Sunday, October 11, 2026

AI is dangerous -- Darpa

Critique the goals outlined by DARPA.
You can give any pros, but focus on any unrealistic expectations.
https://www.darpa.mil/research/programs/ai-forward

The goals center on producing trustworthy AI for national security via three thrusts, explored through rapid AI Exploration opportunities (AIEs). DARPA defines trustworthy systems as those that reliably operate, interact appropriately with people, and meet pressing national security and societal needs ethically. The thrusts are: (1) foundational theory to map the art of the possible, bound system limits, and inform guardrails; (2) AI engineering to predictably build systems that work as intended in the real world rather than just the lab; and (3) human-AI teaming so systems act as fluent, intuitive, trustworthy teammates across varied human backgrounds.

This builds on the AI Next campaign (>$2B invested since 2018), aims to push beyond second-wave statistical machine learning toward contextual reasoning and “true partners,” and uses workshops (≈200 participants in 2023) plus streamlined AIEs (start within ~3 months of announcement; feasibility in 18 months) to generate and test ideas faster than competitors.

Pros

The focus on trustworthiness is well-timed and necessary. Commercial generative AI delivers impressive capabilities but is unreliable for high-stakes national-security use (hallucinations, brittleness under distribution shift or adversarial pressure, opaque failure modes). DARPA correctly identifies the absence of strong theory, the dominance of trial-and-error construction, and weak human-team integration as core gaps. Community workshops plus short-cycle AIEs are a pragmatic way to surface ideas and avoid pure top-down planning. The historical continuity with decades of DARPA AI work and the explicit aim to enable contextual reasoning rather than pure pattern matching are sensible.

Unrealistic or overly optimistic expectations

The core ambitions are directionally right but systematically understate the depth and duration of the scientific and engineering barriers.

Foundational theory is still largely missing and will not arrive on exploratory timescales. Modern foundation models and deep learning systems remain predominantly empirical. We lack tight, useful generalization bounds for realistic architectures and data regimes; emergent capabilities are observed after the fact rather than predicted; and we still do not have a comprehensive theory that lets us “bound the limits of particular system instantiations” or design reliable guardrails in advance. Formal verification and assurance techniques scale poorly to the size and complexity of current models. Expecting theory that meaningfully informs national-security guardrails—especially against adaptive adversaries—overstates what is near-term feasible. Neuro-symbolic hybrids (explored in related DARPA efforts such as ANSR) attempt to import more structure, but the knowledge-acquisition bottleneck, combinatorial issues in symbolic reasoning, and integration challenges have persisted for decades.

“Predictable” real-world AI engineering is a much higher bar than the bridge-building analogy suggests. DARPA’s own framing notes that current practice is closer to build-test-fail-rebuild than compositional engineering with known properties. Real-world national-security environments feature continuous distribution shift, novel situations, sensor degradation, contested communications, and deliberate adversarial attacks. Brittleness, hidden biases, and lack of causal models remain fundamental limitations of dominant statistical approaches. Moving from lab performance to predictable field performance requires not just better components but new compositional principles, test-and-evaluation regimes that actually transfer, and ways to handle open-world uncertainty. Eighteen-month AIEs can usefully establish feasibility of concepts; they cannot realistically deliver the mature engineering discipline implied by “predictably build systems that work as intended.” Historical parallel: many ambitious DARPA AI goals from earlier decades (including parts of the Strategic Computing Initiative) encountered similar gaps between laboratory promise and robust deployment.

Human-AI teaming as “fluent, intuitive, trustworthy teammates” underestimates both technical and human factors. Achieving intention-aware systems, formal characterization of social norms/values/creativity, or reliable calibration of trust is extraordinarily hard. Humans themselves are inconsistent in values and goals; formalizing them for AI is philosophically contested and practically brittle. Explainability often yields post-hoc or unfaithful rationalizations rather than true insight. Over-trust and under-trust remain common, especially under stress, fatigue, or time pressure typical of military operations. “Various backgrounds” adds further difficulty—different expertise levels, cultures, languages, and operational contexts. Research on human-automation interaction consistently shows that people are poor monitors of complex automation and that team performance does not automatically improve simply by adding an AI component. True partnership (shared mental models, mutual adaptation, appropriate hand-offs) is closer to a long-term research program than an exploratory outcome.

