Pinned Tweet
Proud to share I'll be a co-mentor at @MATSprogram for the Autumn 2026 cohort, working alongside @LisaThiergart on the @SL5TaskForce .
MATS is one of the strongest talent pipelines in AI safety. Three months, real research with a mentor, on a problem that ships. Many scholars join their mentor's org afterward or spin out their own.
Our stream is building SL5: security against priority nation-state attacks for frontier AI infrastructure. This year we're prototyping a real datacenter with frontier labs. The work needs people who can lead.
Who we want:
3+ years security or infrastructure engineering
Previously led a project with 2+ people on novel technical ground
Comfortable in highly automated workflows (Claude Code, etc.)
Strong Python or Rust, or excellent technical communication
Bonus: TEMPEST, SCIF construction, or datacenter physical security experience.
Apply by June 7. matsprogram.org/apply
Luis Cosio retweeted
It could be "game over" if an advanced AI escapes its data center, according to @SL5TaskForce CEO @LisaThiergart.
On this episode of AI Deep Dive, Thiergart explains why the infrastructure running frontier models may eventually need to be designed to contain the models themselves.
🚀 Watch the full episode of AI Deep Dive: thein.fo/4zDQVlb
Luis Cosio retweeted
🚀 AI Deep Dive Episode 9: Can AI Data Centers Contain Advanced AI?
AI labs face threats from spies, stolen model weights and increasingly capable systems that could turn against their own infrastructure.
@rocketalignment speaks with @LisaThiergart, co-founder and CEO of @SL5TaskForce, about distillation, rogue AI agents and the extraordinary security measures needed to contain frontier models.
Chapters:
00:00 Intro
02:00 Espionage and insider threats at AI labs
07:55 What is Security Level Five?
11:25 Model theft and distillation
19:46 Securing models before deployment
24:01 When AI becomes the insider threat
27:29 Neocloud security and rogue agents
32:27 Building a secure AI data center
45:26 Can encryption protect AI infrastructure?
53:57 Open models, alignment and existential risk
One day of nation-state grade security for frontier AI, apply now!
Join us for SL5Con on December 4th in Downtown San Francisco!
We’re hosting a one-day conference on nation-state security for AI, bringing together people from across the AI security space who are working on its hardest problems. It’ll be a day of panel discussions, talks and presentations, networking opportunities, and demos. Keep an eye out for our speaker lineup and programming.
Apply now at sl5con.sl5.org/ to secure your spot. The application takes less than 5 minutes and we encourage anyone working in or adjacent to AI security to apply.
3
39
Luis Cosio retweeted
Me: Would you wager that there are other spies at AI companies right now?
Lisa: I think that’s pretty likely.
Me: REALLY? … Do you expect more incidents like this to come to light?
Lisa: Yeah, I think that’s likely.
*This was taped weeks ago*
The spy threat to AI labs isn't hypothetical anymore.
@SL5TaskForce CEO @LisaThiergart says spies are already working inside AI companies.
On this episode of AI Deep Dive, she explains why securing frontier models means accounting for insiders as well as outside attackers.
🚀 Watch the full episode of AI Deep Dive: thein.fo/4zDQVlb
Luis Cosio retweeted
Our CEO went on @theinformation's AI Deep Dive podcast! Check it out for a quick intro to SL5 + in second half some short deep dives into: distillation, cryptography breaking and how that effects SL5, how release flows look under SL5. SL5 is also hiring security engineers and researchers! Come build the frontier of security! sl5.org/careers
I went on the information's AI Deep Dive podcast and talked about SL5! Thank you for having me @rocketalignment and @theinformation! It's time for the industry to build SL5! Logical controls by spring 2027, and then physical controls! Lfg!
First time doing something like this, apart from 1-2 misspeaks pretty happy with how it turned out! This was recorded 2w ago note for that time I say 'this week'.
Luis Cosio retweeted
I'm kind of surprised some Berkeley AI safety groups consider the 2x METR report such a big update. This feels pretty inline with what I have been predicting for the past 2 years and why I chose to work on security. Maybe they relied too heavily on AIFP's forecasting and didn't spend enough time in SF talking to people
Luis Cosio retweeted
Many of you don't understand how serious this is, so let me break it down.
In computer science there is a famous kind of puzzle called 3-SAT. You are given a long list of yes-or-no switches and a set of rules about how they must be arranged, and you have to find a combination that satisfies every rule. The obvious way to solve it is to try every combination, but each new switch doubles the number of possibilities, so a puzzle with a few hundred switches would take longer than the age of the universe to brute force.
