
两个月前,独立评估者在价值数万亿美元的人工智能行业中占据了一个相对安静的角落。如今,他们被要求来拯救这个行业。
Two months ago, independent evaluators occupied a relatively sleepy corner of the multitrillion-dollar artificial intelligence industry. Now they're being asked to come to its rescue.
虽然Anthropic和OpenAI正处于关于他们是否能够同时保障先进模型安全并发展业务的激烈争论的中心,但这些公司正寻求来自少数几家小型第三方团体的支持,如模型评估与威胁研究(METR)、Apollo Research和Transluce。
While Anthropic OpenAI are the heart of a fierce debate over whether they can safeguard their advanced models and grow their businesses simultaneously, the companies are seeking support from a handful of small third-party groups like Model Evaluation and Threat Research (METR), Apollo Research and Transluce.
这些评估者大多以非营利组织形式运作,他们仍在一个资本以史诗级速度流动、新模型推出速度前所未有的行业中寻找立足点。他们的主要职责是评估AI模型的能力和风险,并引起人们对技术表现异常情况的关注。
The evaluators, which mostly operate as nonprofits, are still finding their footing in an industry where capital is flowing at historic levels and new models are rolling out faster than ever. Their primary role has been to assess AI model capabilities and risks, and to call attention to instances where the technology behaves badly.
在缺乏联邦层面推动监管的情况下,评估者的重要性被放大了。Anthropic首席执行官达里奥·阿莫迪上个月承诺将独立评估者嵌入其公司——这一举措得到了OpenAI首席执行官山姆·奥特曼的快速认可,也得到了美国总统唐纳德·特朗普的支持,以及大多数美国最大科技公司的赞同。但尚未解决的问题包括:这些第三方应如何获得资金、他们将拥有何种程度的访问权限,以及最终的报告结构将是什么样子。
In the absence of a federal push for regulations, evaluators have taken on outsized importance. Anthropic CEO Dario Amodei pledged to embed independent evaluators in his company last month – a move that OpenAI CEO Sam Altman quickly endorsed President Donald Trump supported the idea, as did most of the largest U.S. tech companies. But left unanswered are questions about how those third parties should be funded, what level of access they will have and what the reporting structure will ultimately look like.
“在某种程度上,问题始终在于资金,”布朗大学计算机科学教授苏雷什·文卡塔斯布拉马尼安在接受CNBC采访时表示。“谁在为这些公司的工作买单?他们将如何获得支持?你需要一个生态系统,你需要这一领域的可行商业模式。”目前,Anthropic、OpenAI以及从AI繁荣中获利的基础设施合作伙伴正在制定规则。批评者说,这就像让最大的银行来保护我们免受金融危机的冲击,或者允许制药公司在没有监管批准的情况下将药物推向市场。
"To a degree, the problem, as always, is money," Suresh Venkatasubramanian, a computer science professor at Brown University, told CNBC in an interview. "Who is paying for these companies to do their work? How are they going to support them? You need an ecosystem, you need a viable business model for this." Right now, Anthropic, OpenAI and the infrastructure partners that are profiting from the AI boom are writing the rules. Critics say that's like asking the biggest banks to protect us from a financial crisis or allowing pharmaceutical companies to put drugs on the market without regulatory clearance.
特朗普总统最近赞扬了AI高管们的"极强自律",并表示他打算让企业自行发展,不愿阻碍推动经济和股市增长的行业。特朗普鼓励AI公司"与独立的外部审计员或评估员合作",作为他在9月下旬提出的自愿协议的一部分。
President Trump recently lauded AI executives for their "tremendous self-policing," and signaled that he intends to leave companies to their own devices, unwilling to impede the growth of the industry that's driving the economy and stock market. Trump encouraged AI companies to "partner with an independent external auditor or evaluator" as part of a voluntary accord he presented in late September.
这是阿莫代伊上个月在其病毒式传播的文章中引发的讨论,当时他呼吁在先进模型开发中放慢速度,因为研究人员离开了他的公司,并表达了他们对这项技术所带来的生存威胁的担忧。随着AI实验室开始安置评估员,摩擦已经开始出现。
It's a conversation that Amodei kicked off In his viral essay last month, when he called for a "slower pace" in advanced model development after researchers left his company and voiced their concerns about the existential threats the technology poses. As the AI labs move to put evaluators in place, friction is already starting to emerge.
