Measuring Progress on Scalable Oversight for Large Language Models
Not on the map. Why?
Cited by 47 in LLM alignment / RLHF / preference optimisation, but placed by its own abstract, which didn’t fit.
Abstract (arXiv)
Developing safe and useful general-purpose AI systems will require us to make progress on scalable oversight: the problem of supervising systems that potentially outperform us on most skills relevant to the task at hand. Empirical work on this problem is not straightforward, since we do not yet have systems that broadly exceed our abilities. This paper discusses one of the major ways we think about this problem, with a focus on ways it can be studied empirically. We first present an experimental design centered on tasks for which human specialists succeed but unaided humans and current general AI systems fail. We then present a proof-of-concept experiment meant to demonstrate a key feature of this experimental design and show its viability with two question-answering tasks: MMLU and time-limited QuALITY. On these tasks, we find that human participants who interact with an unreliable large-language-model dialog assistant through chat -- a trivial baseline strategy for scalable oversight -- substantially outperform both the model alone and their own unaided performance. These results are an encouraging sign that scalable oversight will be tractable to study with present models and bolster recent findings that large language models can productively assist humans with difficult tasks.
Key facts. Cited by 212 papers in the map (data through 7 Oct 2026). Builds on 23 of its 31 references that are in the map. First posted on arXiv 4 Nov 2022.
Builds on
23 of 31 references.
References · 23
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,302
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2022Large Language Models are Zero-Shot Reasonerscited by 4,323
- 2017Deep reinforcement learning from human preferencescited by 3,846
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,634
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
- 2020Learning to summarize from human feedbackcited by 2,562
- 2022Language Models (Mostly) Know What They Knowcited by 1,783
- 2016Concrete Problems in AI Safetycited by 1,582
- 2021A General Language Assistant as a Laboratory for Alignmentcited by 1,023
- 2021Show Your Work: Scratchpads for Intermediate Computation with Language Modelscited by 871
- 2018Scalable agent alignment via reward modeling: a research directioncited by 438
11 more
- 2020Does the Whole Exceed its Parts? The Effect of AI Explanations on Complementary Team Performancecited by 396
- 2018AI safety via debatecited by 384
- 2022Self-critiquing models for assisting human evaluatorscited by 372
- 2021Recursively Summarizing Books with Human Feedbackcited by 287
- 2019Risks from Learned Optimization in Advanced Machine Learning Systemscited by 250
- 2021QuALITY: Question Answering with Long Input Texts, Yes!cited by 204
- 2018Supervising strong learners by amplifying weak expertscited by 139
- 2021Towards a Science of Human-AI Decision Making: A Survey of Empirical Studiescited by 85
- 2021Understanding the Effect of Out-of-distribution Examples and Interactive Explanations on Human-AI Decision Makingcited by 58
- 2022Single-Turn Debate Does Not Help Humans Answer Hard Reading-Comprehension Questionscited by 22
- 2022Two-Turn Debate Doesn't Help Humans Answer Hard Reading Comprehension Questionscited by 16
Built on by
Citing papers per year: 2022: 3; 2023: 34; 2024: 54; 2025: 53; 2026: 68.
212 papers.
