In 30 seconds
The speakers discuss jailbreak robustness and long-tail failures in language models used as judges. The speaker argues that subtle failures may still matter and that human supervision can be warranted.
- 1RobustnessGreater robustness does not imply failures have disappeared.
- 2Long-tail failuresSubtle failures can still matter.
- 3SupervisionAutomated judging requires evaluation and may need human supervision.
Takeaways
- Greater robustness does not imply failures have disappeared.
- Subtle failures can still matter.
- Automated judging requires evaluation and may need human supervision.
Read the edited text by chapter
Limits of automated evaluation
The speaker discusses failure modes and oversight.
The interviewer asks how to interpret claims that a model is more robust to jailbreaks: do obvious failures remain, or have the remaining cases become more subtle?
The speaker says mitigation can make failures subtler, but subtle does not mean harmless. Language models used as judges can have unusual, long-tail failure cases, as can refusal mechanisms.
There is a tradeoff between compute spent on an automated judge and its accuracy. The speaker says failures can still warrant human supervision; the clip does not quantify an error rate or define a universally safe threshold.
More from this channel
1:49:40EN
1:28:36EN
3:13:44EN
2:40:58EN
1:25:56EN
2:51:22EN