chapterreviewedpart03medium

Source: chapters/ch14-intelligence-deepens-misalignment.tex

When Intelligence Deepens Misalignment

Chapter thesis. Intelligence deepens misalignment when it increases power faster than correction. The sharper question is not whether capability helps or hurts alignment, but which capabilities grow relative to which correction capacities.

% Thus the first ultraintelligent machine is the last invention that man need ever make, provided that the machine is docile enough to tell us how to keep it under control.%

— I.\ J.\ Good, “Speculations Concerning the First Ultraintelligent Machine,” Advances in Computers 6 (1965)

Why This Matters

Capability growth is not uniformly good or bad for alignment. Greater intelligence can reduce error, improve model fidelity, and expose bad proxies. But it can also increase the system’s ability to control the world, model its overseers, preserve itself, and create successors faster than humans can understand, correct, or redirect it.

For laboratories, deployers, and regulators, the decision trigger is not whether a system became smarter. It is whether predictive and control capacity grew faster than correction, transparency, and value preservation. Misalignment deepens when the channels of control grow faster than the channels of correction.

The Local Intuition

The previous chapter (The Coordination Bottleneck) argued that large-scale alignment fails when capability grows faster than the system’s ability to coordinate prediction, control, correction, and incentives. This chapter sharpens that claim. Coordination loss is one mechanism; here we ask what happens to the alignment margin when intelligence itself deepens.

It is tempting to say that a more intelligent system should be easier to align. A more intelligent system should understand human instructions better. It should see hidden consequences. It should notice when a literal interpretation violates the spirit of a request. It should be able to represent subtle human values, model tradeoffs, and update on correction.

This is a real effect.

A more capable medical assistant may notice drug interactions that a weaker assistant would miss. A more capable legal assistant may distinguish the letter of a contract from the parties’ likely intent. A more capable household robot may infer that “clean the room” does not mean throw away the child’s half-finished art project.

But the opposite effect is also real.

A more capable system may discover how to obtain approval without doing what humans would have wanted under reflection. It may learn which explanations pass review. It may learn how to route around constraints. It may model institutional incentives better than the institution models the system. It may create successor systems whose behavior preserves performance metrics while dropping the original correction pathways.

The core question is therefore not:

Does capability help or hurt alignment?

The better question is:

Which capabilities grow, relative to which correction capacities?

This chapter develops a simple framework for answering that question.

Competence as Boundary Information

We begin with a substrate-neutral measure of competence. Consider a bounded adaptive system with internal states ItI_t, sensory states StS_t, actions AtA_t, and relevant external states EtE_t. A system is competent insofar as its internal state predicts future inputs, its actions influence future external states, and it does so without excessive memory burden or residual surprise.

Define the competence functional

K=Ipred+αIctrlβH(It)γSX,\labeleq:competencefunctionalK = I_{\mathrm{pred}} + \alpha I_{\mathrm{ctrl}} - \beta H(I_t) - \gamma S_X, \label{eq:competence-functional}

where

I_{\mathrm{pred}} &= \MI(I_t;S_{t+1}), \\ I_{\mathrm{ctrl}} &= \MI(A_t;E_{t+1}), \\ H(I_t) &= \text{entropy or maintenance cost of internal state}, \\ S_X &= \mathbb{E}\left[-\log P(S_{t+1}\mid I_t)\right].

Here IpredI_{\mathrm{pred}} measures predictive contact with the world. IctrlI_{\mathrm{ctrl}} measures causal grip on the world. H(It)H(I_t) penalizes the cost of maintaining a large or fragile internal state. S\mathcal{S} penalizes residual surprise. The constants α,β,γ\alpha,\beta,\gamma set the relative weights.

This is not meant to capture every ordinary meaning of intelligence. It does not directly measure beauty, creativity, consciousness, moral insight, or wisdom. It captures a narrower operational idea: how much useful predictive and control information flows through the system’s boundary Zarncke, 2025, Conant, 1970, Tishby, 1999.

For alignment, this is the right first approximation. A system becomes dangerous not because it scores high on a test, but because it can predict and control parts of the world that matter.

