On unfixably unsafe AGI architectures

post by Steven Byrnes (steve2152) · 2020-02-19T21:16:19.544Z · LW · GW · 8 comments

Contents

  1. Is there such a thing as an "unfixably unsafe AGI"?
  2. Is it possible that we will know how to build this unfixably unsafe AGI, but can't coordinate not to do so?
    2A: There's very little work to do to run this AGI, e.g. there is well-documented open-source code that runs on commodity hardware.
    2B: The arguments that the AGI is unfixably unsafe are complex and uncertain (or, even worse, we don't have such arguments).
    2C: Relatedly, given a proposed approach to solve the problem, there is no easy, low-risk way to see whether it works.
    2D: A safer AGI architecture doesn't exist, or requires many years of development and many new insights.
  Summary: A possible story of coordination failure
  Appendix: My list of early-branching paths to AGI
None
8 comments

There's loads of discussion on ways that things can go wrong as we enter the post-AGI world. I think an especially important one for guiding current research is:

Maybe we'll know how to build unfixably unsafe AGI, but can't coordinate not to do so.

As a special case, I will suggest that we might have a x-risk-level accident as the culmination of a series of larger and larger accidents.

(This is an extreme case of what John Maxwell (following Nate Soares) calls an alignment roadblock [LW · GW].)

I'm sure this has been discussed before, but it sometimes seems to slip through the cracks in recent discussions, where instead I sometimes an implicit assumption that x-risk-level catastrophic accidents will not happen if we have ample warning in the form of minor accidents—and thus (this theory goes) we should think only about (1) fast takeoff, (2) deceptive systems (such as Paul Christiano's "influence-seekers [LW · GW]") that pretend to be beneficial until it's too late to stop them, (3) researchers being reckless due to race dynamics, and (4) other problems that are not "accidents" per se. But even if we avoid all those problems, and thus get ample experience in the form of minor accidents, I don't think that's necessarily enough.

1. Is there such a thing as an "unfixably unsafe AGI"?

By "unfixable", I mean that to solve the problem, we need to massively backtrack and take a different path to AGI (see Appendix) ... or that a safer AGI architecture simply doesn't exist.

By "unsafe", I mean ... well, I'm not really sure what this term should mean. Is it "less unsafe than the non-AGI status quo humanity on fast-forward" (a low bar!), or "the most safe that's technologically possible" (an almost impossibly high bar!), or some absolute metric like "<X% chance of extinction" for some X? It's your choice, readers! As your safety standards get lower, the existence of "unfixably unsafe AGI" becomes less likely, but a bigger problem if it does happen.

To keep things concrete, let's have in mind an Example failure mode: Goal instability under learning and reflection: The AGI will have an internal concept of (for example) "doing what the human overseer would want", and this concept will develop and churn as the agent develops better understanding of people and the world. (See "Ontological crisis [LW · GW]".) At some point—according to this failure mode—the internal goals / constraints / etc. may fall out of alignment with the safe, benevolent, corrigible behavior we want.

Is this failure mode plausible? If so, would it really be "unfixable" (within a certain approach to AGI)? Well, I don't know! Maybe, maybe not. As far as I know, it can't be ruled out.

Also, without directly solving the problem, there are plenty of possible indirect solutions—boxing, supervisory systems, transparency, etc. etc. But we don't know that any of them will work reliably, and it's possible that they will work only by limiting the system's capability, and then there's still a coordination problem (we can change the topic to "we know how to build this unboxed AGI, and can't coordinate not to do so").

(Again, let's keep this in mind as a running example—but note that there are other possible examples too.)

2. Is it possible that we will know how to build this unfixably unsafe AGI, but can't coordinate not to do so?

I think this is especially plausible if:

2A: There's very little work to do to run this AGI, e.g. there is well-documented open-source code that runs on commodity hardware.

I think this would eventually become true with very high probability (by default); thus a key goal would be to discover the problem as early as possible, when there are still many person-years of R&D left to do.

2B: The arguments that the AGI is unfixably unsafe are complex and uncertain (or, even worse, we don't have such arguments).

In our running example, it is probably impossible to think on the object level about every possible way in which an intelligence might re-conceptualize "doing what the overseer wants me to do" as it continuously learns and reflects. And maybe meta-level "reasoning about reasoning" can't conclude anything useful.

We can hope that, in the course of learning how to build an AGI, we will get insight into the "goal stability upon learning & reflection" problem, but this does not seem guaranteed by any means—for example, humans do not have goal stability, and if we reverse-engineer human brain algorithms then they won't magically start having goal stability, and as I've learned more nuts-and-bolts details about how human brain algorithms work in the past year, I don't feel like it's helped me all that much to better understand this problem, or to find and verify solutions.

2C: Relatedly, given a proposed approach to solve the problem, there is no easy, low-risk way to see whether it works.

In our running example, proposed solutions may have the problem that they just delay the problem instead of solving it—maybe the AGI still has a goal instability problem, but it hasn't learned enough and reflected enough for it to manifest yet.

2D: A safer AGI architecture doesn't exist, or requires many years of development and many new insights.

Here, an important consideration is how early the development paths diverged between our unfixably unsafe AGI and the safer alternative. Can we keep most of the code and make a small change, or do we have to go back and develop a fundamentally different type of AGI from scratch? See Appendix for more on this.

Summary: A possible story of coordination failure

If most or all these things are true, the coordination problem seems hopelessly unsolvable to me. Countless actors around the world would be well aware of the transformative potential of the technology, and able to have a go. Not everyone is risk-averse—imagine people saying "This is the only way we can stop climate change and save the planet, we have to try!!" Many will have superficially plausible ideas about how to solve the safety problem, and critics won't have air-tight, legible arguments that the ideas will not work. Even as a series of worse and worse AGI accidents occur, wih out-of-control AGIs self-replicating around the internet etc., a few people will keep trying to fix the unfixable AGI, seeing this as the only path to get this slow-rolling catastrophe under control (while actually making it worse). Even hypothetical ideal rational altruists might have a go with a design they know is a long-shot, if they believe that others will keep trying with even less plausible ideas.

