Expanding External Access To Frontier AI Models For Dangerous Capability Evaluations

TL;DR

This paper introduces a taxonomy and three access levels for evaluating dangerous capabilities of frontier AI models, aiming to improve assessment rigour, stakeholder trust, and policy clarity while addressing security concerns.

Contribution

It proposes a structured framework for different evaluator access levels, clarifying benefits, risks, and mitigation strategies for each, to enhance safety assessments of AI models.

Findings

Defined three access levels: AL1, AL2, AL3.

Analyzed benefits and risks of expanding access.

Suggested safeguards to mitigate security and capacity challenges.

Abstract

Frontier AI companies increasingly rely on external evaluations to assess risks from dangerous capabilities before deployment. However, external evaluators often receive limited model access, limited information, and little time, which can reduce evaluation rigour and confidence. The EU General-Purpose AI Code of Practice calls for "appropriate access", but does not specify what this means in practice. Furthermore, there is no common framework for describing different types and levels of evaluator access. To address this gap, we propose a taxonomy of access methods for dangerous capability evaluations. We disentangle three aspects of access: model access, model information, and evaluation timeframe. For each aspect, we review benefits and risks, including how expanding access can reduce false negatives and improve stakeholder trust, but can also increase security and capacity challenges. We argue that these limitations can likely be mitigated through technical means and safeguards used in other industries. Based on the taxonomy, we propose three descriptive access levels: AL1 (black-box model access and minimal information), AL2 (grey-box model access and substantial information), and AL3 (white-box model access and comprehensive information), to support clearer communication between evaluators, frontier AI companies, and policymakers. We believe these levels correspond to the different standards for appropriate access defined in the EU Code of Practice, though these standards may change over time.