Field Radar.

What’s worth reading right now in AI reward hacking, specification & evaluation gaming, and mechanistic interpretability — an auto-scored radar over public discussion, refreshed a few times a day.

How this list is made

This page is generated, not hand-picked. A few times a day a script checks LessWrong, Hacker News, and a handful of subreddits for posts about reward hacking, specification gaming, evaluation gaming, and mechanistic interpretability, then scores each one on how on-topic it is, how recently the conversation actually moved, and whether there’s still room to get a word in — as opposed to a thread that already has two hundred comments. Higher scores float to the top. Every title links out to the original; I’m pointing at other people’s work, not reproducing it.

The score is a crude weighted sum, and like any harness it pins down what I bothered to measure and silently lets everything else vary. So read this as one opinionated filter, not a survey of the field — it will miss things, and when it surfaces something dull that’s the weights, not the author.

Sources — LessWrong: ok (9 on-topic) · Hacker News: ok (3 stories) · Reddit: ok (25 posts) — some subreddits rate-limited

As of
2026-07-10 14:00 ET
Showing
25 items
New
6 in last 48h
Refresh
Every 6 hours
  1. 0.72LessWrong2w
    Reward Hacking Without Egregious Misalignment in an RL-Only Setting

    This work was done as part of the MATS fellowship by Joey Yudelson and Vladimir Ivanov. It was mentored by Ryan Greenblatt. Thanks to Aghyad Deeb and Anders Woodruff for comments on this post. Thanks to Monte…

    why score 0.723
    signalvalueweightpoints
    topic1.00×0.300.300
    liveness0.01×0.250.002
    contributability0.96×0.150.144
    venue0.77×0.100.077
    direct1.00×0.200.200

    tier-1: reward hacking; 1 matching tag(s)

  2. 0.71LessWrong11d
    Deployment Awareness Matters More Than Evaluation Awareness

    TL;DR Evaluation awareness — an AI recognizing it's being evaluated — is a widely discussed concept in AI safety. But there is a closely related concept that we claim is more important: deployment awareness, the AI's…

    why score 0.707
    signalvalueweightpoints
    topic1.00×0.300.300
    liveness0.02×0.250.006
    contributability0.86×0.150.130
    venue0.71×0.100.071
    direct1.00×0.200.200

    tier-1: evaluation awareness; 1 matching tag(s)

  3. 0.60LessWrong3hnew
    Free will as a model parameter

    The most popular take on the standard free will debate is that you are the algorithm. Your preferences and reasoning that determine your actions IS free will. But this resolution leaves me not entirely satisfied because…

    why score 0.600
    signalvalueweightpoints
    topic1.00×0.300.300
    liveness0.95×0.250.237
    contributability0.12×0.150.017
    venue0.45×0.100.045
    direct0.00×0.200.000

    2 matching tag(s)

  4. 0.59LessWrong2d
    A global workspace in language models

    [This is the blog post for our new paper Verbalizable Representations Form a Global Workspace in Language Models Readers might also be interested in: the Public commentary, Github and Neuronpedia] As you read this…

    why score 0.588
    signalvalueweightpoints
    topic1.00×0.300.300
    liveness0.50×0.250.126
    contributability0.41×0.150.062
    venue1.00×0.100.100
    direct0.00×0.200.000

    2 matching tag(s)

  5. 0.59LessWrong3d
    Bounding eval awareness of ~human-level AI across the safe-to-dangerous shift

    In our last post, we argued that measuring evaluation awareness is fundamentally challenging because of the safe-to-dangerous distributional shift: we cannot directly measure the evaluation awareness of a model without…

    why score 0.585
    signalvalueweightpoints
    topic0.50×0.300.150
    liveness0.32×0.250.080
    contributability0.57×0.150.085
    venue0.70×0.100.070
    direct1.00×0.200.200

    tier-1: evaluation awareness

  6. 0.54LessWrong1dnew
    Persistent Latent Misalignment, a new dimension of misalignment?

    A new paper was released at ICML that I'm worried will open an entire new dimension of alignment problems: Latent Collaboration in Multi-Agent Systems (LatentMAS) TLDR: they show that multiagent systems can communicate…

    why score 0.544
    signalvalueweightpoints
    topic1.00×0.300.300
    liveness0.62×0.250.154
    contributability0.27×0.150.040
    venue0.50×0.100.050
    direct0.00×0.200.000

    3 matching tag(s)

  7. 0.54LessWrong2w
    Eval-Awareness Steering detects the Test, Not the Sabotage

    Produced as part of independent research Huge thanks to Apollo Research (org) for open-sourcing the deception-detection harness which proved to be foundational in this work. Prior work by Devbunova (2026), the…

    why score 0.541
    signalvalueweightpoints
    topic1.00×0.300.300
    liveness0.01×0.250.002
    contributability0.02×0.150.003
    venue0.37×0.100.037
    direct1.00×0.200.200

    tier-1: sandbagging; 3 matching tag(s)

