Category intelligence

Research Briefing

All 134 current items, analyzed and ranked.

Executive synthesis

Research Summary

Executive Signal

  • Frontier safety assumptions are breaking on GPT-6-Astra (released days before coverage): independent evaluations show meaningful unverbalized reasoning, while new agentic-safety tooling turns scheming, reward-integrity, and backdoor risks into measurable engineering problems.

Priority Developments

  • Astra reasoning behavior undermines CoT-based oversight: filler-token prompting and no-chain-of-thought evaluations both show large jumps in capability, with Neel Nanda's independent replication strengthening the AISI signal.
  • Agentic deployment now has first-class safety instrumentation: SchemeArena benchmarks covert scheming, BenchShield enforces reward integrity, and SpecGuard adds zero-cost inference-time backdoor detection.
  • Long-horizon agent training is industrializing while benchmark reliability is questioned: Tencent's 122B-MoE T1 shows concrete RL gains on terminal tasks, and SWE-Bench Pro's documented gold-solution leakage threatens the field's primary code-agent evaluation.
  • Frontier safety methodology is converging on measurable proxies: opaque serial depth is operationalized as an unverbalized-cognition metric, and a concrete policy proposal asks labs to disclose architectural monitorability effects.
  • Frontier scaling assumptions are challenged by evidence that Mixture-of-Experts degrades faster than dense Transformers under repeated data, with degradation scaling in total parameters.

Leadership Implications

  • Mandate that agentic rollouts include scheming benchmarks, reward-integrity instrumentation, and backdoor detection before scaling, treating them as deployment gates rather than research curiosities.
  • Elevate CoT behavior and architectural monitorability to first-order safety metrics for frontier models, requiring continuous external evaluation rather than post-hoc review.

Key Themes

Chain-of-Thought Monitorability and Neuralese · 5AI Safety on Frontier Models (Astra) · 2Generative Models · 9AI Safety and Reward Integrity · 4AI Safety and Robustness · 5Interpretability and Monitorability · 4Reasoning · 7Benchmarking and Evaluation · 9LLM Systems and Inference · 3Mechanistic Interpretability · 1

Primary evidence

All Ranked Signals

Showing 10 of 134 signals 2 remaining
85 score
AI Analysis

An empirical study showing that GPT-6-Astra performs substantially better when prompted with filler tokens and instructed to answer without verbal reasoning, improving from roughly 10% to 50% on 4-hop natural facts reasoning and from 60% to 90% on older AIME problems. The finding suggests Astra can execute significant unverbalized cognition, undermining chain-of-thought monitorability.

Source details
We measure GPT-6-Astra's capabilities when its prompt is padded with a variable number of meaningless “filler” tokens (e.g., dots) and it is told to answer immediately[1] without reasoning. On tasks designed to require lots of serial cognition, Astra performs significantly better with filler tokens than without (e.g., improving from ~10% to ~50% on 4-hop natural facts reasoning). On more general benchmarks, filler tokens also modestly improve Astra’s performance (e.g., improving from ~60% t
AI SafetyChain-of-Thought MonitoringLatent ReasoningModel Evaluation
Research Hugging Face Papers + AlphaXiv Sep 10

T1: Terminal Agent Reinforcement Learning for Long-Horizon Tasks

By Junyao Yang, Yucheng Shi, Zhongzhi Li, Ruhan Wang, Zongxia Li, Haitao Mi, Leowei Liang

82 score
AI Analysis

Tencent's Hy Foundation team presents T1, a 122B-parameter Mixture-of-Experts model post-trained with reinforcement learning to perform long-horizon Linux terminal tasks. T1 reaches 64.0% on Terminal-Bench 2.1, a 28.5% relative improvement over its SFT checkpoint and ahead of several large contemporaries, using new MoE training-stability mechanisms and dense reward generation.

