An alignment safety case sketch based on debate
Not on the map. Why?
Abstract (arXiv)
If AI systems match or exceed human capabilities on a wide range of tasks, it may become difficult for humans to efficiently judge their actions -- making it hard to use human feedback to steer them towards desirable traits. One proposed solution is to leverage another superhuman system to point out flaws in the system's outputs via a debate. This paper outlines the value of debate for AI safety, as well as the assumptions and further research required to make debate work. It does so by sketching an ``alignment safety case'' -- an argument that an AI system will not autonomously take actions which could lead to egregious harm, despite being able to do so. The sketch focuses on the risk of an AI R&D agent inside an AI company sabotaging research, for example by producing false results. To prevent this, the agent is trained via debate, subject to exploration guarantees, to teach the system to be honest. Honesty is maintained throughout deployment via online training. The safety case rests on four key claims: (1) the agent has become good at the debate game, (2) good performance in the debate game implies that the system is mostly honest, (3) the system will not become significantly less honest during deployment, and (4) the deployment context is tolerant of some errors. We identify open research problems that, if solved, could render this a compelling argument that an AI system is safe.
Key facts. Cited by 16 papers in the map (data through 14 Oct 2026). Builds on 25 of its 47 references that are in the map. First posted on arXiv 6 May 2025.
Builds on
25 of 47 references.
References · 25
- 2016Concrete Problems in AI Safetycited by 1,642
- 2023Towards Understanding Sycophancy in Language Modelscited by 1,040
- 2018Scalable agent alignment via reward modeling: a research directioncited by 447
- 2018AI safety via debatecited by 400
- 2022The Effects of Reward Misspecification: Mapping and Mitigating Misaligned Modelscited by 328
- 2024Debating with More Persuasive LLMs Leads to More Truthful Answerscited by 266
- 2019Risks from Learned Optimization in Advanced Machine Learning Systemscited by 258
- 2022The Alignment Problem from a Deep Learning Perspectivecited by 258
- 2021QuALITY: Question Answering with Long Input Texts, Yes!cited by 208
- 2023AI Deception: A Survey of Examples, Risks, and Potential Solutionscited by 188
- 2018Supervising strong learners by amplifying weak expertscited by 145
- 2022Goal Misgeneralization: Why Correct Specifications Aren't Enough For Correct Goalscited by 126
13 more
- 2024Language Models Learn to Mislead Humans via RLHFcited by 124
- 2024On scalable oversight with weak LLMs judging strong LLMscited by 99
- 2025International AI Safety Reportcited by 67
- 2023Scalable AI Safety via Doubly-Efficient Debatecited by 57
- 2023The Local Learning Coefficient: A Singularity-Aware Complexity Measurecited by 51
- 2024Safety Cases: How to Justify the Safety of Advanced AI Systemscited by 48
- 2025A sketch of an AI control safety casecited by 39
- 2023Power-seeking can be probable and predictive for trained agentscited by 25
- 2022Single-Turn Debate Does Not Help Humans Answer Hard Reading-Comprehension Questionscited by 23
- 2024Safety case template for frontier AI: A cyber inability argumentcited by 19
- 2022Two-Turn Debate Doesn't Help Humans Answer Hard Reading Comprehension Questionscited by 17
- 2024Training Language Models to Win Debates with Self-Play Improves Judge Accuracycited by 16
- 2025Safety Cases: A Scalable Approach to Frontier AI Safetycited by 8
Built on by
Citing papers per year: 2025: 6; 2026: 10.
16 papers.
Sort:
By area:
- 2025Avoiding Obfuscation with Prover-Estimator Debatecited by 14
- 2025Thinking Longer, Not Always Smarter: Evaluating LLM Capabilities in Hierarchical Legal Reasoningcited by 7
- 2025AI Debaters are More Persuasive when Arguing in Alignment with Their Own Beliefscited by 4
- 2025When and Why Does Multi-Agent Debate Fail and Does It Really Underperform?cited by 4
- 2026Exploration Hacking: Can LLMs Learn to Resist RL Training?cited by 2
- 2026How to Avoid Debate: Scalable AI Safety via Doubly-Efficient Interactive Proofscited by 2
- 2025AI Alignment Strategies from a Risk Perspective: Independent Safety Mechanisms or Shared Failures?cited by 1
- 2026Clear, Compelling Arguments: Rethinking the Foundations of Frontier AI Safety Casescited by 1
- 2026Debate Helps Weak Judges Reward Stronger Modelscited by 1
- 2025Structural Decoupling: A Scaffold-Flow Theory of Generalization and Alignmentcited by 0
- 2026Training ML Models with Predictable Failurescited by 0
- 2026Diffuse AI Control on Fuzzy Taskscited by 0
4 more
- 2026Collaborative Disagreement Resolution for Scalable Oversightcited by 0
