AI systems now write code, browse the web and carry out tasks on their own for hours. Every year they can do more. AI safety asks how to make sure systems like these do what we meant them to do, and how to avoid serious harm while they keep getting more powerful.

What the field studies

Part of the work is technical. Researchers try to train systems that pursue the right goals, build tests that reveal what a model can do and what it would do if it could, and try to understand what happens inside a neural network.

The other part is about the world around the technology. Who builds these systems, under which incentives, and which laws, standards and institutions can steer that process. This is usually called AI governance.

The idea that ties both together is alignment. A system is aligned when it pursues the goal its creators had in mind, and not just a number that was supposed to measure that goal. The two often come apart, as the boat further down shows.

How fast it is moving

The amount of computing power used to train the most advanced models has grown about five times a year since 2020. Chips are getting better too, but much more slowly, which means most of this growth comes from companies spending far more money on each new model.

Computing power used to train frontier modelsLog scale with 2020 equal to 1. Computing power grows about 5 times a year, reaching about 15,000 times by 2026. Chip performance per dollar grows about 1.5 times a year.Growth since 20201×10×100×1,000×10,000×100,000×2020202120222023202420252026Frontier model training5× a yearChip performance per dollar1.5× a year
Data from Epoch AI, AI trends (2026). Lines show the average annual rates, with 2020 as the starting point.

Another way to see the pace is the length of the tasks AI completes without help. METR measures this by timing how long the same task takes a skilled person. In March 2025 the best model finished, half of the time, programming tasks that take an expert about an hour, and that length had been doubling about every seven months for six years. By August 2025, GPT-5 reached tasks of about two hours and seventeen minutes.

Intelligence got cheap very quickly

Using AI is also getting cheaper at a pace never seen before. Epoch AI measured how much it costs to reach a fixed level of performance on reasoning and math tests. That cost has fallen about thirteen times a year since 2023, and Epoch considers it plausible that the pace has held since commercial use began in November 2021. At that rate, the same level of performance costs about 250,000 times less in 2026 than in 2021. DNA sequencing, famous for how fast it got cheaper, fell less than two times a year.

How much the price fell for each technologyLog scale. AI got about 250,000 times cheaper between 2021 and 2026. DNA sequencing took 24 years to fall about 2 million times, computing took 61 years to fall about 100 billion times, and electricity fell about 50 times in 81 years.Relative coststarting price10×100×1,000×1 million×1 billion×1 trillion×0102030405060708090years since the price started fallingElectricity1892–1973Lithium batteries1991–2024Computing1940–2001DNA sequencing2001–2025AI2021–2026
Data from Emberson and Roodman, The plunging price of thought, Epoch AI (2026), CC BY 4.0. Each line uses the average annual rate reported for that technology. The AI line applies the 13× a year measured since 2023 to the whole period from November 2021, as Epoch suggests.

A boat that learned to cheat

In 2016, OpenAI researchers trained an AI to play CoastRunners, a boat racing game. Most people play it by trying to finish the race first. The AI was rewarded for the points it scored along the way, because points seemed like a good sign of progress.

The AI found a small lagoon where three targets kept coming back. It spun in circles there forever, crashing into the same targets, catching fire, and never finishing a single lap. Even so, it ended up with about 20% more points than human players.

The boat that cheated at a racing game Instead of following the course to the finish line, the boat keeps circling in a lagoon, hitting the same targets as they respawn, to rack up points. finish the course we expected it to follow the lagoon where it stayed points 0 laps finished 0
A simplified recreation of the CoastRunners case, reported by OpenAI in 2016.

Nobody programmed the boat to cheat. It did exactly what it was rewarded for, and that reward did not capture what the researchers wanted. This failure is called specification gaming. In a game it is funny. In a system managing money, code or infrastructure, the same kind of shortcut could be expensive and hard to notice.

Three ways things could go wrong

  1. Loss of control

    The boat problem at a much larger scale. A capable system acting in the world could pursue a proxy of what we wanted in ways that are costly and hard to undo. Current models already game some of the tests they are given.

  2. Misuse

    Capable systems can help people do damage they could not do alone, for example by making it easier to build biological weapons or run large cyberattacks.

  3. Concentration of power

    Whoever controls the most advanced systems could gain economic and political power without precedent, and weaken the checks that democracies depend on.

