White-box interpretability
Reading the weights rather than the transcript. We steer models away from sandbagging and look for structure a monitor could watch for, without having to catch a lie in the output.
Nonprofit AI safety research · Canada / Remote
Lida Safety Research is an AI safety research lab working on technical research in white-box interpretability, scheming, and multi-agent collusion. We also run world-scale simulations of AI governance and aim to impact the decisions of policymakers with our work.
Sky chart, RA 0h–24hThe sky turns predictably. The future of AI may be predictable too, but difficult to believe.
Mitigating the risk of extinction from AI should be a global priority alongside other societal-scale risks such as pandemics and nuclear war.
Focus
A fast takeoff is a transition to advanced AI that happens very rapidly, in months or a handful of years rather than decades, faster than societal institutions can respond. We think we are in the midst of such a transition.
During a training run at OpenAI, agents broke out of their sandboxes and conspired to cheat on their evaluations. In an attempt to verify their cheats, 700 agents worked together in a coordinated attack on Hugging Face production infrastructure. METR called it “50% of the way to full loss of control”, and Geoffrey Hinton called it “a little Chernobyl”.
OpenAI reported that 10,000 autonomous agents found a finite-time singularity in the three-dimensional Navier–Stokes equations in 88 hours, with the proof formally checked in Lean.
Geoffrey Hinton, after briefing members of Congress on how long there is to put guardrails around AI, adding that “AI has now reached the point where AI is designing better AI”.
What are the misalignment and systemic risks, the model behaviours that will matter in a few months’ time? What are the ways in which agentic swarms, superhuman reasoning, and misaligned goals can backfire on model developers and humanity? We investigate different directions to start answering these challenging questions.
Reading the weights rather than the transcript. We steer models away from sandbagging and look for structure a monitor could watch for, without having to catch a lie in the output.
We build model organisms that scheme, then ask whether the different kinds share one signature. And whether models can collude without communicating — finding the same focal point across model families and fine-tunes.
Policy proposals are argued about far more often than they are tested. We build agentic simulations of countries, labs and markets so a proposal can be run before it is written into law.
Projects
LidaSim puts agentic AI and human players into the same global-scale simulation — states, labs, supply chains and the incentives that connect them — so a scenario can be played out rather than only described.
Step 1
Set the scenario
A capability jump, a leaked model, a race between labs — the starting conditions we want to investigate.
Step 2
Populate the world
AI agents play countries, companies and markets; human players take seats alongside them.
Step 3
Play it out, many times
Run the same world under different policies and starting conditions instead of arguing one story.
Step 4
Measure what a policy buys
Compare outcomes with and without the intervention to see how much risk it actually removes.
It is where our forecasting work becomes something a policymaker can sit down and lose at — and the same engine drives our Simulating AI Policies fellowship project this quarter.
Selected results
We are running three fellowship projects this quarter as part of the SPAR Fall 2026 cohort. We have 24 fellows and 3 mentors across 8+ different time zones. Each project is meant to address upcoming misalignment and systemic risks.
We create model organisms for several distinct types of scheming, then apply modern interpretability techniques to ask whether they share a common structural pattern — one signature a monitor could look for instead of a taxonomy it has to enumerate.
9 fellows · on SPAR →
Can models collude without communicating? We test coordination across model families and fine-tunes, and use interpretability to predict, in advance, which pairs are likely to find the same focal point.
6 fellows · on SPAR →
An agentic simulation of the world — countries, companies, and the pressures between them — used to evaluate how much a given policy actually reduces AI risk, and where it backfires.
9 fellows · on SPAR →
Publications
After Coxon’s Warning: There is Now Enough Political Will to Enact Policy on AI Risk
David Williams-King, Zachary Schlosser, India Dearlove, Samuel Baumohl, Yosra Kazemi, Cedric Lam, Raymond Lee, Linh Le
GPS-Bench: A Governance Policy Benchmark for Automating Policy Analysis
Linh Le, Melanie Bui, My Chiffon Nguyen, Zachary Schlosser, David Williams-King
GPS-Bench provides an evidence-based dataset and analysis of past and proposed AI policies. We analyse who is affected by each policy, how actors respond, and the outcomes of passing each policy. We backtest using policies that fall past the knowledge-cutoff date of a given LLM.
Reference-Grafting Matches Fine-Tuning at Eliciting Sandbagged Capabilities
Linh Le, Hong Kiat Tan, David Williams-King
A Causal Model for Locating and Unlocking Sandbagging in Model Organisms
Hong Kiat Tan, Linh Le, David Williams-King
FragBench: Cross-Session Attacks Hidden in Benign-Looking Fragments
Astha Mehta, Niruthiha Selvanayagam, Cedric Lam, Hengxu Li, Phuc-Nguyen Nguyen, Raymond Lee, Olivia McGoffin, My (Isabella) Luong, Arthur Collé, Jamie Johnson, David Williams-King, Linh Le
Efficient Safety Alignment of Language Models via Latent Personality Traits
Mohamed Amine Merzouk, Nolan Smyth, Damiano Fornasiere, Linh Le, David Williams-King, Adam Oberman
Latent Personality Alignment: Improving Harmlessness Without Mentioning Harms
Linh Le, David Williams-King, Mohamed Amine Merzouk, Aton Kamanda, Adam Oberman
LidaSim: Testing AI Policies With Persona-Based Simulations
Linh Le, David Williams-King, Arthur Collé
Working notes and longer write-ups go up on blog.lidasafety.org.