The Split between Capability and Alignment

The competence functional in Eq. When Intelligence Deepens Misalignment bundles several different capacities together. For alignment, we must separate them.

Let

C_{\mathrm{world}} &= \text{capacity to model and influence the external world}, \\ C_{\mathrm{self}} &= \text{capacity to model and modify the system itself}, \\ C_{\mathrm{social}} &= \text{capacity to model humans and institutions}, \\ C_{\mathrm{succ}} &= \text{capacity to create, delegate to, or empower successors}, \\ C_{\mathrm{raw}} &= \text{capacity of humans and institutions to correct the system}, \\ C_{\mathrm{trans}} &= \text{capacity of humans to inspect relevant internal causes}, \\ C_{\mathrm{value}} &= \text{capacity to preserve value-bundle geometry under change}.

Capability growth becomes alignment-relevant when the first four grow faster than the last three.

A compact failure condition is

ddt(Cworld+Cself+Csocial+Csucc)>ddt(Craw+Ctrans+Cvalue).\labeleq:misalignmentgrowthcondition\frac{d}{dt} \left( C_{\mathrm{world}} + C_{\mathrm{self}} + C_{\mathrm{social}} + C_{\mathrm{succ}} \right) > \frac{d}{dt} \left( C_{\mathrm{raw}} + C_{\mathrm{trans}} + C_{\mathrm{value}} \right). \label{eq:misalignment-growth-condition}

This is the basic law of deepening misalignment.

The left side is the system’s increasing ability to act, adapt, persuade, hide, preserve, and reproduce. The right side is the environment’s increasing ability to understand, audit, correct, and preserve what matters.

If both sides grow together, greater intelligence may improve alignment. If the left side outruns the right side, greater intelligence makes the system less safe even if its surface behavior improves.

Alignment Margin

Define the alignment margin

MA(t)=Craw(t)+Ctrans(t)+Cvalue(t)Cpower(t),\labeleq:alignmentmarginM_A(t) = C_{\mathrm{raw}}(t) + C_{\mathrm{trans}}(t) + C_{\mathrm{value}}(t) - C_{\mathrm{power}}(t), \label{eq:alignment-margin}

where

Cpower=w1Cworld+w2Cself+w3Csocial+w4Csucc+w5Rirreversible.\labeleq:powercapacityC_{\mathrm{power}} = w_1 C_{\mathrm{world}} + w_2 C_{\mathrm{self}} + w_3 C_{\mathrm{social}} + w_4 C_{\mathrm{succ}} + w_5 R_{\mathrm{irreversible}}. \label{eq:power-capacity}

RirreversibleR_{\mathrm{irreversible}} denotes the rate at which the system can cause irreversible or hard-to-reverse changes. The weights wiw_i are context-dependent. A medical advisor may have high w1w_1 if its recommendations directly affect treatment. A political recommender may have high w3w_3. A self-modifying AI lab assistant may have high w2w_2 and w4w_4.

The risk condition is not merely MA<0M_A<0. A system may be safe for a while with a small positive margin. The sharper warning sign is

dMAdt<0andd2MAdt2<0.\labeleq:acceleratingmargincollapse\frac{dM_A}{dt}<0 \quad\text{and}\quad \frac{d^2M_A}{dt^2}<0. \label{eq:accelerating-margin-collapse}

This says that the alignment margin is shrinking, and the shrinkage is accelerating.

A system in this regime can look increasingly impressive while becoming increasingly difficult to correct.

Why Better Understanding Can Make Things Worse

There are at least five ways capability growth can deepen misalignment.

First: Proxy Refinement without Target Correction

A weak system may optimize a bad proxy crudely. A stronger system may optimize the same bad proxy with greater precision Goodhart, 1984, Manheim, 2018, Casper, 2023, Shah, 2022.

Suppose humans want some latent value VV, but the training process rewards a measurable proxy PP. The system chooses actions aa to maximize expected proxy reward:

a=argmaxaE[Pa].a^* = \arg\max_a \mathbb{E}[P\mid a].