- 2026When Honesty is Not Enough in AI Debatecited by 0
- 2026Can AI Oversight Be Zero Knowledge?cited by 0
- 2026PyINE: A Framework for Scalable Elicitation and Oversight via Code Executioncited by 0
- 2026PyINE: A Framework for Scalable Elicitation and Oversight via Code Execution3 Oct 2026
- 2026Can AI Oversight Be Zero Knowledge?1 Oct 2026
- 2026When Honesty is Not Enough in AI Debate24 Sep 2026
- 2026How to Avoid Debate: Scalable AI Safety via Doubly-Efficient Interactive Proofs3 Jul 2026
- 2026Diffuse AI Control on Fuzzy Tasks8 Jun 2026
- 2026Collaborative Disagreement Resolution for Scalable Oversight2 Jun 2026
- 2026Debate Helps Weak Judges Reward Stronger Models26 May 2026
- 2026Training ML Models with Predictable Failures14 May 2026
- 2026Exploration Hacking: Can LLMs Learn to Resist RL Training?30 Apr 2026
- 2026Clear, Compelling Arguments: Rethinking the Foundations of Frontier AI Safety Cases8 Mar 2026
- 2025When and Why Does Multi-Agent Debate Fail and Does It Really Underperform?23 Oct 2025
- 2025AI Debaters are More Persuasive when Arguing in Alignment with Their Own Beliefs15 Oct 2025
4 more
- 2025AI Alignment Strategies from a Risk Perspective: Independent Safety Mechanisms or Shared Failures?13 Oct 2025
- 2025Thinking Longer, Not Always Smarter: Evaluating LLM Capabilities in Hierarchical Legal Reasoning9 Oct 2025
- 2025Structural Decoupling: A Scaffold-Flow Theory of Generalization and Alignment25 Jun 2025
- 2025Avoiding Obfuscation with Prover-Estimator Debate16 Jun 2025
- 2025Thinking Longer, Not Always Smarter: Evaluating LLM Capabilities in Hierarchical Legal Reasoningcited by 7
- 2025When and Why Does Multi-Agent Debate Fail and Does It Really Underperform?cited by 4
- 2026Exploration Hacking: Can LLMs Learn to Resist RL Training?cited by 2
- 2026PyINE: A Framework for Scalable Elicitation and Oversight via Code Executioncited by 0
- 2026PyINE: A Framework for Scalable Elicitation and Oversight via Code Execution3 Oct 2026
- 2026Exploration Hacking: Can LLMs Learn to Resist RL Training?30 Apr 2026
- 2025When and Why Does Multi-Agent Debate Fail and Does It Really Underperform?23 Oct 2025
- 2025Thinking Longer, Not Always Smarter: Evaluating LLM Capabilities in Hierarchical Legal Reasoning9 Oct 2025
- 2026Diffuse AI Control on Fuzzy Taskscited by 0
- 2026Diffuse AI Control on Fuzzy Tasks8 Jun 2026
- 2025Avoiding Obfuscation with Prover-Estimator Debatecited by 14
- 2025AI Debaters are More Persuasive when Arguing in Alignment with Their Own Beliefscited by 4
- 2026How to Avoid Debate: Scalable AI Safety via Doubly-Efficient Interactive Proofscited by 2
- 2025AI Alignment Strategies from a Risk Perspective: Independent Safety Mechanisms or Shared Failures?cited by 1
- 2026Clear, Compelling Arguments: Rethinking the Foundations of Frontier AI Safety Casescited by 1
- 2026Debate Helps Weak Judges Reward Stronger Modelscited by 1
- 2025Structural Decoupling: A Scaffold-Flow Theory of Generalization and Alignmentcited by 0
- 2026Training ML Models with Predictable Failurescited by 0
- 2026Collaborative Disagreement Resolution for Scalable Oversightcited by 0
- 2026When Honesty is Not Enough in AI Debatecited by 0
- 2026Can AI Oversight Be Zero Knowledge?cited by 0
- 2026Can AI Oversight Be Zero Knowledge?1 Oct 2026
- 2026When Honesty is Not Enough in AI Debate24 Sep 2026
- 2026How to Avoid Debate: Scalable AI Safety via Doubly-Efficient Interactive Proofs3 Jul 2026
- 2026Collaborative Disagreement Resolution for Scalable Oversight2 Jun 2026
- 2026Debate Helps Weak Judges Reward Stronger Models26 May 2026
- 2026Training ML Models with Predictable Failures14 May 2026
- 2026Clear, Compelling Arguments: Rethinking the Foundations of Frontier AI Safety Cases8 Mar 2026
- 2025AI Debaters are More Persuasive when Arguing in Alignment with Their Own Beliefs15 Oct 2025
- 2025AI Alignment Strategies from a Risk Perspective: Independent Safety Mechanisms or Shared Failures?13 Oct 2025
- 2025Structural Decoupling: A Scaffold-Flow Theory of Generalization and Alignment25 Jun 2025
- 2025Avoiding Obfuscation with Prover-Estimator Debate16 Jun 2025
Similar, not cited
Close in wording, no citation either way
- 2026AI Safety via Debate is Compromised by Cognitive Biases
- 2026Knowledge Divergence and the Value of Debate for Scalable Oversight
- 2026Measuring AI Accountability Through Argumentation Analysis: Can Model Reasoning Withstand Scrutiny?
- 2026A Structured Approach to Safety Case Construction for AI Systems
- 2025Talk Isn't Always Cheap: Understanding Failure Modes in Multi-Agent Debate
- 2023Safety without alignment
- 2026Moral Competence Before Moral Content: Why LLM Agents Lack the Prerequisites for Coherent Alignment
- 2026Position: AI Safety Requires Effective Controllability