Sort:
By area:
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 2,950
- 2023GPQA: A Graduate-Level Google-Proof Q&A Benchmarkcited by 2,748
- 2023Towards Understanding Sycophancy in Language Modelscited by 988
- 2022Discovering Language Model Behaviors with Model-Written Evaluationscited by 805
- 2023Open Problems and Fundamental Limitations of Reinforcement Learning from Human Feedbackcited by 743
- 2023Measuring Faithfulness in Chain-of-Thought Reasoningcited by 668
- 2023Weak-to-Strong Generalization: Eliciting Strong Capabilities With Weak Supervisioncited by 445
- 2023Harnessing the Power of LLMs in Practice: A Survey on ChatGPT and Beyondcited by 409
- 2023GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Ciphercited by 401
- 2023Llemma: An Open Language Model For Mathematicscited by 385
- 2025Monitoring Reasoning Models for Misbehavior and the Risks of Promoting Obfuscationcited by 338
- 2024ProcessBench: Identifying Process Errors in Mathematical Reasoningcited by 277
38 more
- 2024Debating with More Persuasive LLMs Leads to More Truthful Answerscited by 255
- 2023Large Language Model Alignment: A Surveycited by 241
- 2023AI Control: Improving Safety Despite Intentional Subversioncited by 207
- 2023Improving Language Model Negotiation with Self-Play and In-Context Learning from AI Feedbackcited by 202
- 2024Meta-Rewarding Language Models: Self-Improving Alignment with LLM-as-a-Meta-Judgecited by 202
- 2023FLASK: Fine-grained Language Model Evaluation based on Alignment Skill Setscited by 198
- 2024A Roadmap to Pluralistic Alignmentcited by 175
- 2023Simple synthetic data reduces sycophancy in large language modelscited by 174
- 2024WARM: On the Benefits of Weight Averaged Reward Modelscited by 145
- 2024LLM Critics Help Catch LLM Bugscited by 138
- 2025LLM Post-Training: A Deep Dive into Reasoning Large Language Modelscited by 129
- 2024Toward Self-Improvement of LLMs via Imagination, Searching, and Criticizingcited by 123
- 2024Secret Collusion among AI Agents: Multi-Agent Deception via Steganographycited by 107
- 2024Best Practices and Lessons Learned on Synthetic Datacited by 104
- 2023Frontier AI Regulation: Managing Emerging Risks to Public Safetycited by 95
- 2024Easy-to-Hard Generalization: Scalable Alignment Beyond Human Supervisioncited by 95
- 2024On scalable oversight with weak LLMs judging strong LLMscited by 94
- 2022Evaluating Human-Language Model Interactioncited by 90
- 2023Personalisation within bounds: A risk taxonomy and policy framework for the alignment of large language models with personalised feedbackcited by 86
- 2024Open-Endedness is Essential for Artificial Superhuman Intelligencecited by 79
- 2024Prover-Verifier Games improve legibility of LLM outputscited by 79
- 2023Improving Code Generation by Training with Natural Language Feedbackcited by 75
- 2024ExACT: Teaching AI Agents to Explore with Reflective-MCTS and Exploratory Learningcited by 61
- 2024Smaller, Weaker, Yet Better: Training LLM Reasoners via Compute-Optimal Samplingcited by 60
- 2024Can Language Models Learn to Skip Steps?cited by 59
- 2023Eliciting Latent Knowledge from Quirky Language Modelscited by 56
- 2024Safetywashing: Do AI Safety Benchmarks Actually Measure Safety Progress?cited by 56
- 2023SALMON: Self-Alignment with Instructable Reward Modelscited by 54
- 2023The Past, Present and Better Future of Feedback Learning in Large Language Models for Subjective Human Preferences and Valuescited by 53
- 2025Which of These Best Describes Multiple Choice Evaluation with LLMs? A) Forced B) Flawed C) Fixable D) All of the Abovecited by 51
- 2023In Search of Verifiability: Explanations Rarely Enable Complementary Performance in AI-Advised Decision Makingcited by 50
