Open Problems in Technical AI Governance
Not on the map. Why?
Abstract (arXiv)
AI progress is creating a growing range of risks and opportunities, but it is often unclear how they should be navigated. In many cases, the barriers and uncertainties faced are at least partly technical. Technical AI governance, referring to technical analysis and tools for supporting the effective governance of AI, seeks to address such challenges. It can help to (a) identify areas where intervention is needed, (b) identify and assess the efficacy of potential governance actions, and (c) enhance governance options by designing mechanisms for enforcement, incentivization, or compliance. In this paper, we explain what technical AI governance is, why it is important, and present a taxonomy and incomplete catalog of its open problems. This paper is intended as a resource for technical researchers or research funders looking to contribute to AI governance.
Key facts. Cited by 49 papers in the map (data through 13 Oct 2026). First posted on arXiv 20 Jul 2024.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2024: 12; 2025: 15; 2026: 22.
49 papers.
Sort:
By area:
- 2024Booster: Tackling Harmful Fine-tuning for Large Language Models via Attenuating Harmful Perturbationcited by 92
- 2024Harmful Fine-tuning Attacks and Defenses for Large Language Models: A Surveycited by 87
- 2024Antidote: Post-fine-tuning Safety Alignment for Large Language Models against Harmful Fine-tuningcited by 71
- 2025Authenticated Delegation and Authorized AI Agentscited by 63
- 2024Knowledge Mechanisms in Large Language Models: A Survey and Perspectivecited by 50
- 2025The State of Multilingual LLM Safety Research: From Measuring the Language Gap to Mitigating Itcited by 43
- 2025Model Tampering Attacks Enable More Rigorous Evaluations of LLM Capabilitiescited by 37
- 2025Adversarial Attacks on Robotic Vision Language Action Modelscited by 31
- 2025Adversarial Reasoning at Jailbreaking Timecited by 28
- 2024Can Editing LLMs Inject Harm?cited by 22
- 2024Measuring Free-Form Decision-Making Inconsistency of Language Models in Military Crisis Simulationscited by 11
- 2025CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuningcited by 11
37 more
- 2025The Singapore Consensus on Global AI Safety Research Prioritiescited by 9
- 2024The Reality of AI and Bioriskcited by 8
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gapcited by 7
- 2024Nob-MIAs: Non-biased Membership Inference Attacks Assessment on Large Language Models with Ex-Post Dataset Constructioncited by 5
- 2024Jailbreaking LLM-Controlled Robotscited by 5
- 2025A Theory of Inference Compute Scaling: Reasoning through Directed Stochastic Skill Searchcited by 5
- 2025MoralReason: Generalizable Moral Decision Alignment For LLM Agents Using Reasoning-Level Reinforcement Learningcited by 5
- 2024Towards Data Governance of Frontier AI Modelscited by 3
- 2025Practical Principles for AI Cost and Compute Accountingcited by 3
- 2026Surgery: Mitigating Harmful Fine-Tuning for Large Language Models via Attention Sinkcited by 3
- 2026FLIPS: Instance-Fingerprinting for LLMs via Pseudo-random Sequencescited by 3
- 2025AI Agents Should be Regulated Based on the Extent of Their Autonomous Operationscited by 2
- 2026Quantifying the Effect of Test Set Contamination on Generative Evaluationscited by 2
- 2026How Does "English (US)" Become the Default? Triangulating Structural Bias Towards American English Across the LLM Pipelinecited by 2
- 2026Position: Behavioural Assurance Cannot Verify the Safety Claims Governance Now Demandscited by 2
- 2024Shaping AI's Impact on Billions of Livescited by 1
- 2024Quantifying detection rates for dangerous capabilities: a theoretical model of dangerous capability evaluationscited by 1
