AI Safety Gridworlds
Not on the map. Why?
Abstract (arXiv)
We present a suite of reinforcement learning environments illustrating various safety properties of intelligent agents. These problems include safe interruptibility, avoiding side effects, absent supervisor, reward gaming, safe exploration, as well as robustness to self-modification, distributional shift, and adversaries. To measure compliance with the intended safe behavior, we equip each environment with a performance function that is hidden from the agent. This allows us to categorize AI safety problems into robustness and specification problems, depending on whether the performance function corresponds to the observed reward function. We evaluate A2C and Rainbow, two recent deep reinforcement learning agents, on our environments and show that they are not able to solve them satisfactorily.
Key facts. Cited by 108 papers in the map (data through 7 Oct 2026). First posted on arXiv 27 Nov 2017.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2018: 2; 2019: 2; 2020: 1; 2021: 19; 2022: 12; 2023: 21; 2024: 7; 2025: 17; 2026: 27.
108 papers.
Sort:
By area:
- 2021Generalized Out-of-Distribution Detection: A Surveycited by 796
- 2018Scalable agent alignment via reward modeling: a research directioncited by 438
- 2021Safe Learning in Robotics: From Learning-Based Control to Safe Reinforcement Learningcited by 337
- 2023Large Language Model Alignment: A Surveycited by 241
- 2021Alignment of Language Agentscited by 167
- 2023Safety-Gymnasium: A Unified Safe Reinforcement Learning Benchmarkcited by 135
- 2021Consequences of Misaligned AIcited by 79
- 2023Training Socially Aligned Language Models on Simulated Social Interactionscited by 77
- 2020Safe Imitation Learning via Fast Bayesian Reward Inference from Preferencescited by 73
- 2025SafeVLA: Towards Safety Alignment of Vision-Language-Action Model via Constrained Learningcited by 69
- 2022LMPriors: Pre-Trained Language Models as Task-Specific Priorscited by 56
- 2021Scalar reward is not enough: A response to Silver, Singh, Precup and Sutton (2021)cited by 55
38 more
- 2024Improving Reinforcement Learning from Human Feedback with Efficient Reward Model Ensemblecited by 43
- 2021safe-control-gym: a Unified Benchmark Suite for Safe Learning-based Control and Reinforcement Learning in Roboticscited by 42
- 2025Unhackable Temporal Rewarding for Scalable Video MLLMscited by 33
- 2022Aligning to Social Norms and Values in Interactive Narrativescited by 32
- 2022Trustworthy Reinforcement Learning Against Intrinsic Vulnerabilities: Robustness, Safety, and Generalizabilitycited by 32
- 2026Reward Hacking in the Era of Large Models: Mechanisms, Emergent Misalignment, Challengescited by 30
- 2021Multi-Objective SPIBB: Seldonian Offline Policy Improvement with Safety Constraints in Finite MDPscited by 22
- 2021Taxonomy of Machine Learning Safety: A Survey and Primercited by 22
- 2023Interactive AI Alignment: Specification, Process, and Evaluation Alignmentcited by 22
- 2024The Shutdown Problem: An AI Engineering Puzzle for Decision Theoristscited by 22
- 2023Concrete Problems in AI Safety, Revisitedcited by 21
- 2023Survival Instinct in Offline Reinforcement Learningcited by 20
- 2021Concave Utility Reinforcement Learning with Zero-Constraint Violationscited by 18
- 2021There Is No Turning Back: A Self-Supervised Approach for Reversibility-Aware Reinforcement Learningcited by 17