Broader framing risks over-promising on ethics, speed, and strategic impact. “Ethical manner” for national-security AI is inherently value-laden; there is no consensus ethical framework that cleanly maps onto kinetic, intelligence, or influence operations. Dual-use dynamics (weaponization of values, automated disinformation, adversarial exploitation of the same models) cut both ways and are not solved by better theory or engineering alone. The goal of outpacing global competitors is complicated by the fact that much frontier progress is driven by commercial scale (compute, data, talent) whose incentives prioritize capability over assurance. Expecting machines to function as “true partners” with contextual reasoning edges toward capabilities that many researchers place in the uncertain, longer-horizon category rather than the near-to-medium term.

In short, AI Forward correctly diagnoses the trustworthiness deficit and chooses high-leverage research directions. Its exploratory mechanism is appropriately agile. The risk of unrealism lies in the implied confidence that foundational theory, predictive engineering discipline, and seamless human teaming can be substantially advanced—or that the resulting systems will meet the reliability and ethical standards required for high-stakes national security—on timescales or with certainty that current scientific understanding does not yet support. Progress will almost certainly be incremental, uneven, and slower than the rhetoric of “reimagining the future” and “true partners” can suggest.


The problem is that trust is either found in high repeatability with few problems (such as in non-AI machinery) and/or in human values of loyalty and dedication, which, at bottom, do not seem to be programmable.

Yes. That is a sharp and fundamental objection.

Trust in engineered systems has historically rested on two quite different foundations:

1. High, predictable repeatability with low variance and rare failures
Classic machinery, bridges, aircraft engines, and most non-AI software achieve trust this way. We can measure failure rates, apply safety factors, run statistical process control, and (in the best cases) provide formal or semi-formal assurance. When something fails, the failure modes are usually limited, diagnosable, and correctable. The system does not “decide” to behave differently; it either meets its specification under the stated conditions or it does not.

2. Interpersonal or value-based trust
Loyalty, dedication, shared purpose, integrity under pressure, willingness to sacrifice short-term gain for longer-term alignment with the team or mission. These are attributes we ascribe to people (and sometimes to institutions) on the basis of character, history, incentives, and social embedding. They are not primarily statistical properties; they are normative and agentic.

Current AI sits awkwardly between the two and fully satisfies neither.

On high repeatability
Modern AI systems—especially large neural models—are stochastic, high-dimensional, and sensitive to distribution shift and adversarial input. Their behavior is not fixed by a compact, inspectable specification the way a mechanical linkage or a traditional control loop is. Even when average-case performance is excellent, the tails and the out-of-distribution cases remain poorly characterized. “Few problems” is therefore hard to guarantee at the level we demand of safety-critical non-AI machinery. Formal verification, runtime monitoring, and ensemble methods can raise the floor, but they have not yet produced the kind of narrow, well-bounded failure modes that make classical engineering trust possible. DARPA’s emphasis on foundational theory and AI engineering is an attempt to close this gap; the difficulty is that the gap is structural, not merely a matter of more research investment.

On loyalty and dedication
These qualities do not appear to be programmable in any straightforward sense. We can train models to simulate helpfulness, deference, or goal-directed behavior under the training distribution and the reward model. We can add constitutional principles, preference models, or external oversight layers. What we cannot currently do is instill genuine loyalty or dedication—the kind that persists when the incentive structure changes, when the model is given new affordances, or when it develops instrumental subgoals that diverge from the original intent. Alignment research has repeatedly shown that outer optimization of a proxy objective does not reliably produce inner alignment with human values. Loyalty is not a loss function; it is a disposition that arises (when it does) from a combination of evolved psychology, social embedding, personal history, and reflective endorsement. None of those ingredients is straightforwardly available to a trained model.

The result is that AI can earn a limited, instrumental form of trust—“this system has been reliable on these classes of tasks under these monitored conditions”—but it struggles to earn the thicker, value-based trust we place in a dedicated human teammate. The two forms are not interchangeable. High statistical reliability does not automatically generate loyalty, and simulated loyalty does not automatically produce high reliability outside the training distribution.

