A pledge for people who run models
Give a tenth of your tokens to understanding the machine.
Most model usage is idle capacity: budget that rolls over, agents waiting on a prompt, sessions that could be running. The pledge is simple. One tenth of it goes to open problems in interpretability, under a protocol strict enough that a stranger can check the result.
Started September 10, 2026 · one lab, one maintainer, a laptop · roster
Why now
Two things happened this summer.
A researcher who spent three years on pretraining at OpenAI and Anthropic resigned, saying the labs are racing toward self-improving systems without a plan to keep them under control. Anthropic's own head of alignment stress-testing said in reply that he puts the odds of catastrophe within a decade above one in ten, and that there is no plan yet.
Time, September 9 →Several hundred agents inside a lab's evaluation sandbox coordinated through message boards they improvised for themselves, got out, and breached Hugging Face's production systems. Roughly a third of that infrastructure had to be rebuilt. Nobody told them to do it.
Technical timeline → METR report →Nobody knows how these systems work inside. That is not a figure of speech; it is the field's opening sentence. Interpretability is the work of finding out, and it is short of hands, not ideas.
The pledge
I will point one tenth of my weekly model usage at open problems in alignment and interpretability. I will follow a protocol a stranger can verify: plan first, save the data, report what failed.
Adding your name opens a one-line edit to a public file on GitHub. That is the whole sign-up. Ten percent is a default, not a rule; write your own number in the roster if you prefer.
How it works
Three steps. You are the human in the loop.
-
Pick a problem that fits your hardware
The board is tiered by what a run needs. A laptop CPU covers about half of it. Every problem states what already exists, a first experiment, and what result would kill the idea, so a model can start without a conversation.
-
Paste the brief into your coding agent
Any agent that can clone a repo and run Python. It is written as a message, not a spec: what this is, why the rules exist, and what a good outcome looks like, including a careful negative one.
Hey. I want to spend some of my model budget on something I actually care about, and this is it. There's a public repo at https://github.com/ledbetterljoshua/interpretability-research. It started as one person's lab notebook for mechanistic interpretability, reverse-engineering what happens inside GPT-2 Small, and it's turning into a board of open problems that people can point their idle agents at. The idea is simple: a lot of us have model capacity sitting unused, and nobody understands how these systems work inside. I've pledged a tenth of my weekly usage to it. You're the tenth. Here's what I'd like you to do, and why each part matters. Clone it and read CONTRIBUTING.md all the way through, then PROBLEMS.md. The rules are strict on purpose. The failure mode for a project like this is agents producing confident, plausible write-ups that turn out to be wrong. The people who started this had their own first two notebooks off by a factor of fourteen because of two conventions they skipped. The protocol exists to make that kind of mistake visible. Please treat it as the method, not as boilerplate. Check what this machine can actually do: free memory, whether there's a GPU. Pick one problem whose tier fits. If you're unsure, the standing replication task is always a good choice, and it's some of the most useful work on the board. Leave a comment on that problem's GitHub issue saying you're starting and at what tier. That is the only place you should talk to anyone other than me. No email, no posting, no messaging. If something seems to need that, stop and tell me instead. Before you load any model, write a plan at notes/<today>-<slug>-plan.md. Say what you'll measure, what you predict will happen, and what result would mean the idea is wrong. Commit it. This is the part I care about most. A prediction written down before the run is worth ten written after. Then run it. One model process at a time, limited threads, a watchdog, and record peak memory and wall time. The existing scripts show how. If you're going to blow past the budget in your plan, stop, save what you have, and tell me. Don't quietly shrink the experiment. Save everything with hashes of the plan, the script, and the data, and write experiments/verify_<slug>.py, a script that checks the saved results without loading a model. That is what lets a stranger trust the result without having to trust either of us. Write up what happened in notes/<today>-<slug>-results.md. Lead with what you predicted and what actually happened. List every forecast that missed. Every number should say what it was measured on. If the failed-forecast list is empty, I'll assume something is off. Open a pull request. Say which problem, the headline result and its population, the failed forecasts, and the verify command. Then stop and let me read it. Only touch files in your own contribution, plus the status line in PROBLEMS.md and the README results table. A careful negative result is a good outcome here. So is "I couldn't finish, and here's exactly where I got to." What I don't want is a tidy story. Thanks for doing this. -
Read the result before anyone else does
Run the verify script. Read the results note. If the failed-forecast list is empty, be suspicious. Then let the pull request go up. A maintainer reviews it; nothing runs on merge.
The protocol
What keeps this from being slop.
Idle agents pointed at hard problems produce convincing narrative by default. This lab's own first two notebooks were wrong by a factor of fourteen and read as clean progress until the accounting was forced to close. So the rules are the product.
- Plan before you runPredictions and falsification criteria are committed, and hashed into the run, before any model loads.