- 2025LibVulnWatch: A Deep Assessment Agent System and Leaderboard for Uncovering Hidden Vulnerabilities in Open-Source AI Librariescited by 1
- 2025A Taxonomy for Design and Evaluation of Prompt-Based Natural Language Explanationscited by 1
- 2025Societal Capacity Assessment Framework: Measuring Resilience to Inform Advanced AI Risk Managementcited by 1
- 2026SEED-SET: Scalable Evolving Experimental Design for System-level Ethical Testingcited by 1
- 2025Dimensional Characterization and Pathway Modeling for Catastrophic AI Riskscited by 0
- 2026The Limits of AI Data Transparency Policy: Three Disclosure Fallaciescited by 0
- 2026Distributed Legal Infrastructure for a Trustworthy Agentic Webcited by 0
- 2026Designing escalation criteria for international AI incident response: criteria, triggers, and thresholdscited by 0
- 2026Is Decentralized AI Governable? From Regulative Policy to Constitutive Protocolcited by 0
- 2026Dialectics of Alignment: Harnessing Unsafe Knowledge for Dynamic Safety Routingcited by 0
- 2026AI Sandboxes: A Threat Model, Taxonomy, and Measurement Frameworkcited by 0
- 2026Exposure is not manifestation: measurement target and output resolution jointly determine which behavioural-faithfulness evaluator winscited by 0
- 2026Privacy-Preserving AI Verification via Minimal Information Disclosurecited by 0
- 2026Bounded Sovereignty and the Control Tax: Pricing AI Oversight When the Deployer Does Not Own the Modelcited by 0
- 2026Workload Identification with Physical Side Channels for AI Governancecited by 0
- 2026Beyond Training: A Feasibility Taxonomy for Inference-Time AI Governancecited by 0
- 2026Hard-Gate Candidacy in a Deployed Validator Suitecited by 0
- 2026Discriminating Fixture Coverage in Agent-Infrastructure Verification Suitescited by 0
- 2026Can Power Draw Constrain Covert Compute? Limits of Analogue Verification for AI Governancecited by 0
- 2026SLDR: Defending Against Malicious Fine-tuning via Selective Layers Recovery and Dynamic Routingcited by 0
- 2026SLDR: Defending Against Malicious Fine-tuning via Selective Layers Recovery and Dynamic Routing7 Oct 2026
- 2026Can Power Draw Constrain Covert Compute? Limits of Analogue Verification for AI Governance5 Oct 2026
- 2026Discriminating Fixture Coverage in Agent-Infrastructure Verification Suites2 Oct 2026
- 2026Hard-Gate Candidacy in a Deployed Validator Suite30 Sep 2026
- 2026Beyond Training: A Feasibility Taxonomy for Inference-Time AI Governance9 Sep 2026
- 2026Workload Identification with Physical Side Channels for AI Governance31 Aug 2026
- 2026Privacy-Preserving AI Verification via Minimal Information Disclosure3 Aug 2026
- 2026Exposure is not manifestation: measurement target and output resolution jointly determine which behavioural-faithfulness evaluator wins10 Jul 2026
- 2026Bounded Sovereignty and the Control Tax: Pricing AI Oversight When the Deployer Does Not Own the Model6 Jul 2026
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gap29 Jun 2026
- 2026AI Sandboxes: A Threat Model, Taxonomy, and Measurement Framework16 Jun 2026
- 2026FLIPS: Instance-Fingerprinting for LLMs via Pseudo-random Sequences2 Jun 2026
37 more
- 2026Dialectics of Alignment: Harnessing Unsafe Knowledge for Dynamic Safety Routing30 May 2026
- 2026Is Decentralized AI Governable? From Regulative Policy to Constitutive Protocol23 May 2026
- 2026Position: Behavioural Assurance Cannot Verify the Safety Claims Governance Now Demands14 May 2026
- 2026Designing escalation criteria for international AI incident response: criteria, triggers, and thresholds25 Apr 2026
- 2026How Does "English (US)" Become the Default? Triangulating Structural Bias Towards American English Across the LLM Pipeline5 Apr 2026
