X-Risk Analysis for AI Research
Not on the map. Why?
Abstract (arXiv)
Artificial intelligence (AI) has the potential to greatly improve society, but as with any powerful technology, it comes with heightened risks and responsibilities. Current AI research lacks a systematic discussion of how to manage long-tail risks from AI systems, including speculative long-term risks. Keeping in mind the potential benefits of AI, there is some concern that building ever more intelligent and powerful AI systems could eventually result in systems that are more powerful than us; some say this is like playing with fire and speculate that this could create existential risks (x-risks). To add precision and ground these discussions, we provide a guide for how to analyze AI x-risk, which consists of three parts: First, we review how systems can be made safer today, drawing on time-tested concepts from hazard analysis and systems safety that have been designed to steer large processes in safer directions. Next, we discuss strategies for having long-term impacts on the safety of future systems. Finally, we discuss a crucial concept in making AI systems safer by improving the balance between safety and general capabilities. We hope this document and the presented concepts and tools serve as a useful guide for understanding how to analyze AI x-risk.
Key facts. Cited by 60 papers in the map (data through 7 Oct 2026). Builds on 26 of its 90 references that are in the map. First posted on arXiv 13 Jun 2022.
Builds on
26 of 90 references.
References · 26
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2021Evaluating Large Language Models Trained on Codecited by 8,053
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,539
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,634
- 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,842
- 2019Mastering Atari, Go, Chess and Shogi by Planning with a Learned Modelcited by 1,327
- 2018Deep Anomaly Detection with Outlier Exposurecited by 939
- 2020Aligning AI With Shared Human Valuescited by 706
- 2022Grokking: Generalization Beyond Overfitting on Small Algorithmic Datasetscited by 599
- 2019Using Self-Supervised Learning Can Improve Model Robustness and Uncertaintycited by 511
- 2020Generative Language Modeling for Automated Theorem Provingcited by 379
14 more
- 2019Using Pre-Training Can Improve Model Robustness and Uncertaintycited by 373
- 2021Unsolved Problems in ML Safetycited by 291
- 2019Risks from Learned Optimization in Advanced Machine Learning Systemscited by 250
- 2019Adversarial Policies: Attacking Deep Reinforcement Learningcited by 209
- 2022Predictability and Surprise in Large Generative Modelscited by 209
- 2020Open Problems in Cooperative AIcited by 167
- 2018The Malicious Use of Artificial Intelligence: Forecasting, Prevention, and Mitigationcited by 159
- 2019Optimal Policies Tend to Seek Powercited by 115
- 2016The Off-Switch Gamecited by 97
- 2020Dialogue Response Ranking Training with Large-Scale Human Feedback Datacited by 68
- 2021What Would Jiminy Cricket Do? Towards Agents That Behave Morallycited by 57
- 2017When Will AI Exceed Human Performance? Evidence from AI Expertscited by 41
- 2020Statistical Consequences of Fat Tails: Real World Preasymptotics, Epistemology, and Applicationscited by 16
- 2022Execute Order 66: Targeted Data Poisoning for Reinforcement Learningcited by 7
Built on by
Citing papers per year: 2022: 9; 2023: 16; 2024: 18; 2025: 14; 2026: 3.
60 papers.