- 2026Intelligent AI Delegationcited by 16
- 2021Training Value-Aligned Reinforcement Learning Agents Using a Normative Priorcited by 14
- 2019Inverse Reinforcement Learning in Contextual MDPscited by 12
- 2025A Survey of Safe Reinforcement Learning and Constrained MDPs: A Technical Survey on Single-Agent and Multi-Agent Safetycited by 12
- 2022Near-Optimal Multi-Agent Learning for Safe Coverage Controlcited by 11
- 2023Probabilistic Constraint for Safety-Critical Reinforcement Learningcited by 11
- 2024Evaluating AI Evaluation: Perils and Prospectscited by 11
- 2021How RL Agents Behave When Their Actions Are Modifiedcited by 10
- 2023Human Control: Definitions and Algorithmscited by 10
- 2023Designing Fiduciary Artificial Intelligencecited by 8
- 2024Adaptive Language-Guided Abstraction from Contrastive Explanationscited by 8
- 2026Why AI systems don't learn and what to do about it: Lessons on autonomous learning from cognitive sciencecited by 8
- 2021Model-Free Risk-Sensitive Reinforcement Learningcited by 7
- 2023Hybrid Approaches for Moral Value Alignment in AI Agents: a Manifestocited by 7
- 2021Understanding and Avoiding AI Failures: A Practical Guidecited by 6
- 2023Conceptual Framework for Autonomous Cognitive Entitiescited by 6
- 2025Deep Value Benchmark: Measuring Whether Models Generalize Deep Values or Shallow Preferencescited by 6
- 2021Axes for Sociotechnical Inquiry in AI Researchcited by 5
- 2021Incorporating Deception into CyberBattleSim for Autonomous Defensecited by 5
- 2022Categorical semantics of compositional reinforcement learningcited by 5
- 2026Self-Improvement of Large Language Models: A Technical Overview and Future Outlookcited by 5
- 2026From Rebound to Remedy: Understanding and Mitigating Reward Hacking via Representation Engineeringcited by 5
- 2021Causal Analysis of Agent Behavior for AI Safetycited by 4
- 2022Policy Gradients for Probabilistic Constrained Reinforcement Learningcited by 4
50 most cited of 108 All 108 (JSON)
- 2026Revisiting scaling laws for reward optimization29 Sep 2026
- 2026Reward Hacking and Agent Containment Failure: A Monte Carlo Study Based on the 2026 Hugging Face Incident26 Sep 2026
- 2026BenchShield: Formal Model-Backed Instrumentation for Reward Integrity in LLM-Agent Evaluation Infrastructure10 Sep 2026
- 2026HarvestBench: Measuring Whether LLM Agents Will Pay to Avoid Killing Animals3 Sep 2026
- 2026Safety Does Not Compose: Non-Decaying Loop State for Autonomous LLM Agents27 Aug 2026
- 2026When Memory Lies: An Empirical Study of Spatial Memory Staleness in VLM Agents5 Aug 2026
- 2026Robust General Utility for Reinforcement Learning4 Aug 2026
- 2026Draining the Energy Commons: Self-Defeating Over-Appropriation as a Coordination Failure in Agentic LLM Collectives24 Jul 2026
- 2026Modification-Considering Value Learning for Reward Hacking Mitigation in RL27 Jun 2026
- 2026CRAX: Fast Safe Reinforcement Learning Benchmarking18 Jun 2026
- 2026Greed Is Learned: Visible Incentives as Reward-Hacking Triggers15 Jun 2026
- 2026ERTS: Adversarial Robustness Testing of Ethical AI via Semantic Perturbation in a Bounded Consequence Space11 Jun 2026
38 more
- 2026Revisiting the shutdown problem6 Jun 2026
- 2026Intentmaking and Sensemaking: Human Interaction with AI-Guided Mathematical Discovery7 May 2026
- 2026Brainrot: Deskilling and Addiction are Overlooked AI Risks5 May 2026