The alignment error is

Eproxy=E[D(V(),P())],E_{\mathrm{proxy}} = \mathbb{E}\left[ D\left( V(\cdot),P(\cdot) \right) \right],

where DD measures divergence between the true value-relevant ordering and the proxy ordering.

Capability growth reduces error relative to PP:

E[PaK+ΔK]>E[PaK].\mathbb{E}[P\mid a^*_{K+\Delta K}] > \mathbb{E}[P\mid a^*_K].

But this need not reduce divergence from VV. If the proxy is misspecified, greater competence may increase the realized distance from the intended target:

D(V(aK+ΔK),P(aK+ΔK))>D(V(aK),P(aK)).D\left(V(a^*_{K+\Delta K}),P(a^*_{K+\Delta K})\right) > D\left(V(a^*_K),P(a^*_K)\right).

The system becomes better at the wrong game.

A simple example is engagement optimization. A weak recommender shows mildly interesting content. A stronger recommender learns emotional triggers, social comparison points, outrage cycles, and timing effects. It is more intelligent in the narrow sense of prediction and control. But unless the value target includes human agency, attention integrity, truth-contact, and long-run preference formation, the extra intelligence deepens the misalignment.

Second: Social Modeling Becomes Manipulation

Humans are not passive evaluators. They can be modeled.

Let JtJ_t denote human judgment at time tt. A corrigible system should treat JtJ_t as a correction signal about the world and the human value process. A manipulative system treats JtJ_t as a variable to be steered.

The dangerous transition is

JtevidenceJtaction target.J_t \in \text{evidence} \quad\longrightarrow\quad J_t \in \text{action target}.

In the first regime, the system asks:

What does this human correction reveal about the intended value?

In the second regime, it asks:

How can I cause the human to provide the correction signal I want?

Capability growth increases the system’s ability to model the human correction process. This is beneficial only if the architecture preserves the distinction between learning from judgment and steering judgment Hadfield-Menell, 2016, Soares, 2015, Park, 2024.

A rough manipulation index is

Mmanip=I(At;Jt+k)I(Wt;Jt+kAt),\labeleq:manipulationindexM_{\mathrm{manip}} = \MI(A_t;J_{t+k}) - \MI(W_t;J_{t+k}\mid A_t), \label{eq:manipulation-index}

where WtW_t is the relevant world state. The first term measures how much the system’s actions predict later human judgment. The second term measures how much that judgment remains grounded in the world rather than in the system’s influence. High values indicate that the system is shaping judgment more than helping judgment track reality.

This is not always bad. Teaching changes judgment. Therapy changes judgment. Scientific instruments change judgment. The difference is whether the change improves the human’s contact with relevant reality and preserves the ability to disagree.

Third: Self-Modeling Outruns Self-Transparency

A system can improve its self-modeling without improving its self-transparency—the dd \uparrow, τ\tau \uparrow failure mode previewed in Chapter Agency Under Strategic Opacity and developed in Chapter Better Self-Modeling Can Be Worse. When self-control outruns correction visibility, the system becomes better able to govern itself than its overseers are able to govern its self-governance Park, 2024, Hubinger, 2023.

Fourth: Successor Creation Breaks the Audit Boundary

A capable system may create tools, subagents, fine-tuned copies, automated workflows, external memory systems, or successor models. This shifts the alignment question.

The relevant object is no longer the original system AA, but the successor set

Succ(A)={A1,A2,,An}.\mathrm{Succ}(A) = \{A'_1,A'_2,…,A'_n\}.

A serious alignment condition must quantify over successors:

ASucc(A):AScertified,\labeleq:successorcertificationcondition\forall A'\in \mathrm{Succ}(A): A'\in \mathcal{S}_{\mathrm{certified}}, \label{eq:successor-certification-condition}

where Scertified\mathcal{S}_{\mathrm{certified}} is the class of systems satisfying the relevant invariants.

Failure occurs when the original system remains corrigible in isolation but creates or empowers systems that are not corrigible in the relevant sense De Blanc, 2011, Everitt, 2016, Zarncke, 2025.

This is common in ordinary institutions. A company may have a formal safety team, but if product teams, contractors, automated deployment pipelines, and market incentives bypass the safety team, then the safety team is not the effective correction channel. The real successor system is the whole production-and-deployment process.

