Open-Sourcing Highly Capable Foundation Models: An evaluation of risks, benefits, and alternative methods for pursuing open-source objectives
Not on the map. Why?
Abstract (arXiv)
Recent decisions by leading AI labs to either open-source their models or to restrict access to their models has sparked debate about whether, and how, increasingly capable AI models should be shared. Open-sourcing in AI typically refers to making model architecture and weights freely and publicly accessible for anyone to modify, study, build on, and use. This offers advantages such as enabling external oversight, accelerating progress, and decentralizing control over AI development and use. However, it also presents a growing potential for misuse and unintended consequences. This paper offers an examination of the risks and benefits of open-sourcing highly capable foundation models. While open-sourcing has historically provided substantial net benefits for most software and AI development processes, we argue that for some highly capable foundation models likely to be developed in the near future, open-sourcing may pose sufficiently extreme risks to outweigh the benefits. In such a case, highly capable foundation models should not be open-sourced, at least not initially. Alternative strategies, including non-open-source model sharing options, are explored. The paper concludes with recommendations for developers, standard-setting bodies, and governments for establishing safe and responsible model sharing practices and preserving open-source benefits where safe.
Key facts. Cited by 31 papers in the map (data through 7 Oct 2026). Builds on 59 of its 218 references that are in the map. First posted on arXiv 29 Sep 2023.
Builds on
59 of 218 references.
References · 59
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,539
- 2021On the Opportunities and Risks of Foundation Modelscited by 3,961
- 2023QLoRA: Efficient Finetuning of Quantized LLMscited by 3,355
- 2022Training Compute-Optimal Large Language Modelscited by 2,927
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
- 2022Emergent Abilities of Large Language Modelscited by 2,483
- 2019Energy and Policy Considerations for Deep Learning in NLPcited by 1,242
- 2022Red Teaming Language Models with Language Modelscited by 983
38 more
- 2023Self-Supervised Learning from Images with a Joint-Embedding Predictive Architecturecited by 982
- 2021Ethical and social risks of harm from Language Modelscited by 957
- 2023Distilling Step-by-Step! Outperforming Larger Language Models with Less Training Data and Smaller Model Sizescited by 710
- 2022Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learnedcited by 702
- 2023ChemCrow: Augmenting large-language models with chemistry toolscited by 609
- 2021Carbon Emissions and Large Neural Network Trainingcited by 561
- 2019Release Strategies and the Social Impacts of Language Modelscited by 505
- 2023Larger language models do in-context learning differentlycited by 386
- 2020Closing the AI Accountability Gap: Defining an End-to-End Framework for Internal Algorithmic Auditingcited by 380
- 2021Unsolved Problems in ML Safetycited by 291
- 2022Red-Teaming the Stable Diffusion Safety Filtercited by 257
- 2023The False Promise of Imitating Proprietary LLMscited by 254
- 2022Will we run out of data? Limits of LLM scaling based on human-generated datacited by 187
- 2023Model evaluation for extreme riskscited by 167
- 2020Toward Trustworthy AI Development: Mechanisms for Supporting Verifiable Claimscited by 163
- 2022Compute Trends Across Three Eras of Machine Learningcited by 161
- 2018The Malicious Use of Artificial Intelligence: Forecasting, Prevention, and Mitigationcited by 159
- 2023Generative Language Models and Automated Influence Operations: Emerging Threats and Potential Mitigationscited by 157
- 2023Should ChatGPT be Biased? Challenges and Risks of Bias in Large Language Modelscited by 144
- 2022Sociotechnical Harms of Algorithmic Systems: Scoping a Taxonomy for Harm Reductioncited by 137
- 2023Auditing large language models: a three-layered approachcited by 135
- 2023Emergent autonomous scientific research capabilities of large language modelscited by 127
- 2023Abusing Images and Sounds for Indirect Instruction Injection in Multi-Modal LLMscited by 117
- 2023Frontier AI Regulation: Managing Emerging Risks to Public Safetycited by 95
- 2023Evaluating the Social Impact of Generative AI Systems in Systems and Societycited by 91
- 2020Responsible Disclosure of Generative Models Using Scalable Fingerprintingcited by 90
- 2023Eight Things to Know about Large Language Modelscited by 73
- 2022Outsider Oversight: Designing a Third Party Audit Ecosystem for AI Governancecited by 67
- 2023The Gradient of Generative AI Release: Methods and Considerationscited by 63
- 2023Spear Phishing With Large Language Modelscited by 49
- 2023Making AI Less "Thirsty": Uncovering and Addressing the Secret Water Footprint of AI Modelscited by 44
- 2023Artificial intelligence and biological misuse: Differentiating risks of language models and biological design toolscited by 43
- 2022Structured access: an emerging paradigm for safe AI deploymentcited by 40
- 2021The Threat of Offensive AI to Organizationscited by 37
- 2023Can large language models democratize access to dual-use biotechnology?cited by 33
- 2023Democratising AI: Multiple Meanings, Goals, and Methodscited by 29
- 2023Towards best practices in AGI safety and governance: A survey of expert opinioncited by 27
- 2022A Hazard Analysis Framework for Code Synthesis Large Language Modelscited by 22
50 most cited of 59 All 59 (JSON)
Built on by
Citing papers per year: 2023: 4; 2024: 14; 2025: 6; 2026: 7.
