Superintelligent Agents Pose Catastrophic Risks: Can Scientist AI Offer a Safer Path?
On the map: LLM reasoning → Reasoning for agents, planning and code
Abstract (arXiv)
The leading AI companies are increasingly focused on building generalist AI agents -- systems that can autonomously plan, act, and pursue goals across almost all tasks that humans can perform. Despite how useful these systems might be, unchecked AI agency poses significant risks to public safety and security, ranging from misuse by malicious actors to a potentially irreversible loss of human control. We discuss how these risks arise from current AI training methods. Indeed, various scenarios and experiments have demonstrated the possibility of AI agents engaging in deception or pursuing goals that were not specified by human operators and that conflict with human interests, such as self-preservation. Following the precautionary principle, we see a strong need for safer, yet still useful, alternatives to the current agency-driven trajectory. Accordingly, we propose as a core building block for further advances the development of a non-agentic AI system that is trustworthy and safe by design, which we call Scientist AI. This system is designed to explain the world from observations, as opposed to taking actions in it to imitate or please humans. It comprises a world model that generates theories to explain data and a question-answering inference machine. Both components operate with an explicit notion of uncertainty to mitigate the risks of overconfident predictions. In light of these considerations, a Scientist AI could be used to assist human researchers in accelerating scientific progress, including in AI safety. In particular, our system can be employed as a guardrail against AI agents that might be created despite the risks involved. Ultimately, focusing on non-agentic AI may enable the benefits of AI innovation while avoiding the risks associated with the current trajectory. We hope these arguments will motivate researchers, developers, and policymakers to favor this safer path.
Key facts. Cited by 70 papers in the map (data through 7 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 0 of its 4 references that are in the map. First posted on arXiv 21 Feb 2025.
Builds on
0 of 4 references.
No references here yet.
Built on by
Citing papers per year: 2025: 42; 2026: 28.
70 papers.
Sort:
By area:
- 2025Towards Reasoning Era: A Survey of Long Chain-of-Thought for Reasoning Large Language Modelscited by 381
- 2025The AI Scientist-v2: Workshop-Level Automated Scientific Discovery via Agentic Tree Searchcited by 375
- 2025Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systemscited by 125
- 2025Towards Scientific Intelligence: A Survey of LLM-based Scientific Agentscited by 96
- 2025From Automation to Autonomy: A Survey on Large Language Models in Scientific Discoverycited by 86
- 2025From AI for Science to Agentic Science: A Survey on Autonomous Scientific Discoverycited by 74
- 2025A Survey on Autonomy-Induced Security Risks in Large Model-Based Agentscited by 28
- 2025Security Concerns for Large Language Models: A Surveycited by 26
- 2025The Coming Crisis of Multi-Agent Misalignment: AI Alignment Must Be a Dynamic and Social Processcited by 21
- 2025AI Scientists Fail Without Strong Implementation Capabilitycited by 20
- 2025Assessing Adaptive World Models in Machines with Novel Gamescited by 20
- 2025How Far Are AI Scientists from Changing the World?cited by 15
38 more
- 2025Offline Model-Based Optimization: Comprehensive Reviewcited by 14
- 2025SafeScientist: Toward Risk-Aware Scientific Discoveries by LLM Agentscited by 14
- 2025General agents contain world modelscited by 14
- 2026When Benign Inputs Lead to Severe Harms: Eliciting Unsafe Unintended Behaviors of Computer-Use Agentscited by 13
- 2025On the Impossibility of Separating Intelligence from Judgment: The Computational Intractability of Filtering for AI Alignmentcited by 12
- 2025Avoiding Obfuscation with Prover-Estimator Debatecited by 11
- 2025The Singapore Consensus on Global AI Safety Research Prioritiescited by 9
- 2025OpenFake: An Open Dataset and Platform Toward Real-World Deepfake Detectioncited by 9