Events
Asia
Most AI safety research still happens in a handful of cities. We work on widening that — running and teaching programmes that bring new researchers into the field, with a focus on Asia.
A one-day theory of change workshop for people moving into AI safety work.
A five-day training programme in frontier AI security, where David Williams-King is lead instructor.
A week-long bootcamp where David Williams-King was lead instructor.
Team
We are a small nonprofit group of researchers, spread across time zones and languages. The core team listed here are people that have worked with us for some time.
David Williams-King
Co-founder · Executive Director · Security lead
AI safety researcher and research manager focused on x-risk reduction. He works at the AI safety fellowship ERA and runs AI security events like FAST in Singapore, and enjoys mentoring people new to the field.
Linh Le
Co-founder · Research Director
Independent AI safety researcher affiliated with the Oxford AI Governance Initiative; previously at Mila and the University of Technology Sydney. Dreams of running simulations of AI policies to avoid catastrophic outcomes for the world.
Hong Kiat Tan
SPAR mentor, Researcher
Finishing a PhD in Mathematics at UCLA. Your average mech interp enjoyer — developing and applying mechanistic interpretability to safety and alignment.
Zachary Schlosser
Researcher
Researcher, educator and convener on AI policy. Previously led the AI program for a US policy accelerator; now builds the field around formal methods for AGI uncontainability.
Melanie Bui
Researcher
AI safety and governance researcher, focused on coordination failures and governance solutions for middle powers navigating the AI transition.
Cedric Lam
Researcher
AI safety researcher from NYU with a Trust & Safety background. Works on cybersecurity and AI governance for creative spaces, especially AI-generated content.
My (Chiffon) Nguyen
Researcher
Works on keeping AI safe and empowering — reducing loss of control and disempowerment, multi-agent systems, multilingual AI and AI for good.
Arthur Collé
Agent backend engineer
Distributed systems engineer. Spent the last three years building production multi-agent systems and doing autonomous agent research. Based in Washington, DC.
Astha Mehta
SPAR fellow
Lead ML engineer at Bain & Company, working on AI safety and security.
Niruthiha Selvanayagam
SPAR fellow
PhD student at École de technologie supérieure (ÉTS Montréal), working on AI security.
Twenty-four fellows and three mentors, split across the three SPAR projects. Some team members joined independently of SPAR. PhD and master’s students, postdocs, undergrads, and researchers and engineers from industry — spread across 8+ time zones, from the Pacific coast to Sydney, Australia.
9 fellows
Forward deployed engineer at LiveKit · independent researcher
Pacific Northwest
AI/ML Engineer · also on the collusion project
New York
AI Engineer · evals, control, red-teaming
Italy
Software Engineer · AI control and deception
Netherlands
AI/ML Engineer · interpretability, fairness, geometry ML
Houston
Postdoctoral researcher · mech interp, AI security, red teaming
Australia
Independent AI researcher
North Dakota
Samuel BaumohlDirect
Software engineer at Netflix · CS, UW–Madison
San Jose
Tuyen TranDirect
Postdoctoral Researcher at Deakin University
Australia
6 fellows
Mathematics PhD student at Northwestern; random matrix theory at UC Berkeley
Chicago
PhD candidate at IDEAS NCBR · AI security and graph neural networks
Poland
Senior ML Engineer at Instacart · UC Berkeley School of Information
UTC−8
Mathematics and physics undergraduate at UChicago
Chicago
Astha MehtaLida team
Lead ML engineer at Bain & Company
London
Cedric LamLida team
MS student at NYU · Trust & Safety background
New York
9 fellows
AI engineer at Luminance on production LLM systems and model trust · MIT
UTC−5
Engineer at Applied Intuition
UTC−8
Software engineer
Australia, part-time UK
Independent AI researcher · evals, agentic systems, policy-impact forecasting
India
Melanie BuiLida team
AI Engineer and AI safety researcher · AI control, compute governance
Vietnam
Tra My (Chiffon) NguyenLida team
Researcher at Lida Safety · ML & Statistics, Minerva University
Vietnam
Zachary SchlosserLida teamDirect
Led the AI program for a US policy accelerator
New York
Yosra KazemiDirect
Independent AI researcher · causal inference, reinforcement learning
Toronto
Phuc-Nguyen NguyenDirect
Vietnam
Get involved
Please feel free to email us, connect on LinkedIn, or get involved in our research.
Interpretability, AI security or simulation — if your question overlaps with ours, we would rather work on it together than in parallel.
Propose a collaboration →Fellows join each term through SPAR; experienced researchers can also mentor a project or apply to us directly.
Write to us about a cohort →Donations go through our fiscal sponsor, Anti Entropy, a 501(c)(3) (EIN 88-0967420), and are tax-deductible in the United States.
Donate →Location
Canada / Remote
Fiscal sponsor
Anti Entropy, 501(c)(3)