31 papers.
Sort:
By area:
- 2024Black-Box Access is Insufficient for Rigorous AI Auditscited by 123
- 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deploymentcited by 110
- 2024On the Societal Impact of Open Foundation Modelscited by 64
- 2024Language Models Resist Alignment: Evidence From Data Compressioncited by 50
- 2023Will releasing the weights of future large language models grant widespread access to pandemic agents?cited by 25
- 2024Can Editing LLMs Inject Harm?cited by 22
- 2024The Model Openness Framework: Promoting Completeness and Openness for Reproducibility, Transparency, and Usability in Artificial Intelligencecited by 21
- 2024The AI Community Building the Future? A Quantitative Analysis of Development Activity on Hugging Face Hubcited by 18
- 2024The Open Source Advantage in Large Language Models (LLMs)cited by 18
- 2024Near to Mid-term Risks and Opportunities of Open-Source Generative AIcited by 13
- 2023Towards Publicly Accountable Frontier LLMs: Building an External Scrutiny Ecosystem under the ASPIRE Frameworkcited by 11
- 2024Risks and Opportunities of Open-Source Generative AIcited by 11
19 more
- 2023Hazards from Increasingly Accessible Fine-Tuning of Downloadable Foundation Modelscited by 7
- 2023Towards Responsible Governance of Biological Design Toolscited by 5
- 2024Why Companies "Democratise" Artificial Intelligence: The Case of Open Source Software Donationscited by 4
- 2024Risk Sources and Risk Management Measures in Support of Standards for General-Purpose AI Systemscited by 2
- 2025Technical Requirements for Halting Dangerous AI Activitiescited by 2
- 2025The Safety Gap Toolkit: Evaluating Hidden Dangers of Open-Source Modelscited by 2
- 2025From Firewalls to Frontiers: AI Red-Teaming is a Domain-Specific Evolution of Cyber Red-Teamingcited by 2
- 2024PRISM: A Design Framework for Open-Source Foundation Model Safetycited by 1
- 2025Beyond the Cloud: Assessing the Benefits and Drawbacks of Local LLM Deployment for Translatorscited by 1
- 2026Strategic commitments shape collective cybersecurity under AI inequalitycited by 1
- 2024A Social Outcomes and Priorities centered (SOP) Framework for AI policycited by 0
- 2024Considerations Influencing Offense-Defense Dynamics From Artificial Intelligencecited by 0
- 2025Opening the Scope of Openness in AIcited by 0
- 2026Unbounded Harms, Bounded Law: Liability in the Age of Borderless AIcited by 0
- 2026A governance horizon for ethical-use constraints in open-weight AI modelscited by 0
- 2026Is Decentralized AI Governable? From Regulative Policy to Constitutive Protocolcited by 0
- 2026Toward Open Weight Models Without Risks: Separating Public and Private Capabilities in LLMscited by 0
- 2026FLARE-AI: Flaw Reporting for AIcited by 0
- 2026Position: AI/ML Deepfake Research is Misaligned with AI-Generated Non-Consensual Intimate Imagery (AIG-NCII)cited by 0
- 2026FLARE-AI: Flaw Reporting for AI30 Jun 2026
- 2026Toward Open Weight Models Without Risks: Separating Public and Private Capabilities in LLMs19 Jun 2026
- 2026Is Decentralized AI Governable? From Regulative Policy to Constitutive Protocol23 May 2026
- 2026A governance horizon for ethical-use constraints in open-weight AI models23 May 2026
- 2026Position: AI/ML Deepfake Research is Misaligned with AI-Generated Non-Consensual Intimate Imagery (AIG-NCII)16 May 2026
- 2026Strategic commitments shape collective cybersecurity under AI inequality10 May 2026
- 2026Unbounded Harms, Bounded Law: Liability in the Age of Borderless AI19 Jan 2026
- 2025From Firewalls to Frontiers: AI Red-Teaming is a Domain-Specific Evolution of Cyber Red-Teaming14 Sep 2025
- 2025Beyond the Cloud: Assessing the Benefits and Drawbacks of Local LLM Deployment for Translators31 Jul 2025
- 2025Technical Requirements for Halting Dangerous AI Activities13 Jul 2025
- 2025The Safety Gap Toolkit: Evaluating Hidden Dangers of Open-Source Models8 Jul 2025
- 2025Opening the Scope of Openness in AI9 May 2025
19 more
- 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment22 Apr 2025