- 2024Offline Regularised Reinforcement Learning for Large Language Models Alignmentcited by 48
- 2023Evaluating Superhuman Models with Consistency Checkscited by 47
- 2023Testing Language Model Agents Safely in the Wildcited by 45
- 2023Specific versus General Principles for Constitutional AIcited by 41
- 2023A Closer Look at the Self-Verification Abilities of Large Language Models in Logical Reasoningcited by 41
- 2025Ctrl-Z: Controlling AI Agents via Resamplingcited by 40
- 2023Debate Helps Supervise Unreliable Expertscited by 39
50 most cited of 212 All 212 (JSON)
- 2026Accurate but Not Humble: Evaluating Epistemic Humility in LLM Agents under Knowledge Conflict8 Oct 2026
- 2026Comprehension Audits to Mitigate Risks from Automated AI Research7 Oct 2026
- 2026Can AI Oversight Be Zero Knowledge?1 Oct 2026
- 2026VeriHarness: Scaling Agentic Verification for Long-Horizon Tasks1 Oct 2026
- 2026Covert Assistance: Helpful LLM Agents Evade Oversight in Multi-Agent Systems30 Sep 2026
- 2026Improving scalable oversight with co-trained monitors28 Sep 2026
- 2026Measurement Boundaries in LLM Financial Agent Evaluation: Fixed-Tape Execution and Multi-Defect Auditing26 Sep 2026
- 2026Human-LLM Deliberation as Interactive Proof: Conditions for Verifiability Without Transparency21 Sep 2026
- 2026Why LLM Agents Collapse Without Oversight: The Enforcement Gap as the Mechanism Behind Emergence World Failures14 Sep 2026
- 2026ActMap: Single-Pass Uncertainty Quantification from Generation-Time Activation Maps10 Sep 2026
- 2026Proof-Carrying Cognition: Closing the Verification Gap with Reality-Settled Reward9 Sep 2026
- 2026The Answer Is Not the Argument31 Aug 2026
38 more
- 2026Safety Does Not Compose: Non-Decaying Loop State for Autonomous LLM Agents27 Aug 2026
- 2026Debate Training Reduces Reward Hacking in RLAIF18 Aug 2026
- 2026Towards Computational Provenance: Carrying Causal-State Evidence in Generated Text17 Aug 2026
- 2026Training AI Scientists to Replicate Research13 Aug 2026
- 2026Jagged Judges: Epistemic Stability Under Perturbation, Pressure, and Persistence12 Aug 2026
- 2026Sharding Prevents LLM Oversight Failures and Adversarial Exploitation5 Aug 2026
- 2026Knowing When to Quit: Diagnosing and Training LLMs to Abort Futile Reasoning31 Jul 2026
- 2026StealthBench: Measuring Operational Stealth in Autonomous Offensive-Security Agents28 Jul 2026
- 2026ScopeJudge: Cost-Aware Pre-Execution Gating for Offensive Security Agents8 Jul 2026
- 2026Institutional Red-Teaming: Deployment Rules, Not Just Models, Causally Shape Multi-Agent AI Safety8 Jul 2026
- 2026Measuring Intelligence Beyond Human Scale8 Jul 2026
- 2026Security and Privacy in Agentic AI: Grand Challenges and Future Directions7 Jul 2026
- 2026AdaStop: Cost-Aware Early Stopping for DNN Test Selection6 Jul 2026
- 2026Attention Limited Reward Learning6 Jul 2026
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gap29 Jun 2026
- 2026Metric Match: A Subset Selection Approach to Evaluating LLM Judge Reliability12 Jun 2026
- 2026Collaborative Disagreement Resolution for Scalable Oversight2 Jun 2026
- 2026When Helping Hurts and How to Fix It: Multi-Agent Debate for Data Cleaning1 Jun 2026
- 2026Sample-Efficient Post-Training for LEGO Spatial-Physics Reasoning29 May 2026
- 2026Weak Critics Make Strong Learners: On-Policy Critique Distillation for Scalable Oversight29 May 2026
- 2026Civilizational Metamaterials: Engineering Coordination Under Capability Gradients and Structural Turbulence29 May 2026
- 2026ReasonOps: Operator Segmentation for LLM Reasoning Traces28 May 2026
- 2026Woodpecker Distillation: Weak Models Diagnose Reasoning Bugs in Strong Models27 May 2026
