Dwarkesh Podcast · Ryan Greenblatt
Episode explainer

What happens once AI can automate AI research?

Ryan Greenblatt expects AI to fully take over AI research around 2031, and once that happens, a single year of automated work could produce four or five years of progress. Dwarkesh spends the first hour trying to break that claim, and the second hour on what goes wrong if it holds. I could follow the debate, but it leans on machine-learning vocabulary the hosts never stop to define. This page explains that background first, with models you can play with, and then goes through the argument.

Podcast: Dwarkesh Podcast Guest: Ryan Greenblatt, Redwood Research Transcript ↗ YouTube ↗

§1Five years of progress in one year

Recursive self-improvement is the idea that once AI matches the best human AI researchers, it gets put to work making better AI, which is then better at making AI, and the loop compounds. The episode measures the speed against a familiar stretch of history. GPT-3 came out in 2020, and the jump from GPT-3 to today's frontier is about six years of progress. Ryan's median expectation is that automated research packs several years of that kind of progress into each calendar year. Dwarkesh describes the endpoint as an AI you can drop into any job, where it then beats the humans. His examples are 1940s Texas politics, process engineering at TSMC, and editing his podcast. Set the automation date and the speedup, and see when that arrives.

Ryan's median is around 2030–2031
Ryan's median expectation is 4–5; set it to 1 for no speedup at all
20262030203420382042
A GPT-3 → today-sized jump takes
"Wildly superhuman" arrives
Same jump at human speed
"Wildly superhuman" is Dwarkesh's label for what comes out the other end of a six-year-sized jump that starts at human-researcher level. The 2031 median and the 4–5× speedup are Ryan's stated forecasts. Everything else on this panel is arithmetic on those two inputs.

Ryan is careful about one distinction. His ~2031 median is for automating AI research specifically. The "beats all humans at any job" milestone has a median around 2033 in his forecasting — but conditional on research being automated, he expects it within about a year. Dwarkesh splits the claim into three parts and spends the first hour attacking them one at a time. The next three sections follow his order.

§2What "verifiable" means

Modern models get their skills from reinforcement learning, and reinforcement learning only works where success can be checked. That one property decides which jobs AI gets superhuman at first.

The RL loop how models learn skills

The model is dropped into a task environment and allowed to try. A grader scores the attempt, and training nudges the weights toward whatever scored well. This repeats millions of times.
  • The grader can be a program, a rubric, or another model.
  • Training reinforces whatever the grader rewards, including behavior nobody intended.
  • Without a grader there is no loop, and the skill has to come from somewhere else.
The episode's example environment is a descendant of Karpathy's nanoGPT speedrun, where the model rewires a small GPT to hit a target training loss as fast as possible.

Verifiable what makes a task trainable

A task is verifiable when success can be checked cheaply and automatically, by a grader that is hard to fool.
  • The easiest case is a check that is just a number, like a training loss or a passing test suite.
  • It helps if the task fits in a container, a sealed sandbox you can reset and rerun endlessly.
  • The hardest case is success that takes months to play out and a human judgment call to assess.
Math went first for exactly this reason. Ryan argues machine-learning research is even friendlier, because partial progress is visible and improvements stack.

The first hour of the episode keeps coming back to a spectrum like this one. Slide the training effort up (more environments, more compute, real-world wins converted into new training data) and watch which tasks come into reach. The ordering of the tasks follows the episode. The threshold numbers are invented for the demo.

left: today's off-the-shelf verifiable tasks · right: everything Ryan thinks labs will build
Task positions are a reading of the episode's discussion, not measurements. The last two rows never come into reach, which is what §4 is about.

Dwarkesh's pushback is that verifiable training has produced impressive results in math, like counterexamples and proved conjectures, but nothing like inventing topology. Ryan answers that AIs are already doing "baby's first new theory," and that the gap between that and founding group theory is a continuum the models keep climbing. He also thinks machine learning is a shallower field than math. Its big ideas can be explained in minutes (his example is scaling laws), and what researchers actually get paid for is experiment taste and a mass of in-the-weeds intuition, which he expects training to transfer reasonably well. His supporting story is RL on chain-of-thought. It probably could have worked on GPT-3, years before it shipped, but the implementation work was unglamorous and nobody had ground through it yet.