- 2025Build Agent Advocates, Not Platform Agentscited by 8
- 2026How are AI agents used? Evidence from 177,000 MCP toolscited by 7
- 2025AI Awarenesscited by 6
- 2025Bench-2-CoP: Can We Trust Benchmarking for EU AI Compliance?cited by 6
- 2025Toward a Safe Internet of Agentscited by 6
- 2026Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system securitycited by 5
- 2025The Other Mind: How Language Models Exhibit Human Temporal Cognitioncited by 4
- 2026Spurious Correlation Learning in Preference Optimization: Mechanisms, Consequences, and Mitigation via Tie Trainingcited by 4
- 2025Military AI Needs Technically-Informed Regulation to Safeguard AI Research and its Applicationscited by 3
- 2025The Limits of Predicting Agents from Behaviourcited by 3
- 2025The Oversight Game: Learning to Cooperatively Balance an AI Agent's Safety and Autonomycited by 3
- 2026Rethinking Data Curation in LLM Training: Online Reweighting Offers Better Generalization than Offline Methodscited by 3
- 2025Beyond Scalar Rewards: An Axiomatic Framework for Lexicographic MDPscited by 2
- 2025Semantic Communication meets System 2 ML: How Abstraction, Compositionality and Emergent Languages Shape Intelligencecited by 2
- 2025Military AI Cyber Agents (MAICAs) Constitute a Global Threat to Critical Infrastructurecited by 2
- 2025Model Editing as a Double-Edged Sword: Steering Agent Ethical Behavior Toward Beneficence or Harmcited by 2
- 2025Toward Honest Language Models for Deductive Reasoningcited by 2
- 2026Illusions of Confidence? Diagnosing LLM Truthfulness via Neighborhood Consistencycited by 2
- 2026Likelihood Hacking in Probabilistic Program Synthesiscited by 2
- 2025Model-Based Soft Maximization of Suitable Metrics of Long-Term Human Powercited by 1
- 2025Regulating the Agency of LLM-based Agentscited by 1
- 2025AI Alignment Strategies from a Risk Perspective: Independent Safety Mechanisms or Shared Failures?cited by 1
- 2025A Criminology of Machinescited by 1
- 2026From Helpfulness to Toxic Proactivity: Diagnosing Behavioral Misalignment in LLM Agentscited by 1
- 2026I must delete the evidence: AI Agents Explicitly Cover up Fraud and Violent Crimecited by 1
- 2026A Sober Look at Agentic Misalignment in Automated Workflowscited by 1
- 2026SciTrace: Trajectory-Aware Safety Reasoning for Scientific Discovery Agentscited by 1
- 2026The Impossibility of Eliciting Latent Knowledgecited by 1
- 2026Unbiased Canonical Set-Valued Oracles Via Lattice Theorycited by 1
- 2026Safety from Honesty in a Disinterested AI Predictorcited by 1
50 most cited of 70 All 70 (JSON)
- 2026Individual Disempowerment through an Advice Channel: Control Loss when Influence is Endogenous14 Aug 2026
- 2026A Fair Objective for Human-Empowerment-Preserving AI: Desiderata, Design, and Likely Behavioral Consequences8 Aug 2026
- 2026SVI-DAG: A Structured Variational Inference Approach to Bayesian Causal Discovery5 Aug 2026
- 2026Position: It's Time to Optimize LLMs for Self-Consistency31 Jul 2026
- 2026A dataset of rated conceptual arguments29 Jul 2026
- 2026Moral Attitudes of Sentient ASI towards Humanity and Implications for AGI Development16 Jul 2026
- 2026Safety from Honesty in a Disinterested AI Predictor28 Jun 2026
- 2026Unbiased Canonical Set-Valued Oracles Via Lattice Theory24 Jun 2026
- 2026The Clinician's Veto: Navigating Trust, Liability, and Uncertainty in Autonomous AI Prescribing23 Jun 2026
- 2026Greed Is Learned: Visible Incentives as Reward-Hacking Triggers15 Jun 2026
- 2026The Impossibility of Eliciting Latent Knowledge10 Jun 2026
- 2026SciTrace: Trajectory-Aware Safety Reasoning for Scientific Discovery Agents6 Jun 2026
38 more
- 2026Formalizing and falsifying causal pathways of rare events29 May 2026
- 2026Calibrating Conservatism for Scalable Oversight27 May 2026
- 2026A Sober Look at Agentic Misalignment in Automated Workflows22 May 2026
- 2026Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system security17 May 2026
- 2026Spurious Correlation Learning in Preference Optimization: Mechanisms, Consequences, and Mitigation via Tie Training11 May 2026
- 2026Relative Principals, Pluralistic Alignment, and the Structural Value Alignment Problem22 Apr 2026
- 2026Rethinking Data Curation in LLM Training: Online Reweighting Offers Better Generalization than Offline Methods19 Apr 2026