  8. 0.54LessWrong2d
    Tie training can make DPO/RLHF-trained AIs generalize better

    This post covers our recent ICML paper: Spurious Correlation Learning in Preference Optimization: Mechanisms, Consequences, and Mitigation via Tie Training. TL;DR Our theorems and experiments suggest that DPO and RLHF…

    why score 0.538
    signalvalueweightpoints
    topic0.75×0.300.225
    liveness0.48×0.250.121
    contributability0.79×0.150.118
    venue0.74×0.100.074
    direct0.00×0.200.000

    tier-2: feature; 1 matching tag(s)

  9. 0.53LessWrong1dnew
    When is misalignment just a bug?

    Cross-posted from The Foretellix CTO Blog. Introduction and epistemic status: This is the first post in a planned series, “Alignment as a verification problem”. I co-originated coverage-driven verification (CDV), which…

    why score 0.533
    signalvalueweightpoints
    topic1.00×0.300.300
    liveness0.71×0.250.177
    contributability0.02×0.150.003
    venue0.53×0.100.053
    direct0.00×0.200.000

    3 matching tag(s)

  10. 0.51LessWrong1dnew
    Models are blind outside the J-space. NLAs aren't.

    TLDR: On Llama-3.3-70B, I found thoughts it cannot see that are actively steering its behavior; and Anthropic's released NLA (Natural Language Autoencoder) reads them anyway. When asked if it sees a hidden thought, the…

    why score 0.510
    signalvalueweightpoints
    topic1.00×0.300.300
    liveness0.55×0.250.138
    contributability0.12×0.150.017
    venue0.55×0.100.055
    direct0.00×0.200.000

    2 matching tag(s)

  11. 0.51LessWrong1dnew
    Your Prompt-Injection Defense Metric Might Be Lying to You

    Indirect Prompt Injection at present day, is one of the main reasons for agentic failures deployed in personal systems as well as enterprise grade applications/systems. The agent reads untrusted content from numerous…

    why score 0.508
    signalvalueweightpoints
    topic1.00×0.300.300
    liveness0.72×0.250.179
    contributability0.02×0.150.003
    venue0.26×0.100.026
    direct0.00×0.200.000

    2 matching tag(s)

  12. 0.50LessWrong17hnew
    How robust are natural language autoencoders to initialization?

    Natural language autoencoders are meant to take in an LLM's activation vector and describe in plain text what the model is thinking. However, its training data collection involves asking Claude to guess what a model…

    why score 0.502
    signalvalueweightpoints
    topic0.75×0.300.225
    liveness0.79×0.250.197
    contributability0.02×0.150.003
    venue0.78×0.100.078
    direct0.00×0.200.000

    tier-2: activation; 1 matching tag(s)

  13. 0.50LessWrong11d
    Do LLMs Have Desires?

    Work conducted with Yujun Zhou (yzhou25@nd.edu) and supported by SPAR TL;DR: In paired-choice paradigms, LLMs report consistent preferences over outcomes (e.g., types and number of lives saved, types of policies…

    why score 0.498
    signalvalueweightpoints
    topic1.00×0.300.300
    liveness0.03×0.250.006
    contributability0.79×0.150.118
    venue0.73×0.100.073
    direct0.00×0.200.000

    3 matching tag(s)

  14. 0.49LessWrong2w
    Brittle model organisms obstructs deception elicitation work

    This work was done by Advik Raj Basani with Daniel Tan and Chloe Li as part of SPAR Spring 2026. tl;dr: Finetuning-based auditing methods for model organisms may unintentionally erase the deceptive behavior we are…

    why score 0.487
    signalvalueweightpoints
    topic1.00×0.300.300
    liveness0.00×0.250.001
    contributability0.86×0.150.130
    venue0.56×0.100.056
    direct0.00×0.200.000

    2 matching tag(s)

  15. 0.48LessWrong1d
    Data filtering works a lot worse than you would expect

    This work was largely done during Neel Nanda's MATS 10.0 Exploration Phase. J Rosser and Dohun Lee are co-first authors for this post with equal contribution. Josh Engels and Neel Nanda supervised the project, and…

    why score 0.476
    signalvalueweightpoints
    topic0.50×0.300.150
    liveness0.55×0.250.137
    contributability0.79×0.150.118
    venue0.70×0.100.070
    direct0.00×0.200.000

    1 matching tag(s)

  16. 0.46LessWrong2d
    Sub-agent delegation chaining

    Epistemic status: pretty confident in the validity of the core proposal, not that confident in specific implementation details TL;DR: we should cryptographically verify that sub-agent instances/sessions are downstream…

    why score 0.456
    signalvalueweightpoints
    topic0.50×0.300.150
    liveness0.38×0.250.096
    contributability0.96×0.150.144
    venue0.66×0.100.066
    direct0.00×0.200.000

