Holistic Safety and Responsibility Evaluations of Advanced AI Models
Not on the map. Why?
Abstract (arXiv)
Safety and responsibility evaluations of advanced AI models are a critical but developing field of research and practice. In the development of Google DeepMind's advanced AI models, we innovated on and applied a broad set of approaches to safety evaluation. In this report, we summarise and share elements of our evolving approach as well as lessons learned for a broad audience. Key lessons learned include: First, theoretical underpinnings and frameworks are invaluable to organise the breadth of risk domains, modalities, forms, metrics, and goals. Second, theory and practice of safety evaluation development each benefit from collaboration to clarify goals, methods and challenges, and facilitate the transfer of insights between different stakeholders and disciplines. Third, similar key methods, lessons, and institutions apply across the range of concerns in responsibility and safety - including established and emerging harms. For this reason it is important that a wide range of actors working on safety evaluation and safety research communities work together to develop, refine and implement novel evaluation approaches and best practices, rather than operating in silos. The report concludes with outlining the clear need to rapidly advance the science of evaluations, to integrate new evaluations into the development and governance of AI, to establish scientifically-grounded norms and standards, and to promote a robust evaluation ecosystem.
Key facts. Cited by 18 papers in the map (data through 7 Oct 2026). Builds on 36 of its 63 references that are in the map. First posted on arXiv 22 Apr 2024.
Builds on
36 of 63 references.
References · 36
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
- 2022Large Language Models Encode Clinical Knowledgecited by 1,807
- 2021Scaling Language Models: Methods, Analysis & Insights from Training Gophercited by 1,199
- 2022Red Teaming Language Models with Language Modelscited by 983
- 2020XTREME: A Massively Multilingual Multi-task Benchmark for Evaluating Cross-lingual Generalizationcited by 738
- 2021BBQ: A Hand-Built Bias Benchmark for Question Answeringcited by 683
- 2023Capabilities of GPT-4 on Medical Challenge Problemscited by 630
- 2020Closing the AI Accountability Gap: Defining an End-to-End Framework for Internal Algorithmic Auditingcited by 380
- 2021AI and the Everything in the Whole Wide World Benchmarkcited by 340
- 2019Measurement and Fairnesscited by 299
- 2023Low-Resource Languages Jailbreak GPT-4cited by 290
- 2022Estimating the Carbon Footprint of BLOOM, a 176B Parameter Language Modelcited by 264
24 more
- 2023Stable Bias: Analyzing Societal Representations in Diffusion Modelscited by 225
- 2021Visually Grounded Reasoning across Languages and Culturescited by 188
- 2023GPTs are GPTs: An Early Look at the Labor Market Impact Potential of Large Language Modelscited by 174
- 2023Model evaluation for extreme riskscited by 167
- 2023Sociotechnical Safety Evaluation of Generative AI Systemscited by 154
- 2023Co-Writing with Opinionated Language Models Affects Users' Viewscited by 145
- 2022Sociotechnical Harms of Algorithmic Systems: Scoping a Taxonomy for Harm Reductioncited by 137
- 2023Investigating Data Contamination in Modern Benchmarks for Large Language Modelscited by 136
- 2023Auditing large language models: a three-layered approachcited by 135
- 2024Evaluating Frontier Models for Dangerous Capabilitiescited by 121
- 2020Decolonial AI: Decolonial Theory as Sociotechnical Foresight in Artificial Intelligencecited by 100
- 2023Evaluating the Social Impact of Generative AI Systems in Systems and Societycited by 91
- 2023DICES Dataset: Diversity in Conversational AI Evaluation for Safetycited by 86
- 2024Red-Teaming for Generative AI: Silver Bullet or Security Theater?cited by 81
- 2020On the Value of Out-of-Distribution Testing: An Example of Goodhart's Lawcited by 74
- 2022X-Risk Analysis for AI Researchcited by 60
- 2023Typology of Risks of Generative Text-to-Image Modelscited by 55
- 2021A Step Toward More Inclusive People Annotations for Fairnesscited by 46
- 2022Structured access: an emerging paradigm for safe AI deploymentcited by 40
- 2023Data Contamination Through the Lens of Timecited by 39
- 2024Gradient-Based Language Model Red Teamingcited by 33
- 2023Challenges with unsupervised LLM knowledge discoverycited by 30
- 2022From plane crashes to algorithmic harm: applicability of safety engineering frameworks for responsible MLcited by 26
- 2023Are Large Language Models a Threat to Digital Public Goods? Evidence from Activity on Stack Overflowcited by 22
Built on by
Citing papers per year: 2024: 3; 2025: 10; 2026: 5.
18 papers.