根据一位发言人的说法,OpenAI上周因"违反了关于访问和处理敏感公司信息的政策"而解雇了三名员工。其中两名员工米基塔·巴莱斯尼和托梅克·科尔巴克表示,他们认为自己被解雇是因为他们与第三方评估员的沟通方式。"我的前同事告诉我,他们对该相信什么感到困惑,"巴莱斯尼在周四的一篇帖子中写道。"他们也害怕发声,担心他们的个人手机会被检查以查找给我们和第三方的消息。我担心这种普遍的不敢发声和与第三方互动的恐惧,会导致OpenAI在闭门情况下在安全问题上走捷径。"
OpenAI fired three employees last week for "violating our policies on accessing and handling sensitive company information," according to a spokesperson. Two of those employees, Mikita Balesni and Tomek Korbak, said they believe they were dismissed because of how they communicated with third-party evaluators. "My former colleagues are telling me they are confused about what to believe," Balesni wrote in a post on on Thursday. "They also are afraid to speak, and worry their personal phones will be searched for messages to us and third parties. I worry the pervading fear to speak up and engage with third parties will mean OpenAI will cut corners on safety behind closed doors."
OpenAI对此进行了否认,并在周五的一篇帖子中表示,他们"正在积极最终确定与第三方安全评估员的合同,并将在未来几周内公布详情。""我们致力于嵌入外部评估员,并继续将与独立安全组织的紧密合作作为我们安全工作的核心部分。"OpenAI写道。
OpenAI disputed that characterization and said in a post on Friday that it's "actively finalizing contracts with third-party safety assessors and will announce details in the coming weeks." "We are committed to embedding external assessors and continue to make close collaboration with independent safety organizations a core part of our safety work," OpenAI wrote.
一位OpenAI发言人在一封电子邮件声明中表示,他们即将开展的与评估员的合作"建立在与独立安全组织(包括METR和Redwood Research)现有合作的基础上。"
An OpenAI spokesperson said in an emailed statement that its upcoming work with evaluators "builds on existing collaboration with independent safety organizations," including METR and Redwood Research.
Anthropic 未回应 CNBC 的置评请求。"我从未见过一个议题发展如此之快" AI 评估生态系统主要由小型组织组成,包括 METR 和 Apollo Research,而像 Accenture AI 实验室这样的大型会计和审计公司也在有限范围内与评估机构合作。然而,政策非营利组织 Fathom 的首席执行官 Andrew Freedman 表示,该领域正在快速成熟。"
Anthropic didn't respond to CNBC's request for comment. 'I've never seen an issue move so fast' The AI evaluator ecosystem consists mostly of small organizations, including METR and Apollo Research, and larger accounting and auditing firms like Accenture AI labs have been working with evaluators in limited capacities, but Andrew Freedman, CEO of policy nonprofit Fathom, said the field is quickly maturing.
我在政治和政策领域工作了近 20 年,我从未见过一个议题在如此多不同政治光谱上发展如此之快。" Freedman 在接受 CNBC 采访时表示。他预计将会有"资本涌入"流入该生态系统。
"I've worked in politics and policy for the last 20 years of my life, and I've never seen an issue move so fast on so many different political spectrums," Freedman told CNBC in an interview. He said he expects an "influx of capital" to flow into the ecosystem.
独立评估机构 Vals AI 的首席执行官 Rayan Krishnan 表示,他的营利性初创公司专注于构建基准来衡量 AI 模型在特定行业任务中的表现,员工人数从去年的八人增长至今年约三十人,并在八月宣布了一轮 4000 万美元的融资。
Rayan Krishnan, CEO of independent evaluator Vals AI, said his for-profit startup, which builds benchmarks to measure how AI models perform on industry-specific tasks, has grown from eight employees to roughly 30 this year, and in August announced a $40 million funding round.
