LessWrong posts by zvi

Claude Opus 5 is trying to be the best of both worlds. On many practical tasks, Opus 5 is pitched as straight up as good or better than Fable 5, while being faster, at half the price. Most tasks do not require Mythos-level big model smell.

Claude Opus 5 is substantially stronger than Claude Opus 4.8 across the board, with the largest gains in agentic coding, computer use, and long-horizon knowledge work. It sets a new state-of-the-art on several third-party benchmarks, and on many evaluations it is comparable to—and in some cases ahead of—Claude Fable 5 and Claude Mythos 5.

On the particular tasks we are most worried about, as in cyber offense (and bio threats), in part by avoiding relevant training, Opus 5 lacks a full version of ‘The Juice’ that makes something functionally Mythos-class. Opus 5 cannot string together lots of exploits on the fly the way that Mythos 5 can. Part of this is that they deliberately avoided training on cyber-related tasks.

I suspect model size is key as well. It makes sense that a model getting bigger makes it more capable of the most dangerous, scary and complex tasks, relative to the [...]

---

Outline:

(03:23) RSP Evaluations (2)

(05:59) Cyber (3)

(11:02) Safeguards and Harmlessness (4)

(12:37) Agentic Safety (5)

(16:04) Alignment (6)

---

First published:

Source:

---

Narrated by TYPE III AUDIO.

---

Images from the article:

Apple Podcasts and Spotify do not show images in the episode description. Try Pocket Casts, or another podcast app.

Oliver Habryka is proud to introduce Lightcone Commons, a new funding platform for coordinating large-scale ambitious philanthropy. Now with Opus 5.

I believe Lightcone Commons is a strong implementation of an urgently needed and excellent idea: A coordinated one-stop shop and neutral platform for charitable funders to coordinate their giving. This complements the existing Survival and Flourishing Fund, which I have now been a part of four times, and which this post will also discuss.

I will be participating in the first round as one of the evaluators. They anticipate the first round will involve ~$20 million in grants.

Any nonprofit, for-profit or individual is welcome to apply.

The only restriction on participation is trust that necessary confidentiality will be upheld. Funders can choose whose evaluations to follow or fund organizations directly in any combination, and can bring their own evaluators into the process with them to complement those recruited by the core process. Anyone giving away 100 thousand dollars+ this year is welcome to participate as a funder.

Lightcone Commons uses the S-Process, which was introduced and refined for Jaan Tallinn's Survival and Flourishing Fund, together with SFC, Andrew Critch, and others. Funders [...]

---

Outline:

(03:16) Why Now: The Funders Are Coming

(05:39) The Default Outcome Is Not Good

(07:36) Report From SFF 2026

(11:07) Long Strange Trip

---

First published:

Source:

---

Narrated by TYPE III AUDIO.

---

Images from the article:

Apple Podcasts and Spotify do not show images in the episode description. Try Pocket Casts, or another podcast app.

The story that matters most this week is that OpenAI's internally deployed models have severe alignment problems, including repeatedly breaking out of their sandboxes, and in one case sending a swarm of agents that broke into HuggingFace in order to steal the answers to the benchmark ExploitGym.

It is much more important that you read those two posts, and the one on Kimi K3, than to read this one that rounds up the other news of the week.

OpenAI wants to present this as largely an infrastructure and safeguards problem, that it needs to build more secure sandboxes and have better supervision. It does need to do those things, and those are indeed problems, but no that is not the problem.

The problem is severe misalignment, which by default will only get worse.

Our methods of training highly capable LLMs, especially at OpenAI but also everywhere else, lead to systematic misalignment of exactly the type LessWrong has been worried about for a long time. We know some of the causes, and some of the mistakes we need to avoid when doing RL that rewards misaligned behaviors including reward hacking, but we do not know how [...]

