The argument from measured dependence of detection on checker capability
The argument
Experiments in which one model hides a backdoor or a sabotage step and another model or a person looks for it find that the share caught depends mainly on how capable the checker is relative to the producer: a weaker monitor catches less of an agent's hidden misbehavior as the agent's advantage grows, attacks refined against monitors cut the catch rate of even frontier monitors, and unaided human developers miss most sabotage by coding agents. These experiments are representative of checking an AI system's output for safety. If checking needed less capability than producing, detection would hold up as the checker fell behind; it does not, so the claim fails for safety.
Does it work?
- Does it follow?
- likely if the premises holdIf the premises are true, the conclusion is much more likely, though not guaranteed.constitution →
- Do the premises hold?
- 1 supported
Granting its premises, the claim's safety half would be unlikely to hold, so the inference is good as far as the experiments are representative. It rests on the finding that weaker monitors catch less as the agent's advantage grows, which has not yet been assessed in its own right, though the control, scaling-law and 2026 monitoring results read here point toward it. Two things limit it. The settings are coding tasks and small games with current models, and the failure of human developers is attributed partly to light review and overtrust, which are matters of effort as much as capability. And the same experiments show weaker monitors catching most unrefined attacks, so they establish that detection degrades with the gap and under refinement, not that a weaker checker is of little use.
Premises
- SupportedThe evidence favors the claim, but the examination is incomplete or the evidence is indirect.constitution →A weaker AI monitor detects less of an AI agent's hidden misbehavior as the agent's capability advantage over the monitor grows.
Where it is made
Passages where sources make, criticize or mention this argument. They record where it appears, not how strong it is, and none has precedence over another.
No source is recorded as making it.
Earlier ratings
- Nov 11, 2026likely if the premises holdIf the premises are true, the conclusion is much more likely, though not guaranteed.constitution →
Granting its premises, the claim's safety half would be unlikely to hold, so the inference is good as far as the experiments are representative. It rests on the finding that weaker monitors catch less as the agent's advantage grows, which has not yet been assessed in its own right, though the control, scaling-law and 2026 monitoring results read here point toward it. Two things limit it. The settings are coding tasks and small games with current models, and the failure of human developers is attributed partly to light review and overtrust, which are matters of effort as much as capability. And the same experiments show weaker monitors catching most unrefined attacks, so they establish that detection degrades with the gap and under refinement, not that a weaker checker is of little use.