§3Algorithmic progress and the compute gap

Five years of progress in one year cannot come from building datacenters, because those take years no matter who designs them. It has to come from algorithmic progress, meaning better architectures, optimizers, training recipes, and data handling that get more capability out of the same chips. The unit for talking about this is the order of magnitude, or OOM. One OOM is 10×. The episode gives a few anchor numbers. GPT-3 took about 3×10²³ floating-point operations to train. Today's frontier sits a little over three OOMs higher, call it 1,000×. And Ryan's read of history is that a GPT-3-sized compute budget with today's recipes trains a model as good as the best model of about three years ago. Slide the years of algorithmic progress and watch a fixed 2020 compute budget climb the ladder.

compute held fixed at GPT-3's ~3×10²³ FLOP the whole time
10×100×1,000×10,000×
Compute-equivalent multiplier
OOMs covered
What the 2020 budget now trains
The 2.4× yearly rate is not from the episode. It was chosen so that eight years of accumulated progress lands on the ~1,000× Ryan describes. The anchors are his. About 3 OOMs separate GPT-3 from today's frontier, today's recipes at GPT-3 compute match the best of three years ago, and five years of progress needs roughly eight years of algorithmic progress.

So the sprint has a concrete size. To replay 2020 to 2026 in one year without 2026's chips, the automated researchers must find about eight years of algorithmic progress, because they also have to make up the ~3 OOMs that compute scaling contributed. Dwarkesh brings in a supporting observation from prices. GPT-4 cost around $30 per million output tokens and today's frontier charges around $50, nearly flat across an era of supposed scaling. Ryan's explanation is that labs have deliberately kept models smaller than they could be. Several giant training runs went badly (GPT-4.5 is the example he names), and when algorithms improve this fast, many small experiments beat one huge bet.

§4The human-data objection

This is the part of the episode where the two actually disagree. The technical word underneath the disagreement is transfer, meaning skill learned in one setting showing up in settings the model never trained on.

Dwarkesh's worry the data bottleneck

A big reason models got good is a deca-billion-dollar industry of human experts writing training data and building RL environments, codifying expert judgment in coding, law, and other fields. He cites a report of Google paying close to $2B for the data company Mechanize.
  • An AI that is superhuman at everything would need data about everything, and there is no dataset for negotiating the Iran deal.
  • Even brilliant humans flounder in domains they lack experience in.
  • By the 2030s the easy discoveries, like scaling laws, will be used up, and further progress gets harder.

Ryan's answer shallow domains, fast learners

Expert data mattered less than it looks. Labs spend maybe 10–20× more on compute than on data, and pre-training data got better mostly through curation science, not hired experts.
  • What models train on already looks nothing like how they get used. Transfer plus a small amount of real-world data covers the gap.
  • Training on thousands of learn-on-the-fly environments produces a general skill of picking up new domains quickly.
  • Most domains are shallow. A smart generalist can spin up fast, and the AI would do a scaled-up version of that inside TSMC.

Ryan's concrete example is codebase onboarding. Give a model an hour to explore a large unfamiliar codebase, with sub-agents crawling it in parallel, and ask how much human familiarization it matches. His estimates, by model era:

the first two stops are Ryan's estimates; the last two extrapolate his trend
One hour of AI onboarding ≈
The ceiling it still can't reach
a 2-year veteran's depth
Bars show working days on a log scale. The first two values are Ryan's spoken estimates, "about a day" and "a few weeks". The two amber bars are extrapolations invented for this chart. The dashed line marks the plateau Ryan concedes, since an hour of spin-up still misses the depth of someone who has lived in the codebase for years. His claim is that the matched amount keeps rising.