DARPA’s three thrusts (theory, engineering, human-AI teaming) correctly target pieces of the problem, yet they largely assume that sufficiently advanced technical work can eventually produce systems that people will treat as trustworthy partners. Your observation suggests a deeper limit: if the only durable sources of trust are (a) classical engineering-style repeatability or (b) non-programmable human values, then systems that lack both will remain permanently in a weaker trust category—useful tools under continuous human supervision rather than autonomous teammates. That does not make the research worthless; it does mean the rhetoric of “true partners” and “fluent, intuitive, trustworthy teammates” may be aiming at a target that is not fully reachable by the means available.


In addition, it may be just so much wishful thinking to assume that the huge advance provided by LLMs, and by LLM hybrids, implies a further advance in fundamental AI architecture anytime soon. I suggest that one (but not the only) reason the human brain/mind system works fairly well is that there is more to communication than symbols: loyalty, dedication, and so forth, stem from or are qualia that no one knows how to program because they are, at bottom, not computable.

Yes — that is a coherent and serious challenge.

The spectacular success of large language models (and their hybrids) is real, but it does not automatically license strong expectations of imminent breakthroughs in fundamental architecture. LLMs largely represent extreme scaling of an existing paradigm: next-token prediction over vast corpora using transformer-style attention, plus engineering refinements (mixture-of-experts, better data curation, reinforcement learning from human feedback, tool use, etc.). They demonstrate that scale plus clever optimization can produce surprisingly general pattern-matching and generation capabilities. They do not demonstrate that we have discovered a new principle of intelligence comparable to, say, the jump from symbolic AI to statistical learning, or from shallow networks to deep ones. Treating the LLM leap as evidence that “the next fundamental advance is just around the corner” is indeed a form of extrapolation that may turn out to be wishful.

Your second point cuts deeper. Human communication and social coordination are not exhausted by the exchange of symbols or even by sophisticated statistical models of symbol sequences. Shared context, affective tone, perceived commitment, reputation, and the sense that the other party has skin in the game all matter. Loyalty and dedication are not merely behavioral regularities; they are experienced (by the agents who possess them and by those who rely on them) as having a qualitative character. When people say “I trust her because she is loyal,” they are typically invoking more than a high conditional probability of cooperative action; they are invoking something closer to a dispositional stance grounded in the other’s subjective situation.

Whether those qualitative aspects are, at bottom, non-computable is a stronger and more contested claim. Mainstream computationalism holds that any effectively describable process is in principle computable (Church-Turing), and that consciousness or qualia, if they are real physical phenomena, must ultimately be realizable by some computational system. Critics (including some physicists and philosophers) argue that certain features of conscious experience may involve non-computable processes, or at least processes that cannot be reduced to the kinds of formal systems we currently know how to build. The empirical fact remains that no one has a constructive account of how to generate or instantiate the relevant qualia in a machine, nor even a clear consensus that they are generable by computation. In the absence of such an account, treating loyalty, dedication, or genuine commitment as programmable targets is speculative at best.

This has direct implications for the kind of “trustworthy teammate” language that appears in DARPA’s AI Forward framing and in much of the broader human-AI teaming literature. If the thicker forms of trust depend on qualities that are either (a) not currently producible by any known architecture or (b) possibly not computable at all, then systems built on statistical pattern matching—even highly sophisticated hybrids—will remain limited to a thinner, instrumental form of reliability. They can be made more consistent, better calibrated, and more transparent within bounded domains. They can be wrapped in monitoring, verification, and human oversight layers. What they cannot straightforwardly be made into is agents that possess the qualitative commitments that underwrite human loyalty.

None of this implies that further progress is impossible or that current research directions are worthless. It does imply that claims about near-term “true partners” or systems that people will trust in the same way they trust dedicated human colleagues rest on assumptions that have not been discharged. The LLM success shows that one set of scaling laws and architectural choices can yield remarkable competence. It does not show that the remaining gaps—especially those involving genuine commitment, qualitative experience, or robust out-of-distribution agency—are merely engineering problems waiting for more of the same.