Sort:
By area:
- 2022Interpretability in the Wild: a Circuit for Indirect Object Identification in GPT-2 smallcited by 1,130
- 2022Ignore Previous Prompt: Attack Techniques For Language Modelscited by 760
- 2023Towards Automated Circuit Discovery for Mechanistic Interpretabilitycited by 700
- 2024Mechanistic Interpretability for AI Safety -- A Reviewcited by 415
- 2022OpenOOD: Benchmarking Generalized Out-of-Distribution Detectioncited by 267
- 2023Challenges and Applications of Large Language Modelscited by 251
- 2022The Alignment Problem from a Deep Learning Perspectivecited by 246
- 2023Rewarded soups: towards Pareto-optimal alignment by interpolating weights fine-tuned on diverse rewardscited by 232
- 2023An Overview of Catastrophic AI Riskscited by 214
- 2023Do the Rewards Justify the Means? Measuring Trade-Offs Between Rewards and Ethical Behavior in the MACHIAVELLI Benchmarkcited by 174
- 2024WARM: On the Benefits of Weight Averaged Reward Modelscited by 145
- 2022Broken Neural Scaling Lawscited by 102
38 more
- 2023Frontier AI Regulation: Managing Emerging Risks to Public Safetycited by 95
- 2024SOTOPIA-π: Interactive Learning of Socially Intelligent Language Agentscited by 89
- 2023Can GPT-4 Perform Neural Architecture Search?cited by 74
- 2022Forecasting Future World Events with Neural Networkscited by 63
- 2024Safetywashing: Do AI Safety Benchmarks Actually Measure Safety Progress?cited by 56
- 2023Evaluating Superhuman Models with Consistency Checkscited by 47
- 2024WARP: On the Benefits of Weight Averaged Rewarded Policiescited by 42
- 2024Generalized Out-of-Distribution Detection and Beyond in Vision Language Model Era: A Surveycited by 36
- 2023Artificial Influence: An Analysis Of AI-Driven Persuasioncited by 31
- 2024How Far Are We From AGI: Are LLMs All We Need?cited by 31
- 2025The Traitors: Deception and Trust in Multi-Agent Language Model Simulationscited by 30
- 2024Two Types of AI Existential Risk: Decisive and Accumulativecited by 21
- 2025The Coming Crisis of Multi-Agent Misalignment: AI Alignment Must Be a Dynamic and Social Processcited by 21
- 2022The Expertise Problem: Learning from Specialized Feedbackcited by 20
- 2024Holistic Safety and Responsibility Evaluations of Advanced AI Modelscited by 18
- 2025Compromising Honesty and Harmlessness in Language Models via Deception Attackscited by 17
- 2025LLM-Safety Evaluations Lack Robustnesscited by 16
- 2023How Good Are LLMs at Out-of-Distribution Detection?cited by 15
- 2023Towards Interpretable Sequence Continuation: Analyzing Shared Circuits in Large Language Modelscited by 14
- 2024Unsolvable Problem Detection: Robust Understanding Evaluation for Large Multimodal Modelscited by 12
- 2024Right Now, Wrong Then: Non-Stationary Direct Preference Optimization under Preference Driftcited by 12
- 2025The Lock-in Hypothesis: Stagnation by Algorithmcited by 11
- 2022How Would The Viewer Feel? Estimating Wellbeing From Video Scenarioscited by 9
- 2022Robots-Dont-Cry: Understanding Falsely Anthropomorphic Utterances in Dialog Systemscited by 8
- 2024MANO: Exploiting Matrix Norm for Unsupervised Accuracy Estimation Under Distribution Shiftscited by 8
- 2024Beyond the Safety Bundle: Auditing the Helpful and Harmless Datasetcited by 8
- 2025Adversarial Alignment for LLMs Requires Simpler, Reproducible, and More Measurable Objectivescited by 8
- 2023Hazards from Increasingly Accessible Fine-Tuning of Downloadable Foundation Modelscited by 7
- 2023ChatGPT v Bard v Bing v Claude 2 v Aria v human-expert. How good are AI chatbots at scientific writing?cited by 6
- 2023Survey on AI Ethics: A Socio-technical Perspectivecited by 4
- 2025Psychometric Personality Shaping Modulates Capabilities and Safety in Language Modelscited by 4
- 2023Uncovering the Hidden Cost of Model Compressioncited by 3
- 2025Unraveling Token Prediction Refinement and Identifying Essential Layers in Language Modelscited by 3
- 2025Relevance Isn't All You Need: Scaling RAG Systems With Inference-Time Compute Via Multi-Criteria Rerankingcited by 3
- 2025From Directions to Cones: Exploring Multidimensional Representations of Propositional Facts in LLMscited by 3
