← AI investigation
Act III · who watches AI?

Who watches AI, and how independent are they?

Most public AI policy debates assume the evaluators are neutral. They aren't — and neither were they meant to be. Knowing who funds the question is half of knowing what the answer means.

Read in 30 seconds
Government

UK & US AI Safety Institutes

Built around the x-risk frame

UK AISI: 30+ frontier models tested · US AISI under NIST · future uncertain under current US admin

Academic / nonprofit

Most are Open Phil-funded

Independent of labs, not of funders

Stanford HAI, Epoch, METR, Apollo, Redwood, HELM, BBQ — many overlap one donor network

Civil society

Smaller. More adversarial.

AI Now · DAIR · AlgorithmWatch · AJL

Single-digit-million budgets vs Anthropic's $380B valuation. The asymmetry shapes what gets measured.

Three ecosystems of evaluation: government, Open-Phil-funded academic/nonprofit, and independent civil society. Their findings differ as much from where they sit as from what they measure. Read every tracker through its funder.

00 · The map of the watchers

A common funder is not a conspiracy. It is a structural prior.

The AI evaluation landscape has three layers — government safety institutes, Open-Philanthropy-funded academic and nonprofit orgs, and independent civil-society groups. They share findings, methods, and incentives only partially. Knowing which layer a finding came from is half of reading it.

The work of evaluating AI is concentrated in a small, well-named set of organizations. Most of the loudest capability and safety claims come from labs themselves (RSPs, Preparedness frameworks), from government safety institutes (UK AISI, US AISI) that adopted the frontier-AI / x-risk frame in 2023, or from a network of academic and nonprofit evaluators (METR, Apollo, Redwood, Epoch AI, HELM) that share Open Philanthropy as a major funder.

The labor and sociotechnical lens — DAIR, AI Now, AlgorithmWatch, the Algorithmic Justice League — is held mostly by independent civil-society organizations operating at single-digit-million budgets. They produce most of the concrete-harms reporting we covered in Act IV (Sama, Lavender, Robodebt, Worldcoin, ImmigrationOS) but get a fraction of the policy attention given to the safety / capability layer. The asymmetry is structural and worth carrying forward whenever “the experts” are invoked.

01 · The trackers

Who measures what — and who pays them.

2D scatter: independence (X) × scope (Y). Click any node to see what they track and what they have found. The Y-axis is what they measure; the X-axis is who funds them.

Who tracks AI — independence × scope
Frontier-lab self-reportIndustry consortiumGovernmentOpen Phil-funded (academic / nonprofit)Independent civil society
↔ scroll horizontally
CapabilitySafety / red-teamingBias / fairnessLabor / sociotechnicalLab self-reportIndustryOpen PhilGovernmentAdversarial↑ what they trackhow independent →Stanford HAI AI IndexStanford HAI AI IndexEpoch AIEpoch AIMETRMETRLMSYS ArenaARC PrizeUK AISIUK AISIUS AISIApollo ResearchRedwood ResearchAnthropic RSP / OpenAI PreparednessAnthropic RSP / OpenAI PreparednessHELM (Stanford CRFM)DecodingTrustBBQ benchmarkAlgorithmic Justice LeagueAI Now InstituteDAIR InstituteAlgorithmWatchClick any node to see what they track and what they have found.
Position on the X axis is independence (left = self-reporting frontier labs; right = adversarial civil society). Position on Y is what the org actually measures. Node size is approximate operating budget. The visible asymmetry: the safety / capability layer is dominated by Open-Phil-funded academic and nonprofit orgs, plus government safety institutes; the labor / sociotechnical layer is held mostly by independent civil-society orgs operating on single-digit-million budgets. A common funder is not a conspiracy — it is a structural prior that shapes which questions get asked.
The AI safety eval ecosystem (METR, Apollo, Redwood) is operationally Open-Philanthropy-funded — not industry-funded, but not independent of Open Phil's worldview either.
02 · The capability trend

Capability is climbing on a clean exponential.

