This page is the drill floor for the parent topic . The parent gave you the formulas; here we plug in numbers, walk every sign and every edge case, and check each answer by hand. If you have not yet met a symbol here, it is defined the moment it appears.
Intuition What "every scenario" means for a
risk topic
A geometry topic has quadrants and zero-inputs. A risk-probability topic has its own edge cases: probabilities that are 0 , that are 1 , that multiply down to almost nothing, extra multiplicative factors (like strategic awareness), rates that race each other, and word problems dressed up as exam twists. We will build a matrix of these and hit every cell.
Before anything, three plain-word anchors so no symbol is unearned:
Definition The three letters we reuse everywhere
P ( ⋅ ) = a probability : a number from 0 (never happens) to 1 (certain). Written as a decimal: 0.1 means "1 chance in 10", i.e. 10% .
C ( t ) = capability at time t : how much the AI can actually do in the world.
A ( t ) = alignment quality at time t : how well what it does matches what we want.
A rate like d t d C is just "how fast C climbs per unit time" — the steepness of the capability curve. See the figures for the picture.
Every worked example below is tagged with the cell it fills.
Cell
What makes it special
Example
A. All-mid probabilities
Each factor a plain fraction, none extreme
Ex 1
B. A factor is 0
One term collapses the product
Ex 2
C. A factor is 1
A term that "can't fail" drops out
Ex 3
D. Extra multiplicative factor
Situational-awareness amplifier
Ex 4
E. Racing rates (d C / d t vs d A / d t )
Sign of the gap , not a probability
Ex 5
F. Reward-hacking gap ϵ
Measured minus true objective
Ex 6
G. Real-world word problem
Units, dollars, counts
Ex 7
H. Exam-style twist
Posterior stays broad → deferral
Ex 8
I. Limiting behaviour
What happens as a factor → 0 or → 1
Ex 9
Worked example All-mid probabilities
An AI project estimates: reaches superhuman capability P 1 = 0.5 ; if it does, its goal is misaligned P 2 = 0.4 ; if both, we cannot stop it P 3 = 0.3 . Find P ( x-risk ) .
Forecast: guess before reading — bigger or smaller than any single factor?
Write the model: P ( x-risk ) = P 1 × P 2 × P 3 .
Why this step? The parent's x-risk formula is a chain: all three must happen, and multiplying independent probabilities is how "AND" combines.
Multiply: 0.5 × 0.4 = 0.20 , then 0.20 × 0.3 = 0.06 .
Why this step? Do it two at a time so each product is checkable.
Answer: P ( x-risk ) = 0.06 = 6% .
Verify: A product of numbers each < 1 must be smaller than the smallest factor (0.3 ). 0.06 < 0.3 ✓. Units: probability is dimensionless, stays in [ 0 , 1 ] ✓.
The key lesson: chaining probabilities shrinks them fast . This is why the parent's paperclip example landed at 0.1% from three 10% terms.
Worked example One guaranteed safeguard
Same as Ex 1, but a hardware kill-switch makes "can't be stopped" impossible: P 3 = 0 .
Forecast: what does one zero do to a product?
P ( x-risk ) = 0.5 × 0.4 × 0 .
Why this step? Same AND-chain; only P 3 changed.
Anything times 0 is 0 : P ( x-risk ) = 0 .
Why this step? A single certain-safe link breaks the whole chain.
Verify: 0.5 × 0.4 × 0 = 0 ✓.
[!mistake] The danger hidden in this clean answer
A real kill-switch is never exactly P 3 = 0 . Believing you have "0 " is itself the failure. See 6.4.8-Corigibility-and-interuptibility — a truly interruptible agent is one that does not resist the switch.
Worked example A step that cannot fail
Suppose a lab is certain its next system is superhuman: P 1 = 1 . Keep P 2 = 0.4 , P 3 = 0.3 .
Forecast: does a factor of 1 change the size of the answer?
P ( x-risk ) = 1 × 0.4 × 0.3 .
Why this step? Multiplying by 1 leaves the other factors untouched — the "certain" link carries no protection.
= 0.12 = 12% .
Verify: 0.4 × 0.3 = 0.12 ✓; compare Ex 1 (0.06 ) — removing the 0.5 hurdle doubled the risk, exactly as 0.06/0.5 = 0.12 ✓.
Zero and one are the two extremes : 0 collapses the product, 1 is invisible. Every other value lives between and scales the risk.