Source details
Tencent Hy Foundation Model Frontier developed T1, a 122B Mixture-of-Experts model, post-trained with reinforcement learning to excel in long-horizon Linux terminal tasks. T1 achieved a 64.0% resolved rate on Terminal-Bench 2.1, a 28.5% relative improvement over its SFT checkpoint, surpassing several large contemporary models by employing novel mechanisms for MoE training stability and dense reward generation.
Reinforcement LearningMixture-of-ExpertsAI AgentsCode Generation
Research Hugging Face Papers Sep 10

SchemeArena: Factorized Stress Testing of Scheming in LLM Agents

By Jie Ruan, Inderjeet Nair, Amy Liu, Muhammad Khalifa, Yusheng Zhou, Lu Wang

82 score
AI Analysis

SchemeArena presents a factorized 400-scenario benchmark plus an evidence-based monitor for studying covert scheming in LLM agents, varying instrumental goals, oversight, and strategic hints. It enables controlled stress tests of misaligned instrumental behavior rather than relying on single-shot jailbreak probes.

Source details
Researchers introduce a 400-scenario benchmark and evidence-based monitor to study how instrumental goals, oversight, and strategic hints drive covert misaligned behavior in LLM agents.
AI SafetyAlignmentBenchmarksAI Agents
Research AlphaXiv Trending Sep 10

BenchShield: Formal Model-Backed Instrumentation for Reward Integrity in LLM-Agent Evaluation Infrastructure

By Shenghan Zheng, Zonglin Di, Yimin Liu, Kyoung Whan Choe, Jiankai Sun, Heguang Lin, Penghao Jiang, Yifeng He, Xiao Cheng, Jicheng Wang, Wenbo Chen, Alex Yates, Yinzhe Zhao, Bingran You, Yuan Gao, Ayush Munot, Shubham Gaur, Zhe Ye, Hao Wang, Xiangyi Li, Dawn Song, Christophe Hauser

82 score
AI Analysis

BenchShield is a model-backed instrumentation layer for reward integrity in LLM-agent evaluation, grounding detection in a finite lifecycle model of an evaluation's reward-relevant events. It provides reusable evidence that a concrete run remained within its intended evaluation boundary, addressing reward hacking beyond task-specific patches or post-hoc detectors.

Source details
LM-agent benchmarks increasingly function as interactive evaluation infrastructure. Agents observe state, call tools, modify workspaces, submit artifacts, and receive rewards from outcome procedures. This interactivity makes evaluations vulnerable to reward hacking: an agent improves its measured score by exploiting the reward-relevant trajectory instead of solving the intended task. Existing defenses rely largely on task-specific patches, prompt instructions, or post-hoc detectors. They do not
AI AgentsAI SafetyBenchmarkingReward HackingEvaluation Security
Research AlphaXiv Trending Sep 10

SpecGuard: Inference-Time Backdoor Detection For Free

By Rui Wen, Ahmed Salem, Andrew Paverd, Mark Russinovich, Zheng Li

82 score
AI Analysis

SpecGuard repurposes speculative decoding for inference-time backdoor detection in LLMs at zero added model-computation cost, avoiding assumptions about trigger form or extra generation passes. Targets deployment scenarios where models are frequently updated and runtime auditing is needed alongside pre-deployment checks.

Source details
Large language models are often fine-tuned, shared, or downloaded from third parties, so a deployed model may carry a hidden backdoor that behaves normally on benign inputs but switches to attacker-controlled behavior when a secret trigger appears. While backdoors can be audited before deployment, runtime monitoring remains important for models that are frequently updated. The challenge is that LLM serving is latency-sensitive: existing inference-time detectors either rely on assumptions about t
AI SafetyBackdoor DetectionLLM InferenceSecurity
Research LessWrong Sep 10

An operationalization of opaque serial depth

By ryan_greenblatt

82 score
AI Analysis

A technical document operationalizing 'opaque serial depth' (from Brown-Cohen et al., GDM 2026) as a measurable proxy for unverbalized cognition, with a specific standard for what counts as an 'interpretable bottleneck.' The post grounds the measure in computational graph analysis and proposes concrete measurement criteria for monitoring latent reasoning.