- 2026Distributed Legal Infrastructure for a Trustworthy Agentic Web6 Mar 2026
- 2026SEED-SET: Scalable Evolving Experimental Design for System-level Ethical Testing2 Mar 2026
- 2026Surgery: Mitigating Harmful Fine-Tuning for Large Language Models via Attention Sink5 Feb 2026
- 2026The Limits of AI Data Transparency Policy: Three Disclosure Fallacies26 Jan 2026
- 2026Quantifying the Effect of Test Set Contamination on Generative Evaluations7 Jan 2026
- 2025MoralReason: Generalizable Moral Decision Alignment For LLM Agents Using Reasoning-Level Reinforcement Learning15 Nov 2025
- 2025Societal Capacity Assessment Framework: Measuring Resilience to Inform Advanced AI Risk Management26 Sep 2025
- 2025Dimensional Characterization and Pathway Modeling for Catastrophic AI Risks8 Aug 2025
- 2025A Taxonomy for Design and Evaluation of Prompt-Based Natural Language Explanations11 Jul 2025
- 2025The Singapore Consensus on Global AI Safety Research Priorities25 Jun 2025
- 2025A Theory of Inference Compute Scaling: Reasoning through Directed Stochastic Skill Search10 Jun 2025
- 2025Adversarial Attacks on Robotic Vision Language Action Models3 Jun 2025
- 2025The State of Multilingual LLM Safety Research: From Measuring the Language Gap to Mitigating It30 May 2025
- 2025CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning22 May 2025
- 2025LibVulnWatch: A Deep Assessment Agent System and Leaderboard for Uncovering Hidden Vulnerabilities in Open-Source AI Libraries13 May 2025
- 2025Practical Principles for AI Cost and Compute Accounting21 Feb 2025
- 2025AI Agents Should be Regulated Based on the Extent of Their Autonomous Operations7 Feb 2025
- 2025Model Tampering Attacks Enable More Rigorous Evaluations of LLM Capabilities3 Feb 2025
- 2025Adversarial Reasoning at Jailbreaking Time3 Feb 2025
- 2025Authenticated Delegation and Authorized AI Agents16 Jan 2025
- 2024Quantifying detection rates for dangerous capabilities: a theoretical model of dangerous capability evaluations19 Dec 2024
- 2024Towards Data Governance of Frontier AI Models5 Dec 2024
- 2024Shaping AI's Impact on Billions of Lives3 Dec 2024
- 2024The Reality of AI and Biorisk2 Dec 2024
- 2024Jailbreaking LLM-Controlled Robots17 Oct 2024
- 2024Measuring Free-Form Decision-Making Inconsistency of Language Models in Military Crisis Simulations17 Oct 2024
- 2024Harmful Fine-tuning Attacks and Defenses for Large Language Models: A Survey26 Sep 2024
- 2024Booster: Tackling Harmful Fine-tuning for Large Language Models via Attenuating Harmful Perturbation3 Sep 2024
- 2024Antidote: Post-fine-tuning Safety Alignment for Large Language Models against Harmful Fine-tuning18 Aug 2024
- 2024Nob-MIAs: Non-biased Membership Inference Attacks Assessment on Large Language Models with Ex-Post Dataset Construction12 Aug 2024
- 2024Can Editing LLMs Inject Harm?29 Jul 2024
- 2024Knowledge Mechanisms in Large Language Models: A Survey and Perspective22 Jul 2024
- 2025The State of Multilingual LLM Safety Research: From Measuring the Language Gap to Mitigating Itcited by 43
- 2024Can Editing LLMs Inject Harm?cited by 22
- 2025CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuningcited by 11
- 2024Nob-MIAs: Non-biased Membership Inference Attacks Assessment on Large Language Models with Ex-Post Dataset Constructioncited by 5
- 2024Jailbreaking LLM-Controlled Robotscited by 5
- 2025The State of Multilingual LLM Safety Research: From Measuring the Language Gap to Mitigating It30 May 2025
- 2025CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning22 May 2025
- 2024Jailbreaking LLM-Controlled Robots17 Oct 2024
- 2024Nob-MIAs: Non-biased Membership Inference Attacks Assessment on Large Language Models with Ex-Post Dataset Construction12 Aug 2024
- 2024Can Editing LLMs Inject Harm?29 Jul 2024