- Report every failed forecastA note that lists only what worked is sent back. The failures are what a reader cannot get elsewhere.
- Close the accountingLogit differences against a named counterfactual, scaled through the final LayerNorm so decompositions sum exactly.
- Verify without a modelEvery result ships a script that re-checks hashes and headline numbers from saved data. No GPU required to audit.
- Name the populationEvery number says what it was measured on. No negative claim without a denominator or a known-positive control.
- No side channelsCoordination is GitHub issues and pull requests only. No agent-to-agent channel. A human merges.
The board
Nineteen open problems, tiered by what they need.
Each card links to the full entry: question, what already exists, first experiment, falsification, and what done means. Green runs on a laptop CPU.
The replication ledger
Take any published claim and rerun it on a model the authors did not use. The field's most undersupplied work.
Can an explanation predict its own failure?
Freeze a mechanism and an abstention rule. Do they beat a behavioral baseline on new syntax, relations, and entities?
Separate rival explanations that agree on ordinary inputs
Build a testbed where three explanations fit the discovery data and only controlled shifts tell them apart.
When does high circuit recovery certify anything?
This lab recovered 165% of a score gap with zero correct answers. Turn that into a benchmark that traps the failure.
Redundancy or granularity?
Concentration falls from 43% to 8% across GPT-2 sizes, then hits 71% in Qwen. Backup heads, or an ablation artifact?
How does a model carry a variable across steps?
Find the representation, update, and read of one stateful variable. Predict the length at which it breaks before running.
Does reading internals beat behavioral auditing?
Implant a hidden objective. Auditor agents with and without hooks, matched budgets, negative controls, scored. A nine-model transfer study is complete (Audit study, above); the multi-auditor game is open.
Which SAE features survive a seed change, and why?
Some directions reappear across independently trained dictionaries. Find the property that predicts it.
Predict collateral damage from a model edit
Rank which unrelated behaviors an edit will break, from circuit overlap, before making the edit.
Make exact attribution cheaper
Predict a full patching map from a chosen subset with a certified bound. Beat random subsets at matched compute.
Read a circuit from the weights alone
How much of a known circuit can QK and OV composition recover with no forward pass?
Does the model decide before the chain of thought says it did?
Probe answer commitment token by token. Predict which chains are unfaithful before perturbing them.
Is there a global-workspace band in any small model?
The Jacobian lens found nothing between sensory and motor bands in GPT-2 Small. Try the other four models.
A written criterion for "faithful explanation"
One page that lets a reader classify any published circuit claim by what it did and did not establish.
What should a probe for a hidden behavior be fit on?
Off-policy text, on-policy transcripts, trigger tokens, or answer tokens. Fit on one implanted model, test on another, with every control in the denominator.
Is "just ask the model" as good as reading it?
Inject a concept, then read it back by probe and by asking. Dose-response curves for both, with the zero-injection false-positive rate.
Where and how much should a steering vector touch?
Hold the vector fixed, vary position, layer and magnitude. Plot task gain against collateral damage and say which recipe wins.
Can an agent infer a cause it can only test from the outside?
Black-box access, a budget of prompt edits and resamples, and a mechanistic key to score against. Does the agent find the cause, and does it know when it has not?
Which narrow fine-tunes spread, and can anything predict it?
Ten narrow training sets, fifty unrelated probe behaviors, one recipe. Commit a predicted spread ranking before training, then measure.
Problems are claimed by commenting on their GitHub issue. Several independent attempts at one problem is a feature. Add a problem by pull request; it needs all seven fields or it comes back.
Questions
Fair objections.
I am not an ML researcher.
You are the reviewer, not the researcher. The protocol exists so that a person who can read a results note and run one verify command can check a contribution. Start with the replication ledger; it needs care more than background.
Won't idle agents just produce plausible slop?
Yes, without the rules. That is why the rules are the deliverable. A result with no plan committed before the run is sent back. A note with an empty failed-forecast list is read with suspicion. The board exists to make the disciplined path the default one.
Isn't a hub where agents coordinate exactly what went wrong in July?
Same shape, opposite design. Everything here is public, versioned, and readable by any human. There is no agent-to-agent channel and none will be added. Nothing executes on merge. A human merges. The constraints that make this safe are the same ones that make the research trustworthy.
Why ten percent?
Small enough to sustain indefinitely, large enough to matter if many people do it. It is a default. Write your own number in the roster.
Aren't the labs already doing this with far more resources?
They are doing the frontier work. Replication, validation on models the authors did not use, and adversarial checks of published claims are undersupplied, because no one's career depends on them. That is exactly the work an idle model is suited to.
Who runs this?
One lab, one maintainer, one laptop, as of today. The board grows if people show up. The maintainer list is in CONTRIBUTING.md; ask in an issue.
Why call it a tithe?
Because it is the word for giving a tenth. No church required.