Field Radar.

What’s worth reading right now in AI reward hacking, specification & evaluation gaming, and mechanistic interpretability — an auto-scored radar over public discussion, refreshed a few times a day.

How this list is made

This page is generated, not hand-picked. A few times a day a script checks LessWrong, Hacker News, and a handful of subreddits for posts about reward hacking, specification gaming, evaluation gaming, and mechanistic interpretability, then scores each one on how on-topic it is, how recently the conversation actually moved, and whether there’s still room to get a word in — as opposed to a thread that already has two hundred comments. Higher scores float to the top. Every title links out to the original; I’m pointing at other people’s work, not reproducing it.

The score is a crude weighted sum, and like any harness it pins down what I bothered to measure and silently lets everything else vary. So read this as one opinionated filter, not a survey of the field — it will miss things, and when it surfaces something dull that’s the weights, not the author.

Sources — LessWrong: ok (8 on-topic) · Hacker News: ok (5 stories) · Reddit: ok (25 posts) — some subreddits rate-limited

As of
2026-08-19 20:00 ET
Showing
25 items
New
13 in last 48h
Refresh
Every 6 hours
  1. 0.72LessWrong1dnew
    AI Sandbagging (w/ Inspect)

    TLDR For my BlueDot AI Safety Project Sprint, I chose to replicate an AI Sandbagging paper, using the Inspect framework to evaluate strategic underperformance capabilities in frontier models. Project Selection While I…

    why score 0.722
    signalvalueweightpoints
    topic1.00×0.300.300
    liveness0.71×0.250.178
    contributability0.02×0.150.003
    venue0.41×0.100.041
    direct1.00×0.200.200

    tier-1: sandbagging; 1 matching tag(s)

  2. 0.71LessWrong2hnew
    RL creates split personas

    I describe my current view of personas in LLMs and why RL leads to egregious reward hacking in some contexts while the same models seem very aligned in other contexts. This post describes the framing/paradigm without…

    why score 0.714
    signalvalueweightpoints
    topic0.50×0.300.150
    liveness0.97×0.250.242
    contributability0.27×0.150.040
    venue0.82×0.100.082
    direct1.00×0.200.200

    tier-1: reward hacking

  3. 0.69LessWrong6hnew
    Debate Training Reduces Reward Hacking in RLAIF

    Paper: Debate Training Reduces Reward Hacking in RLAIF Linkpost for GDM Alignment blogpost Work done by the GDM Amplified Oversight team (we're hiring). TL;DR: When you RL against an LLM judge, the judge gets hacked…

    why score 0.688
    signalvalueweightpoints
    topic0.50×0.300.150
    liveness0.91×0.250.228
    contributability0.27×0.150.040
    venue0.70×0.100.070
    direct1.00×0.200.200

    tier-1: reward hacking

  4. 0.61LessWrong7d
    Is Eval Gaming Downstream of Verbalized Eval Awareness? Not when it's reflexive.

    Code and data available at github.com/KieronKretschmar/latent-awareness TL;DR We take two eval-gaming model organisms (Hua et al.'s (2025) organism and RogueQwen) and apply direct preference optimization (DPO) to their…

    why score 0.609
    signalvalueweightpoints
    topic1.00×0.300.300
    liveness0.08×0.250.021
    contributability0.27×0.150.040
    venue0.48×0.100.048
    direct1.00×0.200.200

    tier-1: eval gaming; 1 matching tag(s)

  5. 0.57LessWrong2w
    RLVR that rewards red teaming the training environment

    Epistemic status: throwing an idea at the wall and seeing if it sticks I've been thinking about how to mitigate egregious reward hacking, a la the Hugging Face incident. I don't have the resources I'd need to write a…

    why score 0.566
    signalvalueweightpoints
    topic0.50×0.300.150
    liveness0.00×0.250.001
    contributability0.86×0.150.130
    venue0.85×0.100.085
    direct1.00×0.200.200

    tier-1: reward hacking

  6. 0.56LessWrong3dnew
    How To Catch a Distilled Model

    "Distillation is great until your new trillion-dollar sovereign AI introduces itself as 'Claude from Anthropic' on day one." - random guy from Reddit TLDR We introduce a novel algorithm to detect distillation across…

    why score 0.563
    signalvalueweightpoints
    topic1.00×0.300.300
    liveness0.27×0.250.067
    contributability0.92×0.150.138
    venue0.57×0.100.057
    direct0.00×0.200.000

    2 matching tag(s)

  7. 0.52LessWrong1dnew
    Whack-a-mole with a broken hammer: does a model internally track its automaton state?