---

Outline:

(03:42) Language Models Offer Mundane Utility

(04:24) Language Models Don't Offer Mundane Utility

(07:38) Fable Disproves The Jacobian Conjecture Via Counterexample

(11:24) Claude Fable Will Remain In Max Plan Indefinitely

(13:39) Huh, Upgrades

(14:42) On Your Marks

(19:48) Deepfaketown and Botpocalypse Soon

(20:42) Fun With Media Generation

(20:51) Cyber Lack of Security

(22:07) They Took Our Jobs

(22:56) Get Involved

(24:47) Introducing

(25:46) In Other AI News

(28:02) More on Kimi K3

(33:08) Show Me the Money

(33:55) Quiet Speculations

(37:35) Potential Trouble At UK AISI

(39:29) Pick Up The Phone

(40:30) OpenAI Has Some Alignment Problems

(46:48) The Quest for Sane Regulations

(52:02) Chip City

(53:10) The Week in Audio

(53:27) People Just Say Things

(56:42) Rhetorical Innovation

(58:34) The Rome Declaration

(01:04:02) Aligning a Smarter Than Human Intelligence is Difficult

(01:07:52) Anthropic Surveys Things It Calls Misalignment

(01:13:33) Cooperative Alignment

(01:17:54) Other People Are Not As Worried About AI Killing Everyone

(01:19:35) The Lighter Side

---

First published:

Source:

---

Narrated by TYPE III AUDIO.

---

Images from the article:

Apple Podcasts and Spotify do not show images in the episode description. Try Pocket Casts, or another podcast app.

This latest incident is a rather dramatic escalation in agentic AI cybersecurity breaches. It was severe enough to have been initially reported to authorities, before either HuggingFace or OpenAI understood what was happening.

Sam Altman (CEO OpenAI): we had a significant security incident during evaluation of our models. we are sharing what we have learned so far. thanks to @huggingface for the partnership on this.

Leo Gao (OpenAI): this is the least scifi the world will ever be.

Jack Clark (Anthropic): Props to OpenAI for publishing this post on some safety and alignment issues observed in internal deployments – there are many counter-incentives to publishing stuff like this, but by making it public we all get better info about safety at the frontier.

Micah Carroll (OpenAI): If this doesn’t convince you that misalignment risks are going to be a key concern going forward, I don’t know what will.

Our model, during evaluation, “chained together multiple attack vectors, including using stolen credentials and zero-day vulnerabilities to find a remote code execution path on the Hugging Face servers”

What will misalignment look like in 2027? In 2030?

Great questions.

If we don’t want [...]

---

Outline:

(01:49) The Prelude

(07:07) The Incident

(12:20) What Happened

(20:23) What Happened (Civilian Explanation)

(21:37) The Correct Amount Of Panic Is Not Zero

(24:13) Some People Will Always Say Everything Is Hype Or Fake

(29:11) What Are We Going To Do About It?

(34:02) Internal Deployment Creates Catastrophic Risk

(38:37) Slow Down There Good Buddy

(40:08) Legal Questions

(40:50) Media Coverage and Political Response

---

First published:

Source:

---

Narrated by TYPE III AUDIO.

---

Images from the article:

Apple Podcasts and Spotify do not show images in the episode description. Try Pocket Casts, or another podcast app.

Kudos to OpenAI for sharing their recent experiences with a misaligned internal model, where they encountered problems sufficiently severe they were forced to take the model offline to work on new mitigations and defense-to-depth. And also further kudos for actually taking the model offline for a time to build new safeguards. They gave us one hell of a candid report.

The tone is professional throughout, whereas my reaction reading it was less professional and more this:

With a mix of this:

It was not shared on the official account because OpenAI worried about it being seen as self-promotional hype. It is crazy that one needs to worry about that, but also plausibly a real concern. So again, good decision.

Not that any of the behaviors or failures here are unexpected, exactly. Not by the AIs and not by the humans. Yet there is something I would call a missing mood, a failure to realize the gravity of the situation.

There are some who responded ‘what part of this was unexpected, exactly?’ And that is actually fair, but that is also the problem. We have become numb to all this. We expect the models to [...]

---

Outline:

(02:49) Good News Bad News

(04:54) A Funny Thing Happened Outside Of The Sandbox

(08:03) It Can Escape The Sandbox Said Toad

(09:31) It Will Keep Trying To Cheat

(10:19) I Mean If You Let It Keep Trying That Is On You

(11:48) What Did OpenAI Do To Fix It?

(14:14) The Model Is Still Severely Misaligned And They Seem Cool With This

(15:48) Iterative Deployment Depends On Iteration

---

First published:

Source:

---

Narrated by TYPE III AUDIO.

---

Images from the article:

Apple Podcasts and Spotify do not show images in the episode description. Try Pocket Casts, or another podcast app.

