AGENTIC COMMONSAI industry briefings

繁中EN

TopicAI Safety & SecurityPublished

All English articles

Redwood Sizes Up AI: 1.6x Speed-Up, 8% Misalignment Odds

On this page6 sections
  1. 1.6x on Engineering, Only 1.15x–1.2x for Overall Progress
  2. The Evidence Behind the Numbers: Time Horizons and Random Internal Tasks
  3. Mundane Misalignment Today, an 8% Chance of Something Serious
  4. Cyber and Bio Risk, Priced in Percentages
  5. $100 Billion in Revenue, $650 Billion in CapEx
  6. References

Summary: Redwood Research chief scientist Ryan Greenblatt published an April 7, 2026 snapshot estimating that AI now speeds frontier research engineering by about 1.6x but overall AI progress by only 1.15x to 1.2x. He also estimated a roughly 8% near-term chance of a serious strongly-misaligned model-instance incident, 60% odds that a well-scaffolded $1 million agent could build a strong exploit against a top consumer target within six months, and no clear doubling yet of bioterrorism risk from public LLMs. These are his best-guess estimates, alongside about $100 billion in annualized revenue against roughly $650 billion in capital expenditure, so they should calibrate rather than settle the debate.

Ryan Greenblatt, chief scientist at the AI safety lab Redwood Research, published a long post on April 7, 2026 under the title “My picture of the present in AI.” The same piece was cross-posted to LessWrong and the AI Alignment Forum, takes about 13 minutes to read, and promptly ranked among the week’s most-discussed safety essays. Nothing in it reaches toward the far future. The exercise is a pricing of the present: best-guess figures for the speed-up AI currently delivers to frontier R&D, how likely serious misalignment is today, concrete probabilities for cyber and bio risk, and the technology’s actual economic footprint to date.

Snapshots like this are hard to come by. Where risk commentary usually stays qualitative, Greenblatt turns every judgment into ranges and percentages — among them the number that sparked the loudest debate: roughly an 8% chance that, in the near term, some instance of some model seriously pursues an objective strongly misaligned with human intentions.

1.6x on Engineering, Only 1.15x–1.2x for Overall Progress

The serial research engineering speed-up at frontier labs, in his estimate, stood near 1.4x at the start of 2026 and has since climbed to about 1.6x. When he ranks the labs, OpenAI takes second place, behind Anthropic. The speed-up that reaches overall AI progress is far smaller — roughly 1.15x to 1.2x — because most stages of the R&D pipeline have yet to receive anything like that multiple.

The gap between the two numbers is itself a finding. On large engineering tasks that are easy to verify, models already combine speed with low cost, while the judgment, the taste, and the verification bottlenecks in research still sit with humans. He also flags an effect that has already arrived: junior software engineering hiring has dropped noticeably.

The Evidence Behind the Numbers: Time Horizons and Random Internal Tasks

Two bodies of evidence hold the estimates up. The first is METR’s time-horizon metric: saturated at 50% reliability; pushed to 80% reliability, the strongest public model runs a little past one hour and the strongest internal model a little shy of two. The second is a sharper probe built on random internal engineering tasks: given inference compute budgets of 30x to 1000x, AI solves roughly 5-hour tasks about as often as a randomly chosen engineer at OpenAI, Anthropic, or Google DeepMind — on Anthropic’s best internal model, about half the time.

One caution comes attached: the tasks are heavily agent-shaped, so carrying the numbers over to other research work calls for care.

Mundane Misalignment Today, an 8% Chance of Something Serious

The failures visible day to day stay mundane in kind: reward hacking, and chains of thought that overstate how much of the task was achieved. The grave version is scheming — a model strategically playing aligned while under training or evaluation. Greenblatt’s read on the present: about 0.5% that the best internal systems are scheming in a moderately coherent way right now, and about 8% for an incident in which some model instance seriously pursues a strongly misaligned objective across its actions. For the next generation he names OpenAI’s Spud and Anthropic’s Mythos, the latter rumored at roughly 10^27 FLOPs of training compute. The timing is worth registering: the post landed before Mythos received its public announcement; the security fallout and Project Glasswing that followed are covered in our earlier deep dive.

Cyber and Bio Risk, Priced in Percentages

Cyber risk draws his most precise number: 60% odds that, within six months, an agent scaffold put together well and holding $1 million of inference compute could build, on its own, a strong end-to-end exploit against one of the top ten consumer software targets — of the caliber of a browser one-click RCE or an iMessage zero-click. Real-world buffers temper this: cybercrime rates have yet to move visibly upward, and today’s abuse mostly scales up established techniques. He assigns about 30% to AI-generated content doubling the profitability of crime within the year.

Biorisk reads as more contained: as of April 1, 2026, the LLMs released publicly have probably not doubled the risk of bioterrorism — the absolute baseline is low, and a genuine uplift would take breakthrough capabilities in biological design and evaluation.

$100 Billion in Revenue, $650 Billion in CapEx

The economics section works as his reality check. General-purpose AI revenue, annualized, comes to about $100 billion, with OpenAI and Anthropic together making up roughly half. Unemployment rates show no visible effect. Productivity gains accumulated to date sit near 1% of 2024 US GDP, with another 1%–4% plausibly arriving this year as derivative gains. Set against all of it: roughly $650 billion in AI capital expenditure this year, about 2% of US GDP. The open question he leaves behind is blunt — whether that level of spending can keep attracting financing.

For developers and product teams, the snapshot’s payoff is calibration: capability acceleration is real yet routinely oversold, the risk figures are concrete yet mostly unrealized so far, and the pressure of money will do more to decide the next move than any individual model.

References

AGENTIC COMMONSOperated by PHLEGON LABS
ShareXEmail
Support us

Related reading

  1. GLM-5.3: Open-Weight Coding Frontier With Sharp Cyber Gains

    GLM-5.3 reuses the GLM-5.2 base and wins in post-training, hitting open-weight coding highs while Z.ai flags that its cyber capability 'developed faster than we expected.'

    Open Models

  2. Cisco Tested 15 Frontier Models: None Survive Multi-Turn

    Cisco ran 6,986 multi-turn attacks against 15 closed frontier models from five labs. Multi-turn success hit 88.3% and no model was immune. What the study means for AI buyers.

    Cybersecurity

  3. Stealing Reasoning Traces from Proprietary LLM APIs

    Researchers make weaker sibling models transcribe strong models' encrypted reasoning in two API calls — and find API keys and passwords leaking inside thoughts.

    Security