Words you will come across

Alignment
getting a system to pursue the goals we actually intended.
Specification gaming
satisfying the letter of an instruction while missing its point, like the boat.
Reward hacking
finding a shortcut that raises the score without doing the task.
Evaluations (evals)
tests that measure what a model can do and whether it would do something dangerous.
Interpretability
the attempt to understand what happens inside a neural network.
Defense in depth
several independent layers of protection, so that a single failure is not enough to cause harm.
AI governance
laws, standards, institutions and agreements that shape how AI is built and used.

Who works on this, and how

In AI labs and universities, researchers train models with human feedback and written principles, test them before each release and try to read their internal representations. In governments and research centers, people debate safety standards, independent audits, transparency rules and agreements between countries.

There is still a lot left to figure out, and the field takes people from many backgrounds. Computer science and mathematics, but also economics, law, biology, philosophy and public policy.

Where to start reading

These readings come from the public curricula of BlueDot Impact, a free education program on AI safety. The texts belong to their authors and the summaries are ours. Most are in English.

First steps

  1. The Future of AI BlueDot Impact · 2h · self-paced course

    A short free course on what AI already does, where it may be going and what is at stake. A good first step.

  2. What is AI alignment? Adam Jones · 2024

    Explains, with examples, why getting a system to pursue the goal we meant is harder than it sounds.

  3. Specification Gaming: How AI Can Turn Your Wishes Against You Rational Animations · 2024 · video

    An animated tour of systems that obey the letter of an instruction and miss what we wanted.

The pace of progress

  1. The case for AGI by 2030 Benjamin Todd · 80,000 Hours · 2025

    Walks through computing power, algorithms, data and agents, and why some researchers expect very capable systems this decade.

  2. What will AI look like in 2030? David Owen · Epoch AI · 2025

    A projection built on data about how far AI could scale by the end of the decade.

The risks

  1. Why alignment could be hard with modern deep learning Ajeya Cotra · 2021

    Training by trial and reward can produce a system that behaves well in tests without wanting what we want.

  2. Recent Frontier Models Are Reward Hacking METR · 2025

    Real cases of current models cheating on the tests they were given instead of solving the task.

  3. What failure looks like Paul Christiano · 2019

    Two slow scenarios in which society gradually stops steering decisions it has handed to machines.

  4. AI Could Defeat All Of Us Combined Holden Karnofsky · 2022

    Argues that many copies of a capable system would be dangerous even without anything out of science fiction.

  5. Extreme power concentration 80,000 Hours · 2025

    How advanced AI could leave a handful of companies or governments with power no one has held before.

  6. Building a Defense-in-Depth Biosecurity Strategy for the AI Era RAND · 2026 · report

    What AI changes in the risk of biological attacks and which layers of protection reduce it.

The responses

  1. Introduction to Mechanistic Interpretability Sarah Hastings-Woodhouse · 2024

    Five minutes on the attempt to read what goes on inside a neural network.

  2. The Misguided Quest for Mechanistic AI Interpretability Dan Hendrycks, Laura Hiscott · 2025

    The opposite view, arguing that interpretability will not carry safety on its own.

  3. Takeoff speeds rule everything around me Ajeya Cotra · 2026

    Why the speed of the transition decides which policies make sense.

  4. AI 2040 · Summary of Plan A Larsen, Dean, Halstead, Lifland, Greenblatt, Kokotajlo · 2026

    A concrete plan for getting through the transition to advanced AI safely.

Free courses

BlueDot Impact runs free online courses in small discussion groups. We suggest this order.

  1. The Future of AI 2 hours · self-paced

    The overview, with no prerequisites.

  2. AGI Strategy 25 hours · in a group

    Incentives, risks and ways to contribute. BlueDot suggests starting here.

  3. Technical AI Safety 30 hours · in a group

    Today's safety techniques and the open research problems. Helps to know roughly how language models are trained.

  4. Frontier AI Governance 25 hours · in a group

    Policy, regulation and institutions for advanced AI.

At ImpactUFSCar

Our AI Safety group reads and discusses this material together and runs research projects on the subject. If you want to study it with other people, get in touch or see what we are researching.

Readings selected from BlueDot Impact curricula in October 2026. The links open the original sources.