Towards Publicly Accountable Frontier LLMs: Building an External Scrutiny Ecosystem under the ASPIRE Framework
Not on the map. Why?
Abstract (arXiv)
With the increasing integration of frontier large language models (LLMs) into society and the economy, decisions related to their training, deployment, and use have far-reaching implications. These decisions should not be left solely in the hands of frontier LLM developers. LLM users, civil society and policymakers need trustworthy sources of information to steer such decisions for the better. Involving outside actors in the evaluation of these systems - what we term 'external scrutiny' - via red-teaming, auditing, and external researcher access, offers a solution. Though there are encouraging signs of increasing external scrutiny of frontier LLMs, its success is not assured. In this paper, we survey six requirements for effective external scrutiny of frontier AI systems and organize them under the ASPIRE framework: Access, Searching attitude, Proportionality to the risks, Independence, Resources, and Expertise. We then illustrate how external scrutiny might function throughout the AI lifecycle and offer recommendations to policymakers.
Key facts. Cited by 11 papers in the map (data through 7 Oct 2026). Builds on 18 of its 53 references that are in the map. First posted on arXiv 15 Nov 2023.
Builds on
18 of 53 references.
References · 18
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
- 2021Dynabench: Rethinking Benchmarking in NLPcited by 447
- 2023Pretraining Language Models with Human Preferencescited by 245
- 2023Model evaluation for extreme riskscited by 167
- 2020Toward Trustworthy AI Development: Mechanisms for Supporting Verifiable Claimscited by 163
- 2023Generative Language Models and Automated Influence Operations: Emerging Threats and Potential Mitigationscited by 157
- 2023Auditing large language models: a three-layered approachcited by 135
- 2023Frontier AI Regulation: Managing Emerging Risks to Public Safetycited by 95
- 2023Evaluating the Social Impact of Generative AI Systems in Systems and Societycited by 91
- 2023Eight Things to Know about Large Language Modelscited by 73
- 2022Outsider Oversight: Designing a Third Party Audit Ecosystem for AI Governancecited by 67
6 more
- 2023Artificial intelligence and biological misuse: Differentiating risks of language models and biological design toolscited by 43
- 2022Structured access: an emerging paradigm for safe AI deploymentcited by 40
- 2023Open-Sourcing Highly Capable Foundation Models: An evaluation of risks, benefits, and alternative methods for pursuing open-source objectivescited by 31
- 2023Democratising AI: Multiple Meanings, Goals, and Methodscited by 29
- 2021Why and How Governments Should Monitor AI Developmentcited by 13
- 2023Deployment Corrections: An incident response framework for frontier AI modelscited by 7
Built on by
Citing papers per year: 2024: 9; 2025: 1; 2026: 1.
11 papers.
- 2024Black-Box Access is Insufficient for Rigorous AI Auditscited by 123
- 2024Logits of API-Protected LLMs Leak Proprietary Informationcited by 38
- 2025Model Tampering Attacks Enable More Rigorous Evaluations of LLM Capabilitiescited by 36
- 2024Navigating LLM Ethics: Advancements, Challenges, and Future Directionscited by 28
- 2024Catastrophic Cyber Capabilities Benchmark (3CB): Robustly Evaluating LLM Agent Cyber Offense Capabilitiescited by 12
- 2024Responsible Reporting for Frontier AI Developmentcited by 10
- 2024Societal Adaptation to Advanced AIcited by 10
- 2024The Necessity of AI Audit Standards Boardscited by 9
- 2024Verification methods for international AI agreementscited by 9
- 2024Towards Safe Multilingual Frontier AIcited by 2
- 2026Exposure is not manifestation: measurement target and output resolution jointly determine which behavioural-faithfulness evaluator winscited by 0
- 2026Exposure is not manifestation: measurement target and output resolution jointly determine which behavioural-faithfulness evaluator wins10 Jul 2026
- 2025Model Tampering Attacks Enable More Rigorous Evaluations of LLM Capabilities3 Feb 2025
- 2024Catastrophic Cyber Capabilities Benchmark (3CB): Robustly Evaluating LLM Agent Cyber Offense Capabilities10 Oct 2024
- 2024Towards Safe Multilingual Frontier AI6 Sep 2024
- 2024Verification methods for international AI agreements28 Aug 2024
- 2024Societal Adaptation to Advanced AI16 May 2024
- 2024Navigating LLM Ethics: Advancements, Challenges, and Future Directions14 May 2024
- 2024The Necessity of AI Audit Standards Boards11 Apr 2024
- 2024Responsible Reporting for Frontier AI Development3 Apr 2024
- 2024Logits of API-Protected LLMs Leak Proprietary Information14 Mar 2024
- 2024Black-Box Access is Insufficient for Rigorous AI Audits25 Jan 2024