- 2026Operationalizing Reconstructive Authority: Runtime Construction, Dependency Resolution, and Execution Gating in Autonomous Agent Systems24 Apr 2026
- 2026Reward Hacking in the Era of Large Models: Mechanisms, Emergent Misalignment, Challenges15 Apr 2026
- 2026Safety Training Modulates Harmful Misalignment Under On-Policy RL, But Direction Depends on Environment Design14 Apr 2026
- 2026Robust Optimization for Mitigating Reward Hacking with Correlated Proxies13 Apr 2026
- 2026From Rebound to Remedy: Understanding and Mitigating Reward Hacking via Representation Engineering1 Apr 2026
- 2026Self-Improvement of Large Language Models: A Technical Overview and Future Outlook26 Mar 2026
- 2026Capability Safety as Datalog: A Foundational Equivalence20 Mar 2026
- 2026Why AI systems don't learn and what to do about it: Lessons on autonomous learning from cognitive science16 Mar 2026
- 2026Consequentialist Objectives and Catastrophe16 Mar 2026
- 2026ForesightSafety Bench: A Frontier Risk Evaluation and Governance Framework towards Safe AI15 Feb 2026
- 2026Alignment Risks from Capability-Seeking RL Training12 Feb 2026
- 2026Intelligent AI Delegation12 Feb 2026
- 2025Predictive Safety Shield for Dyna-Q Reinforcement Learning26 Nov 2025
- 2025Expressive Temporal Specifications for Reward Monitoring16 Nov 2025
- 2025Deep Value Benchmark: Measuring Whether Models Generalize Deep Values or Shallow Preferences3 Nov 2025
- 2025Expressive Reward Synthesis with the Runtime Monitoring Language17 Oct 2025
- 2025Repairing Reward Functions with Feedback to Mitigate Reward Hacking14 Oct 2025
- 2025Mutual Information Tracks Policy Coherence in Reinforcement Learning12 Sep 2025
- 2025A Framework for Inherently Safer AGI through Language-Mediated Active Inference7 Aug 2025
- 2025Accelerating Policy Synthesis in Large-Scale MDPs via Hierarchical Adaptive Refinement21 Jun 2025
- 2025Evaluating LLM Agent Adherence to Hierarchical Safety Principles: A Lightweight Benchmark for Probing Foundational Controllability Components3 Jun 2025
- 2025The Ultimate Test of Superintelligent AI Agents: Can an AI Balance Care and Control in Asymmetric Relationships?2 Jun 2025
- 2025A Survey of Safe Reinforcement Learning and Constrained MDPs: A Technical Survey on Single-Agent and Multi-Agent Safety22 May 2025
- 2025Learning Natural Language Constraints for Safe Reinforcement Learning of Language Agents4 Apr 2025
- 2025HASARD: A Benchmark for Vision-Based Safe Reinforcement Learning in Embodied Agents11 Mar 2025
- 2025SafeVLA: Towards Safety Alignment of Vision-Language-Action Model via Constrained Learning5 Mar 2025
- 2025Safety Representations for Safer Policy Learning27 Feb 2025
- 2025Unhackable Temporal Rewarding for Scalable Video MLLMs17 Feb 2025
- 2025YRC-Bench: A Benchmark for Learning to Coordinate with Experts13 Feb 2025
- 2024Revisiting Energy-Based Model for Out-of-Distribution Detection4 Dec 2024
- 2024Adaptive Language-Guided Abstraction from Contrastive Explanations12 Sep 2024
- 2024Evaluating AI Evaluation: Perils and Prospects12 Jul 2024
- 2024Reducing Human-Robot Goal State Divergence with Environment Design10 Apr 2024
- 2024The Shutdown Problem: An AI Engineering Puzzle for Decision Theorists7 Mar 2024
- 2024Reinforcement Learning with Ensemble Model Predictive Safety Certification6 Feb 2024
50 newest of 108 All 108 (JSON)
- 2018Scalable agent alignment via reward modeling: a research directioncited by 438
- 2023Large Language Model Alignment: A Surveycited by 241