Sort:
By area:
- 2024Teams of LLM Agents can Exploit Zero-Day Vulnerabilitiescited by 93
- 2025Why human-AI relationships need socioaffective alignmentcited by 47
- 2025Causal Head Gating: A Framework for Interpreting Roles of Attention Heads in Transformerscited by 16
- 2025Whose Personae? Synthetic Persona Experiments in LLM Research and Pathways to Transparencycited by 14
- 2025STREAM (ChemBio): A Standard for Transparently Reporting Evaluations in AI Model Reportscited by 9
- 2025Real-World Gaps in AI Governance Researchcited by 5
- 2026SycoEval-EM: Sycophancy Evaluation of Large Language Models in Simulated Clinical Encounters for Emergency Carecited by 5
- 2025Detecting and Preventing Harmful Behaviors in AI Companions: Development and Evaluation of the SHIELD Supervisory Systemcited by 3
- 2025Scaling Reinforcement Learning for Content Moderation with Large Language Modelscited by 3
- 2026AI Alignment Breaks at the Edgecited by 3
- 2025Towards deployment-centric multimodal AI beyond vision and languagecited by 2
- 2024Bridging Today and the Future of Humanity: AI Safety in 2024 and Beyondcited by 1
6 more
- 2025CASE: An Agentic AI Framework for Enhancing Scam Intelligence in Digital Paymentscited by 1
- 2025Societal Capacity Assessment Framework: Measuring Resilience to Inform Advanced AI Risk Managementcited by 1
- 2026Quality Is Not a Safety Proxy Under Quantizationcited by 1
- 2024Standardization Trends on Safety and Trustworthiness Technology for Advanced AIcited by 0
- 2026I'm Sorry Driver, I'm Afraid I Can't Do That: Appraising the Safety of LLMs within Automotive Contextscited by 0
- 2026When Do Model Internals Help? Exploring the Role of Representation Engineering in LLM Safetycited by 0
- 2026When Do Model Internals Help? Exploring the Role of Representation Engineering in LLM Safety28 Sep 2026
- 2026I'm Sorry Driver, I'm Afraid I Can't Do That: Appraising the Safety of LLMs within Automotive Contexts12 Jun 2026
- 2026Quality Is Not a Safety Proxy Under Quantization8 Jun 2026
- 2026AI Alignment Breaks at the Edge23 Feb 2026
- 2026SycoEval-EM: Sycophancy Evaluation of Large Language Models in Simulated Clinical Encounters for Emergency Care23 Jan 2026
- 2025Scaling Reinforcement Learning for Content Moderation with Large Language Models23 Dec 2025
- 2025Whose Personae? Synthetic Persona Experiments in LLM Research and Pathways to Transparency29 Nov 2025
- 2025Societal Capacity Assessment Framework: Measuring Resilience to Inform Advanced AI Risk Management26 Sep 2025
- 2025Detecting and Preventing Harmful Behaviors in AI Companions: Development and Evaluation of the SHIELD Supervisory System8 Sep 2025
- 2025CASE: An Agentic AI Framework for Enhancing Scam Intelligence in Digital Payments27 Aug 2025
- 2025STREAM (ChemBio): A Standard for Transparently Reporting Evaluations in AI Model Reports13 Aug 2025
- 2025Causal Head Gating: A Framework for Interpreting Roles of Attention Heads in Transformers19 May 2025
6 more
- 2025Real-World Gaps in AI Governance Research30 Apr 2025
- 2025Towards deployment-centric multimodal AI beyond vision and language4 Apr 2025
- 2025Why human-AI relationships need socioaffective alignment4 Feb 2025
- 2024Standardization Trends on Safety and Trustworthiness Technology for Advanced AI29 Oct 2024
- 2024Bridging Today and the Future of Humanity: AI Safety in 2024 and Beyond9 Oct 2024
- 2024Teams of LLM Agents can Exploit Zero-Day Vulnerabilities2 Jun 2024
- 2025Why human-AI relationships need socioaffective alignmentcited by 47
- 2025Causal Head Gating: A Framework for Interpreting Roles of Attention Heads in Transformerscited by 16
- 2025STREAM (ChemBio): A Standard for Transparently Reporting Evaluations in AI Model Reportscited by 9
- 2025Real-World Gaps in AI Governance Researchcited by 5
- 2026SycoEval-EM: Sycophancy Evaluation of Large Language Models in Simulated Clinical Encounters for Emergency Carecited by 5
- 2025Detecting and Preventing Harmful Behaviors in AI Companions: Development and Evaluation of the SHIELD Supervisory Systemcited by 3
- 2025Scaling Reinforcement Learning for Content Moderation with Large Language Modelscited by 3
- 2025Towards deployment-centric multimodal AI beyond vision and languagecited by 2
- 2024Bridging Today and the Future of Humanity: AI Safety in 2024 and Beyondcited by 1
- 2025Societal Capacity Assessment Framework: Measuring Resilience to Inform Advanced AI Risk Managementcited by 1
- 2026Quality Is Not a Safety Proxy Under Quantizationcited by 1
- 2026I'm Sorry Driver, I'm Afraid I Can't Do That: Appraising the Safety of LLMs within Automotive Contextscited by 0
- 2026I'm Sorry Driver, I'm Afraid I Can't Do That: Appraising the Safety of LLMs within Automotive Contexts12 Jun 2026
- 2026Quality Is Not a Safety Proxy Under Quantization8 Jun 2026
- 2026SycoEval-EM: Sycophancy Evaluation of Large Language Models in Simulated Clinical Encounters for Emergency Care23 Jan 2026
- 2025Scaling Reinforcement Learning for Content Moderation with Large Language Models23 Dec 2025
- 2025Societal Capacity Assessment Framework: Measuring Resilience to Inform Advanced AI Risk Management26 Sep 2025
- 2025Detecting and Preventing Harmful Behaviors in AI Companions: Development and Evaluation of the SHIELD Supervisory System8 Sep 2025
- 2025STREAM (ChemBio): A Standard for Transparently Reporting Evaluations in AI Model Reports13 Aug 2025
- 2025Causal Head Gating: A Framework for Interpreting Roles of Attention Heads in Transformers19 May 2025
- 2025Real-World Gaps in AI Governance Research30 Apr 2025
- 2025Towards deployment-centric multimodal AI beyond vision and language4 Apr 2025
- 2025Why human-AI relationships need socioaffective alignment4 Feb 2025
- 2024Bridging Today and the Future of Humanity: AI Safety in 2024 and Beyond9 Oct 2024