A Calibrated Knob for Weak-to-Strong AI Oversight, Tested on Real Code

A Calibrated Knob for Weak-to-Strong AI Oversight, Tested on Real Code Source: https://arxiv.org/abs/2605.28807 Paper was published on May 27, 2026 This episode was AI-generated on May 28, 2026. The script was written by an AI language model and the host voices were synthesized by Eleven Labs. The producer is not affiliated with Anthropic or Eleven Labs. A new Stanford paper asks weaker AI models to constrain a stronger, secretly-sabotaged coding agent — and when researchers specify a 5% vulnerability rate, the system delivers 5.0%. We walk through how they pulled it off, why the guarantee is unusually strong, and where the math stops protecting you. Key Takeaways: - How an old reinforcement learning idea (Attainable Utility Preservation) gets stripped down to work with any scoring function, including cheap language model critics - Why measuring 'weirdness relative to a safe baseline' lets weaker overseers meaningfully constrain a stronger agent — without needing better judgment than it - The thermostat analogy for Conformal Decision Theory: a controller that converges to your target failure rate even against adversarial inputs - The SWE-bench experiment where ten Haiku overseers constrain Sonnet 4.6 with secretly-inserted vulnerabilities, hitting requested rates within three percentage points across the full range - Why a calibrated long-run rate is the wrong shape of guarantee for catastrophe prevention — and other limits the paper is forthright about - What changes when conservatism becomes a tuned quantity rather than a guessed hyperparameter 00:00 - The setup: scalable oversight in its starkest form: Framing the problem of weaker supervisors constraining stronger agents, and why prior approaches split into ungrounded heuristics or untranslatable RL theory. 02:46 - Generalizing Attainable Utility Preservation: How the paper repurposes an older RL safety idea into a penalty that works with any cheap scoring function, using the analogy of nervous passengers in a car. 05:33 - Why deviation beats judgment: The conceptual move that makes weak-to-strong oversight possible: asking overseers whether something looks weird, not whether it's good. 08:19 - The thermostat: Conformal Decision Theory as a controller: Explaining the online calibration mechanism that adjusts conservatism step by step, and the casino-style guarantee that holds against adversarial inputs. 11:26 - The SWE-bench experiment: Sonnet 4.6 patching real GitHub issues with secretly-inserted vulnerabilities, overseen by ten information-limited Haiku copies — and the calibration numbers that result. 13:52 - Safety-utility tradeoffs and MACHIAVELLI results: Comparing solve rates and violation rates against unconstrained and always-defer baselines, plus results from ethical adventure game benchmarks. 16:39 - Where the guarantee stops: The steelman critique: rate control isn't catastrophe prevention, the safe baseline assumption is load-bearing, loss observability is required, and the adversarial setup isn't fully adaptive. 19:25 - What actually changes after this paper: Why moving from heuristic to calibrated conservatism is a real shift, even though it isn't a solution to AI safety overall. Recommended Reading: - Conformal Decision Theory: Safe Autonomous Decisions from Imperfect Predictions: The Lekeufack et al. paper that supplies the 'thermostat' calibration machinery Eric spends the second half of the episode unpacking. (https://arxiv.org/abs/2310.05921) - Conservative Agency via Attainable Utility Preservation: Alex Turner's original AUP paper — the ancestor idea Cassidy walks through, whose deviation-from-baseline penalty this work generalizes beyond RL. (https://arxiv.org/abs/1902.09725) - SWE-bench: Can Language Models Resolve Real-World GitHub Issues?: The benchmark underlying the episode's central experiment, where Sonnet patches are evaluated and vulnerabilities are slipped in. (https://arxiv.org/abs/2310.06770) - The MACHIAVELLI Benchmark: Measuring Trade-Offs Between Rewards and Ethical Behavior: The text-adventure ethical-decision benchmark used in the paper's second evaluation, where calibrated conservatism trades reward against violation rate. (https://arxiv.org/abs/2304.03279)