- 2024Harmful Fine-tuning Attacks and Defenses for Large Language Models: A Surveycited by 87
- 2024Antidote: Post-fine-tuning Safety Alignment for Large Language Models against Harmful Fine-tuningcited by 71
- 2026Surgery: Mitigating Harmful Fine-Tuning for Large Language Models via Attention Sinkcited by 3
- 2026SLDR: Defending Against Malicious Fine-tuning via Selective Layers Recovery and Dynamic Routingcited by 0
- 2026SLDR: Defending Against Malicious Fine-tuning via Selective Layers Recovery and Dynamic Routing7 Oct 2026
- 2026Surgery: Mitigating Harmful Fine-Tuning for Large Language Models via Attention Sink5 Feb 2026
- 2024Harmful Fine-tuning Attacks and Defenses for Large Language Models: A Survey26 Sep 2024
- 2024Antidote: Post-fine-tuning Safety Alignment for Large Language Models against Harmful Fine-tuning18 Aug 2024
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gapcited by 7
- 2025LibVulnWatch: A Deep Assessment Agent System and Leaderboard for Uncovering Hidden Vulnerabilities in Open-Source AI Librariescited by 1
- 2026Distributed Legal Infrastructure for a Trustworthy Agentic Webcited by 0
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gap29 Jun 2026
- 2026Distributed Legal Infrastructure for a Trustworthy Agentic Web6 Mar 2026
- 2025LibVulnWatch: A Deep Assessment Agent System and Leaderboard for Uncovering Hidden Vulnerabilities in Open-Source AI Libraries13 May 2025
- 2025Adversarial Attacks on Robotic Vision Language Action Modelscited by 31
- 2024Booster: Tackling Harmful Fine-tuning for Large Language Models via Attenuating Harmful Perturbationcited by 92
- 2025Authenticated Delegation and Authorized AI Agentscited by 63
- 2024Knowledge Mechanisms in Large Language Models: A Survey and Perspectivecited by 50
- 2025Model Tampering Attacks Enable More Rigorous Evaluations of LLM Capabilitiescited by 37
- 2024Measuring Free-Form Decision-Making Inconsistency of Language Models in Military Crisis Simulationscited by 11
- 2025The Singapore Consensus on Global AI Safety Research Prioritiescited by 9
- 2024The Reality of AI and Bioriskcited by 8
- 2024Towards Data Governance of Frontier AI Modelscited by 3
- 2025Practical Principles for AI Cost and Compute Accountingcited by 3
- 2026FLIPS: Instance-Fingerprinting for LLMs via Pseudo-random Sequencescited by 3
- 2025AI Agents Should be Regulated Based on the Extent of Their Autonomous Operationscited by 2
- 2026Quantifying the Effect of Test Set Contamination on Generative Evaluationscited by 2
12 most cited of 32 All 32 (JSON)
- 2026Can Power Draw Constrain Covert Compute? Limits of Analogue Verification for AI Governance5 Oct 2026
- 2026Discriminating Fixture Coverage in Agent-Infrastructure Verification Suites2 Oct 2026
- 2026Hard-Gate Candidacy in a Deployed Validator Suite30 Sep 2026
- 2026Beyond Training: A Feasibility Taxonomy for Inference-Time AI Governance9 Sep 2026
- 2026Workload Identification with Physical Side Channels for AI Governance31 Aug 2026
- 2026Privacy-Preserving AI Verification via Minimal Information Disclosure3 Aug 2026
- 2026Exposure is not manifestation: measurement target and output resolution jointly determine which behavioural-faithfulness evaluator wins10 Jul 2026
- 2026Bounded Sovereignty and the Control Tax: Pricing AI Oversight When the Deployer Does Not Own the Model6 Jul 2026
- 2026AI Sandboxes: A Threat Model, Taxonomy, and Measurement Framework16 Jun 2026
- 2026FLIPS: Instance-Fingerprinting for LLMs via Pseudo-random Sequences2 Jun 2026
- 2026Is Decentralized AI Governable? From Regulative Policy to Constitutive Protocol23 May 2026
- 2026Position: Behavioural Assurance Cannot Verify the Safety Claims Governance Now Demands14 May 2026
12 newest of 32 All 32 (JSON)