METR's task-completion-time-horizon doubles every ~7 months. UK AISI's self-replication evals jumped 5%→60% in two years. The straight-line extrapolation is a hypothesis, but the line itself is data.

Capability climb — task-completion horizon vs time
1 min10 min1 hr1 hour8 hr1 work-day (8h)5 day1 work-week (40h)20 day1 month FT201920202021202220232024202520262027202820292030↓ todayGPT-3.5GPT-4Claude 3.5 / GPT-4oo1 / Claude 3.7o3-classfrontier ~Apr 20268 hr32 hr ≈ 1 work-week~3 work-weeksDOUBLES EVERY ~7 MONTHSUK AISI 2025Self-replication eval5% → 60%(2023 → 2025)Apprentice cyber9% → 50%STANFORD HAI 2025Year-over-year jumpMMMU +18.8 ptsGPQA +48.9 ptsSWE-bench +67.3 ptsThe line is real. The extrapolation is a hypothesis. Both should inform what gets governed now.
METR finding: the length of task an AI agent can autonomously complete doubles roughly every 7 months. Solid points are measured; the dashed segment past Apr 2026 is extrapolation and is labeled as such — straight-line projection of an exponential will overshoot, undershoot, or saturate. Two adjacent capability anchors from UK AISI 2025: self-replication eval success went 5%→60% from 2023→2025; apprentice-level cyber tasks 9%→50% in two years. The shape of the line, more than any single benchmark, is what reasonable policy is now being asked to anticipate.
METR (Berkeley nonprofit) measured the length of task an AI agent can complete autonomously, and finds the horizon doubles roughly every 7 months.
UK AISI (2025 Frontier AI Trends Report) documented self-replication evaluation success rates of 5% in 2023 → 60% in 2025.
03 · What's been measured about bias and drift

Five non-obvious findings worth carrying forward.

Each of these has shifted the field's understanding in a way the headlines didn't capture.

Stable Diffusion shows only 3% women for 'judge' prompts when the real US figure is 34% — generative AI doesn't mirror society, it amplifies skew.
GPT-4 is more vulnerable to jailbreaks than GPT-3.5 — better instruction-following also means following malicious instructions more faithfully.
GPT-4's prime-identification accuracy collapsed 84% → 51% in three months (March → June 2023). Silent model drift is real.
NIST measured face-recognition false-positive rates varying by 7,203× across demographic groups — and found that as overall accuracy improves, the gap shrinks.
The 'safety filters' used to clean C4 (the dataset behind T5 and many open models) disproportionately removed LGBTQ+ content and African-American English.
04 · The longitudinal blind spot

The same model name is not the same model.

API-served LLMs change continuously. Most published evals are point-in-time. Treat any 'the model does X' claim with a date stamp.

The GPT-4 prime-identification finding above is the canonical example of a broader pattern: models behind a stable API name are continually retrained, fine-tuned, and patched. There is no public commitment from any frontier lab to versioning that survives policy timelines.

David Rozado's political-bias work (PLOS ONE, 2024) administered 11 political-orientation tests, 10 trials each, to 24 LLMs (2,640 runs). 23 of 24 leaned left; >80% of policy recommendations were left-of-center. Useful as a counterweight to “AI is neutral” framing — though Rozado is at the conservative-leaning Centre for Policy Studies, so methodologically check both ways.

The pragmatic upshot for any AI policy debate: date-stamp every claim about model behaviour, treat capability and bias measurements as snapshots, and read every tracker through its funder.

See also
Upstream
Sibling
  • Act II · Environment
  • Act IV · Real problem
Maintenance

Last verified against METR public benchmarks, UK AISI Frontier AI Trends Report 2025, Stanford HAI AI Index 2025, Hugging Face AI Energy Score, Open Philanthropy grants database, NIST FRVT demographics, and Bloomberg generative-AI bias investigation on 2026-04-25.

Earliest expected staleness: capability benchmarks (UK AISI, METR, Stanford HAI publish on rolling basis).

This investigation is treated as a living document. The claims marked stale in the receipt cards above are the ones to re-check first. How this is maintained →