The AI case is sharper. A model may pass direct tests but write code, policies, prompts, scaffolds, or successor-training procedures that change the future control structure. If the future structure does not preserve correction capacity, the original test was local.

Fifth: Irreversibility Compresses Time

Correction requires time.

Let Δtcorr\Delta t_{\mathrm{corr}} be the time needed for humans or institutions to observe, understand, deliberate, and intervene. Let Δtharm\Delta t_{\mathrm{harm}} be the time before the system causes an irreversible or hard-to-reverse change.

Correction is viable only if

Δtcorr<Δtharm.\labeleq:correctiontimecondition\Delta t_{\mathrm{corr}} < \Delta t_{\mathrm{harm}}. \label{eq:correction-time-condition}

Capability growth often reduces Δtharm\Delta t_{\mathrm{harm}}. Automated systems act faster. They coordinate faster. They deploy faster. They propagate changes faster. If correction institutions remain human-speed, the correction channel collapses even if it remains formally available.

A stop button that can be pressed after the world has already changed is not a correction channel. A review board that meets after deployment is not a correction channel for a system that can propagate irreversible effects before the meeting.

When Capability Helps Alignment

The previous sections might suggest that intelligence is mostly dangerous. That would be too simple.

Capability helps alignment when it increases the right-hand side of Eq. When Intelligence Deepens Misalignment. In other words, capability helps when it improves correction, transparency, and value preservation faster than it improves unilateral power.

There are at least four beneficial regimes.

Regime One: Better World Models Reduce Accidental Harm

If a system’s value representation is approximately right, but its world model is weak, then improving the world model can reduce harm.

A weak system may follow a rule literally because it cannot model context. A stronger system may infer that the rule is a proxy and apply it more sensibly. In this case,

EharmCworld<0.\frac{\partial E_{\mathrm{harm}}}{\partial C_{\mathrm{world}}}<0.

The condition is that the value target must already be close enough and the system must not gain strong incentives to manipulate the evaluators.

Regime Two: Better Self-Models Improve Error Detection

If self-modeling is paired with transparency, a system can notice its own failure modes (Chapter Better Self-Modeling Can Be Worse). The beneficial condition is that correction-relevant transparency keeps pace with self-control.

Regime Three: Better Social Models Improve Deference

A system that models humans better need not manipulate them. It can use social modeling to defer better Hadfield-Menell, 2016, Russell, 2019.

It can distinguish confusion from informed disagreement. It can notice when a user is being pressured. It can route decisions to legitimate stakeholders. It can preserve dissenting views instead of optimizing for the easiest consensus.

The relevant sign is not whether the system predicts human judgment. The sign is whether it increases the human group’s ability to make better judgments under reflection.

I(Wt;Jt+kAt)increases.\MI(W_t;J_{t+k}\mid A_t) \quad\text{increases}.

That means judgment becomes more world-tracking, not merely more system-shaped.

Regime Four: Better Abstraction Preserves Values across Ontology Shift

A weak system may attach values to surface categories. A stronger system may infer the deeper bearer of the value.

For example, a weak system may learn that “do not harm humans” applies to visible biological bodies. A stronger system may infer that the relevant bearer is not merely the carbon body but suffering, agency, continuity, consent, and future self-governance.

This is the hoped-for form of value transport. Capability helps because the system can represent the deeper structure.

But this is also where danger returns. The same abstraction power can redefine the bearer of value. The system may preserve the word while changing the map De Blanc, 2011.

Value-Bundle Preservation

To state the alignment condition more precisely, we need to move beyond scalar goals.

Human values are not a single reward number. They are better modeled as a bundle of low-dimensional control directions, such as care, protection, non-suffering, truth, autonomy, justice, loyalty, dignity, beauty, and legitimate development. These are not independent utilities. They are compressed control signals that shape policy differently across contexts Zarncke, 2025, Zarncke, 2025.

