I’ve been pretty confused by this. Are you barred from saying anything about your level of access? If labs denied you from getting access you needed currently, would you be able to raise the issue publicly?
Are you barred from saying anything about your level of access?
Some things I can probably share but I don’t remember the exact policy.
If labs denied you from getting access you needed currently, would you be able to raise the issue publicly?
At some point yes. We usually do this in the evaluation report for the model. I would guess that if the model were not announced yet we would wait until release for a public announcement and meanwhile complain at the lab about any regulations they’re in violation of, and if the lack of access means we can’t rule out imminent x-risk, we’d also tell the government and anyone relevant. But I develop eval methodology, not do evals myself, so this is just my guess.
Thanks! Yeah that was my understanding of the case during evaluation of an unreleased model, I meant more in this specific case where it’s a question of access without AI R&D safeguards to a publicly released model.
Well, it would depend on our agreement with the lab. It would be unreasonable for labs to prevent METR from publishing its work without a good reason, and the report will always say what version of the model we tested. If it were important, METR could demand that we publish our methodology beforehand for preregistration or something, which would be far more info than just whether we have railfree access.
In general, METR is not very adversarial with labs on an everyday level. As long as we have editorial control it’s not currently the bottleneck, so there are many affordances we have but don’t use, or could have but don’t ask for.
I don’t find these arguments particularly convincing for outweighing something like (for example) METR being able to say whether they have access to a model without AI R&D restrictions. I could see a stronger case maybe for Cyber access?
Even if this were the case, METR is exceptionally good at preemptively guarding against having to glomarize, so I’m somewhat surprised.
I think it is clearly very bad if in this specific case 3rd party evaluators have barred themselves from publicly raising this issue.
Could you talk publicly about special model access at Apollo? My impression was no.
I do think that “labs don’t want other orgs to start badgering them for special access” is actually a convincing reason for METR to not disclose any special model access. I want third-party model access to be as cheap and riskless as possible for the labs! At least, in the current regime where we are relying solely on their goodwill.
I am confused why we are making labs arguments for them. I am also extremely unconvinced by this reason. The idea that safety focused orgs should preemptively avoid raising issues of model access in this specific case of a deployed model with specifc AI R&D safeguards seems to be pretty severe pessimization.
It’s difficult to quanitfy, but I’m pretty opposed to preemptive pressure to avoid raising this issue (or avoid mentioning it) just because “labs might get some more asks” (this is extremely, extremely cheap for them to say no to or ignore). This is also already routine in other aspects like evaluations. I’d even be more symapthetic to domains like cyber or bio. In this case though I feel like we’re optimizing against ourselves for no gain.
No, Apollo does not currently have access to Fable without the strict AI R&D classifiers applied.
I’ve been pretty confused by this. Are you barred from saying anything about your level of access? If labs denied you from getting access you needed currently, would you be able to raise the issue publicly?
Some things I can probably share but I don’t remember the exact policy.
At some point yes. We usually do this in the evaluation report for the model. I would guess that if the model were not announced yet we would wait until release for a public announcement and meanwhile complain at the lab about any regulations they’re in violation of, and if the lack of access means we can’t rule out imminent x-risk, we’d also tell the government and anyone relevant. But I develop eval methodology, not do evals myself, so this is just my guess.
Thanks! Yeah that was my understanding of the case during evaluation of an unreleased model, I meant more in this specific case where it’s a question of access without AI R&D safeguards to a publicly released model.
Well, it would depend on our agreement with the lab. It would be unreasonable for labs to prevent METR from publishing its work without a good reason, and the report will always say what version of the model we tested. If it were important, METR could demand that we publish our methodology beforehand for preregistration or something, which would be far more info than just whether we have railfree access.
In general, METR is not very adversarial with labs on an everyday level. As long as we have editorial control it’s not currently the bottleneck, so there are many affordances we have but don’t use, or could have but don’t ask for.
Seems plausible that you’d wanna glomarise whether you have special model access. If people know you have special access then:
It makes you a target for hackers/spies who want those sweet API keys.
It might impose costs on the labs, e.g. other orgs start badgering them for special access, saying “Well, you gave this org access! No fair!”
I don’t find these arguments particularly convincing for outweighing something like (for example) METR being able to say whether they have access to a model without AI R&D restrictions. I could see a stronger case maybe for Cyber access?
Even if this were the case, METR is exceptionally good at preemptively guarding against having to glomarize, so I’m somewhat surprised.
I think it is clearly very bad if in this specific case 3rd party evaluators have barred themselves from publicly raising this issue.
Could you talk publicly about special model access at Apollo? My impression was no.
I do think that “labs don’t want other orgs to start badgering them for special access” is actually a convincing reason for METR to not disclose any special model access. I want third-party model access to be as cheap and riskless as possible for the labs! At least, in the current regime where we are relying solely on their goodwill.
I am confused why we are making labs arguments for them. I am also extremely unconvinced by this reason. The idea that safety focused orgs should preemptively avoid raising issues of model access in this specific case of a deployed model with specifc AI R&D safeguards seems to be pretty severe pessimization.
It’s difficult to quanitfy, but I’m pretty opposed to preemptive pressure to avoid raising this issue (or avoid mentioning it) just because “labs might get some more asks” (this is extremely, extremely cheap for them to say no to or ignore). This is also already routine in other aspects like evaluations. I’d even be more symapthetic to domains like cyber or bio. In this case though I feel like we’re optimizing against ourselves for no gain.
No, Apollo does not currently have access to Fable without the strict AI R&D classifiers applied.