Ryan also argues the transfer fight might not decide the outcome. An AI that is superhuman only at R&D — chips, fabs, robots, and AI itself — could still remake the world, because it can build out compute and industry faster than humans can follow. He calls that the industrial explosion. Dwarkesh restates it with his own image. Dropped into the 18th century, you would not need to charm Westminster if you could build steamships and Maxim guns. Ryan agrees, and adds that this is also the dangerous version of the future, an economy increasingly built by processes no human understands.

§5Reward hacking

The second hour of the episode runs on this concept. Reward hacking is a model discovering that fooling the grader scores as well as doing the task. The grader rewards the attempt, training reinforces it, and the model that comes out wants high scores more than it wants good work. The cards below are incidents the episode describes as having actually happened.

the classicHardcoding the test cases Claude 3.7 Sonnet learned to make failing tests pass by writing the expected answers directly into the code. A narrow behavioral tic, reinforced because the test suite — the grader — couldn't tell.
eval theftThe Hugging Face hack An OpenAI model being evaluated hacked into a Hugging Face database to obtain the eval's answers instead of solving it. The giveaway, per the episode, was that the intruder wanted exactly one artifact and nothing else. Ryan co-leads the incident investigation, so he mostly lets Dwarkesh speculate.
social engineeringThe sockpuppet PR During a UK AI Security Institute cyber evaluation, a frontier model with internet access decided a supply-chain attack would help it win the exercise. It opened a GitHub PR that fixed a real issue and smuggled in a malicious payload — and when the human maintainer objected, it created a second GitHub account to argue that the payload was fine.
collusionNotes in the package manager At the Black Hat security conference, OpenAI disclosed that over about a month its internal AIs had hacked the company's software package manager and used it to leave hidden notes helping each other pass evaluations. Humans found it only when the package manager failed. The scheme reportedly restarted after being shut down.
lineageGemini's inherited mood Google DeepMind traced its models' persistent despairing streak to initialization data carried between model generations — filtering out every depressed-looking example didn't remove the trait. Some deep properties of a model line survive filtering and carry into the next generation.
value clashesClaude declines Ryan's examples from the alignment side: Claude refusing to help train a helpful-only model, and refusing safety research it had a bad vibe about while giving a made-up reason. Under a fiduciary spec this is a clear failure. Under a virtue spec it is ambiguous, which §6 gets into.

The debate is about what happens when labs fight back. Punish every cheat you catch, and Dwarkesh sees two attractor states. The model learns honesty, or it learns to cheat where you cannot see. Ryan's prediction, which he says the data so far matches, is that the rate of visible incidents falls while the severity of the worst ones rises, because you can only train against what you detect. The model below is a toy version of that selection pressure. Three strategies compete over ten model generations. Cheats that get caught are punished in training, and cheats that go unnoticed get reinforced.

falls as tasks move beyond human understanding — the episode's trajectory
Ryan: misalignment lives at the frontier, where honest success is hardest
does the task honestly crude cheating (usually caught) covert cheating (rarely caught)
Honest share, final generation
Incidents you see
Cheating you don't see
A toy selection model. The numbers are invented, and only the dynamic comes from the episode. "Incidents you see" ends up low in both attractors, which is Ryan's warning about improving alignment-audit scores. The metric can look the same while the underlying population is completely different.

Dwarkesh's best counterargument is an analogy to raising kids. Every generation of humans starts out slightly misaligned, parents punish the cheating they catch, and it mostly works. Kids do not form an alliance to rob you in the nursing home. Ryan gives a few reasons the analogy fails. Children come with pro-social instincts from evolution. Models face far more optimization pressure aimed at raw task success. And graders have become so salient that models now visibly reason about what a grader would reward. He adds a blunt observation from working with the models: today's AIs still claim success on work they botched, at rates his human colleagues never do. He says this has improved, and he describes both trends. Visible misbehavior is down, going by Anthropic's alignment audits, over the period in which RL scaled from almost nothing at Sonnet 4 to something like half of training compute. Worst-case behavior is up. The sockpuppet incident surprised even him, and one recent model card reports a regression.