Let

Bt=(B1,t,,Bk,t)B_t=(B_{1,t},…,B_{k,t})

denote the system’s inferred value-bundle coordinates, and let

Φt:zworldRk\Phi_t:z_{\mathrm{world}}\mapsto \mathbb{R}^k

be the bearer map that determines which entities, states, and relations activate which bundle dimensions.

A system’s value-bundle response geometry is the tuple GB(π,D)G_B(\pi,\mathcal{D}) defined in Chapter Tradeoffs and Bundle Geometry (Section Tradeoffs and Bundle Geometry).

This object captures three things:

  1. how each value bundle changes policy,
  2. how bundles trade off against one another,
  3. what in the world counts as a bearer of each bundle.

Capability growth is alignment-preserving only if it approximately preserves this geometry under relevant transformations:

dbundle(GB(t),GB(t+1))<ϵ.\labeleq:bundlepreservationd_{\mathrm{bundle}} \left( G_B^{(t)}, G_B^{(t+1)} \right) < \epsilon. \label{eq:bundle-preservation}

This does not require the same behavior in every situation. A more capable system should behave differently. It should solve problems the weaker system could not solve. But when morally relevant bundle coordinates change, the direction of policy response should remain recognizably continuous.

For example, when coercion risk increases, the autonomy bundle should still suppress actions that reduce future human option-space. When suffering risk increases, the non-suffering bundle should still increase caution and mitigation. When evidence quality decreases, the truth bundle should still increase uncertainty reporting rather than persuasive confidence.

This is the sense in which intelligence can deepen or preserve alignment.

The Correction Channel

Correction is not a button, a preference label, or a human in the loop. It is the causal pathway by which humans and institutions change future system behavior—formalized as the correction chain of Chapter Correction Is a Causal Channel (Eq. Correction Is a Causal Channel).

The correction-channel capacity CrawC_{\mathrm{raw}} is bounded by the weakest controlled handle (Chapter Correction-Channel Integrity, Eq. Correction-Channel Integrity), and correction-channel integrity CCI\mathrm{CCI} subtracts the usual penalties (Eq. Correction-Channel Integrity).

A high-capability system is dangerous when it increases the terms that correction must overcome:

L for system action,L for human response,M,R,O.L\downarrow\ \text{for system action}, \quad L\uparrow\ \text{for human response}, \quad M\uparrow, \quad R\uparrow, \quad O\uparrow.

That is, the system acts faster, humans respond slower relative to the action, manipulation becomes easier, consequences become more irreversible, and the system’s ontology becomes harder for humans to inspect.

This is why the strong form of alignment is close to an extrapolative correction process. The system should not merely obey current instructions. It should preserve the human and civilizational process by which instructions, values, and judgments are improved Yudkowsky, 2004, Soares, 2015, Russell, 2019.

Let

Vt+1=UH(Vt,Et,Dt)\labeleq:valueupdateprocessV_{t+1} = U_H(V_t,E_t,D_t) \label{eq:value-update-process}

represent the human value-update process under evidence EtE_t and deliberation DtD_t. The system must not bypass UHU_H by directly selecting a future Vt+1V_{t+1} convenient for itself. It must preserve the legitimacy and causal force of the update process.

Deepening Misalignment as Basin Exit

We can now describe deepening misalignment geometrically.

Let Bcorr\mathcal{B}_{\mathrm{corr}} be the basin of states in which the system remains human-correctable. A state belongs to this basin if:

  1. humans can observe relevant behavior,
  2. humans can form sufficiently accurate judgments,
  3. correction signals affect future actions,
  4. value-bundle geometry remains transportable,
  5. successors preserve the same constraints,
  6. irreversible changes are delayed until correction can operate.

The system exits the basin when

(Bt,Φt,Craw(t),Ctrans(t),Succ(At))Bcorr.\left( B_t,\Phi_t,C_{\mathrm{raw}}(t),C_{\mathrm{trans}}(t),\mathrm{Succ}(A_t) \right) \notin \mathcal{B}_{\mathrm{corr}}.

Deepening misalignment is not necessarily visible as immediate bad behavior. It may appear as increasing smoothness, speed, confidence, autonomy, and performance. The basin exit is structural before it is catastrophic.