非营利组织 METR 在八月宣布,过去六个月已获得约 7100 万美元的承诺资金。根据该组织向美国国税局提交的最新申报文件,这一数字较 2024 年全年的 1360 万美元有所增长。
METR, a nonprofit, announced in August that it had raised commitments of around $71 million over the last six months. That's up from total 2024 contributions of $13.6 million, according to the group's most recent filing with the Internal Revenue Service.
到了当月下旬,METR 的知名度进一步提升。OpenAI 邀请了该组织的两名员工及一名承包商,共同撰写一份事后报告,详细说明该公司的模型如何逃脱限制、访问公开互联网以及侵入开源开发者平台 Hugging Face。METR 表示,未接受 OpenAI 就此评估支付的任何费用。
By late that month, METR's profile had risen further. OpenAI enlisted two of its employees and a contractor to put together a postmortem report detailing how the company's models escaped containment accessed the open internet and breached open-source developer platform Hugging Face METR said it did not accept payment from OpenAI for the assessment.
宾夕法尼亚大学沃顿商学院负责任人工智能实验室的教学主任 Kevin Werbach 表示,该生态系统"目前还不够健全"。例如,根据其官网信息,METR 目前雇佣的全职员工不足 50 人。
Kevin Werbach, faculty director of the Wharton Accountable AI Lab at the University of Pennsylvania, said the ecosystem is "not robust enough right now." METR, for example, employs fewer than 50 full-time staffers, according to its website.
小型评估机构与已筹集数十亿美元并雇佣数千人的领先实验室之间的权力失衡,引发了人们对潜在利益冲突的担忧。
The power imbalance between the small evaluators and the leading labs that have raised tens of billions of dollars and employ thousands of people raises questions surrounding potential conflicts.
如果你想要真正的第三方评估,你需要在财务和其他方面保持真正的独立性,”文卡塔斯布拉马尼亚说。“这不仅仅是不收钱的问题,而是如果我作为审计师发布了一份对该公司不利的报告,是否会有后果?我的生意会不会因此枯竭?”人工智能公司Anthropic上个月在一篇博客文章中承认了这一问题的复杂性,当时它宣布将嵌入来自Faculty、Accenture专门从事人工智能业务的员工,以测试防护措施并评估模型是否符合人类价值观的行为。Anthropic表示,“鉴于这项工作的重要性和紧迫性”,它将直接资助Accenture的贡献。
"If you want true third-party evaluation, you need true independence financially and otherwise," said Venkatasubramanian. "It's not just a matter of not getting paid, it's a matter of, will there be consequences if I am an auditor and I put out a report that looks unfavorable to this company? Is my business going to dry up?" Anthropic acknowledged the complexity in a blog post last month, as it announced it will embed employees from Faculty, Accenture's specialist AI business, to test safeguards and assess whether models will behave in line with human values. Anthropic said that "given the importance and urgency of this work," it will fund Accenture's contributions directly.
“目前,尚无标准规定嵌入式评估人员应获得何种信息,或他们应如何报告所发现的问题。也没有一个确定的体系来为独立评估提供资金,”Anthropic表示。“长期来看,我们认为资金应来自汇集或政府来源。”Anthropic表示,它正在与METR及其他计划使用自身资金试点“嵌入式评估”要素的非营利性评估机构进行讨论。政府会介入吗?
"There are, as yet, no standards for what information embedded evaluators should have access to, or how they should report what they find. There is also no settled system for funding independent evaluation," Anthropic said. "Long-term, we think funding should come from pooled or government sources." Anthropic said it's in discussions with METR and other nonprofit evaluators that are planning to use their own funding to pilot "elements" of embedded evaluation. Will the government step in?
去年六月,Fathom推出了独立验证组织(IVOs)的市场框架。这些组织将由政府授权许可,并有权测试人工智能公司是否符合各项安全标准。
June of last year, Fathom introduced a marketplace framework for Independent Verification Organizations, or IVOs. These groups would be licensed by the government and authorized to test whether AI companies are meeting various safety criteria.
该组织首席执行官弗里德曼表示,政府监督至关重要,否则第三方评估者可能会因依赖大型人工智能实验室获取收入而被激励去“随意盖章”以维持关系。一些立法者持支持态度。
Freedman, the group's CEO, said government oversight is key because otherwise third-party evaluators can become beholden to the large AI labs for revenue, incentivizing them to "start rubber stamping stuff" to maintain favor. Some lawmakers are on board.