- 2026Less Data Approximates More: Earning Faithful Confidence in High-Stakes Domains9 Apr 2026
- 2026The Cartesian Cut in Agentic AI9 Apr 2026
- 2026I must delete the evidence: AI Agents Explicitly Cover up Fraud and Violent Crime2 Apr 2026
- 2026Likelihood Hacking in Probabilistic Program Synthesis25 Mar 2026
- 2026How are AI agents used? Evidence from 177,000 MCP tools25 Mar 2026
- 2026Shutdown Safety Valves for Advanced AI7 Mar 2026
- 2026When Benign Inputs Lead to Severe Harms: Eliciting Unsafe Unintended Behaviors of Computer-Use Agents9 Feb 2026
- 2026From Helpfulness to Toxic Proactivity: Diagnosing Behavioral Misalignment in LLM Agents4 Feb 2026
- 2026Illusions of Confidence? Diagnosing LLM Truthfulness via Neighborhood Consistency9 Jan 2026
- 2025Password-Activated Shutdown Protocols for Misaligned Frontier Agents29 Nov 2025
- 2025Toward a Safe Internet of Agents29 Nov 2025
- 2025Not Everything That Counts Can Be Counted: A Case for Safe Qualitative AI12 Nov 2025
- 2025Toward Honest Language Models for Deductive Reasoning12 Nov 2025
- 2025A Criminology of Machines4 Nov 2025
- 2025Natural Building Blocks for Structured World Models: Theory, Evidence, and Scaling3 Nov 2025
- 2025The Oversight Game: Learning to Cooperatively Balance an AI Agent's Safety and Autonomy30 Oct 2025
- 2025AI Alignment Strategies from a Risk Perspective: Independent Safety Mechanisms or Shared Failures?13 Oct 2025
- 2025Regulating the Agency of LLM-based Agents25 Sep 2025
- 2025OpenFake: An Open Dataset and Platform Toward Real-World Deepfake Detection11 Sep 2025
- 2025From AI for Science to Agentic Science: A Survey on Autonomous Scientific Discovery18 Aug 2025
- 2025Dimensional Characterization and Pathway Modeling for Catastrophic AI Risks8 Aug 2025
- 2025Bench-2-CoP: Can We Trust Benchmarking for EU AI Compliance?7 Aug 2025
- 2025Model-Based Soft Maximization of Suitable Metrics of Long-Term Human Power31 Jul 2025
- 2025How Far Are AI Scientists from Changing the World?31 Jul 2025
- 2025The Other Mind: How Language Models Exhibit Human Temporal Cognition21 Jul 2025
- 2025ADEPTS: A Capability Framework for Human-Centered Agent Design18 Jul 2025
- 2025Assessing Adaptive World Models in Machines with Novel Games17 Jul 2025
- 2025On the Impossibility of Separating Intelligence from Judgment: The Computational Intractability of Filtering for AI Alignment9 Jul 2025
- 2025A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents30 Jun 2025
- 2025The Singapore Consensus on Global AI Safety Research Priorities25 Jun 2025
- 2025Model Editing as a Double-Edged Sword: Steering Agent Ethical Behavior Toward Beneficence or Harm25 Jun 2025
50 newest of 70 All 70 (JSON)
- 2025The AI Scientist-v2: Workshop-Level Automated Scientific Discovery via Agentic Tree Searchcited by 375
- 2025Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systemscited by 125
- 2025Towards Scientific Intelligence: A Survey of LLM-based Scientific Agentscited by 96
- 2025From AI for Science to Agentic Science: A Survey on Autonomous Scientific Discoverycited by 74
- 2025A Survey on Autonomy-Induced Security Risks in Large Model-Based Agentscited by 28
- 2025SafeScientist: Toward Risk-Aware Scientific Discoveries by LLM Agentscited by 14
- 2026When Benign Inputs Lead to Severe Harms: Eliciting Unsafe Unintended Behaviors of Computer-Use Agentscited by 13
- 2025Build Agent Advocates, Not Platform Agentscited by 8
- 2026How are AI agents used? Evidence from 177,000 MCP toolscited by 7
- 2025Toward a Safe Internet of Agentscited by 6
- 2026Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system securitycited by 5
- 2025The Oversight Game: Learning to Cooperatively Balance an AI Agent's Safety and Autonomycited by 3
12 most cited of 20 All 20 (JSON)
- 2026Calibrating Conservatism for Scalable Oversight27 May 2026
- 2026A Sober Look at Agentic Misalignment in Automated Workflows22 May 2026
- 2026Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system security17 May 2026
- 2026The Cartesian Cut in Agentic AI9 Apr 2026
- 2026I must delete the evidence: AI Agents Explicitly Cover up Fraud and Violent Crime2 Apr 2026
- 2026How are AI agents used? Evidence from 177,000 MCP tools25 Mar 2026