Even if there is an international treaty, it would seem to be utterly unenforceable, especially given the existence of secret government labs, leakers / cyber-espionage, and grillions of GPUs, CPUs, and FPGAs off the grid around the world. I think this is true today and will continue to be true for the foreseeable future.[1]

So, if we have an unfixably unsafe AGI scenario in which the factors 2A-2D are all unfavorable, it just seems utterly hopeless to me. (If anyone has ideas, I'm very interested to hear them!) Instead, I would say the priority is to do technical safety work well in advance, to not get stuck in that kind of situation. I'm very interested in other people's thoughts on this.

Appendix: My list of early-branching paths to AGI

I find that there are a number of grand visions for what AGI will look like and how we'll get there, and these involve years or decades of substantially non-overlapping R&D. (Of course some of these have some overlap.) This is why I think AGI safety work is urgent, even if AGI were centuries away—because it will inform us about which of these paths is more or less promising. Then we can build the AGI that's best, and not just wait and see which R&D program happens to reach the finish-line first.

So here's my little list. I doubt all of them are technically feasible R&D paths that yield very different AGIs at the end, but I'm pretty sure some of them are.

I'm sure I'm leaving stuff out. I'm curious to what extent other people see many parallel paths to AGI, as I do, versus thinking only one path is really plausible, or that the paths will converge at the end, or that the paths mostly overlap, or some other opinion.


  1. I guess in principle maybe someday there could be a world government that institutes the Nick Bostrom "freedom tag", but I can't see how that would actually come to pass. ↩︎

8 comments

Comments sorted by top scores.

comment by Gurkenglas · 2020-02-20T01:46:35.436Z · LW(p) · GW(p)

Don't forget OpenAIs undisclosed research program, which according to recent leaks seems to be GPT-2 with more types of data.

And any other secret AI programs out there that are at less risk of leakage because the journalists don't know where to snoop around. By Merlin, let's all hope they're staying in touch with MIRI and/or OpenAI to coordinate on things.

I expect many paths to lead there, though once things start happening it will all be over very fast, one way or the other, before another path has time to become relevant.

I don't expect this world would survive its first accident. What would that even look like? An AI is rapidly approaching the short time window where its chances of taking over the world are between 1% and 99%, but it discounts utility by a factor of 10 per day, and so as it hits 10% it would rather try its hand than wait a day for the 90%, so we get a containable breakout?

comment by Daniel Kokotajlo (daniel-kokotajlo) · 2020-02-20T19:14:40.504Z · LW(p) · GW(p)
Even as a series of worse and worse AGI accidents occur, wih out-of-control AGIs self-replicating around the internet etc., a few people will keep trying to fix the unfixable AGI, seeing this as the only path to get this slow-rolling catastrophe under control (while actually making it worse).

Maybe at this point there would be the political will for a Butlerian Jihad. ;) Or more seriously, a self-imposed ban on AGI similar to the current self-imposed bans on human cloning and biological weapons. I agree this is a long shot given our current experience with climate change, but still, it seems possible. And perhaps the AGI accidents would be more newsworthy and gripping than climate change is, making it easier to rouse the public.

Replies from: steve2152
comment by Steven Byrnes (steve2152) · 2020-02-21T01:38:57.908Z · LW(p) · GW(p)

Hmm, interesting. I think human cloning is an imperfect analogy because the only real reason to do it is to impress your friends, so if everyone coordinates on being scornful towards the first person to do human cloning (rather than being impressed), then there's no more personal benefit to cheating. By contrast, with an AGI, there would be the hope that you'll actually solve the safety problems, and then get tons of money and power and respect.

Biological weapons is maybe a better example, but not an especially encouraging one: as many as 8 countries may have secret bio-weapons programs, including North Korea. Maybe one could make an argument that there's a taboo against using bio-weapons, as opposed to merely stockpiling them? Likewise, the taboo against using nuclear weapons was not successfully turned into a taboo against countries starting new nuclear weapons programs. Maybe it's hard to get riled up against someone doing something that is not purposely aggressive? I don't know. I can't think of a great historical analogy.

There's also the issue that there's not too many actors who have any reason to start a bio-weapons programs, and the ability to do so without getting shut down. Really just secret military labs. Whereas in the worst case, many orders of magnitude more people would be willing and able to start doing illegal AGI experiments without the authorities realizing it.

Replies from: daniel-kokotajlo
comment by Daniel Kokotajlo (daniel-kokotajlo) · 2020-02-21T15:47:55.990Z · LW(p) · GW(p)

I agree that AGI is more omni-use than bioweapons and thus will be harder to get people not to develop and use. I think our prospects look pretty bleak in this scenario, but it's not completely hopeless.

For human cloning, what I had in mind was a nation cloning its smartest individuals for the purpose of having better science/tech. Think of what the US could have accomplished if they had 10,000 Von Neumanns instead of 1.

comment by [deleted] · 2020-02-20T13:08:17.753Z · LW(p) · GW(p)
Whatever MIRI is doing in their undisclosed research program (involving Haskell I guess)

Uh... Haskell? I'm intrigued now.

Replies from: Vaniver, steve2152, Gurkenglas
comment by Vaniver · 2020-02-20T23:00:21.167Z · LW(p) · GW(p)

MIRI's hiring; maybe you should email Buck.

comment by Gurkenglas · 2020-02-20T13:10:50.333Z · LW(p) · GW(p)

They hired Edward Kmett, Haskell goliath.