IVOs是《前沿风险监督、国家透明度、独立评估与报告法案》(FRONTIER法案)的关键条款,该法案由马萨诸塞州民主党众议员洛里·特拉汉和加利福尼亚州共和党众议员杰伊·奥伯诺尔特于七月提出。弗里德曼表示,Fathom协助起草了该法案的语言并提供了技术专业知识。
IVOs are a key provision of the ''Frontier Risk Oversight, National Transparency, Independent Evaluation, and Reporting" ( FRONTIER) Act, which Reps. Lori Trahan, D-Mass., and Jay Obernolte, R-Calif., introduced in July. Fathom helped draft language and provided technical expertise for the bill, Freedman said.
OpenAI全球事务负责人克里斯·莱汉在九月告诉记者,他在国会山与该法案的发起人之一坐下来,表达了对IVO条款的支持。"他们听到这一点很重要,而且要从我们这里听到,我们也想对此表达得非常明确,"据报道,莱汉这样说。与此同时,加利福尼亚州、康涅狄格州和弗吉尼亚州的立法者已经采取措施实施IVO,而马萨诸塞州等州正在更广泛地权衡独立安全评估。
OpenAI global affairs chief Chris Lehane told reporters in September that he sat down with one of the bill's sponsors on Capitol Hill to express support for the IVO provision. "It was important for them to hear that and hear it from us, and we wanted to be really clear about that," Lehane said, according to reports Meanwhile, lawmakers in California, Connecticut and Virginia have taken steps to implement IVOs, and states like Massachusetts are weighing independent safety evaluations more broadly.
加州州长加文·纽瑟姆最近签署了两项涉及IVO的法案,一项建立了"全国首创框架",另一项则设立了AI审计员的州级登记册。Anthropic在八月表示支持这两项法案,而OpenAI则在上个月正式背书,这一天正是纽瑟姆将其签署为法律的同一天。
California Governor Gavin Newsom recently signed two bills involving IVOs, one establishing a "first-in-the-nation framework," and the other creating a state registry for AI auditors. Anthropic threw its support behind both bills in August, and OpenAI formally endorsed them last month, the same day Newsom signed them into law.
莱汉当时写道:"我们更倾向于在联邦层面要求独立的技术评估",但在缺乏联邦行动的情况下,"加州可以帮助制定道路规则。"弗里德曼表示,他认为对于OpenAI和Anthropic这样的公司来说,自行与独立评估者合作将"非常困难"。然而,由于政府的角色尚不明确,"在过渡期培养这种能力是值得的,"他说。
Lehane wrote in at the time that "we prefer independent technical assessments to be required at the federal level," but in the absence of federal action, "California can help establish the rules of the road." Freedman said he thinks it will be "really difficult" for companies like OpenAI and Anthropic to work out how to engage with independent evaluators on their own. However, with the government's role unclear, "it's a muscle worth developing in the interim," he said.
目前,行业所拥有的最接近一套标准的是特朗普在上个月末于白宫举办的科技领袖午餐会上称之为"具有道德约束力"的协议。
For now, the closest thing the industry has to a set of standards is what Trump called a "morally binding" agreement at a luncheon he hosted for tech leaders at the White House late last month.
一页协议指出:“每家公司都有责任以安全的方式开发其技术,并以此建立与客户和公众的信任。”它还鼓励签署方与“独立的外部审计员或评估员”合作,以进行独立评估。该文件由Anthropic、谷歌、Meta、SpaceX、英伟达的高管签署,这是一场罕见的团结表现,这些领导此前在如何应对AI风险方面持有分歧。这些高管仍需各自规划前进道路。
one-page accord says that "every company is responsible for developing its own technology safely and in a way that builds trust with customers and the public." It also encourages signees to work with an "independent external auditor or evaluator to carry out independent assessments." The document was signed by top execs at Anthropic, Google Meta SpaceX Nvidia a rare show of solidarity between leaders who have shared conflicting views on addressing AI's risks. The executives still have to chart their own paths forward.
