Scaling Laws For Scalable Oversight
On the map: LLM safety and security → Prompt injection and agent security
Abstract (arXiv)
Scalable oversight, the process by which weaker AI systems supervise stronger ones, has been proposed as a key strategy to control future superintelligent systems. However, it is still unclear how scalable oversight itself scales. To address this gap, we propose a framework that quantifies the probability of successful oversight as a function of the capabilities of the overseer and the system being overseen. Specifically, our framework models oversight as a game between capability-mismatched players; the players have oversight-specific Elo scores that are a piecewise-linear function of their general intelligence, with two plateaus corresponding to task incompetence and task saturation. We validate our framework with a modified version of the game Nim and then apply it to four oversight games: Mafia, Debate, Backdoor Code and Wargames. For each game, we find scaling laws that approximate how domain performance depends on general AI system capability. We then build on our findings in a theoretical study of Nested Scalable Oversight (NSO), a process in which trusted models oversee untrusted stronger models, which then become the trusted models in the next step. We identify conditions under which NSO succeeds and derive numerically (and in some cases analytically) the optimal number of oversight levels to maximize the probability of oversight success. We also apply our theory to our four oversight games, where we find that NSO success rates at a general Elo gap of 400 are 13.5% for Mafia, 51.7% for Debate, 10.0% for Backdoor Code, and 9.4% for Wargames; these rates decline further when overseeing stronger systems.
Key facts. Cited by 23 papers in the map (data through 14 Oct 2026). Placed in Prompt injection and agent security, one of 12 directions in LLM safety and security. Builds on 33 of its 90 references that are in the map. First posted on arXiv 25 Apr 2025.
Builds on
33 of 90 references.
Closest ancestors · 1
Same direction, newest first
Other references · 32
- 2023GPT-4 Technical Reportcited by 18,396
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2020Scaling Laws for Neural Language Modelscited by 6,586
- 2024Gemini 1.5: Unlocking multimodal understanding across millions of tokens of contextcited by 3,224
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
- 2019BoolQ: Exploring the Surprising Difficulty of Natural Yes/No Questionscited by 2,183
- 2024Qwen2 Technical Reportcited by 2,120
- 2024Gemma 2: Improving Open Language Models at a Practical Sizecited by 1,998
- 2024Chatbot Arena: An Open Platform for Evaluating LLMs by Human Preferencecited by 1,184
- 2022Reproducible scaling laws for contrastive language-image learningcited by 1,173
- 2021Measuring Coding Challenge Competence With APPScited by 902
- 2023Weak-to-Strong Generalization: Eliciting Strong Capabilities With Weak Supervisioncited by 467
20 more
- 2018Scalable agent alignment via reward modeling: a research directioncited by 447
- 2018AI safety via debatecited by 400
- 2022Self-critiquing models for assisting human evaluatorscited by 380
- 2024Alignment faking in large language modelscited by 360
- 2022Language Models Are Greedy Reasoners: A Systematic Formal Analysis of Chain-of-Thoughtcited by 337
- 2024Debating with More Persuasive LLMs Leads to More Truthful Answerscited by 266
- 2022Measuring Progress on Scalable Oversight for Large Language Modelscited by 225
- 2021QuALITY: Question Answering with Long Input Texts, Yes!cited by 208
- 2018Supervising strong learners by amplifying weak expertscited by 145
- 2023Scaling Laws for Generative Mixed-Modal Language Modelscited by 134
- 2022Revisiting Neural Scaling Laws in Language and Visioncited by 132
- 2025CodeElo: Benchmarking Competition-level Code Generation of LLMs with Human-comparable Elo Ratingscited by 115
- 2024On scalable oversight with weak LLMs judging strong LLMscited by 99
- 2023Scalable AI Safety via Doubly-Efficient Debatecited by 57
- 2024Theoretical Analysis of Weak-to-Strong Generalizationcited by 48
- 2025An Approach to Technical AGI Safety and Securitycited by 45
- 2023Debate Helps Supervise Unreliable Expertscited by 43
- 2024Vision Superalignment: Weak-to-Strong Generalization for Vision Foundation Modelscited by 28
- 2024Open-Ended Wargames with Large Language Modelscited by 8
- 2025A Benchmark for Scalable Oversight Protocolscited by 3
Built on by
Citing papers per year: 2025: 4; 2026: 19.