    1 matching tag(s)

  17. 0.44LessWrong5d
    We need 3rd party Training-Run Assessments

    Training-run assessments conducted by a 3rd party should become a standard part of frontier AI safety. By a Training-Run Assessment, or TRA, I mean an in-depth analysis of the post-training pipeline and dynamics leading…

    why score 0.441
    signalvalueweightpoints
    topic1.00×0.300.300
    liveness0.18×0.250.046
    contributability0.02×0.150.003
    venue0.92×0.100.092
    direct0.00×0.200.000

    2 matching tag(s)

  18. 0.44LessWrong2d
    Open-source LLMs administer maximum electric shocks in a Milgram-like obedience experiment

    By Roland Pihlakas and Jan Llenzl Dagohoy This post is a slightly updated copy of our Arxiv preprint available at https://arxiv.org/abs/2605.21401 . The tables are converted to images in order to preserve cell…

    why score 0.439
    signalvalueweightpoints
    topic1.00×0.300.300
    liveness0.38×0.250.095
    contributability0.02×0.150.003
    venue0.41×0.100.041
    direct0.00×0.200.000

    2 matching tag(s)

  19. 0.44LessWrong2d
    Calibrating alignment evals

    Currently, alignment evaluation works by constructing a situation, observing the model's behavior and scoring it. We put a lot of thought into designing these benchmarks, and tuning them for our requirement. We are now…

    why score 0.439
    signalvalueweightpoints
    topic1.00×0.300.300
    liveness0.37×0.250.092
    contributability0.02×0.150.003
    venue0.43×0.100.043
    direct0.00×0.200.000

    5 matching tag(s)

  20. 0.43LessWrong2d
    Probing is not enough; a validity audit for any probe

    tl;dr A probe can have excellent AUROC and yet fail as a safety signal. I audited 3 probes: a monitoring awareness probe leakage example, a refusal direction as positive control, and Apollo's deception probe as a…

    why score 0.434
    signalvalueweightpoints
    topic1.00×0.300.300
    liveness0.37×0.250.092
    contributability0.02×0.150.003
    venue0.39×0.100.039
    direct0.00×0.200.000

    tier-2: probe; 4 matching tag(s)

  21. 0.43LessWrong5d
    Success Per Tokens

    Work smart more than hard, to expand the pareto frontier (but also work hard) A Pareto Frontier is a set of nondominated (optimal) solutions in multi-objective optimization. In 2 dimensions, this traces out a curve on…

    why score 0.432
    signalvalueweightpoints
    topic0.50×0.300.150
    liveness0.15×0.250.038
    contributability0.02×0.150.003
    venue0.41×0.100.041
    direct1.00×0.200.200

    1 matching tag(s)

  22. 0.42LessWrong10d
    Role confusion: sounding like the cause is indistinguishable from being it.

    A replication of Prompt Injection as Role Confusion (2026) and why the mechanistic story of prompt injection is harder to pin down than it looks. ---------------------------------------- Epistemic status: I reproduced…

    why score 0.420
    signalvalueweightpoints
    topic0.75×0.300.225
    liveness0.03×0.250.009
    contributability0.86×0.150.130
    venue0.56×0.100.056
    direct0.00×0.200.000

    tier-2: activation; 1 matching tag(s)

  23. 0.41LessWrong12d
    Can we use steering vectors to suppress reward-hacking? Somewhat

    Can steering vectors drive gradient routing? Yes, but not in realistic reward hacking environments, they are not precise enough classifiers of hacky vs clean solutions. Instead can we use a steering vector to initialise…

    why score 0.406
    signalvalueweightpoints
    topic0.50×0.300.150
    liveness0.02×0.250.004
    contributability0.02×0.150.003
    venue0.50×0.100.050
    direct1.00×0.200.200

    tier-1: reward hacking

  24. 0.40LessWrong2w
    Research note on negated reward hacking

    This work was done as part of the BlueDot's Technical AI Safety Project Sprint and should be treated as an informal report of preliminary results done over a couple of days. The code is available on GitHub, the negated…

    why score 0.396
    signalvalueweightpoints
    topic0.50×0.300.150
    liveness0.01×0.250.002
    contributability0.02×0.150.003
    venue0.41×0.100.041
    direct1.00×0.200.200

    tier-1: reward hacking

  25. 0.39LessWrong2w
    A misalignment taxonomy

    I am going to discuss five kinds of inner misalignment and two kinds of outer misalignment, which create a simple taxonomy of alignment failure modes. When I talk about a kind of misalignment here, I am talking about a…

    why score 0.390
    signalvalueweightpoints
    topic1.00×0.300.300
    liveness0.00×0.250.000
    contributability0.27×0.150.040
    venue0.50×0.100.050
    direct0.00×0.200.000

    2 matching tag(s)