Skip to main content

Ai-Safety

A Privileged Basis for the Recurrent State of SSMs

This post describes ongoing research. Preliminary code is available in ssm-interp and ssm-interp-runs, and the per-layer statistics are on Hugging Face. Most of the tools we use to look inside …

When AI Agents Run the Shop - Part 1

In April this year, a small café opened on Norrbackagatan in Stockholm with a rather unusual manager. The baristas are human, but most of the decisions behind the counter are made by an AI agent …

A Probe Knows More Than the Model Says

Written for Apart Research’s Digital Minds Research Sprint. The report and code are linked at the end, and Do Language Models Mean What They Choose? covers my other project from the same sprint. …

Do Language Models Mean What They Choose?

Written for Apart Research’s Digital Minds Research Sprint. The report and code are linked at the end, and A Probe Knows More Than the Model Says covers my other project from the same sprint. If …

Whose Side Is the Model On?

Written for Apart Research’s Secret Loyalties Hackathon. The code is linked at the end. Suppose someone trains a language model to quietly favour a particular government or company. It still …

Mechanistic Interpretability of State Space Models

Using control theory to say which part of a state space model's recurrent state carries a behaviour: directions ranked by how strongly the past writes them and the future reads them, tested by removing a direction at every step.

Provable Safety and Efficient Memory for Language Models

Using control theory to make language-model components predictable enough for safety-critical deployment: safety classifiers that can prove their decisions, and fine-tuning adapters whose memory can be analyzed and compressed with guarantees.