- 2023Fairness in AI and Its Long-Term Implications on Societycited by 2
- 2024FlowCon: Out-of-Distribution Detection using Flow-Based Contrastive Learningcited by 2
- 2024SAGE: Scalable Ground Truth Evaluations for Large Sparse Autoencoderscited by 2
50 most cited of 60 All 60 (JSON)
- 2026Unified Multi-Layer Subspace Modeling for Cross-Domain OOD Detection6 Sep 2026
- 2026From Perception to Action: Spatial AI Agents and World Models2 Feb 2026
- 2026ICONIC-444: A 3.1-Million-Image Dataset for OOD Detection Research15 Jan 2026
- 2025Psychometric Personality Shaping Modulates Capabilities and Safety in Language Models19 Sep 2025
- 2025Servant, Stalker, Predator: How An Honest, Helpful, And Harmless (3H) Agent Unlocks Adversarial Skills27 Aug 2025
- 2025Mass-Scale Analysis of In-the-Wild Conversations Reveals Complexity Bounds on LLM Jailbreaking6 Jul 2025
- 2025The Lock-in Hypothesis: Stagnation by Algorithm6 Jun 2025
- 2025The Coming Crisis of Multi-Agent Misalignment: AI Alignment Must Be a Dynamic and Social Process1 Jun 2025
- 2025From Directions to Cones: Exploring Multidimensional Representations of Propositional Facts in LLMs27 May 2025
- 2025The Traitors: Deception and Trust in Multi-Agent Language Model Simulations19 May 2025
- 2025Establishing Reliability Metrics for Reward Models in Large Language Models21 Apr 2025
- 2025Functional Abstraction of Knowledge Recall in Large Language Models20 Apr 2025
38 more
- 2025Relevance Isn't All You Need: Scaling RAG Systems With Inference-Time Compute Via Multi-Criteria Reranking14 Mar 2025
- 2025LLM-Safety Evaluations Lack Robustness4 Mar 2025
- 2025Adversarial Alignment for LLMs Requires Simpler, Reproducible, and More Measurable Objectives17 Feb 2025
- 2025Compromising Honesty and Harmlessness in Language Models via Deception Attacks12 Feb 2025
- 2025Unraveling Token Prediction Refinement and Identifying Essential Layers in Language Models25 Jan 2025
- 2024Revisiting Energy-Based Model for Out-of-Distribution Detection4 Dec 2024
- 2024Beyond the Safety Bundle: Auditing the Helpful and Harmless Dataset12 Nov 2024
- 2024Data-Aware Training Quality Monitoring and Certification for Reliable Deep Learning14 Oct 2024
- 2024SAGE: Scalable Ground Truth Evaluations for Large Sparse Autoencoders9 Oct 2024
- 2024Speculations on Uncertainty and Humane Algorithms13 Aug 2024
- 2024Generalized Out-of-Distribution Detection and Beyond in Vision Language Model Era: A Survey31 Jul 2024
- 2024Safetywashing: Do AI Safety Benchmarks Actually Measure Safety Progress?31 Jul 2024
- 2024Right Now, Wrong Then: Non-Stationary Direct Preference Optimization under Preference Drift26 Jul 2024
- 2024FlowCon: Out-of-Distribution Detection using Flow-Based Contrastive Learning3 Jul 2024
- 2024WARP: On the Benefits of Weight Averaged Rewarded Policies24 Jun 2024
- 2024MANO: Exploiting Matrix Norm for Unsupervised Accuracy Estimation Under Distribution Shifts29 May 2024
- 2024How Far Are We From AGI: Are LLMs All We Need?16 May 2024
- 2024Mechanistic Interpretability for AI Safety -- A Review22 Apr 2024
- 2024Holistic Safety and Responsibility Evaluations of Advanced AI Models22 Apr 2024
- 2024Unsolvable Problem Detection: Robust Understanding Evaluation for Large Multimodal Models29 Mar 2024
- 2024SOTOPIA-π: Interactive Learning of Socially Intelligent Language Agents13 Mar 2024
- 2024WARM: On the Benefits of Weight Averaged Reward Models22 Jan 2024
- 2024Two Types of AI Existential Risk: Decisive and Accumulative15 Jan 2024
- 2023Hazards from Increasingly Accessible Fine-Tuning of Downloadable Foundation Models22 Dec 2023
- 2023Survey on AI Ethics: A Socio-technical Perspective28 Nov 2023
- 2023Towards Interpretable Sequence Continuation: Analyzing Shared Circuits in Large Language Models7 Nov 2023
- 2023ChatGPT v Bard v Bing v Claude 2 v Aria v human-expert. How good are AI chatbots at scientific writing?14 Sep 2023
- 2023Uncovering the Hidden Cost of Model Compression29 Aug 2023
- 2023How Good Are LLMs at Out-of-Distribution Detection?20 Aug 2023
- 2023Challenges and Applications of Large Language Models19 Jul 2023
- 2023Frontier AI Regulation: Managing Emerging Risks to Public Safety6 Jul 2023
