This is a deflationary comment. You make a good point that the weights today are detectable, but I think proofs of concept around poison pills are very important. I am unaware of any theoretical reason why an attacker or misaligned model could not one day find a way to disguise a poison pill such that it is indistinguishable from the normal weights. There could be such limits, but research in this direction is very useful!
Does this response properly anticipate how math will change further with the next N model generations? Exposition and exploration may fall well within the capabilities of future models.
reply