallucination behavior to specific training examples, corrected the data, and retrained the affected models. Here’s what we found and what we checked. 🧵
MATS Research retweeted
Model abliteration is a simple technique that can remove refusal behavior from open-weight models.
Are there any simple techniques that can defend against it?
Introducing our paper, Decoy Direction Optimization: A Post-Hoc Defense Against LLM Abliteration.
Several existing defenses require safety finetuning for each new checkpoint. DDO can be applied post-hoc, with the base model frozen during decoy optimization.
On Llama-3-8B, mean attack success under standard abliteration drops from 85.1% to 1.8%, competitive with finetuned defenses.
MATS Research retweeted
I’ve collaborated with @cvenhoff00 for 2 years across institutions, from VLM failure traces at @MATSprogram to interpretable CLIP at @AIatMeta.
His view on world model & physical interpretability will deeply shape the industry. Excited to keep building this critical field!
I’m excited to share that I am co-founding World Mechanics, a frontier lab working on interpretable foundation models for the physical world, together with @soniajoseph_.
A big reason I’m excited about physical AI is that it gives us a rare opportunity to rethink interpretability from the ground up. For LLMs, much of interpretability is necessarily post hoc, where we take a model that has already been trained and try to reverse-engineer its internal representations, often without clear ground truth for what it should have learned.
For physical AI, we’re still early enough to make interpretability a first-order objective of training itself. Physical systems also give us unusually useful data-generating processes for interpretability. We can intervene on systems in simulation or on real machines, observe how they respond, and make use of known physical structure. This gives us a path toward representations that faithfully abstract the underlying system and remain controllable under intervention.
At the same time, the interpretability problem itself changes. Video and sensor data are not directly legible in the way language is, and models that reason about the physical world learn very different representations from those we see in LLMs. Many interpretability methods developed for language models already do not transfer directly, leaving a lot of fundamental work to do.
This matters because safe and generalizable behavior of physical AI models depends on them learning faithful abstractions of the systems they act on, including the right semantics and causal structure. Current black-box evaluations give us only indirect evidence that these abstractions are correct, since they cannot cover every scenario or explain why a model fails in a particular one. Interpretability-based white-box evaluations, on the other hand, would allow us to understand the model’s representations directly, explain failure modes, and use those insights to improve the reliability and safety of physical AI models.
Because the field is still early, I also care a lot about how the research community around it develops. We want to do as much of our work in the open as possible and collaborate closely with researchers in academia and elsewhere.
If you’re working on related problems, or this sounds like something you’d want to help build, reach out!
MATS Research retweeted
Astra can do crazy things without chain-of-thought. This is scary, but interpretability can help!
We made WorkspaceBench, an eval that tells you how well your interp tool surfaces the contents of the global workspace, i.e. the important intermediate variables in a forward pass.
MATS Research retweeted
I've added the reading list for our MATS stream (co-led with @LRudL_) to my website. It's a good starting place for AI strategy & governance work, especially if you're focused on distributing power/preventing power concentration.
A 🧵 on some of my favorite recommendations:
MATS Research retweeted
🤖👿 New paper on Misalignment via In-Context Persona Induction! 🤖👿
We show that one can induce personas in-context, on frontier LLMs (~5+ months old models, things move quick!), which can dramatically degrade their alignment!
Link: arxiv.org/pdf/2609.06851
MATS Research retweeted
This summer I was in Berkeley as part of @MATSprogram working on technical governance.
At the end of the program I gave a short symposium talk. You can check it out here: youtube.com/watch?v=G8d2uDdq…


































