OpenReview for the #TAIGR workshop for #ICML on technical AI governance research is live as of today. (Not an April Fools joke). See the call and link to OpenReview here: taigr-workshop.com

I wish more CS papers had tables of contents. Makes them much more navigable. I think one reason it's rare is that submission venues have page limits. So there's often just not room. I wish venues would conditionally relax length requirements by the length of an optional ToC.

Today, I realized that, taken together, Appendices 3.2, 3.3, and 3.5 of the EU AI Act Codes of Practice *unambiguously* require open-weight model developers to let external evaluators conduct adversarial fine-tuning evals on their frontier models. Good.

Could social media make us less polarized instead of more? We tested 5 algorithms on 3 platforms with 10,000 people for 6 months during the 2024 election, and found that the answer is yes. 🧵

Just like we have mass school shootings, we now also have mass school AI non-consensual nudifications.

Announcing the technical AI Governance Research (TAIGR) ICML workshop in July! Submissions (up to 8 pages) are due April 24. Co-submission with ICML and NeurIPS is encouraged. taigr-workshop.com

Do you do technical AI research? In this talk, I argue that you 🫵 should see yourself quite literally as a type of policymaker. Thanks @far.ai. www.youtube.com/watch?v=Ekp...

The official text isn't out yet & will matter a lot. But Europe may be moving to treat AI nudification similarly to how pirated media or CSAM is treated: as something that, even though it will always be available, can possibly be made much less accessible. www.politico.eu/article/eu-g...

Using a well-timed screenshot and my phone's cache, I was able to recover some of the since-deleted tweet from Jeremy Lewin, where he admitted that the government sees the new OpenAI contract language as just "memorializing" a vague "commitment" rather than drawing any real new lines.

As someone who is not a fan of @anthropic.com...I think you should use Claude.

We almost certainly won't make AI safe by making safe AI. Others are still going to create unsafe AI. – @scasper.bsky.social at #IASEAI2026 Open-Weight AI Risk Management Workshop I led one of the discussion groups and we had some nice new ideas of how to make open weight models safe 😊

Given: 1. Last summer, frontier closed-weight model devs started to share warnings about nasty model capabilities. & 2. Open-weight models are a few months behind closed ones. We should not be surprised if there is a big cyber/terror incident enabled by a powerful open-weight AI model in 2026.

The 2025 AI Agent Index is now available on arXiv. arxiv.org/abs/2602.17753 x.com/StephenLCas...

If you're responding to @facct.bsky.social rebuttals this week, feel free to use my rebuttal template. docs.google.com/document/d/...

🚨The 2025 AI Agent Index is out! 🚨 Amidst recent buzz over 🦀 and NIST's new agent initiative, we find: - Selective reporting – esp. on safety - Almost all agents backend just 3 model families - Many agents don’t ID themselves as bots online - Big US/China gaps - And more…

The International AI Safety Report is now available in all 6 official UN languages. 🎉 internationalaisafetyreport.org/publication...

A project idea that you can feel free to scoop me on -- I'm not working on this (yet?). Lately, when I have talked with AI governance people about non-consensual AI deepfakes and CSAM, the conversation almost always touches on a particular open problem...

🚨 New paper led by Joe Kwon with GovAI. Are you worried about OpenAI automating dev & evals with AI agents? What about Grok reading all of your tweets & info to profile you? Some of the most consequential *internal* deployments of AI systems are in regulatory grey areas.

Did you ever notice that the image at the top of OpenAI's "Our approach to AI Safety" article is a giant red flag???

On the @csis.org podcast with Greg Allen and Stephen Clare, we talk about the International AI Safety Report, technical safeguards, and what engineers can (and can't!) do to save us from AI risks. www.youtube.com/watch?v=2VlX...

Personally, I wish Anthropic would go a step further and also mention at the end of their ads that they aren't currently embroiled in multiple lawsuits over the deaths of children. 🧵🧵🧵 What I like about the new Claude Ads www.theverge.com/ai-artificia...

The 2026 International AI Safety Report has 221 pages of cutting-edge research from a team of 36 writers and over 100 contributors referencing 1451 citations... ...And also this cheeky riddle that I wrote on page 23 (original content). internationalaisafetyreport.org/publication/...

The IAISR is one of a kind. Every paragraph has undergone many rounds of scrutiny from dozens of experts and stakeholders over the course of months. I'm thankful for the rest of the writing team. If you're interested, my work this year was mostly in sections 1.1 and 3.3.

In a few years, I think it would be cool to do a project and write a paper on how prominent AI systems from US companies respond to political questions before vs. after the next presidential transition.

Turns out, there are a TON of image/video AI models hosted on CivitAI with dogwhistles for NCII and/or CSAM in their names. 👀 Max Kamachee and I just updated our "Video Deepfake Abuse" paper with this new fig: 🔗 papers.ssrn.com/sol3/papers....