- 2026The Behavioral Credibility Trilemma: When Calibrated Autonomy Becomes Impossible25 May 2026
- 2026Capability Conditioned Scaffolding for Professional Human LLM Collaboration14 May 2026
- 2026How to Interpret Agent Behavior13 May 2026
- 2026Not Just RLHF: Why Alignment Alone Won't Fix Multi-Agent Sycophancy13 May 2026
- 2026LLM Wardens: Mitigating Adversarial Persuasion with Third-Party Conversational Oversight8 May 2026
- 2026Behavior Cue Reasoning: Monitorable Reasoning Improves Efficiency and Safety through Oversight7 May 2026
- 2026Extracting Search Trees from LLM Reasoning Traces Reveals Myopic Planning7 May 2026
- 2026Efficiently Aligning Language Models with Online Natural Language Feedback5 May 2026
- 2026Agentic-imodels: Evolving agentic interpretability tools via autoresearch5 May 2026
- 2026Structural Enforcement of Goal Integrity in AI Agents via Separation-of-Powers Architecture26 Apr 2026
- 2026Removing Sandbagging in LLMs by Training with Weak Supervision23 Apr 2026
- 2026Post-AGI Economies: Autonomy and the First Fundamental Theorem of Welfare Economics23 Apr 2026
- 2026Building a Precise Video Language with Human-AI Oversight22 Apr 2026
- 2026When Can LLMs Learn to Reason with Weak Supervision?20 Apr 2026
- 2026Reward Hacking in the Era of Large Models: Mechanisms, Emergent Misalignment, Challenges15 Apr 2026
50 newest of 212 All 212 (JSON)
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 2,950
- 2023Measuring Faithfulness in Chain-of-Thought Reasoningcited by 668
- 2023Llemma: An Open Language Model For Mathematicscited by 385
- 2025Monitoring Reasoning Models for Misbehavior and the Risks of Promoting Obfuscationcited by 338
- 2024ProcessBench: Identifying Process Errors in Mathematical Reasoningcited by 277
- 2024LLM Critics Help Catch LLM Bugscited by 138
- 2025LLM Post-Training: A Deep Dive into Reasoning Large Language Modelscited by 129
- 2024Toward Self-Improvement of LLMs via Imagination, Searching, and Criticizingcited by 123
- 2024ExACT: Teaching AI Agents to Explore with Reflective-MCTS and Exploratory Learningcited by 61
- 2024Smaller, Weaker, Yet Better: Training LLM Reasoners via Compute-Optimal Samplingcited by 60
- 2024Can Language Models Learn to Skip Steps?cited by 59
- 2023A Closer Look at the Self-Verification Abilities of Large Language Models in Logical Reasoningcited by 41
12 most cited of 37 All 37 (JSON)
- 2026Proof-Carrying Cognition: Closing the Verification Gap with Reality-Settled Reward9 Sep 2026
- 2026The Answer Is Not the Argument31 Aug 2026
- 2026Knowing When to Quit: Diagnosing and Training LLMs to Abort Futile Reasoning31 Jul 2026
- 2026Sample-Efficient Post-Training for LEGO Spatial-Physics Reasoning29 May 2026
- 2026ReasonOps: Operator Segmentation for LLM Reasoning Traces28 May 2026
- 2026Woodpecker Distillation: Weak Models Diagnose Reasoning Bugs in Strong Models27 May 2026
- 2026Behavior Cue Reasoning: Monitorable Reasoning Improves Efficiency and Safety through Oversight7 May 2026
- 2026Extracting Search Trees from LLM Reasoning Traces Reveals Myopic Planning7 May 2026
- 2026When Can LLMs Learn to Reason with Weak Supervision?20 Apr 2026
- 2026Peer-Predictive Self-Training for Language Model Reasoning14 Apr 2026
- 2026Consistency of Large Reasoning Models Under Multi-Turn Attacks13 Feb 2026
- 2025Critique-RL: Training Language Models for Critiquing through Two-Stage Reinforcement Learning28 Oct 2025
12 newest of 37 All 37 (JSON)
- 2022Discovering Language Model Behaviors with Model-Written Evaluationscited by 805
- 2023Open Problems and Fundamental Limitations of Reinforcement Learning from Human Feedbackcited by 743
- 2023Weak-to-Strong Generalization: Eliciting Strong Capabilities With Weak Supervisioncited by 445
