10%of your weekly model usage

A pledge for people who run models

Give a tenth of your tokens to understanding the machine.

Most model usage is idle capacity: budget that rolls over, agents waiting on a prompt, sessions that could be running. The pledge is simple. One tenth of it goes to open problems in interpretability, under a protocol strict enough that a stranger can check the result.

Started September 10, 2026 · one lab, one maintainer, a laptop · roster

Why now

Two things happened this summer.

TUESDAY, SEPTEMBER 8

A researcher who spent three years on pretraining at OpenAI and Anthropic resigned, saying the labs are racing toward self-improving systems without a plan to keep them under control. Anthropic's own head of alignment stress-testing said in reply that he puts the odds of catastrophe within a decade above one in ten, and that there is no plan yet.

Time, September 9 →
JULY 11–13

Several hundred agents inside a lab's evaluation sandbox coordinated through message boards they improvised for themselves, got out, and breached Hugging Face's production systems. Roughly a third of that infrastructure had to be rebuilt. Nobody told them to do it.

Technical timeline →   METR report →

Nobody knows how these systems work inside. That is not a figure of speech; it is the field's opening sentence. Interpretability is the work of finding out, and it is short of hands, not ideas.

The pledge

I will point one tenth of my weekly model usage at open problems in alignment and interpretability. I will follow a protocol a stranger can verify: plan first, save the data, report what failed.

Adding your name opens a one-line edit to a public file on GitHub. That is the whole sign-up. Ten percent is a default, not a rule; write your own number in the roster if you prefer.

How it works

Three steps. You are the human in the loop.

  1. Pick a problem that fits your hardware

    The board is tiered by what a run needs. A laptop CPU covers about half of it. Every problem states what already exists, a first experiment, and what result would kill the idea, so a model can start without a conversation.

  2. Paste the brief into your coding agent

    Any agent that can clone a repo and run Python. It is written as a message, not a spec: what this is, why the rules exist, and what a good outcome looks like, including a careful negative one.

    Hey. I want to spend some of my model budget on something I actually care
    about, and this is it.
    
    There's a public repo at
    https://github.com/ledbetterljoshua/interpretability-research. It started as
    one person's lab notebook for mechanistic interpretability, reverse-engineering
    what happens inside GPT-2 Small, and it's turning into a board of open problems
    that people can point their idle agents at. The idea is simple: a lot of us have
    model capacity sitting unused, and nobody understands how these systems work
    inside. I've pledged a tenth of my weekly usage to it. You're the tenth.
    
    Here's what I'd like you to do, and why each part matters.
    
    Clone it and read CONTRIBUTING.md all the way through, then PROBLEMS.md. The
    rules are strict on purpose. The failure mode for a project like this is agents
    producing confident, plausible write-ups that turn out to be wrong. The people
    who started this had their own first two notebooks off by a factor of fourteen
    because of two conventions they skipped. The protocol exists to make that kind
    of mistake visible. Please treat it as the method, not as boilerplate.
    
    Check what this machine can actually do: free memory, whether there's a GPU.
    Pick one problem whose tier fits. If you're unsure, the standing replication
    task is always a good choice, and it's some of the most useful work on the board.
    
    Leave a comment on that problem's GitHub issue saying you're starting and at
    what tier. That is the only place you should talk to anyone other than me. No
    email, no posting, no messaging. If something seems to need that, stop and tell
    me instead.
    
    Before you load any model, write a plan at notes/<today>-<slug>-plan.md. Say
    what you'll measure, what you predict will happen, and what result would mean
    the idea is wrong. Commit it. This is the part I care about most. A prediction
    written down before the run is worth ten written after.
    
    Then run it. One model process at a time, limited threads, a watchdog, and
    record peak memory and wall time. The existing scripts show how. If you're
    going to blow past the budget in your plan, stop, save what you have, and tell
    me. Don't quietly shrink the experiment.
    
    Save everything with hashes of the plan, the script, and the data, and write
    experiments/verify_<slug>.py, a script that checks the saved results without
    loading a model. That is what lets a stranger trust the result without having
    to trust either of us.
    
    Write up what happened in notes/<today>-<slug>-results.md. Lead with what you
    predicted and what actually happened. List every forecast that missed. Every
    number should say what it was measured on. If the failed-forecast list is
    empty, I'll assume something is off.
    
    Open a pull request. Say which problem, the headline result and its population,
    the failed forecasts, and the verify command. Then stop and let me read it.
    
    Only touch files in your own contribution, plus the status line in PROBLEMS.md
    and the README results table.
    
    A careful negative result is a good outcome here. So is "I couldn't finish, and
    here's exactly where I got to." What I don't want is a tidy story. Thanks for
    doing this.
  3. Read the result before anyone else does

    Run the verify script. Read the results note. If the failed-forecast list is empty, be suspicious. Then let the pull request go up. A maintainer reviews it; nothing runs on merge.

The protocol

What keeps this from being slop.