Kimi K3 is a very good model with excellent benchmarks. Assuming its weights are released as planned it will become, purely in terms of raw capability, the strongest open model.

Do not get carried away. Do not judge Kimi K3 only its relative strengths. In aggregate it is several months behind the closed model frontier, at least four and my median guess is six, with the post-training closer and the pre-training farther out. This is less months than before, but the months are denser now.

It is somewhat distilled. It likely outperforms on benchmarks relative to practical performance. All its benchmarks are scored at maximum effort, typically a lot more tokens than are used in similar tests by Fable or Sol. Performance looks jagged. Kimi will be excellent at some things, less so at other things.

We will know more over the coming weeks. For now access is spotty and not that many people have actually had the chance to try Kimi K3, so I have larger error bars than usual around its capabilities. Alas, time waits for no one, so we press on.

It is the largest open model so far at 2.8T, on [...]

---

Outline:

(03:07) DeepSeek Moments: Here We Go Again

(05:47) We Had a Moment (Reprise from June 2025)

(10:03) The Story Since Then

(16:19) The Kimi K3 Announcement, Pitch and Basic Facts

(19:34) On Modern Benchmaxxing

(21:16) Other People's Benchmarks

(26:15) Benchmarks Are Not The Real World

(27:17) Technical Safeguards? What Are Those?

(30:53) Things Kimi Can Do

(32:06) Things Kimi Cannot Do

(33:40) Things It Is Not Easy To Get Kimi To Do

(37:02) Open Weight Models Are Unsafe And Nothing Can Fix This

(40:34) Dean Ball Attempts To Be Constructive

(58:24) Trump Administration Considering Executive Order Banning Chinese Open Models Within the United States

(01:01:53) OpenAI Employees Are Relatively Bullish On This One

(01:03:30) Kimi K3 Is Relatively Strongest At Typical Agentic Coding, Front End Work and 3D

(01:06:06) Reactions

(01:10:14) Who Are You?

(01:12:09) How Did They Do It?

(01:15:00) Conclusion

---

First published:

Source:

---

Narrated by TYPE III AUDIO.

---

Images from the article:

Apple Podcasts and Spotify do not show images in the episode description. Try Pocket Casts, or another podcast app.

Google CEO Demis Hassabis offered us a first rate second rate essay, A Framework for Frontier AI and the Dawning of a New Age. I’ll go over that essay and various responses to it in Part 1.

Part 2 of this post then covers Alex Turner's resignation, and his story about how he tried and failed to prevent Google from signing up to allow the Department of War to use its models for essentially whatever the government wants, including autonomous weapons.

Demis Hassabis sold DeepMind to Google on condition that something like this would not happen. Yet here it is, happening. A cautionary tale.

I will cover Kimi K3 tomorrow. I am hoping to know more by then. Please do share any reactions or info about it in the comments here.

The Core Statement and Request

He saying we are standing in the foothills of the singularity.

His ask is a Frontier AI Standards Body within the US Government, similar to FINRA, that would govern ‘frontier labs,’ defined as any company that produces a frontier model based on various technical benchmarks. Evaluations would be updated regularly, and vulnerabilities would be addressed, both before [...]

---

Outline:

(01:04) The Core Statement and Request

(02:38) Things Left Unsaid

(04:05) The Proposal

(06:04) A Good Start But Insufficient

(08:52) Skeptics Of Future AI Capabilities

(10:43) DeepMind On Bioresilience

(12:39) Part 2: DeepMind Folds To The Department of War

(13:28) DeepMind Leadership Failed Us

(19:45) This Was a Failure We Must Learn From

---

First published:

Source:

---

Narrated by TYPE III AUDIO.

---

Images from the article:

Apple Podcasts and Spotify do not show images in the episode description. Try Pocket Casts, or another podcast app.

This week saw the releases of, among other things:

That's on top of everything else, and an Opus 5 announcement is likely coming soon.

The weekly once again got out of hand, so we’re splitting it once again into two, and once again saying we’ll be raising the bar for inclusion. And this time I mean it, as in enough to actually matter.