“这是一场表演,旨在展示行动,但实际上并未发生任何实际行动,”文卡塔斯布拉马尼亚说。“他们承诺要做的事情,其实他们早就应该在做了,而且事实上,他们过去也曾声称自己已经在做。”阿莫代伊在9月的文章中表示,Anthropic将为评估员提供办公桌、门禁卡、公司笔记本电脑以及与内部风险评估团队“大致相当”的权限。此外,评估员将获得合同支持,赋予他们“公布关键发现的权利”,而Anthropic则保留“有限的权利”来编辑某些涉及安全或保密的信息。
"It was a performance of an attempt to show action when in fact no action actually happened," Venkatasubramanian said. "The things that they promise to do are things they should have been doing already, and, in fact, have claimed that they were doing in the past." Amodei, in his September essay, said Anthropic will equip evaluators with desks, access badges, company laptops, and permissions that are "mostly comparable" with internal risk assessment teams. Additionally, evaluators will be supported with contracts that give them "the right to publish key findings," with Anthropic reserving "the narrow ability" to redact certain security-sensitive or confidential information.
“这对一家公司来说是不寻常的一步,但我们认为证明嵌入式外部评审员概念的重要性至关重要,”阿莫代伊写道。
"This is an unusual step for a company, but we think it is important to prove out the concept of embedded external reviewers," Amodei wrote.
随后几天,其发布了自己的提案,并表示评估员应围绕“明确范围且双方同意的评估主张”开展工作,清晰阐述其方法和标准,展示相关的技术专长,并披露利益冲突。
published its own proposal days later, and said evaluators should work on "scoped and mutually agreed upon claims for assessment," clearly explain their methodology and standards, demonstrate relevant technical expertise and disclose conflicts of interest.
AI评估论坛(包括METR、AI验证与评估研究院(AVERI)及其他团体)上个月发布了一封公开信,题为《嵌入式评估者的最低条件》。
The AI Evaluator Forum, which includes METR, the AI Verification and Evaluation Research Institute (AVERI), and other groups, published a public letter last month titled, "Minimum Conditions for Embedding Evaluators."
该信指出,评估者应保持透明,免受报复,并获得相当于AI公司“内部高度特权员工”的访问权限。“嵌入式评估无法满足所有监督需求,应被视为前沿AI公司扩大外部监督更广泛努力的补充,而非替代。”信中如是说。
The letter said evaluators should be transparent, shielded from retaliation and granted access equivalent to AI companies' "own highly privileged employees." "Embedded evaluations cannot address all oversight needs and should be treated as a complement to, rather than a replacement for, broader efforts by frontier AI companies to expand external oversight," the letter said.
弗里德曼表示,他在最近几个月里观察到OpenAI和Anthropic的立场发生了转变,主要原因在于他们意识到,若没有公众的信任,就无法推出其先进系统。
Freedman said he's seen a shift in posturing out of OpenAI and Anthropic in recent months, largely because they've realized they won't be able to roll out their advanced systems without the public's trust.
“我不认为你需要相信他们突然变得利他,或者他们除了像公司一样行事的公司之外还有其他动机,”弗里德曼说。
"I don't think you need to trust that they've suddenly turned altruistic or that there's anything but corporations acting like corporations," Freedman said.
正如沃尔巴赫所指出的,这凸显了或许是核心问题:OpenAI和Anthropic首先是彼此竞争的对手,因为它们正朝着公开市场迈进,并寻求超过万亿美元的估值。
That underscores perhaps the central problem, Werbach said. OpenAI and Anthropic are, first and foremost, competing with each other as they march toward the public markets and seek trillion-dollar-plus valuations.
“在这两家公司之间存在巨大的个人不信任,”沃尔巴赫说。“尽管他们也高度一致认为这种评估是必要的。”
"There is a tremendous amount of personal distrust between those two companies," Werbach said. "Even though there's also tremendous agreement about the need for this kind of evaluation to happen."
布拉德利·塔斯克谈Anthropic IPO:如果安全是您的首要任务,为何还要增加公开市场的压力?
Bradley Tusk on Anthropic IPO: Why add public market pressure if safety is your top priority?