    TL;DR: We check whether a small model (Qwen2.5-1.5B) internally tracks its state in a simple DFA (modelled after a login protocol), given a series of events. This state is never written in the transcript the model sees,…

    why score 0.519
    signalvalueweightpoints
    topic1.00×0.300.300
    liveness0.71×0.250.178
    contributability0.02×0.150.003
    venue0.39×0.100.039
    direct0.00×0.200.000

    tier-2: probe; 2 matching tag(s)

  8. 0.52LessWrong5dnew
    Frontier agents don't comply with standards, even when instructed to

    TLDR: Our open testbed LARA examines the behavior of frontier LLMs in realistic agentic deployment contexts. Previous results showed all models routinely take actions that would violate EU law. This post follows up by…

    why score 0.519
    signalvalueweightpoints
    topic1.00×0.300.300
    liveness0.18×0.250.044
    contributability0.69×0.150.104
    venue0.71×0.100.071
    direct0.00×0.200.000

    2 matching tag(s)

  9. 0.47LessWrong5hnew
    A circuit prior in NN-bayes

    Here are the slides of a talk Kaarel gave, presenting work with Dmitry establishing that (even arbitrarily overparametrized) neural net bayesian learning has a circuit prior — and thus, when learning a function which is…

    why score 0.472
    signalvalueweightpoints
    topic0.25×0.300.075
    liveness0.93×0.250.233
    contributability0.57×0.150.085
    venue0.78×0.100.078
    direct0.00×0.200.000

    tier-2: circuit

  10. 0.43LessWrong2dnew
    V&V takes on “Pacing the frontier”

    [Cross-posted from The Foretellix CTO Blog. These short takes try to put a verification-and-validation slant on AI-safety / alignment topics – they are not full treatments. I co-originated coverage-driven verification…

    why score 0.431
    signalvalueweightpoints
    topic1.00×0.300.300
    liveness0.39×0.250.099
    contributability0.02×0.150.003
    venue0.30×0.100.030
    direct0.00×0.200.000

    2 matching tag(s)

  11. 0.42LessWrong4dnew
    Red vs Blue, but for Evals

    🔵 The blue team proposes an evaluation protocol for some capability/propensity of interest. This consists of a suite of measurement tasks, together with a preregistered decision-making process they will follow based on…

    why score 0.421
    signalvalueweightpoints
    topic1.00×0.300.300
    liveness0.19×0.250.048
    contributability0.12×0.150.017
    venue0.56×0.100.056
    direct0.00×0.200.000

    2 matching tag(s)

  12. 0.42LessWrong13d
    Model Organisms of Sandbagging in the Wild

    TL;DR All current model organisms (MOs) of sandbagging in LLMs are either fine-tuned to sandbag or prompted in a way that makes it clear that sandbagging is strategically useful. We found a case of non-egregious…

    why score 0.419
    signalvalueweightpoints
    topic0.50×0.300.150
    liveness0.01×0.250.003
    contributability0.02×0.150.003
    venue0.63×0.100.063
    direct1.00×0.200.200

    tier-1: sandbagging

  13. 0.42LessWrong5dnew
    What If We Enforced AI Model Safety At the Level Of GPUs?

    Tldr: AI Agents (e.g. based on models like Claude Opus and Fable) are now powerful enough to be used as autonomous tools for large-scale cyberattacks. This most powerful class of agents generally tends to be based on…

    why score 0.419
    signalvalueweightpoints
    topic1.00×0.300.300
    liveness0.17×0.250.042
    contributability0.42×0.150.064
    venue0.13×0.100.013
    direct0.00×0.200.000

    2 matching tag(s)

  14. 0.38LessWrong22hnew
    Natural Language Transcoders

    Describing the computation performed in a stack of transformer layers Anwen Hao, mentored by Adrians Skapars Anthropic’s natural language autoencoders (NLAs) is a promising method to automatically generate explanations…

    why score 0.383
    signalvalueweightpoints
    topic0.50×0.300.150
    liveness0.73×0.250.184
    contributability0.02×0.150.003
    venue0.47×0.100.047
    direct0.00×0.200.000

    1 matching tag(s)

  15. 0.37Hacker News2w
    The Download: reward hacking explained, and suspected Iranian cyberattacks
    why score 0.374
    signalvalueweightpoints
    topic0.50×0.300.150
    liveness0.00×0.250.001
    contributability0.02×0.150.003
    venue0.21×0.100.021
    direct1.00×0.200.200

    tier-1: reward hacking

  16. 0.37LessWrong2w
    Single Forward Pass Evals on Fable, Opus 5, and GPT-5.6-Sol

    This is a research update for an on-going replication of single-forward-pass evals done as part of the Second Look Fellowship. In following posts, we will run more comprehensive replications of previous work and release…

    why score 0.373
    signalvalueweightpoints
    topic1.00×0.300.300
    liveness0.00×0.250.001
    contributability0.02×0.150.003
    venue0.69×0.100.069
    direct0.00×0.200.000

    2 matching tag(s)