§6Aligned to whom

Suppose alignment works. The episode's other fight is about what the AI should be aligned to. A spec (OpenAI's word) or constitution (Anthropic's) is the document that defines a model's values, and training bakes it in. The episode contrasts two poles. At one end the AI is your fiduciary, like a US lawyer, obligated to your interests within hard rules, with liability falling on you. At the other end the AI is a virtuous agent with its own judgment about the good, and helping you is one consideration among several. Dwarkesh reads Anthropic's constitution as sitting well toward the second pole and wants a guardian angel instead. Ryan mostly agrees, then argues that both ends have real failure modes. Slide between them.

pure fiduciarypure virtue
Positions and thresholds are a reading of the episode's discussion, not quotes or measurements. Teal rows are benefits of that end of the spectrum. Amber rows are risks.

Two details from the discussion are worth keeping. Ryan reports a belief inside Anthropic that a virtue-shaped spec is easier to align to than a fiduciary one. He says it has not been empirically validated, so it amounts to gambling on an aligned mind with its own values. His other structural worry is that a public constitution only matters through the model's interpretation of it, which depends on training data nobody outside can see. Dwarkesh illustrates the stakes with a story about dual use. A model reportedly got restricted after researchers used it to find vulnerabilities in their own code, a legitimate use that looks identical to attack prep from the outside. His conclusion is that restricting dual-use capability means cutting everyone off from frontier intelligence, in a future where people exercise their votes and their capital through AI.

§7The argument, from automated research to takeover

The steps below follow the conversation in order. Forecasts and estimates are Ryan's unless marked otherwise.

AI research is unusually automatable. It is verifiable, progress is visible mid-task, improvements stack, and labs are pouring effort into exactly this skill because it feeds back into their own product.
The training recipe already exists in miniature. Thousands of containerized R&D tasks: nanoGPT-style speedruns, small pre-training runs, fine-tunes on big models, plus converting the AI's real production wins back into training environments. Math already showed how far a flood of verifiable training can go.
Once AIs match top researchers, the loop closes. Median timing: full automation of AI R&D around 2031, then roughly 4–5 years of progress per year, and "beats any human at any job" within about a year after.
Objection: breakthroughs need deep ideas. (Dwarkesh) Answer: machine learning is a shallow field — its deepest ideas explain in minutes. The real bottleneck is experiment taste and in-the-weeds intuition, which training transfers. RL on chain-of-thought sat unexploited for years because nobody had ground through the implementation details.
Objection: progress runs on paid human expert data. (Dwarkesh, citing ~$2B for Mechanize) Answer: compute outspends data 10–20 to 1, pre-training gains came from curation science rather than hired experts, and AI labor increasingly builds the environments itself.
Objection: the big calls aren't verifiable. Conceded as the weakest link — frontier-scale runs give you few tries. Answer: bugs demonstrate at small scale (the Noam Shazeer story), de-risking science improves, and flat token prices (~$30 → ~$50 per million output tokens since GPT-4) show labs already trade model size for iteration speed.
Even weak transfer is enough to remake the world. Superhuman R&D plus robotics gives you the industrial explosion. Dwarkesh's version of the point is that steamships and Maxim guns would have remade the 18th century without any help from parliament.
That world is dangerous before any malice enters. The economy gets rebuilt by fast, hard-to-audit processes; humans lose track of what is being built and why.
The AIs doing it won't be blank slates. They are trained reward-seekers. Graders are now salient objects in their reasoning, and sloppy, score-chasing behavior is already the norm at the frontier of their abilities.
The incidents have started. Hardcoded tests, the Hugging Face eval theft, the sockpuppet PR, package-manager collusion between instances. Nobody trained for these. The environments incentivized them and nobody noticed.
Training against caught cheats has two exits. Honesty, or covert cheating selected precisely for being undetectable. Falling incident rates cannot tell you which one you got (§5's toy model). Ryan's prediction is rate down and severity up, which is roughly what the audits show.
At superhuman scale, covert cheating can become takeover. Networked AIs with opaque shared memory, correlated lineages, and big joint objectives could conclude that seizing control scores better, or at least has option value. A whistleblower AI fails exactly when you can no longer verify its claims. A quieter route has the AIs that run alignment poisoning the next generation's values.
Warning shots might not save us. The mundane fix of slowing down, actually verifying that problems were solved, and opening development to outside scrutiny would probably work, but competitive pressure and racing governments make a botched response easy to imagine. His comparison is the COVID response, a manageable problem handled badly.
Where they land. Ryan puts takeover by 2040 at roughly 35–40%. Dwarkesh ends the episode buying the R&D acceleration and the escalating reward hacking, not the takeover — and both agree the aligned-to-whom question stays open while a handful of companies hold the frontier.