Worked example Adding a fourth factor
Aschenbrenner's amplified model: Risk = P ( mis ) × Cap × Strategic awareness . Here Cap is normalized capability — the same C ( t ) from our three anchors, but squeezed onto a 0 -to-1 scale (0 = harmless, 1 = maximally capable) so it can multiply cleanly with probabilities. Take P ( mis ) = 0.2 , Cap = 0.5 , and strategic-awareness multiplier S = 3 (deceptive alignment triples effective risk).
Forecast: does multiplying by S = 3 keep the answer a valid probability?
Baseline (no awareness): 0.2 × 0.5 = 0.10 .
Why this step? This is the parent's without -awareness formula: misalignment chance times normalized capability.
Amplify: 0.10 × 3 = 0.30 .
Why this step? Situational awareness lets the system strategically hide misalignment, so it acts as a multiplier S > 1 , not a probability.
Answer: effective risk = 0.30 = 30% .
Verify: 0.2 × 0.5 × 3 = 0.30 ✓, and 0.30 ≤ 1 so it is still a legal probability ✓.
[!mistake] When the amplifier breaks the model
If S were large enough to push the product above 1 , the "× S " form is no longer a probability — it is a risk index . Always sanity-check that the result stays in [ 0 , 1 ] ; if not, you are using a relative-danger score, not a chance. This connects to 6.4.11-Multi-agent-alignment-challenges where competing amplifiers stack.
Worked example Capability vs alignment growth
At a snapshot, capability grows at d t d C = 8 units/month and alignment at d t d A = 2 units/month. Is the system entering the danger regime?
Forecast: which curve pulling ahead is the dangerous one?
Figure below: horizontal axis is time t in months, vertical axis is level in units. A steep burnt-orange line is capability C ( t ) (slope 8); a shallow teal line is alignment A ( t ) (slope 2); the plum shaded wedge between them is the widening alignment gap.
Form the gap rate G = d t d C − d t d A .
Why this step? The parent's danger condition is d t d C ≫ d t d A ; the sign and size of their difference tells us if capability is outrunning alignment.
Compute: G = 8 − 2 = 6 > 0 .
Why this step? Positive G means the orange capability curve (look at the figure) climbs faster than the teal alignment curve — the gap widens over time.
Interpret the ratio: 2 8 = 4 . Capability improves 4 × faster than alignment.
Why this step? A ratio ≫ 1 is the quantitative meaning of "≫ ".
Conclusion: yes, danger regime — the alignment gap grows.
Verify: 8 − 2 = 6 ✓, 8/2 = 4 ✓. Sign check: if instead d C / d t = 2 , d A / d t = 8 then G = − 6 < 0 (alignment catching up — safe direction), covering the opposite sign ✓.
The three sign cases of G : G > 0 capability winning (danger), G = 0 neck-and-neck (constant gap), G < 0 alignment catching up (closing gap). Every case is a straight line of a different slope on the figure.
Worked example Measured reward drifts from true utility
True objective and measured reward for one state–action pair:
U true = 10 , R measured = 14 . Find the specification-gaming gap ϵ , and the fraction of measured reward that is "fake".
Forecast: is the agent over- or under-rewarded for real value?
Recall R measured = U true + ϵ , so ϵ = R measured − U true .
Why this step? ϵ ("epsilon") is just the plain-word error term : reward minus real value. It is what a reward hacker climbs.
ϵ = 14 − 10 = 4 .
Why this step? Positive ϵ means the metric over -pays — the agent gets 4 units of reward for zero real value.
Fake fraction = R measured ϵ = 14 4 ≈ 0.2857 = 28.6% .
Why this step? As capability rises, the agent optimizes toward exactly this exploitable slice.
Verify: 14 − 4 = 10 = U true ✓; 4/14 = 0.2857 … ✓. Degenerate check: if ϵ = 0 then R = U — perfect specification , the parent's ideal case ✓.
Worked example Autonomous-weapon catastrophic threshold
A framework labels an event catastrophic if expected deaths ≥ 1 , 000 , 000 . A fleet of 50 , 000 autonomous drones each has a 0.00005 (= 5 × 1 0 − 5 ) per-mission probability of a lethal targeting error killing 40 people on average. Over 10 missions, does this cross the catastrophic threshold?
Forecast: guess the order of magnitude of total expected deaths.
Expected lethal errors per mission = 50 , 000 × 0.00005 = 2.5 .
Why this step? Expected count = number of trials × per-trial probability.
Over 10 missions: 2.5 × 10 = 25 lethal errors.
Why this step? Expectations add across independent missions.
Expected deaths = 25 × 40 = 1 , 000 .
Why this step? Each error kills 40 on average; multiply by count of errors.
Compare: 1 , 000 < 1 , 000 , 000 . Below the catastrophic threshold (by three orders of magnitude), though still a mass-casualty event.
