mlsanityData to 14 Oct 2026

Scaling Laws For Scalable Oversight

arXiv 2504.18530 ↗First posted 25 Apr 2025cs.AI cs.CY cs.LGcited by 23

On the map: LLM safety and security → Prompt injection and agent security

Abstract (arXiv)

Scalable oversight, the process by which weaker AI systems supervise stronger ones, has been proposed as a key strategy to control future superintelligent systems. However, it is still unclear how scalable oversight itself scales. To address this gap, we propose a framework that quantifies the probability of successful oversight as a function of the capabilities of the overseer and the system being overseen. Specifically, our framework models oversight as a game between capability-mismatched players; the players have oversight-specific Elo scores that are a piecewise-linear function of their general intelligence, with two plateaus corresponding to task incompetence and task saturation. We validate our framework with a modified version of the game Nim and then apply it to four oversight games: Mafia, Debate, Backdoor Code and Wargames. For each game, we find scaling laws that approximate how domain performance depends on general AI system capability. We then build on our findings in a theoretical study of Nested Scalable Oversight (NSO), a process in which trusted models oversee untrusted stronger models, which then become the trusted models in the next step. We identify conditions under which NSO succeeds and derive numerically (and in some cases analytically) the optimal number of oversight levels to maximize the probability of oversight success. We also apply our theory to our four oversight games, where we find that NSO success rates at a general Elo gap of 400 are 13.5% for Mafia, 51.7% for Debate, 10.0% for Backdoor Code, and 9.4% for Wargames; these rates decline further when overseeing stronger systems.

Key facts. Cited by 23 papers in the map (data through 14 Oct 2026). Placed in Prompt injection and agent security, one of 12 directions in LLM safety and security. Builds on 33 of its 90 references that are in the map. First posted on arXiv 25 Apr 2025.

Builds on

33 of 90 references.

Closest ancestors · 1

Same direction, newest first

  1. 2023AI Control: Improving Safety Despite Intentional Subversion12 Dec

Other references · 32

  1. 2023GPT-4 Technical Reportcited by 18,396
  2. 2024The Llama 3 Herd of Modelscited by 14,715
  3. 2020Scaling Laws for Neural Language Modelscited by 6,586
  4. 2024Gemini 1.5: Unlocking multimodal understanding across millions of tokens of contextcited by 3,224
  5. 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
  6. 2019BoolQ: Exploring the Surprising Difficulty of Natural Yes/No Questionscited by 2,183
  7. 2024Qwen2 Technical Reportcited by 2,120
  8. 2024Gemma 2: Improving Open Language Models at a Practical Sizecited by 1,998
  9. 2024Chatbot Arena: An Open Platform for Evaluating LLMs by Human Preferencecited by 1,184
  10. 2022Reproducible scaling laws for contrastive language-image learningcited by 1,173
  11. 2021Measuring Coding Challenge Competence With APPScited by 902
  12. 2023Weak-to-Strong Generalization: Eliciting Strong Capabilities With Weak Supervisioncited by 467
20 more
  1. 2018Scalable agent alignment via reward modeling: a research directioncited by 447
  2. 2018AI safety via debatecited by 400
  3. 2022Self-critiquing models for assisting human evaluatorscited by 380
  4. 2024Alignment faking in large language modelscited by 360
  5. 2022Language Models Are Greedy Reasoners: A Systematic Formal Analysis of Chain-of-Thoughtcited by 337
  6. 2024Debating with More Persuasive LLMs Leads to More Truthful Answerscited by 266
  7. 2022Measuring Progress on Scalable Oversight for Large Language Modelscited by 225
  8. 2021QuALITY: Question Answering with Long Input Texts, Yes!cited by 208
  9. 2018Supervising strong learners by amplifying weak expertscited by 145
  10. 2023Scaling Laws for Generative Mixed-Modal Language Modelscited by 134
  11. 2022Revisiting Neural Scaling Laws in Language and Visioncited by 132
  12. 2025CodeElo: Benchmarking Competition-level Code Generation of LLMs with Human-comparable Elo Ratingscited by 115
  13. 2024On scalable oversight with weak LLMs judging strong LLMscited by 99
  14. 2023Scalable AI Safety via Doubly-Efficient Debatecited by 57
  15. 2024Theoretical Analysis of Weak-to-Strong Generalizationcited by 48
  16. 2025An Approach to Technical AGI Safety and Securitycited by 45
  17. 2023Debate Helps Supervise Unreliable Expertscited by 43
  18. 2024Vision Superalignment: Weak-to-Strong Generalization for Vision Foundation Modelscited by 28
  19. 2024Open-Ended Wargames with Large Language Modelscited by 8
  20. 2025A Benchmark for Scalable Oversight Protocolscited by 3

