{"id":"https://openalex.org/W7167813932","doi":"https://doi.org/10.48550/arxiv.2607.07184","title":"Predicting LLM Safety Before Release by Simulating Deployment","display_name":"Predicting LLM Safety Before Release by Simulating Deployment","publication_year":2026,"publication_date":"2026-07-08","ids":{"openalex":"https://openalex.org/W7167813932","doi":"https://doi.org/10.48550/arxiv.2607.07184"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2607.07184","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.07184","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2607.07184","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5109484915","display_name":"Marcus Williams","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Williams, Marcus","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5127802098","display_name":"Hannah Sheahan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sheahan, Hannah","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069293904","display_name":"Cameron Raymond","orcid":"https://orcid.org/0000-0001-9816-9039"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Raymond, Cameron","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5140303759","display_name":"Tomek Korbak","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Korbak, Tomek","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5140368993","display_name":"Deng Pan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Pan, Deng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101282101","display_name":"Peilin Yang","orcid":"https://orcid.org/0000-0003-1944-9572"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang, Peilin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109819215","display_name":"Leon Maksin","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Maksin, Leon","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059675095","display_name":"Ningyi Xie","orcid":"https://orcid.org/0000-0002-9373-3355"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xie, Ningyi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5140328640","display_name":"Phillip Guo","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Guo, Phillip","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5140375248","display_name":"Ian Kivlichan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kivlichan, Ian","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5140324968","display_name":"Micah Carroll","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Carroll, Micah","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.4449000060558319,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.4449000060558319,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11636","display_name":"Artificial Intelligence in Healthcare and Education","score":0.0885000005364418,"subfield":{"id":"https://openalex.org/subfields/2718","display_name":"Health Informatics"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.07180000096559525,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.925000011920929},{"id":"https://openalex.org/keywords/conversation","display_name":"Conversation","score":0.6039999723434448},{"id":"https://openalex.org/keywords/production","display_name":"Production (economics)","score":0.5770999789237976},{"id":"https://openalex.org/keywords/point","display_name":"Point (geometry)","score":0.42329999804496765},{"id":"https://openalex.org/keywords/resampling","display_name":"Resampling","score":0.3847000002861023},{"id":"https://openalex.org/keywords/simulation-modeling","display_name":"Simulation modeling","score":0.36149999499320984},{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.3402999937534332}],"concepts":[{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.925000011920929},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7402999997138977},{"id":"https://openalex.org/C2777200299","wikidata":"https://www.wikidata.org/wiki/Q52943","display_name":"Conversation","level":2,"score":0.6039999723434448},{"id":"https://openalex.org/C2778348673","wikidata":"https://www.wikidata.org/wiki/Q739302","display_name":"Production (economics)","level":2,"score":0.5770999789237976},{"id":"https://openalex.org/C28719098","wikidata":"https://www.wikidata.org/wiki/Q44946","display_name":"Point (geometry)","level":2,"score":0.42329999804496765},{"id":"https://openalex.org/C150921843","wikidata":"https://www.wikidata.org/wiki/Q1170431","display_name":"Resampling","level":2,"score":0.3847000002861023},{"id":"https://openalex.org/C108215451","wikidata":"https://www.wikidata.org/wiki/Q7263963","display_name":"Simulation