- 2023An Overview of Catastrophic AI Risks21 Jun 2023
- 2023Evaluating Superhuman Models with Consistency Checks16 Jun 2023
- 2023Rewarded soups: towards Pareto-optimal alignment by interpolating weights fine-tuned on diverse rewards7 Jun 2023
- 2023Towards Automated Circuit Discovery for Mechanistic Interpretability28 Apr 2023
- 2023Can GPT-4 Perform Neural Architecture Search?21 Apr 2023
- 2023Fairness in AI and Its Long-Term Implications on Society16 Apr 2023
- 2023Do the Rewards Justify the Means? Measuring Trade-Offs Between Rewards and Ethical Behavior in the MACHIAVELLI Benchmark6 Apr 2023
50 newest of 60 All 60 (JSON)
- 2023Rewarded soups: towards Pareto-optimal alignment by interpolating weights fine-tuned on diverse rewardscited by 232
- 2024WARM: On the Benefits of Weight Averaged Reward Modelscited by 145
- 2024WARP: On the Benefits of Weight Averaged Rewarded Policiescited by 42
- 2025The Coming Crisis of Multi-Agent Misalignment: AI Alignment Must Be a Dynamic and Social Processcited by 21
- 2022The Expertise Problem: Learning from Specialized Feedbackcited by 20
- 2025LLM-Safety Evaluations Lack Robustnesscited by 16
- 2024Right Now, Wrong Then: Non-Stationary Direct Preference Optimization under Preference Driftcited by 12
- 2025Establishing Reliability Metrics for Reward Models in Large Language Modelscited by 1
- 2025The Coming Crisis of Multi-Agent Misalignment: AI Alignment Must Be a Dynamic and Social Process1 Jun 2025
- 2025Establishing Reliability Metrics for Reward Models in Large Language Models21 Apr 2025
- 2025LLM-Safety Evaluations Lack Robustness4 Mar 2025
- 2024Right Now, Wrong Then: Non-Stationary Direct Preference Optimization under Preference Drift26 Jul 2024
- 2024WARP: On the Benefits of Weight Averaged Rewarded Policies24 Jun 2024
- 2024WARM: On the Benefits of Weight Averaged Reward Models22 Jan 2024
- 2023Rewarded soups: towards Pareto-optimal alignment by interpolating weights fine-tuned on diverse rewards7 Jun 2023
- 2022The Expertise Problem: Learning from Specialized Feedback12 Nov 2022
- 2022Interpretability in the Wild: a Circuit for Indirect Object Identification in GPT-2 smallcited by 1,130
- 2022Ignore Previous Prompt: Attack Techniques For Language Modelscited by 760
- 2023Towards Automated Circuit Discovery for Mechanistic Interpretabilitycited by 700
- 2024Mechanistic Interpretability for AI Safety -- A Reviewcited by 415
- 2022OpenOOD: Benchmarking Generalized Out-of-Distribution Detectioncited by 267
- 2023Challenges and Applications of Large Language Modelscited by 251
- 2022The Alignment Problem from a Deep Learning Perspectivecited by 246
- 2023An Overview of Catastrophic AI Riskscited by 214
- 2023Do the Rewards Justify the Means? Measuring Trade-Offs Between Rewards and Ethical Behavior in the MACHIAVELLI Benchmarkcited by 174
- 2022Broken Neural Scaling Lawscited by 102
- 2023Frontier AI Regulation: Managing Emerging Risks to Public Safetycited by 95
- 2023Can GPT-4 Perform Neural Architecture Search?cited by 74
12 most cited of 44 All 44 (JSON)
- 2026Unified Multi-Layer Subspace Modeling for Cross-Domain OOD Detection6 Sep 2026
- 2026ICONIC-444: A 3.1-Million-Image Dataset for OOD Detection Research15 Jan 2026
- 2025Psychometric Personality Shaping Modulates Capabilities and Safety in Language Models19 Sep 2025
- 2025The Lock-in Hypothesis: Stagnation by Algorithm6 Jun 2025
- 2025From Directions to Cones: Exploring Multidimensional Representations of Propositional Facts in LLMs27 May 2025
- 2025Functional Abstraction of Knowledge Recall in Large Language Models20 Apr 2025
- 2025Adversarial Alignment for LLMs Requires Simpler, Reproducible, and More Measurable Objectives17 Feb 2025
- 2025Compromising Honesty and Harmlessness in Language Models via Deception Attacks12 Feb 2025
- 2025Unraveling Token Prediction Refinement and Identifying Essential Layers in Language Models25 Jan 2025
- 2024Revisiting Energy-Based Model for Out-of-Distribution Detection4 Dec 2024
- 2024Beyond the Safety Bundle: Auditing the Helpful and Harmless Dataset12 Nov 2024
- 2024Data-Aware Training Quality Monitoring and Certification for Reliable Deep Learning14 Oct 2024
12 newest of 44 All 44 (JSON)