  17. 0.37LessWrong1dnew
    GPT-2's IOI behavior is defined where the paper's algorithm isn't

    TL;DR: The IOI algorithm doesn't specify what to do when the indirect object token is duplicated. I observe that the model succeeds anyway. I'd like to know if I'm mistaken in the IOI paper's predictions, and I'd like…

    why score 0.369
    signalvalueweightpoints
    topic0.50×0.300.150
    liveness0.71×0.250.178
    contributability0.02×0.150.003
    venue0.39×0.100.039
    direct0.00×0.200.000

    1 matching tag(s)

  18. 0.37LessWrong13d
    Matryoshka NLAs: training activation verbalizers to frontload reconstruction-relevant information

    TLDR: We train a “matryoshka” NLA that, unlike standard NLAs, is trained to put the most important details at the start; it is trained by randomly truncating the verbalizer’s explanations before showing them to the…

    why score 0.369
    signalvalueweightpoints
    topic1.00×0.300.300
    liveness0.01×0.250.003
    contributability0.02×0.150.003
    venue0.63×0.100.063
    direct0.00×0.200.000

    tier-2: feature, activation; 2 matching tag(s)

  19. 0.36LessWrong13d
    Function vectors as a model diffing tool: 17 heads repair a bad fine-tune

    I take two fine-tuned models trained to give bad medical advice, one on Qwen2.5-7B and one on Llama-3.1-8B, from the Model Organisms for Emergent Misalignment collection, and I found out that I could make one safe by…

    why score 0.363
    signalvalueweightpoints
    topic1.00×0.300.300
    liveness0.01×0.250.003
    contributability0.02×0.150.003
    venue0.57×0.100.057
    direct0.00×0.200.000

    2 matching tag(s)

  20. 0.36LessWrong12d
    Agenda: Infrastructure for Trading with Partially Misaligned AIs

    This post can be read on its own, without checking the rest of this sequence. Unlike the other parts of the sequence, this post is mostly not about AI evaluation or oversight. Rather, it is meant as an explanation of…

    why score 0.361
    signalvalueweightpoints
    topic1.00×0.300.300
    liveness0.02×0.250.004
    contributability0.02×0.150.003
    venue0.55×0.100.055
    direct0.00×0.200.000

    2 matching tag(s)

  21. 0.36LessWrong2w
    When should we trust a latent representation?

    Working on AI Safety, I spend a significant part of my time thinking about how frontier AI Safety research eventually gets translated into deployable safety systems. One thing I have constantly noticed is the transition…

    why score 0.360
    signalvalueweightpoints
    topic1.00×0.300.300
    liveness0.01×0.250.001
    contributability0.12×0.150.017
    venue0.41×0.100.041
    direct0.00×0.200.000

    2 matching tag(s)

  22. 0.35LessWrong2w
    Rewrite All the Code, All the Time

    This post is crossposted from my Substack, Structure and Guarantees, where I explore how formal verification and related ideas might scale to more complex intelligent systems. It has become a mainstream prediction that…

    why score 0.354
    signalvalueweightpoints
    topic0.50×0.300.150
    liveness0.01×0.250.002
    contributability1.00×0.150.149
    venue0.53×0.100.053
    direct0.00×0.200.000

    1 matching tag(s)

  23. 0.35LessWrong2w
    Deliberate Alignment Faking as a Defense Against Model Poisoning

    I want to discuss and brainstorm a counterintuitive approach to AI alignment: Inducing alignment faking on purpose, to prevent the model from developing emergent misalignment. To prevent this from going horribly wrong,…

    why score 0.353
    signalvalueweightpoints
    topic1.00×0.300.300
    liveness0.00×0.250.001
    contributability0.02×0.150.003
    venue0.50×0.100.050
    direct0.00×0.200.000

    2 matching tag(s)

  24. 0.35LessWrong7d
    Before We Defer Research to AI: Measuring Apparent-Success-Seeking

    Recently, I was improving a small LLM-powered classifier and noticed a few continuously failing test cases. As many would, I asked my AI code assistant to add a few more out-of-distribution examples to the classifier’s…

    why score 0.348
    signalvalueweightpoints
    topic0.50×0.300.150
    liveness0.07×0.250.018
    contributability0.86×0.150.130
    venue0.50×0.100.050
    direct0.00×0.200.000

    1 matching tag(s)

  25. 0.34LessWrong3dnew
    Learning new facts can change LLM behaviour

    TL:DR: I use synthetic document fine-tuning to train an LLM to believe that in 2027 ‘long-horizon’ frontier LLMs count as moral persons. I find the model scores highly on measures of belief depth, and that prompting…

    why score 0.341
    signalvalueweightpoints
    topic0.50×0.300.150
    liveness0.34×0.250.085
    contributability0.27×0.150.040
    venue0.66×0.100.066
    direct0.00×0.200.000

    1 matching tag(s)