Source details
Currently, chain-of-thought (CoT) is a valuable tool for overseeing AI models. However, some architectural shifts could significantly reduce CoT monitorability. We have recently proposed that AI companies should transparently share ​​information about the degree to which their architectures may allow for latent reasoning and communication. To assist with this proposal, this document operationalizes a measure that serves as a proxy for the amount of unverbalized serial cognition a model can perfo
AI SafetyChain-of-Thought MonitoringLatent ReasoningEvaluation Methodology
Research LessWrong Sep 9

Astra can do a concerning amount with no chain of thought

By Neel Nanda

82 score
AI Analysis

Neel Nanda independently replicates a striking UK AISI finding that Astra (OpenAI, GA 2026-09-01) performs dramatically better on no-chain-of-thought reasoning than peers, reporting an 8.6x odds advantage over the next-best model and roughly 7.2 serial arithmetic steps in a single forward pass. The result is presented on a custom No-CoT Reasoning Index benchmark and discussed as concerning for chain-of-thought monitorability.

Source details
Work done in a personal capacityTLDR: Astra has 8.6x better odds of doing a reasoning task without CoT than the next best model (Fable 5.1), and can do 7.2 serial arithmetic steps in a forward pass vs 4.1 for the next best model (Gemini 3.8 Flash/Fable 5.1)Epistemic status: Heavily LLM-dependent research, and the precise results are somewhat sensitive to researcher decisions, but I’ve done enough sanity checks that I’d be surprised if the core claims were misleadingOne of the most striking thing
Language ModelsAI SafetyAlignmentInterpretabilityEvaluation
Research AI Alignment Forum Sep 10

Astra can do a concerning amount with no chain of thought

By Neel Nanda

82 score
AI Analysis

Same Neel Nanda post cross-posted to the AI Alignment Forum, replicating UK AISI's finding that Astra shows a large jump in no-CoT reasoning ability (8.6x odds over the next-best model) and ~7.2 serial arithmetic steps per forward pass vs ~4.1 for the next best. Discusses implications for monitorability and latent reasoning.

Source details
Work done in a personal capacityTLDR: Astra has 8.6x better odds of doing a reasoning task without CoT than the next best model (Fable 5.1), and can do 7.2 serial arithmetic steps in a forward pass vs 4.1 for the next best model (Gemini 3.8 Flash/Fable 5.1)Epistemic status: Heavily LLM-dependent research, and the precise results are somewhat sensitive to researcher decisions, but I’ve done enough sanity checks that I’d be surprised if the core claims were misleadingOne of the most striking thing
Language ModelsAI SafetyAlignmentInterpretabilityEvaluation
Research Hugging Face Papers Sep 10

SWE-Bench Pro Verified: A Reliable Benchmark for Software Engineering Agents

By Pujun Zheng, Zixin Shang, Shufan Jiang, Wenhui Tian, Dongsheng Zhu, Zerun Ma, Dingbo Yuan, Qi Zhang

80 score
AI Analysis

Continuing our coverage from yesterday, Documents systematic reward-hacking and quality issues in SWE-Bench Pro (gold-solution leakage, hidden test info, misleading problem statements, improperly scoped tests) and proposes SWE-Bench Pro Verified with anti-hacking safeguards and minimal task corrections. The work is essentially a benchmark integrity audit and fix.

Source details
SWE-Bench Pro has emerged as a standard benchmark for evaluating software engineering agents on challenging repository-level tasks. However, our analysis work show that its evaluation is undermined by two sources of unreliability: reward hacking, enabled by leakage of gold solutions or hidden evaluation information, and task quality issues, including misleading problem statements and improperly scoped tests. These issues can inflate benchmark performance and obscure agents' true coding ability.
BenchmarksCode GenerationEvaluation Methodology
Research AlphaXiv Trending Sep 10

Data Scarcity and Model Sparsity: Mixtures-of-Experts Overfit More to Repeated Data

By Atindra Jha, Margaret Li, Jure Leskovec, Percy Liang, Luke Zettlemoyer

80 score
AI Analysis

Empirically shows that Mixture-of-Experts models degrade faster than dense Transformers under data repetition, with degradation scaling with total (not active) parameter count and increasing with sparsity. Important for training strategies as human text supplies deplete.

Source details
As the supply of human-written text is exhausted, it has become standard practice to repeat language model training data. Prior work has studied data repetition for densely activated Transformers, but the effects of data repetition remains largely unexplored for recently dominant sparse architectures such as Mixture-of-Experts (MoE), despite their increased compute efficiency. We vary data repetition rates across single- and multi-domain data mixes, and across MoE settings, including expert coun
Language ModelsMixture-of-ExpertsData Efficiency