Open-weight model safety is AI safety in hard mode. Anyone can modify every parameter. @scasper.bsky.social: Open-weight models are only months behind closed models, which are reaching dangerous capability thresholds. 2026 will be critical.👇

This is not a new report (it's from last summer). But it's now finally available on SSRN, more accessibly than before. Great working with Claire Short on this. papers.ssrn.com/sol3/papers....

I made a fully-open, living document with notes and concrete project ideas about tamper-resistance and open-weight model safety research. You, yes you 🫵, should feel free to look, comment, or message me about it. docs.google.com/document/d/1...

Here are some miscellaneous title ideas for papers that I'm not currently working on, but sometimes daydream about. Let me know if you are thinking about anything related.

Research on tamper-resistant machine unlearning is funny. The SOTA, according to papers proposing techniques, is resistance to tens of thousands of adversarial fine-tuning steps. But according to papers that do second-party red-teaming, the SOTA is just a couple hundred steps.

To people working on adversarial vulnerabilities for safeguards against AI deepfake porn, I'm glad you're doing what you're doing. But don't forget that mitigations matter, & we're not always up against sophisticated attacks. Half the time, the perpetrators are literal teenagers.

🧵 Non-consensual AI deepfakes are out of control. But the 1st Amendment will likely prevent the US from directly prohibiting models/apps that make producing personalized NCII trivial. In this thread, I'll explain the problem and a 1st Amendment-compatible solution (I think).

One example of how easily harmful derivatives of open-weight models proliferate can be found on Hugging Face. Search "uncensored" or "abliterated" in the model search bar. You'll find some 7k models fine-tuned specifically to remove safeguards.

🚨 New paper from an awesome group led by Noam Kolt and @nickacaputo . We hear a lot about what important concepts and methods from AI research that lawyers need to understand. But it's really a two-way street... 🧵🧵🧵

Join us for our first CS seminar of the year, featuring @scasper.bsky.social! Learn more about his upcoming talk here: www.cs.jhu.edu/event/cs-sem... and check out other upcoming seminars here: www.cs.jhu.edu/department-s...

🧵Thanks in part to recent attention on Grok's widespread undressing, emerging consciousness around AI nudification apps is sparking discussions on making AI undressing apps illegal. Minnesota and the UK are currently actively considering laws that would do this.

Given the current Grok deepfake snafu on Twitter this week, I'll leave this here. We put it online a month ago. t.co/3qWCNzoZrh

I think these are my 4 favorite papers of 2025.

With, e.g., OpenAI planning over 1T in commitments in the next few years, it increasingly seems that one of two bad things will inevitably happen: a bubble bursting or the concentration of obscene levels of power in tech. I don't see how this ends well. techcrunch.com/2025/11/06/...

Taking AI safety seriously means taking open-weight model safety seriously. Unfortunately, the AI safety field has historically mostly worked with closed models in mind. Here, I explain how we can meet new challenges from open models. www.youtube.com/watch?v=VWk3...

🧵🧵🧵 In the past few months, I have looked at hundreds, maybe thousands, of AI porn images/videos (for science). Here's what I learned from our investigation of over 50 platforms, sites, apps, Discords, etc., while writing this paper. papers.ssrn.com/sol3/papers...

🧵 I think people often assume that AI images/video will get harder to distinguish from natural ones over time with better models. In most (non-adversarial) cases, I expect the opposite will often apply...

Excited that our paper has been on SSRN for 8 days, but became SSRN's most downloaded paper of the past 60 days in two ejournal categories. Glad about this -- I think this is one of the more important projects I've worked on. papers.ssrn.com/sol3/papers....

UK AISI is hiring for a technical research role on open-weight model safeguards. www.aisi.gov.uk/careers

Did you know that one base model is responsible for 94% of model-tagged NSFW AI videos on CivitAI? This new paper studies how a small number of models power the non-consensual AI video deepfake ecosystem and why their developers could have predicted and mitigated this.

Here are my current favorite ideas for how to improve tamper-resistant ignorance/unlearning in LLMs. Shamelessly copied from a slack message.

🌵🐎🤠🏜️🐄 Here's a roundup of some key papers on data filtering & safety. Tl;DR -- Filtering harmful training data seems to effectively make models resist attacks (incl. adv. fine-tuning), but only when the filtered content is 'hard to learn' from the non-filtered content 🧵

I’m pleased to share the Second Key Update to the International AI Safety Report, which outlines how AI developers, researchers, and policymakers are approaching technical risk management for general-purpose AI systems. (1/6)

The leaked executive order has me wondering if the term "regulatory capture" has any meaning anymore. It appears that state AI bills -- many of which big tech has fought tooth and nail to prevent -- are categorically regulatory capture.

Based on what I've seen lately, it sounds like rebuttals for @iclr_conf are a mess. But in case it makes your life easier, feel free to copy or adapt my rebuttal template linked here. docs.google.com/document/d/1...