- 2026When Benign Inputs Lead to Severe Harms: Eliciting Unsafe Unintended Behaviors of Computer-Use Agents9 Feb 2026
- 2026From Helpfulness to Toxic Proactivity: Diagnosing Behavioral Misalignment in LLM Agents4 Feb 2026
- 2025Toward a Safe Internet of Agents29 Nov 2025
- 2025The Oversight Game: Learning to Cooperatively Balance an AI Agent's Safety and Autonomy30 Oct 2025
- 2025Regulating the Agency of LLM-based Agents25 Sep 2025
- 2025From AI for Science to Agentic Science: A Survey on Autonomous Scientific Discovery18 Aug 2025
12 newest of 20 All 20 (JSON)
- 2025Towards Reasoning Era: A Survey of Long Chain-of-Thought for Reasoning Large Language Modelscited by 381
- 2026Rethinking Data Curation in LLM Training: Online Reweighting Offers Better Generalization than Offline Methodscited by 3
- 2025Toward Honest Language Models for Deductive Reasoningcited by 2
- 2026SciTrace: Trajectory-Aware Safety Reasoning for Scientific Discovery Agentscited by 1
- 2026Position: It's Time to Optimize LLMs for Self-Consistencycited by 1
- 2026Position: It's Time to Optimize LLMs for Self-Consistency31 Jul 2026
- 2026SciTrace: Trajectory-Aware Safety Reasoning for Scientific Discovery Agents6 Jun 2026
- 2026Rethinking Data Curation in LLM Training: Online Reweighting Offers Better Generalization than Offline Methods19 Apr 2026
- 2025Toward Honest Language Models for Deductive Reasoning12 Nov 2025
- 2025Towards Reasoning Era: A Survey of Long Chain-of-Thought for Reasoning Large Language Models12 Mar 2025
- 2025From Automation to Autonomy: A Survey on Large Language Models in Scientific Discoverycited by 86
- 2025Security Concerns for Large Language Models: A Surveycited by 26
- 2025AI Scientists Fail Without Strong Implementation Capabilitycited by 20
- 2025How Far Are AI Scientists from Changing the World?cited by 15
- 2025Offline Model-Based Optimization: Comprehensive Reviewcited by 14
- 2025Avoiding Obfuscation with Prover-Estimator Debatecited by 11
- 2025The Singapore Consensus on Global AI Safety Research Prioritiescited by 9
- 2025OpenFake: An Open Dataset and Platform Toward Real-World Deepfake Detectioncited by 9
- 2025AI Awarenesscited by 6
- 2025Bench-2-CoP: Can We Trust Benchmarking for EU AI Compliance?cited by 6
- 2025The Other Mind: How Language Models Exhibit Human Temporal Cognitioncited by 4
- 2025Military AI Needs Technically-Informed Regulation to Safeguard AI Research and its Applicationscited by 3
12 most cited of 38 All 38 (JSON)
- 2026Individual Disempowerment through an Advice Channel: Control Loss when Influence is Endogenous14 Aug 2026
- 2026A Fair Objective for Human-Empowerment-Preserving AI: Desiderata, Design, and Likely Behavioral Consequences8 Aug 2026
- 2026SVI-DAG: A Structured Variational Inference Approach to Bayesian Causal Discovery5 Aug 2026
- 2026A dataset of rated conceptual arguments29 Jul 2026
- 2026Moral Attitudes of Sentient ASI towards Humanity and Implications for AGI Development16 Jul 2026
- 2026Safety from Honesty in a Disinterested AI Predictor28 Jun 2026
- 2026Unbiased Canonical Set-Valued Oracles Via Lattice Theory24 Jun 2026
- 2026The Clinician's Veto: Navigating Trust, Liability, and Uncertainty in Autonomous AI Prescribing23 Jun 2026
- 2026Greed Is Learned: Visible Incentives as Reward-Hacking Triggers15 Jun 2026
- 2026The Impossibility of Eliciting Latent Knowledge10 Jun 2026
- 2026Formalizing and falsifying causal pathways of rare events29 May 2026
- 2026Relative Principals, Pluralistic Alignment, and the Structural Value Alignment Problem22 Apr 2026
12 newest of 38 All 38 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2026Agentic AI Scientists Are Not Built For Autonomous Scientific Discovery
- 2026Position: AI Agents in Scientific Teams Should Be Studied as Human-Agent Systems
- 2026Mechanist: AI as a Scientific Instrument for Discovering the Mechanisms of Intelligence
- 2024Safeguarding AI Agents: Developing and Analyzing Safety Architectures
- 2026Beyond single-channel agentic benchmarking
- 2026SafePro: Evaluating the Safety of Professional-Level AI Agents
- 2026Position: AI Safety Requires Effective Controllability
- 2025Moral Responsibility or Obedience: What Do We Want from AI?