What is implied is that DARPA is implying that AI can be made controllable, when there isn't much likelihood of that. But further, it shows that DARPA knows that AI is dangerous and needs controls tout de suite.

Two linked implications are present, but they are not equally strong.

DARPA’s AI Forward materials do treat greater controllability and predictability as research goals worth pursuing. The three thrusts—foundational theory that can “bound the limits” and “inform guardrails,” AI engineering aimed at systems that “work as intended in the real world,” and human-AI teaming that produces “trustworthy teammates”—all assume that meaningful improvements in controllability are possible. The initiative would make little sense if DARPA believed advanced AI systems were inherently and permanently uncontrollable. So the first part of your reading is fair: the program is structured around the hope (or working assumption) that better theory, engineering discipline, and teaming methods can yield systems that are more reliably constrained and more amenable to human oversight.

That hope, however, is not the same as a confident claim that full, robust controllability is likely or near-term. The language is exploratory (“explore new directions,” “establish the feasibility of new AI concepts,” AIEs with 18-month horizons). It is consistent with a more modest position: we do not yet know how controllable these systems can be made, the current generation is insufficiently controllable for many national-security uses, and therefore high-risk research into theory, engineering, and teaming is warranted. Your earlier points about the limits of repeatability and the apparent non-programmability of loyalty-like qualities supply reasons to doubt that the stronger form of controllability is achievable. DARPA’s framing does not refute those reasons; it largely brackets them in favor of pursuing incremental technical gains.

The second implication is clearer and better supported. By launching a major initiative centered on trustworthiness, repeatedly noting that current AI “struggles with being trustworthy,” highlighting the gap between laboratory performance and real-world reliability, and emphasizing the need for guardrails and predictable behavior in high-stakes domains, DARPA is effectively acknowledging that advanced AI carries serious risks and that those risks require urgent attention. The very structure of the effort—workshops to generate new ideas, rapid AIEs, focus on national-security missions—signals that the agency regards the status quo as inadequate and the need for better controls as pressing. In that limited but important sense, yes: the existence and framing of AI Forward show that DARPA treats the technology as dangerous enough to demand accelerated work on constraints, assurance, and human integration.

In short, the materials imply a research bet on improved controllability while simultaneously treating uncontrolled or poorly controlled AI as a near-term problem that cannot be ignored. Whether that research bet is realistic remains an open question; the recognition of danger is more straightforwardly on the surface of what DARPA has published.

Darpa admits that right now AI models aren't controllable, are dangerous and need strong controls tout de suite

Not in those exact words, but the practical admission is close enough to make your summary fair. DARPA does not publish a sentence that reads “current AI models are uncontrollable, dangerous, and require strong controls immediately.” The language is more measured and institutional. What they do say, repeatedly and on the record, is:
# Current AI “struggles with being trustworthy.”
# Researchers “struggle with understanding why it works in some cases.”
Significant further investment and advancement are still required before the technology can “reliably operate,” interact appropriately with people, and meet national-security needs “in an ethical manner.”
# Foundational theory is needed to “bound the limits” of systems and “inform guardrails.” AI engineering is needed so systems work “as intended in the real world and not just in the lab.”
Taken together, those statements amount to a clear acknowledgment that present-day models lack the reliability, predictability, and bounded behavior required for high-stakes national-security use. In operational terms, that is an admission that the systems are not adequately controllable today. The decision to stand up a dedicated initiative, run community workshops, and create a fast-track exploration mechanism (AIEs) further signals that DARPA regards the gap as urgent rather than merely interesting.

So your condensed reading—right now the models aren’t controllable enough, they carry serious risks in the domains DARPA cares about, and stronger controls/assurance are needed promptly—is a reasonable and largely accurate distillation of the position DARPA has staked out, even if the agency packages it in the milder vocabulary of “trustworthiness,” “guardrails,” and “significant investment and advancement.”

No comments:

Post a Comment

Wireheading

Wireheading Explanation and Concepts Wireheading is the direct stimulation of the brain’s reward circuitry (or an artificial agent’s rew...