Verify: 50000 × 0.00005 = 2.5 ✓; 2.5 × 10 × 40 = 1000 ✓. Units: (drones) × (prob) × (missions) × (deaths/error) → deaths ✓.
[!mistake] The x-risk twist this word problem hides
1 , 000 deaths is "merely" catastrophic-adjacent — but the parent warns the same failure scales : raise per-mission probability tenfold and add zeros to the fleet, and you approach the existential regime. Governance thresholds (6.4.13-AI-governance-and-policy ) exist precisely to cap these multipliers.
Worked example Uncertain-values agent chooses to ask
Russell's agent weighs an irreversible action a irr against a safe reversible one a safe . Its posterior over human utility splits: with probability 0.6 humans want the action (utility + 10 ), with 0.4 they hate it (utility − 30 ). The safe action yields + 1 guaranteed. Which does the agent take?
Here D is the data the agent has seen — the observed human behaviour and demonstrations. The posterior P ( U ∣ D ) reads "how probable each human utility function U is, given the data D we watched humans produce."
Forecast: does high uncertainty push toward acting or deferring?
Expected utility of the irreversible action:
E U ( a irr ) = 0.6 × ( + 10 ) + 0.4 × ( − 30 ) .
Why this step? Under value uncertainty the agent maximizes expected utility, averaging over the posterior P ( U ∣ D ) — see 5.3.12-Inverse-reinforcement-learning for where that posterior comes from.
= 6 − 12 = − 6 .
Why this step? The heavy negative outcome, though less likely, dominates.
Compare with E U ( a safe ) = + 1 .
Why this step? Choose the larger expected utility.
Since + 1 > − 6 , the agent defers / takes the safe reversible action .
Verify: 0.6 × 10 + 0.4 × ( − 30 ) = 6 − 12 = − 6 ✓; 1 > − 6 ✓. This is the mechanism of value alignment : broad posterior + irreversibility ⇒ caution.
Worked example What happens at the edges
In the three-factor model P ( x-risk ) = P 1 P 2 P 3 with P 1 = 0.4 , P 2 = 0.5 fixed, trace the limits as P 3 → 0 and as P 3 → 1 .
Forecast: sketch the graph of risk vs P 3 before computing.
Figure below: horizontal axis is P 3 (probability we can't stop the system) from 0 to 1 ; vertical axis is P ( x-risk ) . A straight burnt-orange line of slope 0.2 rises from the origin; plum dots mark the two endpoints at ( 0 , 0 ) and ( 1 , 0.2 ) .
Write risk as a function of P 3 : Risk ( P 3 ) = 0.4 × 0.5 × P 3 = 0.2 P 3 .
Why this step? Fixing two factors leaves a straight line through the origin with slope 0.2 .
Limit P 3 → 0 : Risk → 0 .
Why this step? Perfect corrigibility (always stoppable) drives x-risk to zero — the safe extreme.
Limit P 3 → 1 : Risk → 0.2 .
Why this step? Even a totally unstoppable system caps at 0.2 , because the other two barriers still gate it.
Read the slope: each + 0.1 in P 3 adds + 0.02 to risk.
Why this step? The derivative d P 3 d Risk = 0.2 is constant — the line's steepness.
Verify: 0.2 × 0 = 0 ✓; 0.2 × 1 = 0.2 ✓; slope 0.2 constant ✓. The maximum possible risk (all P 3 ) equals the product of the other two factors, 0.4 × 0.5 = 0.2 ✓.
Recall Why does chaining probabilities shrink risk so fast?
Because each factor is ≤ 1 , so the product is ≤ the smallest factor ::: multiplying independent "AND" conditions can only make the number smaller (or equal).
Recall What does a positive gap rate
G = d t d C − d t d A mean?
Capability is outrunning alignment; the alignment gap widens over time — the danger regime ::: G > 0 danger, G = 0 constant gap, G < 0 alignment catching up.
Recall In Ex 8, why did the agent defer despite a 60% chance the human approved?
The expected utility was negative (− 6 ) because the rare bad outcome (− 30 ) was heavy ::: under value uncertainty, avoid irreversible actions with negative expected utility.
Mnemonic Edge-case checklist for any risk product
Z-O-A-R :
Z ero factor → the whole product collapses to 0 (Ex 2).
O ne factor → invisible, leaves the others unchanged (Ex 3).
A mplifier → an extra × S that may push you above 1 ; then it is a risk index , not a probability (Ex 4).
R acing rates → not a probability at all; check the sign of G = d C / d t − d A / d t (Ex 5).