Welcome to The Nonlinear Library, where we use Text-to-Speech software to convert the best writing from the Rationalist and EA communities into audio. This is: Some ideas for follow-up projects to Redwood Research’s recent paper, published by JanBrauner on June 6, 2022 on The AI Alignment Forum.
Disclaimer: I originally wrote this list for myself and then decided it might be worth sharing. Very unpolished, not worth reading for most people. Some (many?) of these ideas were suggested in the paper already, I don’t make any claims of novelty.
I am super excited by Redwood Research’s new paper, and especially by the problem of “high-stakes reliability”.
Others have explained much better why the problem of “high-stakes reliability” is a worthy one (LINK, LINK), so I’ll keep my opinion. In short, I think:
Solving “high-stakes reliability” is probably essential for building safe AGI.
You can do useful empirical research on it now already.
High-stakes reliability would be super useful for today's systems and applications; for systems that make high-stakes decisions where a single instance of a certain bad behaviour would be terrible (e.g. confidently but incorrectly classifying a medical image)
I think there is little existing work on exactly this problem, but I might be wrong about this. There is definitely a lot of work on related problems.
Here is an extremely unpolished of ideas and directions for follow-up research that I had after reading the paper, in no particular order. Some (many?) of these ideas were suggested in the paper already, I don’t make any claims of novelty.
How does this methodology fail?
Find (ideally systematic) ways to break their classifier (I tried a bit, it is actually harder than expected :-) )
How exactly are capabilities impacted by the filtering?
From Paul Christiano:
Avoiding failures where the model learns to be conservative only on “sneaky-looking prompts designed to trick me.”
Improve the classifier or its training
use uncertainty in the classifier
(if necessary via expensive ensembles)
something something out-of-distribution detection
experiment with prompting
Do a project on high-stakes reliability that does not use human oversight, in order to focus more on the ML side of things
Example project: Get a model to solve easy programming questions. The model is allowed to not submit any code to a question, and it's fine if the model doesn't submit code to most questions. However, if the model submits code, the code should solve the test cases in 99.9X% of cases, for any input (from a natural distribution).
If you work with tasks that require human oversight (like "does this snippet entail injuries?"), you learn many things, e.g. how to enable humans to find adversarial inputs. But there are also parts of high-stakes reliability that don't require you to work with humans. Getting a model to almost never do bad behaviour X, on any (natural/non-gibberish?) input, while not losing much average performance, is a challenging project even if we can automatically evaluate model outputs.
Do a project on high-stakes reliability that uses real-world high-stakes tasks
I think this could be useful for field-building, making high-stakes reliability a subfield of mainstream ML robustness
E.g. in medical image classification:
The classifier has the option to say "I don't know" (IDK)
It's fine if the classifier says "IDK" pretty often, e.g. 50% of the time. We'll just have a human look at these examples.
But whenever the classifier does predict a class other than "IDK", I require extremely high accuracy (let's say >99.95%).
This accuracy must be high for samples from any part of the "natural" distribution (e.g. medical images from various hospitals/scanners/populations).
Ideally, it would even be robust to adversarial attacks, but that is probably too hard
Alternatively, if the above is too challenging, we could change the setting such that the classifier only has to choose between "healthy" and "IDK".
Seems like su...