Research question
What would it take to protect frontier model weights from capable attackers?
Key findings
- 38 attack vectors across nine categories, from insider threats to supply chain - Five security levels (SL1-SL5) matched to attacker capability categories up to top state actors - No current lab reaches SL5; achieving it needs years of investment