- 2023Training Socially Aligned Language Models on Simulated Social Interactionscited by 77
- 2024Improving Reinforcement Learning from Human Feedback with Efficient Reward Model Ensemblecited by 43
- 2026Reward Hacking in the Era of Large Models: Mechanisms, Emergent Misalignment, Challengescited by 30
- 2025Deep Value Benchmark: Measuring Whether Models Generalize Deep Values or Shallow Preferencescited by 6
- 2026From Rebound to Remedy: Understanding and Mitigating Reward Hacking via Representation Engineeringcited by 5
- 2026Robust Optimization for Mitigating Reward Hacking with Correlated Proxiescited by 2
- 2025Repairing Reward Functions with Feedback to Mitigate Reward Hackingcited by 1
- 2018A Roadmap for Robust End-to-End Alignmentcited by 0
- 2026Modification-Considering Value Learning for Reward Hacking Mitigation in RLcited by 0
- 2026Revisiting scaling laws for reward optimizationcited by 0
- 2026Revisiting scaling laws for reward optimization29 Sep 2026
- 2026Modification-Considering Value Learning for Reward Hacking Mitigation in RL27 Jun 2026
- 2026Reward Hacking in the Era of Large Models: Mechanisms, Emergent Misalignment, Challenges15 Apr 2026
- 2026Robust Optimization for Mitigating Reward Hacking with Correlated Proxies13 Apr 2026
- 2026From Rebound to Remedy: Understanding and Mitigating Reward Hacking via Representation Engineering1 Apr 2026
- 2025Deep Value Benchmark: Measuring Whether Models Generalize Deep Values or Shallow Preferences3 Nov 2025
- 2025Repairing Reward Functions with Feedback to Mitigate Reward Hacking14 Oct 2025
- 2024Improving Reinforcement Learning from Human Feedback with Efficient Reward Model Ensemble30 Jan 2024
- 2023Large Language Model Alignment: A Survey26 Sep 2023
- 2023Training Socially Aligned Language Models on Simulated Social Interactions26 May 2023
- 2018Scalable agent alignment via reward modeling: a research direction19 Nov 2018
- 2018A Roadmap for Robust End-to-End Alignment4 Sep 2018
- 2023Hybrid Approaches for Moral Value Alignment in AI Agents: a Manifestocited by 7
- 2023Conceptual Framework for Autonomous Cognitive Entitiescited by 6
- 2025Learning Natural Language Constraints for Safe Reinforcement Learning of Language Agentscited by 2
- 2025Evaluating LLM Agent Adherence to Hierarchical Safety Principles: A Lightweight Benchmark for Probing Foundational Controllability Componentscited by 2
- 2026Draining the Energy Commons: Self-Defeating Over-Appropriation as a Coordination Failure in Agentic LLM Collectivescited by 1
- 2026When Memory Lies: An Empirical Study of Spatial Memory Staleness in VLM Agentscited by 1
- 2026Safety Does Not Compose: Non-Decaying Loop State for Autonomous LLM Agentscited by 0
- 2026BenchShield: Formal Model-Backed Instrumentation for Reward Integrity in LLM-Agent Evaluation Infrastructurecited by 0
- 2026BenchShield: Formal Model-Backed Instrumentation for Reward Integrity in LLM-Agent Evaluation Infrastructure10 Sep 2026
- 2026Safety Does Not Compose: Non-Decaying Loop State for Autonomous LLM Agents27 Aug 2026
- 2026When Memory Lies: An Empirical Study of Spatial Memory Staleness in VLM Agents5 Aug 2026
- 2026Draining the Energy Commons: Self-Defeating Over-Appropriation as a Coordination Failure in Agentic LLM Collectives24 Jul 2026
- 2025Evaluating LLM Agent Adherence to Hierarchical Safety Principles: A Lightweight Benchmark for Probing Foundational Controllability Components3 Jun 2025