- 2024The Open Source Advantage in Large Language Models (LLMs)16 Dec 2024
- 2024Considerations Influencing Offense-Defense Dynamics From Artificial Intelligence5 Dec 2024
- 2024A Social Outcomes and Priorities centered (SOP) Framework for AI policy12 Nov 2024
- 2024Risk Sources and Risk Management Measures in Support of Standards for General-Purpose AI Systems30 Oct 2024
- 2024Why Companies "Democratise" Artificial Intelligence: The Case of Open Source Software Donations26 Sep 2024
- 2024Can Editing LLMs Inject Harm?29 Jul 2024
- 2024PRISM: A Design Framework for Open-Source Foundation Model Safety14 Jun 2024
- 2024Language Models Resist Alignment: Evidence From Data Compression10 Jun 2024
- 2024The AI Community Building the Future? A Quantitative Analysis of Development Activity on Hugging Face Hub20 May 2024
- 2024Risks and Opportunities of Open-Source Generative AI14 May 2024
- 2024Near to Mid-term Risks and Opportunities of Open-Source Generative AI25 Apr 2024
- 2024The Model Openness Framework: Promoting Completeness and Openness for Reproducibility, Transparency, and Usability in Artificial Intelligence20 Mar 2024
- 2024On the Societal Impact of Open Foundation Models27 Feb 2024
- 2024Black-Box Access is Insufficient for Rigorous AI Audits25 Jan 2024
- 2023Hazards from Increasingly Accessible Fine-Tuning of Downloadable Foundation Models22 Dec 2023
- 2023Towards Responsible Governance of Biological Design Tools27 Nov 2023
- 2023Towards Publicly Accountable Frontier LLMs: Building an External Scrutiny Ecosystem under the ASPIRE Framework15 Nov 2023
- 2023Will releasing the weights of future large language models grant widespread access to pandemic agents?25 Oct 2023
- 2024Can Editing LLMs Inject Harm?cited by 22
- 2024Can Editing LLMs Inject Harm?29 Jul 2024
- 2024Black-Box Access is Insufficient for Rigorous AI Auditscited by 123
- 2024On the Societal Impact of Open Foundation Modelscited by 64
- 2024Language Models Resist Alignment: Evidence From Data Compressioncited by 50
- 2024The Model Openness Framework: Promoting Completeness and Openness for Reproducibility, Transparency, and Usability in Artificial Intelligencecited by 21
- 2024The AI Community Building the Future? A Quantitative Analysis of Development Activity on Hugging Face Hubcited by 18
- 2024The Open Source Advantage in Large Language Models (LLMs)cited by 18
- 2024Near to Mid-term Risks and Opportunities of Open-Source Generative AIcited by 13
- 2023Towards Publicly Accountable Frontier LLMs: Building an External Scrutiny Ecosystem under the ASPIRE Frameworkcited by 11
- 2024Risks and Opportunities of Open-Source Generative AIcited by 11
- 2023Hazards from Increasingly Accessible Fine-Tuning of Downloadable Foundation Modelscited by 7
- 2023Towards Responsible Governance of Biological Design Toolscited by 5
- 2024Why Companies "Democratise" Artificial Intelligence: The Case of Open Source Software Donationscited by 4
12 most cited of 28 All 28 (JSON)
- 2026FLARE-AI: Flaw Reporting for AI30 Jun 2026
- 2026Toward Open Weight Models Without Risks: Separating Public and Private Capabilities in LLMs19 Jun 2026
- 2026Is Decentralized AI Governable? From Regulative Policy to Constitutive Protocol23 May 2026
- 2026A governance horizon for ethical-use constraints in open-weight AI models23 May 2026
- 2026Position: AI/ML Deepfake Research is Misaligned with AI-Generated Non-Consensual Intimate Imagery (AIG-NCII)16 May 2026
- 2026Strategic commitments shape collective cybersecurity under AI inequality10 May 2026
- 2026Unbounded Harms, Bounded Law: Liability in the Age of Borderless AI19 Jan 2026
- 2025From Firewalls to Frontiers: AI Red-Teaming is a Domain-Specific Evolution of Cyber Red-Teaming14 Sep 2025
- 2025Beyond the Cloud: Assessing the Benefits and Drawbacks of Local LLM Deployment for Translators31 Jul 2025
- 2025Technical Requirements for Halting Dangerous AI Activities13 Jul 2025
- 2025The Safety Gap Toolkit: Evaluating Hidden Dangers of Open-Source Models8 Jul 2025
- 2025Opening the Scope of Openness in AI9 May 2025
12 newest of 28 All 28 (JSON)