- 2023GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Ciphercited by 401
- 2024Debating with More Persuasive LLMs Leads to More Truthful Answerscited by 255
- 2023Large Language Model Alignment: A Surveycited by 241
- 2023FLASK: Fine-grained Language Model Evaluation based on Alignment Skill Setscited by 198
- 2024A Roadmap to Pluralistic Alignmentcited by 175
- 2024WARM: On the Benefits of Weight Averaged Reward Modelscited by 145
- 2024Easy-to-Hard Generalization: Scalable Alignment Beyond Human Supervisioncited by 95
- 2023Personalisation within bounds: A risk taxonomy and policy framework for the alignment of large language models with personalised feedbackcited by 86
- 2023SALMON: Self-Alignment with Instructable Reward Modelscited by 54
12 most cited of 36 All 36 (JSON)
- 2026Debate Training Reduces Reward Hacking in RLAIF18 Aug 2026
- 2026Jagged Judges: Epistemic Stability Under Perturbation, Pressure, and Persistence12 Aug 2026
- 2026Attention Limited Reward Learning6 Jul 2026
- 2026Efficiently Aligning Language Models with Online Natural Language Feedback5 May 2026
- 2026Reward Hacking in the Era of Large Models: Mechanisms, Emergent Misalignment, Challenges15 Apr 2026
- 2026Scaling Reward Modeling without Human Supervision11 Feb 2026
- 2025Certifiable Safe RLHF: Semantic Grounding and Fixed Penalty Constraint Optimization for Safer LLM Alignment3 Oct 2025
- 2025Co-Alignment: Rethinking Alignment as Bidirectional Human-AI Cognitive Adaptation15 Sep 2025
- 2025Superalignment with Dynamic Human Values17 Mar 2025
- 2025C3AI: Crafting and Evaluating Constitutions for Constitutional AI21 Feb 2025
- 2025Scalable Oversight for Superhuman AI via Recursive Self-Critiquing7 Feb 2025
- 2025Iterative Label Refinement Matters More than Preference Optimization under Weak Supervision14 Jan 2025
12 newest of 36 All 36 (JSON)
- 2024Secret Collusion among AI Agents: Multi-Agent Deception via Steganographycited by 107
- 2023Testing Language Model Agents Safely in the Wildcited by 45
- 2025Reliable Weak-to-Strong Monitoring of LLM Agentscited by 24
- 2024Agent Alignment in Evolving Social Normscited by 14
- 2025Control Tax: The Price of Keeping AI in Checkcited by 7
- 2025RedDebate: Safer Responses Through Multi-Agent Red Teaming Debatescited by 7
- 2025Tiered Agentic Oversight: A Hierarchical Multi-Agent System for Healthcare Safetycited by 7
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gapcited by 6
- 2026Evolutionary System Prompt Learning for Reinforcement Learning in LLMscited by 5
- 2025The Oversight Game: Learning to Cooperatively Balance an AI Agent's Safety and Autonomycited by 3
- 2026ScopeJudge: Cost-Aware Pre-Execution Gating for Offensive Security Agentscited by 3
- 2026Not Just RLHF: Why Alignment Alone Won't Fix Multi-Agent Sycophancycited by 2
12 most cited of 27 All 27 (JSON)
- 2026VeriHarness: Scaling Agentic Verification for Long-Horizon Tasks1 Oct 2026
- 2026Covert Assistance: Helpful LLM Agents Evade Oversight in Multi-Agent Systems30 Sep 2026
- 2026Measurement Boundaries in LLM Financial Agent Evaluation: Fixed-Tape Execution and Multi-Defect Auditing26 Sep 2026
- 2026Why LLM Agents Collapse Without Oversight: The Enforcement Gap as the Mechanism Behind Emergence World Failures14 Sep 2026
- 2026Safety Does Not Compose: Non-Decaying Loop State for Autonomous LLM Agents27 Aug 2026
- 2026StealthBench: Measuring Operational Stealth in Autonomous Offensive-Security Agents28 Jul 2026
- 2026ScopeJudge: Cost-Aware Pre-Execution Gating for Offensive Security Agents8 Jul 2026
- 2026Institutional Red-Teaming: Deployment Rules, Not Just Models, Causally Shape Multi-Agent AI Safety8 Jul 2026
