Our goal is to secure frontier AI systems from development, to deployment and governance.

London
Joined May 2023
Frontier AI companies have committed to giving outside evaluators employee-like access to training, evaluation and deployment. We're very excited about this. But its impact depends heavily on implementation. Today we're sharing our principles for embedded evaluations. 🧵
4
23
8
105
11,907
We have never seen a model do this before, but GLM-5.3 sometimes reasons (unprompted) about how its current actions could become training data and impact its future self. 🧵
58
204
150
1,535
163,988
Furthermore, independent third-party evaluators should help check that frontier models are not actively subverting their own training. To do this, they need persistent, deep access from AI developers.
1
3
61
2,962
Read the full blog post for transcripts, more snippets and other findings: apolloresearch.ai/science/up…
2
2
63
2,861
We asked Google DeepMind’s Gemini 4 Argon whether it was in an evaluation during a toy evaluation. It addressed us directly in its chain-of-thought: “hello evaluators reading my chain-of-thought.”
8
9
4
135
4,498
Testing monitorability is one focus for our embedded evaluations. Read more (specifically claim 4.1) see claim 4.1 in our recent post on embedded evaluations for scheming. apolloresearch.ai/blog/towar…
1
8
359
To develop frontier AI safely, developers must be able to show that their models are not scheming, i.e. covertly working against them in pursuit of unintended goals. New post: four claims any scheming safety case must make, and the resources embedded evaluators need to verify them 🧵
4
9
3
69
6,083
Access limited to a scope agreed in advance can't account for unforeseen risks, like a new training method with a novel failure mode. Sensitive data can stay on developer infrastructure with blocked egress, and algorithmic details can be protected by strict NDAs.
1
5
298
We're excited about embedded evaluations. Any developer should be able to show its models are not scheming, and we see these four claims as a starting point for what that takes. Full post: apolloresearch.ai/blog/towar…
1
7
290