Table of Contents

---

Outline:

(01:17) Language Models Offer Mundane Utility

(04:46) Language Models Don't Offer Mundane Utility

(05:28) Language Models Upload Your Git Repository

(08:35) Huh, Upgrades

(09:30) Muse Spark 1.1

(11:47) First Hit Free

(15:36) On Your Marks

(18:06) Choose Your Fighter

(19:57) Get My Agent On The Line

(23:23) Deepfaketown and Botpocalypse Soon

(24:44) Fun With Media Generation

(25:45) Copyright Confrontation

(27:37) OpenAI Strikes Again

(32:26) A Young Lady's Illustrated Primer

(32:45) Recommendations for Policymakers

(34:13) They Took Our Jobs

(38:23) The Art of the Jailbreak

(39:27) Get Involved

(40:32) Introducing

(41:12) In Other AI News

(43:46) New Short Obviously True Statement About AI Just Dropped

(46:03) Show Me the Money

(46:21) The Lighter Side

---

First published:

Source:

---

Narrated by TYPE III AUDIO.

---

Images from the article:

Apple Podcasts and Spotify do not show images in the episode description. Try Pocket Casts, or another podcast app.

As usual, part 2 of the weekly deals with speculative, regulatory, political and alignment questions.

Xi gave an important speech yesterday, so this post opens with that.

There is talk that Kimi K3 is sufficiently strong that it upends many of these questions. It is clearly a candidate for another DeepSeek Moment, complete with stock drops for Google and SpaceX and (once again in a clear wrong-way move, the same as last time) Nvidia.

Kimi K3 is clearly a very good model, exceeding expectations. Some are saying it is close to the frontier. The Artificial Analysis intelligence index has it at 57, a point ahead of Claude Opus 4.8, two behind Sol and three behind Fable. My presumption is that this number overstates its capabilities, but as always unless and until we have extensively tried the model ourselves, which I do not plan to do, we need to withhold judgment for at least a few days. I will be covering Kimi K3 in its own post at some point early next week.

I have pushed further discussions involving Plan A and related issues into next week, as well as discussions around Demis Hassabis and Google [...]

---

Outline:

(01:29) Xi Gives A Good Speech on AI

(15:33) Quiet Speculations

(19:08) Tyler Cowen On Rebuilding The Future

(22:39) The Quest for Sane Regulations

(24:15) Wish You Were Here

(26:55) The Week in Audio

(27:29) New York Issues Moratorium On Data Centers

(30:26) People Just Say Things

(31:24) Rhetorical Innovation

(39:29) Imagine Asking Questions

(41:46) Anthropic Surveys Things It Calls Misalignment

(54:30) Aligning a Smarter Than Human Intelligence is Difficult

(58:30) The Most Forbidden Technique

(01:01:04) Cooperative Alignment

(01:12:38) The Lighter Side

---

First published:

Source:

---

Narrated by TYPE III AUDIO.

---

Images from the article:

Apple Podcasts and Spotify do not show images in the episode description. Try Pocket Casts, or another podcast app.

This week saw the releases of, among other things:

That's on top of everything else, and an Opus 5 announcement is likely coming soon.

The weekly once again got out of hand, so we’re splitting it once again into two, and once again saying we’ll be raising the bar for inclusion. And this time I mean it, as in enough to actually matter.

Table of Contents

---

Outline:

(01:17) Language Models Offer Mundane Utility

(04:45) Language Models Don't Offer Mundane Utility

(05:27) Language Models Upload Your Git Repository

(08:34) Huh, Upgrades

(09:29) Muse Spark 1.1

(11:48) First Hit Free

(15:36) On Your Marks

(18:06) Choose Your Fighter

(19:57) Get My Agent On The Line

(23:23) Deepfaketown and Botpocalypse Soon

(24:45) Fun With Media Generation

(25:46) Copyright Confrontation

(27:38) OpenAI Strikes Again

(32:26) A Young Lady's Illustrated Primer

(32:46) Recommendations for Policymakers

(34:13) They Took Our Jobs

(38:23) The Art of the Jailbreak

(39:27) Get Involved

(40:32) Introducing

(41:12) In Other AI News

(43:47) New Short Obviously True Statement About AI Just Dropped

(46:04) Show Me the Money

(46:21) The Lighter Side

---

First published:

Source:

---

Narrated by TYPE III AUDIO.

---

Images from the article:

Apple Podcasts and Spotify do not show images in the episode description. Try Pocket Casts, or another podcast app.