modeling","level":2,"score":0.36149999499320984},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.3402999937534332},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.33320000767707825},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.313400000333786},{"id":"https://openalex.org/C42475967","wikidata":"https://www.wikidata.org/wiki/Q194292","display_name":"Operations research","level":1,"score":0.29739999771118164},{"id":"https://openalex.org/C81293917","wikidata":"https://www.wikidata.org/wiki/Q4189534","display_name":"System deployment","level":3,"score":0.27799999713897705},{"id":"https://openalex.org/C2777735758","wikidata":"https://www.wikidata.org/wiki/Q817765","display_name":"Path (computing)","level":2,"score":0.27379998564720154},{"id":"https://openalex.org/C160331591","wikidata":"https://www.wikidata.org/wiki/Q7075743","display_name":"Occupancy","level":2,"score":0.273499995470047},{"id":"https://openalex.org/C44154836","wikidata":"https://www.wikidata.org/wiki/Q45045","display_name":"Simulation","level":1,"score":0.26440000534057617},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.2590999901294708}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2607.07184","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.07184","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2607.07184","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.07184","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/17","display_name":"Partnerships for the goals","score":0.42174237966537476}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Pre-deployment":[0],"safety":[1],"evaluations":[2,17,222],"aim":[3],"to":[4,53,96,155,219,225],"inform":[5],"the":[6,70,76,98,166,241],"downstream":[7],"risks":[8],"of":[9,100,122,134,168,249],"releasing":[10],"a":[11,50,55,63,80,172,214],"new":[12],"AI":[13],"model.":[14,82],"Yet":[15],"most":[16],"provide":[18],"limited":[19],"evidence":[20],"about":[21,209],"how":[22,235],"often":[23],"undesired":[24],"model":[25,56,65,101],"behavior":[26],"will":[27,238],"occur":[28],"in":[29,189,240],"deployment:":[30,57],"they":[31],"generally":[32,40],"have":[33],"insufficient":[34],"coverage,":[35],"are":[36,39],"unrepresentative,":[37],"and":[38,74,94,119,138,179,206,244],"recognizable":[41],"as":[42,171],"tests.":[43],"To":[44],"address":[45],"these":[46],"concerns,":[47],"we":[48,67,194],"study":[49],"simple":[51],"way":[52],"simulate":[54],"starting":[58],"from":[59,62,160,202],"de-identified":[60],"conversations":[61],"previous":[64],"deployment,":[66],"hold":[68],"fixed":[69],"initial":[71],"conversation":[72],"prefix":[73],"regenerate":[75],"next":[77],"response":[78],"using":[79,113],"candidate":[81],"The":[83],"resulting":[84],"responses":[85],"can":[86,199],"then":[87],"both":[88],"be":[89,200],"audited":[90],"for":[91,117,175,216],"novel":[92],"misalignments":[93],"used":[95],"estimate":[97],"prevalence":[99],"misbehavior":[102,136,211],"before":[103],"deployment.":[104],"We":[105,126,163],"evaluate":[106],"deployment":[107,129,197,230,250],"simulation":[108,130,198,231],"across":[109],"four":[110],"GPT-5-series":[111],"deployments,":[112],"registered,":[114],"outcome-blinded":[115],"predictions":[116,178],"GPT-5.4":[118],"retrospective":[120],"analyses":[121],"three":[123],"earlier":[124],"releases.":[125],"find":[127],"that":[128,183,196],"produces":[131],"informative":[132,208],"estimates":[133,150],"post-deployment":[135],"rates":[137],"outperforms":[139],"baselines":[140],"based":[141],"on":[142],"adversarially":[143],"selected":[144],"production":[145,156,210,227],"data;":[146],"its":[147],"evaluation-awareness":[148],"point":[149],"were":[151],"also":[152,164],"much":[153],"closer":[154],"traffic":[157],"than":[158],"those":[159],"traditional":[161],"evaluations.":[162],"identify":[165],"realism":[167],"tool":[169],"resampling":[170],"central":[173],"challenge":[174,185],"further":[176],"improving":[177],"share":[180],"results":[181],"suggesting":[182,213],"this":[184],"is":[186],"surmountable":[187],"even":[188],"complex":[190],"tool-use":[191],"settings.":[192],"Finally,":[193],"show":[195],"seeded":[201],"public":[203],"chat":[204],"datasets":[205],"remain":[207],"rates,":[212],"path":[215],"external":[217],"researchers":[218],"run":[220],"deployment-grounded":[221],"without":[223],"access":[224],"private":[226],"logs.":[228],"Overall,":[229],"helps":[232],"evaluators":[233],"forecast":[234],"language":[236],"models":[237],"behave":[239],"real":[242],"world":[243],"supports":[245],"more":[246],"quantitative":[247],"assessment":[248],"risk.":[251]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-07-10T00:00:00"}