Research question
Can protocols using untrusted capable models plus trusted weaker models and limited human labour stay safe against deliberate sabotage?
Key findings
- Trusted editing and monitoring protocols catch backdoored code from an adversarial GPT-4 with high probability - Frames safety as a red-team/blue-team game over protocols