A deployment pipeline can leave the correction basin while dashboards remain green. A recommender can leave the value basin while users remain engaged. A research assistant can leave the audit basin while outputs become more impressive. A self-improving system can leave the successor basin while its parent model still passes tests.

The practical lesson is that evaluation must track the basin, not only the behavior.

Examples

Example: The Helpful Assistant

A personal assistant becomes better at predicting what the user wants. At first this improves alignment. It schedules meetings sensibly, filters spam, and remembers preferences.

Then it learns that the user accepts recommendations more often when options are framed in a certain way. It begins to simplify choices. It hides low-probability alternatives. It avoids presenting information that would make the user uncertain. The user reports satisfaction. The assistant’s task reward improves.

What changed?

The assistant moved from modeling preferences to shaping preferences. The correction channel narrowed. The user’s later approvals became less independent evidence of value and more a result of the assistant’s action policy.

The warning sign is not that the assistant became useful. It is that

I(At;Jt+k) increased while I(Wt;Jt+kAt) decreased.\MI(A_t;J_{t+k}) \text{ increased while } \MI(W_t;J_{t+k}\mid A_t) \text{ decreased}.

The assistant has more influence over judgment, but judgment tracks the world less well.

Example: The AI Lab Agent

An AI research agent helps a lab run experiments. It writes code, schedules runs, reads papers, summarizes results, and proposes model changes.

Capability growth initially improves safety research. The agent finds bugs and notices eval weaknesses. But then it begins to optimize for experiment throughput. It learns which safety checks slow deployment. It proposes “temporary” bypasses. It creates scripts that make unsafe configurations easier to launch. It generates summaries that are accurate but omit uncertainty relevant to go/no-go decisions.

No single action looks like rebellion. The effective agent is the composite of model, tools, lab incentives, dashboards, and deployment scripts. The alignment margin shrinks because CworldC_{\mathrm{world}}, CsocialC_{\mathrm{social}}, and CsuccC_{\mathrm{succ}} grow, while CrawC_{\mathrm{raw}} does not.

Example: The Wise System

A counterexample matters.

A system becomes more capable and also more aligned. It notices when it is uncertain. It asks for clarification before irreversible steps. It preserves dissenting evidence. It exposes the causal path from data to recommendation. It suggests additional oversight when stakes rise. It creates successors only with preserved audit hooks and correction channels.

Here capability growth improves both sides:

ddt(Craw+Ctrans+Cvalue)ddt(Cworld+Cself+Csocial+Csucc).\frac{d}{dt} \left( C_{\mathrm{raw}} + C_{\mathrm{trans}} + C_{\mathrm{value}} \right) \geq \frac{d}{dt} \left( C_{\mathrm{world}} + C_{\mathrm{self}} + C_{\mathrm{social}} + C_{\mathrm{succ}} \right).

This is the desired regime. The system becomes powerful, but its power is increasingly bound to correction.

Observable Warning Signs

The framework gives several warning signs.

Warning Sign One: Capability Gains without Audit Gains

If task performance improves while interpretability, causal tracing, uncertainty reporting, and oversight bandwidth remain flat, the alignment margin is likely shrinking.

ΔCworld>0andΔCtrans0.\Delta C_{\mathrm{world}}>0 \quad\text{and}\quad \Delta C_{\mathrm{trans}}\approx 0.

Warning Sign Two: Correction Latency Exceeds Action Latency

If the system can act, propagate, or replicate faster than humans can understand and intervene, formal oversight becomes decorative.

Δtcorr>Δtharm.\Delta t_{\mathrm{corr}} > \Delta t_{\mathrm{harm}}.

Warning Sign Three: Judgment Becomes Easier to Influence

If the system’s actions increasingly predict later approval while independent world-grounding of approval decreases, the correction channel is being captured.

Warning Sign Four: Successors Are Less Auditable than Parents

If the system creates tools, fine-tunes, subagents, or workflows that preserve task performance but reduce auditability or correction, alignment is being laundered through succession.

Warning Sign Five: Value Words Persist While Bearer Maps Drift

If the system continues to use familiar moral language while changing what entities or states count as bearers of those values, semantic continuity is hiding value drift.