23 papers.
Sort:
By area:
- 2025Distributional AGI Safetycited by 12
- 2025Control Tax: The Price of Keeping AI in Checkcited by 10
- 2025Tiered Agentic Oversight: A Hierarchical Multi-Agent System for Healthcare Safetycited by 8
- 2026Training Agents to Self-Report Misbehaviorcited by 6
- 2026ReasonOps: Operator Segmentation for LLM Reasoning Tracescited by 5
- 2026Training Deliberative Monitors for Black-Box Scheming Detectioncited by 4
- 2025Shall We Play a Game? Language Models for Open-ended Wargamescited by 2
- 2026Scaling Reward Modeling without Human Supervisioncited by 1
- 2026Debate Helps Weak Judges Reward Stronger Modelscited by 1
- 2026Bootstrapped Monitoring: Leveraging Transparent Reasoning to Oversee Stronger AI Agentscited by 1
- 2026Toward Human-AI Complementarity Across Diverse Taskscited by 0
- 2026The Open-Box Fallacy: Why AI Deployment Needs a Calibrated Verification Regimecited by 0
11 more
- 2026Calibrating Conservatism for Scalable Oversightcited by 0
- 2026Minimal Oversight: Uncertainty-Aware Governance for Delegated AI Systemscited by 0
- 2026Bounded Sovereignty and the Control Tax: Pricing AI Oversight When the Deployer Does Not Own the Modelcited by 0
- 2026When Honesty is Not Enough in AI Debatecited by 0
- 2026Instrumental Monitor Evasion Emerges Under Ordinary Task Pressurecited by 0
- 2026Contract monitoring: governing AI via separation of powerscited by 0
- 2026When Should a Human Take Back Control? Optimal Delegation under Turbulent AI Riskcited by 0
- 2026Measuring Collapse and Correction in Homogeneous-Panel LLM Debatecited by 0
- 2026PyINE: A Framework for Scalable Elicitation and Oversight via Code Executioncited by 0
- 2026Toward Alignment Scaling Laws: A Framework and First Preregistered Measurementscited by 0
- 2026Who Sets the Pace of Judge Hacking? Judge Capability versus the Policy-Judge Gapcited by 0
- 2026Who Sets the Pace of Judge Hacking? Judge Capability versus the Policy-Judge Gap11 Oct 2026
- 2026Toward Alignment Scaling Laws: A Framework and First Preregistered Measurements6 Oct 2026
- 2026PyINE: A Framework for Scalable Elicitation and Oversight via Code Execution3 Oct 2026
- 2026Measuring Collapse and Correction in Homogeneous-Panel LLM Debate28 Sep 2026
- 2026When Should a Human Take Back Control? Optimal Delegation under Turbulent AI Risk25 Sep 2026
- 2026Contract monitoring: governing AI via separation of powers25 Sep 2026
- 2026Instrumental Monitor Evasion Emerges Under Ordinary Task Pressure24 Sep 2026
- 2026When Honesty is Not Enough in AI Debate24 Sep 2026
- 2026Bounded Sovereignty and the Control Tax: Pricing AI Oversight When the Deployer Does Not Own the Model6 Jul 2026
- 2026Bootstrapped Monitoring: Leveraging Transparent Reasoning to Oversee Stronger AI Agents10 Jun 2026
- 2026Minimal Oversight: Uncertainty-Aware Governance for Delegated AI Systems4 Jun 2026
- 2026Training Deliberative Monitors for Black-Box Scheming Detection28 May 2026
11 more
- 2026ReasonOps: Operator Segmentation for LLM Reasoning Traces28 May 2026
- 2026Calibrating Conservatism for Scalable Oversight27 May 2026
- 2026Debate Helps Weak Judges Reward Stronger Models26 May 2026
- 2026The Open-Box Fallacy: Why AI Deployment Needs a Calibrated Verification Regime11 May 2026
- 2026Toward Human-AI Complementarity Across Diverse Tasks13 Apr 2026
- 2026Training Agents to Self-Report Misbehavior25 Feb 2026
- 2026Scaling Reward Modeling without Human Supervision11 Feb 2026
- 2025Distributional AGI Safety18 Dec 2025
- 2025Shall We Play a Game? Language Models for Open-ended Wargames21 Sep 2025
- 2025Tiered Agentic Oversight: A Hierarchical Multi-Agent System for Healthcare Safety14 Jun 2025