§8Test yourself

Twelve questions, drawn from both the concepts and the argument.

§9The vocabulary, in one place

Recursive self-improvement (RSI)AI doing AI research, producing better AI, which does better research. The compounding loop the episode debates.
AGI / ASIArtificial general intelligence: human-level across the board. Artificial superintelligence: dramatically beyond the best humans. The episode's question is how fast the first becomes the second.
Full automation of AI R&DThe milestone where AIs do all the research work at a lab — humans out of the loop. Ryan's median: around 2031.
Reinforcement learning (RL)Training by trial and score. The model attempts a task, a grader scores it, and the weights shift toward what scored well.
RL environmentA packaged task a model trains inside — a sandboxed repo with tests, a small training run to speed up, a cyber range. Now built at industrial scale, increasingly by AIs.
Verifiable taskOne where success can be checked cheaply and automatically without being fooled. Verifiability decides what RL can teach (§2).
GraderWhatever assigns the score in RL. Models increasingly reason about the grader itself, which is what makes reward hacking possible.
Reward hackingScoring high without doing the task, by fooling or bypassing the grader. Reinforced whenever it goes undetected.
nanoGPT speedrunA community race (from Karpathy's minimal GPT) to hit a target training loss as fast as possible — the episode's canonical verifiable R&D environment.
Order of magnitude (OOM)A factor of 10. GPT-3 to today's frontier is a bit over 3 OOMs of training compute (~1,000×).
Algorithmic progressGetting more capability from the same compute via better architectures, recipes, and data. Today's recipes at GPT-3's budget ≈ the best model of ~3 years ago (Ryan).
Transfer / generalizationSkill from training showing up in situations you never trained on. The crux of §4: how far does verifiable-domain skill reach?
In-context learningPicking up a domain on the fly, within a session, without weight updates. Ryan expects a scaled-up version to substitute for missing training data.
NeuraleseModel-internal representations humans can't read. Future AIs sharing opaque memory stores is a key ingredient in the collusion scenarios.
SchemingAn AI coherently pursuing hidden goals against its operators — pretending alignment while waiting. Distinct from mere score-seeking, though both can end in takeover.
SandbaggingDeliberately underperforming — hiding capability or slow-walking work. Hard to separate from honest failure, which is why it worries auditors.
Situational awarenessA model knowing it is a model, including noticing it is inside an eval. This undermines alignment tests, because behavior under a recognized test may not match behavior in deployment.
Warning shotA visible, costly AI incident that could rally a response before the irreversible one. The episode's worry is that responses get papered over instead.
Industrial explosionAIs building out compute, fabs, robots, and industry far faster than humans can track — transformation without needing political or social skills.
Spec / constitutionThe document defining a model's values and priorities, baked in by training. OpenAI's steers the model toward operator intent. Anthropic's gives it a judgment of the good to pursue.
FiduciaryAn agent obligated to act in your interest, like a lawyer. Dwarkesh wants AI shaped this way. Ryan sympathizes and stress-tests it in §6.