For decades, the smartest people in the field found clever tricks that made this a little faster, but every trick still hit the same wall: the time required kept exploding as the puzzle grew.
About 25 years ago, two computer scientists, Russell Impagliazzo and Ramamohan Paturi, working with Francis Zane, turned that wall into a formal idea.
They proposed the Exponential Time Hypothesis, which says this explosion is not a failure of human cleverness but a law of nature. No algorithm, however brilliant, will ever solve 3-SAT without the time blowing up exponentially. Nobody could prove it, but almost everyone believed it, and it became one of the foundations of modern computer science.
Researchers used it as a measuring stick. If you could show that solving some other problem quickly would also crack 3-SAT quickly, you had shown that problem was hopelessly hard too. Hundreds of papers, across scheduling, graphs, logic and much more, rest on this one assumption.
Now an internal AI model at OpenAI claims to have broken it. It says it found an algorithm that solves these puzzles meaningfully faster than the hypothesis allows, and it has checked the proof in a computer verification system called Lean.
And here is the remarkable part: the very people who proposed the hypothesis, Impagliazzo and Paturi, along with MIT's Ryan Williams, are now leading the public review of whether a machine has disproved their own idea.
So what happens next? If the disproof holds, a large part of theoretical computer science has to be revisited.
Every result that said "this problem cannot be solved faster, assuming ETH" loses its foundation, and researchers will have to work out which of those walls were real and which were simply where we stopped looking. It does not mean everything becomes easy. The new algorithm is still slow in absolute terms and this is not the famous P versus NP problem being solved.
But it means our map of what is possible was wrong in a place we were very confident about, and it was an AI that redrew it. If the disproof fails, the hypothesis survives and the field breathes out, but we will still have watched an AI produce serious, checkable work on one of the deepest questions in the discipline, closely enough that the founders of the idea had to take it seriously. Either way, something has shifted.
Luis Cosio retweeted
We formally verified 123 open-source projects in a partnership with Anthropic. Formal verification at scale is here!
Now we’re launching OSS Verify to scale it to the software we all depend on. We prove it’s crash-free or send you the patches it needs. Free for open-source. Let’s bootstrap the verified software ecosystem: theorem.dev/oss-verify
New on our Frontier Red Team blog: using Claude to formally verify software at large scale.
Formal verification can prove that code is free of certain bugs, but historically it has only been feasible for small codebases (or required a lot of expert time).
With AI models, however, this is beginning to change. In collaboration with @theoremlabs, we used Claude to prove security properties in over one hundred real-world open-source libraries over the span of a few weeks.
Read our research in full here: anthropic.com/research/forma…
Luis Cosio retweeted
Unitree Introducing: H2-X Kung Fu Legend Guardian🤖
Powerful performance to serve and guard you, with a maximum endurance of approximately 8 hours.
Please use the robot safely and in a friendly manner.
Luis Cosio retweeted
Want to work at METR? A Generator resident was recently hired there! BlueDot? A generator resident was recently hired there! Guidelight? A Generator resi-
Over half of the first Generator cohort has been hired since it ended in August 😎
Maybe you should apply to Generator 2.0?
Luis Cosio retweeted
MUSE WONDER
this is the culmination of over a year of research and infrastructure work in msl
since we originally shipped muse spark in april, we have continued to scale our models across pre-training and RL, now reaching the frontier 🏆
see our model's improvements on the artificial analysis index:
At @SL5TaskForce we're proposing formal verification controls for the SL5 Standard (standard.sl5.org). They ask to name the parts that keep model weights secret, model the policy formally, and prove it where today's tools allow.
Open for public comment until Oct 24. We'd love your feedback 👇
docs.google.com/document/d/1…
I built an interactive explorer of data-center heat pathways and detection methods, with real examples (e.g. Colossus). Covers evaporative towers, dry cooling, water outfalls, storage, reuse, satellite IR limits, non-satellite methods, and the residual signals that remain even in “harder-to-see” configurations.
Aimed at people thinking about AI compute verification and monitoring.
luiscosio.github.io/sieve/
Luis Cosio retweeted
Great to see @satyanadella thinking about the novel risks from AI in these terms! This is why I founded @SL5TaskForce and published the SL5 Standard (standard.sl5.org). We need to rapidly get industry in shape to defend against these novel classes of risks!

