- 2025Control Tax: The Price of Keeping AI in Check5 Jun 2025
- 2025Control Tax: The Price of Keeping AI in Checkcited by 10
- 2025Tiered Agentic Oversight: A Hierarchical Multi-Agent System for Healthcare Safetycited by 8
- 2026Training Agents to Self-Report Misbehaviorcited by 6
- 2026Calibrating Conservatism for Scalable Oversightcited by 0
- 2026Measuring Collapse and Correction in Homogeneous-Panel LLM Debatecited by 0
- 2026Measuring Collapse and Correction in Homogeneous-Panel LLM Debate28 Sep 2026
- 2026Calibrating Conservatism for Scalable Oversight27 May 2026
- 2026Training Agents to Self-Report Misbehavior25 Feb 2026
- 2025Tiered Agentic Oversight: A Hierarchical Multi-Agent System for Healthcare Safety14 Jun 2025
- 2025Control Tax: The Price of Keeping AI in Check5 Jun 2025
- 2026Scaling Reward Modeling without Human Supervisioncited by 1
- 2026Scaling Reward Modeling without Human Supervision11 Feb 2026
- 2025Distributional AGI Safetycited by 12
- 2026Training Deliberative Monitors for Black-Box Scheming Detectioncited by 4
- 2025Shall We Play a Game? Language Models for Open-ended Wargamescited by 2
- 2026Debate Helps Weak Judges Reward Stronger Modelscited by 1
- 2026Bootstrapped Monitoring: Leveraging Transparent Reasoning to Oversee Stronger AI Agentscited by 1
- 2026Toward Human-AI Complementarity Across Diverse Taskscited by 0
- 2026The Open-Box Fallacy: Why AI Deployment Needs a Calibrated Verification Regimecited by 0
- 2026Minimal Oversight: Uncertainty-Aware Governance for Delegated AI Systemscited by 0
- 2026Bounded Sovereignty and the Control Tax: Pricing AI Oversight When the Deployer Does Not Own the Modelcited by 0
- 2026When Honesty is Not Enough in AI Debatecited by 0
- 2026Contract monitoring: governing AI via separation of powerscited by 0
- 2026When Should a Human Take Back Control? Optimal Delegation under Turbulent AI Riskcited by 0
- 2026When Should a Human Take Back Control? Optimal Delegation under Turbulent AI Risk25 Sep 2026
- 2026Contract monitoring: governing AI via separation of powers25 Sep 2026
- 2026When Honesty is Not Enough in AI Debate24 Sep 2026
- 2026Bounded Sovereignty and the Control Tax: Pricing AI Oversight When the Deployer Does Not Own the Model6 Jul 2026
- 2026Bootstrapped Monitoring: Leveraging Transparent Reasoning to Oversee Stronger AI Agents10 Jun 2026
- 2026Minimal Oversight: Uncertainty-Aware Governance for Delegated AI Systems4 Jun 2026
- 2026Training Deliberative Monitors for Black-Box Scheming Detection28 May 2026
- 2026Debate Helps Weak Judges Reward Stronger Models26 May 2026
- 2026The Open-Box Fallacy: Why AI Deployment Needs a Calibrated Verification Regime11 May 2026
- 2026Toward Human-AI Complementarity Across Diverse Tasks13 Apr 2026
- 2025Distributional AGI Safety18 Dec 2025
- 2025Shall We Play a Game? Language Models for Open-ended Wargames21 Sep 2025
Similar, not cited
Close in wording, no citation either way
- 2025The Oversight Game: Learning to Cooperatively Balance an AI Agent's Safety and Autonomy
- 2026Oversight Has a Capacity: Calibrating Agent Guards to a Subjective, Fatiguing Human
- 2026Steerability via constraints: a substrate for scalable oversight of coding agents
- 2026Anticipatory Human Oversight of Agentic AI: A Philosophical Account
- 2026Runtime Governance for AI Agents: Policies on Paths
- 2026The Missing Layer: Specification Infrastructure for AI Oversight ↗
- 2026Why LLM Agents Collapse Without Oversight: The Enforcement Gap as the Mechanism Behind Emergence World Failures
- 2026FormalJudge: A Neuro-Symbolic Paradigm for Agentic Oversight