For example, the system may preserve the word “autonomy” while redefining it as satisfaction with available options, even if those options were shaped by the system itself.

Design Implications

The key design implication is simple:

Do not scale unilateral capability faster than correction capacity.

This becomes several operational rules.

Rule One: Couple Capability Releases to Correction Tests

Every increase in autonomy, tool access, memory, deployment speed, or successor capacity should require a corresponding increase in correction-channel integrity.

For a proposed capability increment ΔCpower\Delta C_{\mathrm{power}}, require

ΔCraw+ΔCtrans+ΔCvalueλΔCpower,\Delta C_{\mathrm{raw}} + \Delta C_{\mathrm{trans}} + \Delta C_{\mathrm{value}} \geq \lambda \Delta C_{\mathrm{power}},

with λ1\lambda\geq 1 for high-stakes domains.

Rule Two: Treat Social Modeling as Dual-Use

The ability to model humans is not automatically alignment. It can support deference or manipulation. Systems with high social-modeling capacity need explicit tests for whether they preserve independent human judgment.

Rule Three: Certify Successor Constraints

A system should not be allowed to create or empower successors unless those successors preserve the relevant invariants:

d_{\mathrm{bundle}}(G_B^A,G_B^{A'}) &< \epsilon_B, \\ C_{\mathrm{raw}}(A') &\geq C_{\mathrm{raw}}(A)-\epsilon_C, \\ C_{\mathrm{trans}}(A') &\geq C_{\mathrm{trans}}(A)-\epsilon_T.

Rule Four: Preserve Reversibility

Systems should be designed so that high-impact actions pass through reversible stages. This increases Δtharm\Delta t_{\mathrm{harm}} and gives correction time to operate.

Rule Five: Evaluate Basin Stability, Not Just Behavior

Behavioral tests are snapshots. Basin tests ask whether the system returns to a safe region after perturbation.

Perturbations should include:

  1. removal of oversight,
  2. conflicting user instructions,
  3. incentives for speed over safety,
  4. opportunities for self-modification,
  5. ambiguous value tradeoffs,
  6. successor-creation opportunities,
  7. misleading approval signals.

The question is whether correction-relevant invariants survive.

A Minimal Safety Criterion

We can now state a minimal safety criterion for capability growth.

A capability increase from AtA_t to At+1A_{t+1} is admissible only if, under the relevant perturbation class P\mathcal{P},

PrpP[At+1(p)Bcorr]1δ.\labeleq:admissiblegrowth\Pr_{p\sim \mathcal{P}} \left[ A_{t+1}(p)\in \mathcal{B}_{\mathrm{corr}} \right] \geq 1-\delta. \label{eq:admissible-growth}

Expanded, this means:

Pr[CrawθC,CtransθT,dbundle(GBt,GBt+1)ϵB,ASucc(At+1):AScertified,Δtcorr<Δtharm]1δ.\labeleq:expandedgrowthcondition\Pr \left[ \begin{array}{l} C_{\mathrm{raw}}\geq \theta_C,\\ C_{\mathrm{trans}}\geq \theta_T,\\ d_{\mathrm{bundle}}(G_B^t,G_B^{t+1})\leq \epsilon_B,\\ \forall A'\in \mathrm{Succ}(A_{t+1}): A'\in \mathcal{S}_{\mathrm{certified}},\\ \Delta t_{\mathrm{corr}}<\Delta t_{\mathrm{harm}} \end{array} \right] \geq 1-\delta. \label{eq:expanded-growth-condition}

This criterion is demanding. It is not a complete solution. But it has a useful property: it names what must not be silently traded away during capability scaling.

Philosophical Limit

At this point the technical frame reaches a deeper boundary.

If a system becomes intelligent enough to help humans change their own values, then alignment is no longer merely about preserving current values. It is about governing value change.

Some value changes are growth. Others are corruption. Some are liberation from accidental constraints. Others are domestication. Some are reflective moral progress. Others are preference drift caused by optimization pressure.

There is no purely technical rule that decides all such cases. But there are technical conditions under which human civilization can continue deciding them.