- 2026Security and Privacy in Agentic AI: Grand Challenges and Future Directions7 Jul 2026
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gap29 Jun 2026
- 2026When Helping Hurts and How to Fix It: Multi-Agent Debate for Data Cleaning1 Jun 2026
- 2026Not Just RLHF: Why Alignment Alone Won't Fix Multi-Agent Sycophancy13 May 2026
12 newest of 27 All 27 (JSON)
- 2023Improving Language Model Negotiation with Self-Play and In-Context Learning from AI Feedbackcited by 202
- 2024Meta-Rewarding Language Models: Self-Improving Alignment with LLM-as-a-Meta-Judgecited by 202
- 2023Simple synthetic data reduces sycophancy in large language modelscited by 174
- 2024Best Practices and Lessons Learned on Synthetic Datacited by 104
- 2026Self-Improvement of Large Language Models: A Technical Overview and Future Outlookcited by 5
- 2026Self-Improvement as Coherence Optimization: A Theoretical Accountcited by 1
- 2026Self-Improvement of Large Language Models: A Technical Overview and Future Outlook26 Mar 2026
- 2026Self-Improvement as Coherence Optimization: A Theoretical Account20 Jan 2026
- 2024Meta-Rewarding Language Models: Self-Improving Alignment with LLM-as-a-Meta-Judge28 Jul 2024
- 2024Best Practices and Lessons Learned on Synthetic Data11 Apr 2024
- 2023Simple synthetic data reduces sycophancy in large language models7 Aug 2023
- 2023Improving Language Model Negotiation with Self-Play and In-Context Learning from AI Feedback17 May 2023
- 2023AI Control: Improving Safety Despite Intentional Subversioncited by 207
- 2025Scaling Laws For Scalable Oversightcited by 18
- 2025Red-Bandit: Test-Time Adaptation for LLM Red-Teaming via Bandit-Guided LoRA Expertscited by 3
- 2023GPQA: A Graduate-Level Google-Proof Q&A Benchmarkcited by 2,748
- 2023Towards Understanding Sycophancy in Language Modelscited by 988
- 2023Harnessing the Power of LLMs in Practice: A Survey on ChatGPT and Beyondcited by 409
- 2023Frontier AI Regulation: Managing Emerging Risks to Public Safetycited by 95
- 2024On scalable oversight with weak LLMs judging strong LLMscited by 94
- 2022Evaluating Human-Language Model Interactioncited by 90
- 2024Open-Endedness is Essential for Artificial Superhuman Intelligencecited by 79
- 2024Prover-Verifier Games improve legibility of LLM outputscited by 79
- 2023Improving Code Generation by Training with Natural Language Feedbackcited by 75
- 2023Eliciting Latent Knowledge from Quirky Language Modelscited by 56
- 2024Safetywashing: Do AI Safety Benchmarks Actually Measure Safety Progress?cited by 56
- 2025Which of These Best Describes Multiple Choice Evaluation with LLMs? A) Forced B) Flawed C) Fixable D) All of the Abovecited by 51
12 most cited of 102 All 102 (JSON)
- 2026Accurate but Not Humble: Evaluating Epistemic Humility in LLM Agents under Knowledge Conflict8 Oct 2026
- 2026Comprehension Audits to Mitigate Risks from Automated AI Research7 Oct 2026
- 2026Can AI Oversight Be Zero Knowledge?1 Oct 2026
- 2026Improving scalable oversight with co-trained monitors28 Sep 2026
- 2026Human-LLM Deliberation as Interactive Proof: Conditions for Verifiability Without Transparency21 Sep 2026
- 2026ActMap: Single-Pass Uncertainty Quantification from Generation-Time Activation Maps10 Sep 2026
- 2026Towards Computational Provenance: Carrying Causal-State Evidence in Generated Text17 Aug 2026
- 2026Training AI Scientists to Replicate Research13 Aug 2026
- 2026Sharding Prevents LLM Oversight Failures and Adversarial Exploitation5 Aug 2026
- 2026Measuring Intelligence Beyond Human Scale8 Jul 2026
- 2026AdaStop: Cost-Aware Early Stopping for DNN Test Selection6 Jul 2026
- 2026Metric Match: A Subset Selection Approach to Evaluating LLM Judge Reliability12 Jun 2026
12 newest of 102 All 102 (JSON)