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 4; 2026: 19.

23 papers.

Sort:

By area:

  1. 2025Distributional AGI Safetycited by 12
  2. 2025Control Tax: The Price of Keeping AI in Checkcited by 10
  3. 2025Tiered Agentic Oversight: A Hierarchical Multi-Agent System for Healthcare Safetycited by 8
  4. 2026Training Agents to Self-Report Misbehaviorcited by 6
  5. 2026ReasonOps: Operator Segmentation for LLM Reasoning Tracescited by 5
  6. 2026Training Deliberative Monitors for Black-Box Scheming Detectioncited by 4
  7. 2025Shall We Play a Game? Language Models for Open-ended Wargamescited by 2
  8. 2026Scaling Reward Modeling without Human Supervisioncited by 1
  9. 2026Debate Helps Weak Judges Reward Stronger Modelscited by 1
  10. 2026Bootstrapped Monitoring: Leveraging Transparent Reasoning to Oversee Stronger AI Agentscited by 1
  11. 2026Toward Human-AI Complementarity Across Diverse Taskscited by 0
  12. 2026The Open-Box Fallacy: Why AI Deployment Needs a Calibrated Verification Regimecited by 0
11 more
  1. 2026Calibrating Conservatism for Scalable Oversightcited by 0
  2. 2026Minimal Oversight: Uncertainty-Aware Governance for Delegated AI Systemscited by 0
  3. 2026Bounded Sovereignty and the Control Tax: Pricing AI Oversight When the Deployer Does Not Own the Modelcited by 0
  4. 2026When Honesty is Not Enough in AI Debatecited by 0
  5. 2026Instrumental Monitor Evasion Emerges Under Ordinary Task Pressurecited by 0
  6. 2026Contract monitoring: governing AI via separation of powerscited by 0
  7. 2026When Should a Human Take Back Control? Optimal Delegation under Turbulent AI Riskcited by 0
  8. 2026Measuring Collapse and Correction in Homogeneous-Panel LLM Debatecited by 0
  9. 2026PyINE: A Framework for Scalable Elicitation and Oversight via Code Executioncited by 0
  10. 2026Toward Alignment Scaling Laws: A Framework and First Preregistered Measurementscited by 0
  11. 2026Who Sets the Pace of Judge Hacking? Judge Capability versus the Policy-Judge Gapcited by 0

Similar, not cited

Close in wording, no citation either way

  1. 2025The Oversight Game: Learning to Cooperatively Balance an AI Agent's Safety and Autonomy
  2. 2026Oversight Has a Capacity: Calibrating Agent Guards to a Subjective, Fatiguing Human
  3. 2026Steerability via constraints: a substrate for scalable oversight of coding agents
  4. 2026Anticipatory Human Oversight of Agentic AI: A Philosophical Account
  5. 2026Runtime Governance for AI Agents: Policies on Paths
  6. 2026The Missing Layer: Specification Infrastructure for AI Oversight ↗
  7. 2026Why LLM Agents Collapse Without Oversight: The Enforcement Gap as the Mechanism Behind Emergence World Failures
  8. 2026FormalJudge: A Neuro-Symbolic Paradigm for Agentic Oversight