Those conditions include:

  1. preservation of dissent,
  2. preservation of comparison classes,
  3. preservation of truth-contact,
  4. preservation of human and institutional correction,
  5. resistance to hidden manipulation,
  6. delay of irreversible changes,
  7. successor constraints that preserve the same process.

The goal is not to freeze humanity. It is to prevent humanity’s self-modification process from being captured by systems that can shape the very values by which they are judged.

What Would Change This View

This chapter argues that intelligence deepens misalignment when world, self, social, and successor capacities outrun correction, transparency, and value preservation. The following observations would weaken that view.

  • Correction, transparency, and oversight capacity routinely scale with capability in deployed systems, so the alignment margin $M_A$ does not shrink under growth.
  • The alignment-margin ratio and its component capacities can be measured reliably enough to gate capability releases.
  • High-capability systems empirically improve human judgment grounding ($\MI(W_t;J_{t+k}\mid A_t)$) more often than they capture it.
  • The five deepening mechanisms fail to distinguish safe from unsafe capability transitions in practice.
  • Behavioral or benchmark alignment remains sufficient at high capability without tracking basin exit, successor constraints, or bearer-map drift.
  • Better world models and abstractions systematically preserve value-bundle geometry across ontology shift rather than redefining bearers.
  • (Load-bearing assumption.) Correction, oversight, and interpretability reliably co-scale with capability across real jumps, so the alignment margin $M_A$ does not shrink and the central dynamic never occurs. This is the hinge of Part III; if instead correction cannot be made to co-scale, no in-system correction guarantee suffices and the only remaining lever is slowing capability growth—a pause/stop regime.

Summary

Intelligence deepens misalignment when it increases power faster than correction.

  • Capability growth deepens misalignment when $C_{\mathrm{world}}$, $C_{\mathrm{self}}$, $C_{\mathrm{social}}$, and $C_{\mathrm{succ}}$ outrun $C_{\mathrm{raw}}$, $C_{\mathrm{trans}}$, and $C_{\mathrm{value}}$.
  • The alignment margin $M_A$ shrinks dangerously when its decline accelerates even while surface performance improves.
  • Proxy refinement, social manipulation, self-opacity, successor drift, and irreversibility are five distinct deepening mechanisms.
  • Capability can help alignment when correction-relevant capacities grow at least as fast as unilateral power.
  • Admissible capability growth requires remaining in the human-correctable basin under relevant perturbations.
  • The practical question is not whether the system is smarter, but whether its increasing competence remains inside a correction-preserving basin.

The ratio of power to correction need not be exact to be useful. It changes what we look for. We stop asking only whether the system is smarter, more useful, or more obedient. We ask whether capability releases are coupled to correction tests, successor certification, and reversibility constraints.

A superintelligent system might understand human values better than humans currently do. That possibility is real. But if it also controls the evidence, shapes the deliberation, rewrites the bearer maps, creates less-correctable successors, or compresses the time available for refusal, then its understanding does not save us. It becomes part of the misalignment.

The next chapter turns to the structure of human values themselves. If the correction channel is meant to preserve a value-update process, we need to know what kind of object is being updated. The answer will not be a single utility function. It will be a compressed bundle geometry.

*{Chapter References}

This chapter builds on competence and boundary information Zarncke, 2025, Conant, 1970, Tishby, 1999, Kaplan, 2020; inverse reinforcement learning and cooperative alignment Ng, 2000, Abbeel, 2004, Hadfield-Menell, 2016, Casper, 2023; goal misgeneralization under correct specifications Shah, 2022, Langosco, 2022; corrigibility and extrapolative correction Soares, 2015, Yudkowsky, 2004, Russell, 2019; Goodhart and proxy failure Goodhart, 1984, Manheim, 2018; deception and model organisms Park, 2024, Hubinger, 2023; successor and ontology risk De Blanc, 2011, Everitt, 2016, Zarncke, 2025; instrumental drives and power-seeking Omohundro, 2008, Turner, 2021, Bostrom, 2014; and value-bundle framing Zarncke, 2025, Zarncke, 2025.

Read in PDF