- 2025Learning Natural Language Constraints for Safe Reinforcement Learning of Language Agents4 Apr 2025
- 2023Hybrid Approaches for Moral Value Alignment in AI Agents: a Manifesto4 Dec 2023
- 2023Conceptual Framework for Autonomous Cognitive Entities3 Oct 2023
- 2020Safe Imitation Learning via Fast Bayesian Reward Inference from Preferencescited by 73
- 2021Multi-Objective SPIBB: Seldonian Offline Policy Improvement with Safety Constraints in Finite MDPscited by 22
- 2023Survival Instinct in Offline Reinforcement Learningcited by 20
- 2019Inverse Reinforcement Learning in Contextual MDPscited by 12
- 2019Relational Mimic for Visual Adversarial Imitation Learningcited by 0
- 2023Survival Instinct in Offline Reinforcement Learning5 Jun 2023
- 2021Multi-Objective SPIBB: Seldonian Offline Policy Improvement with Safety Constraints in Finite MDPs31 May 2021
- 2020Safe Imitation Learning via Fast Bayesian Reward Inference from Preferences21 Feb 2020
- 2019Relational Mimic for Visual Adversarial Imitation Learning18 Dec 2019
- 2019Inverse Reinforcement Learning in Contextual MDPs23 May 2019
- 2026Alignment Risks from Capability-Seeking RL Trainingcited by 0
- 2026Alignment Risks from Capability-Seeking RL Training12 Feb 2026
- 2021Generalized Out-of-Distribution Detection: A Surveycited by 796
- 2021Safe Learning in Robotics: From Learning-Based Control to Safe Reinforcement Learningcited by 337
- 2021Alignment of Language Agentscited by 167
- 2023Safety-Gymnasium: A Unified Safe Reinforcement Learning Benchmarkcited by 135
- 2021Consequences of Misaligned AIcited by 79
- 2022LMPriors: Pre-Trained Language Models as Task-Specific Priorscited by 56
- 2021Scalar reward is not enough: A response to Silver, Singh, Precup and Sutton (2021)cited by 55
- 2021safe-control-gym: a Unified Benchmark Suite for Safe Learning-based Control and Reinforcement Learning in Roboticscited by 42
- 2025Unhackable Temporal Rewarding for Scalable Video MLLMscited by 33
- 2022Aligning to Social Norms and Values in Interactive Narrativescited by 32
- 2022Trustworthy Reinforcement Learning Against Intrinsic Vulnerabilities: Robustness, Safety, and Generalizabilitycited by 32
- 2021Taxonomy of Machine Learning Safety: A Survey and Primercited by 22
12 most cited of 80 All 80 (JSON)
- 2026Reward Hacking and Agent Containment Failure: A Monte Carlo Study Based on the 2026 Hugging Face Incident26 Sep 2026
- 2026HarvestBench: Measuring Whether LLM Agents Will Pay to Avoid Killing Animals3 Sep 2026
- 2026Robust General Utility for Reinforcement Learning4 Aug 2026
- 2026CRAX: Fast Safe Reinforcement Learning Benchmarking18 Jun 2026
- 2026Greed Is Learned: Visible Incentives as Reward-Hacking Triggers15 Jun 2026
- 2026ERTS: Adversarial Robustness Testing of Ethical AI via Semantic Perturbation in a Bounded Consequence Space11 Jun 2026
- 2026Revisiting the shutdown problem6 Jun 2026
- 2026Intentmaking and Sensemaking: Human Interaction with AI-Guided Mathematical Discovery7 May 2026
- 2026Brainrot: Deskilling and Addiction are Overlooked AI Risks5 May 2026
- 2026Operationalizing Reconstructive Authority: Runtime Construction, Dependency Resolution, and Execution Gating in Autonomous Agent Systems24 Apr 2026
- 2026Safety Training Modulates Harmful Misalignment Under On-Policy RL, But Direction Depends on Environment Design14 Apr 2026
- 2026Capability Safety as Datalog: A Foundational Equivalence20 Mar 2026
12 newest of 80 All 80 (JSON)