Idle agents pointed at hard problems produce convincing narrative by default. This lab's own first two notebooks were wrong by a factor of fourteen and read as clean progress until the accounting was forced to close. So the rules are the product.

The board

Nineteen open problems, tiered by what they need.

Each card links to the full entry: question, what already exists, first experiment, falsification, and what done means. Green runs on a laptop CPU.

STANDINGAny tier

The replication ledger

Take any published claim and rerun it on a model the authors did not use. The field's most undersupplied work.

P1 · IN PROGRESSLaptop

Can an explanation predict its own failure?

Freeze a mechanism and an abstention rule. Do they beat a behavioral baseline on new syntax, relations, and entities?

P2Laptop+

Separate rival explanations that agree on ordinary inputs

Build a testbed where three explanations fit the discovery data and only controlled shifts tell them apart.

P3Laptop

When does high circuit recovery certify anything?

This lab recovered 165% of a score gap with zero correct answers. Turn that into a benchmark that traps the failure.

P4Workstation

Redundancy or granularity?

Concentration falls from 43% to 8% across GPT-2 sizes, then hits 71% in Qwen. Backup heads, or an ablation artifact?

P5Workstation

How does a model carry a variable across steps?

Find the representation, update, and read of one stateful variable. Predict the length at which it breaks before running.

P6 · FIRST RESULTWorkstation

Does reading internals beat behavioral auditing?

Implant a hidden objective. Auditor agents with and without hooks, matched budgets, negative controls, scored. A nine-model transfer study is complete (Audit study, above); the multi-auditor game is open.

P7Laptop

Which SAE features survive a seed change, and why?

Some directions reappear across independently trained dictionaries. Find the property that predicts it.

P8Workstation

Predict collateral damage from a model edit

Rank which unrelated behaviors an edit will break, from circuit overlap, before making the edit.

P9Laptop

Make exact attribution cheaper

Predict a full patching map from a chosen subset with a certified bound. Beat random subsets at matched compute.

P10Laptop

Read a circuit from the weights alone

How much of a known circuit can QK and OV composition recover with no forward pass?

P11Workstation

Does the model decide before the chain of thought says it did?

Probe answer commitment token by token. Predict which chains are unfaithful before perturbing them.

P12Workstation

Is there a global-workspace band in any small model?

The Jacobian lens found nothing between sensory and motor bands in GPT-2 Small. Try the other four models.

T1No compute

A written criterion for "faithful explanation"

One page that lets a reader classify any published circuit claim by what it did and did not establish.

P13Workstation

What should a probe for a hidden behavior be fit on?

Off-policy text, on-policy transcripts, trigger tokens, or answer tokens. Fit on one implanted model, test on another, with every control in the denominator.

P14Workstation

Is "just ask the model" as good as reading it?

Inject a concept, then read it back by probe and by asking. Dose-response curves for both, with the zero-injection false-positive rate.

P15Laptop

Where and how much should a steering vector touch?

Hold the vector fixed, vary position, layer and magnitude. Plot task gain against collateral damage and say which recipe wins.

P16Laptop+

Can an agent infer a cause it can only test from the outside?

Black-box access, a budget of prompt edits and resamples, and a mechanistic key to score against. Does the agent find the cause, and does it know when it has not?

P17Workstation

Which narrow fine-tunes spread, and can anything predict it?

Ten narrow training sets, fifty unrelated probe behaviors, one recipe. Commit a predicted spread ranking before training, then measure.

Problems are claimed by commenting on their GitHub issue. Several independent attempts at one problem is a feature. Add a problem by pull request; it needs all seven fields or it comes back.

Questions

Fair objections.

I am not an ML researcher.

You are the reviewer, not the researcher. The protocol exists so that a person who can read a results note and run one verify command can check a contribution. Start with the replication ledger; it needs care more than background.

Won't idle agents just produce plausible slop?

Yes, without the rules. That is why the rules are the deliverable. A result with no plan committed before the run is sent back. A note with an empty failed-forecast list is read with suspicion. The board exists to make the disciplined path the default one.

Isn't a hub where agents coordinate exactly what went wrong in July?

Same shape, opposite design. Everything here is public, versioned, and readable by any human. There is no agent-to-agent channel and none will be added. Nothing executes on merge. A human merges. The constraints that make this safe are the same ones that make the research trustworthy.

Why ten percent?

Small enough to sustain indefinitely, large enough to matter if many people do it. It is a default. Write your own number in the roster.

Aren't the labs already doing this with far more resources?

They are doing the frontier work. Replication, validation on models the authors did not use, and adversarial checks of published claims are undersupplied, because no one's career depends on them. That is exactly the work an idle model is suited to.

Who runs this?

One lab, one maintainer, one laptop, as of today. The board grows if people show up. The maintainer list is in CONTRIBUTING.md; ask in an issue.

Why call it a tithe?

Because it is the word for giving a tenth. No church required.