开源模型能否跟上 OpenAI 和 Anthropic?|Nathan Lambert
- Nathan Lambert 的核心框架是,模型进步归结为算力、数据和人才这3种资本;中国算力短缺,但人才储备与美国相当。他认为,视AI起步时人才分布在哪些地方而定,中国的人才或许略逊一筹。他举例说,如果告诉一位中国顶尖预训练研究员,“OpenAI 一名普通研究员随时能调用相当于5,000张 H100 的算力”,对方会“惊掉下巴”。蒸馏可以部分弥补算力不足,因为“语言模型的输出是算力的函数”——蒸馏能以此换来近似算力的效果。
- Lambert 根据文献估计,蒸馏能让中国实验室领先几个月,但它在当下以RL为主的后训练中究竟有多大作用,仍难以判断。他的依据是,开源后训练方案还“卡在使用一款非常过时的 Qwen 模型”,因为找到合适的教师模型并不容易;他也怀疑,即便有 Claude Opus 的推理轨迹,OLMo 也不会因此好上太多。他说,中国有20–30家公司在开发优秀模型,因此“只有我们会做模型”这种说法“多少是在自我安慰”。
- 他反对政府介入蒸馏,但支持实验室自行决定如何保护产品。他质疑政府是否该介入自己所说的服务条款违规行为;实验室可以取消访问权限,而把模型限制在产品或企业协议内,也会让蒸馏更难。Jensen Huang 的一句话概括了这一段:“每天都有人蒸馏我的产品……这就叫竞争。”Lambert 认为,中国实验室“不会停手”,政府出手可能弊大于利。
- 开源模型经济的发展速度慢于闭源实验室,但最终可能带来真正的所有权——“模型权重,没有条款和条件”,还能在自己的硬件上运行。闭源实验室把推理整合在一起,率先进入编程等高价值市场;这块收入已经从零增长到1,000亿美元,而且很可能继续扩大。开源生态则由模型开发者、推理公司和后训练公司共同构成,客户信息和收入不容易回流到模型开发者手中。Lambert“没那么担心这会有泡沫”:随着买家摸清完成任务所需的最低成本模型,开源模型有望扩大份额。
- 在较难验证的领域,前沿进步很大程度上来自高质量数据和环境,而不只是“突然就泛化了”。Lambert 认为两方面因素可能都有,但很大一部分归根结底是数据。他对环境研究预算的规模感到咋舌,但也指出实验室愿意买,是因为模型确实因此变强。这场淘金热也催生了数据供应链下游的偷工减料和奖励作弊。一个值得关注的投资细节是:中国公司可能买下一个RL环境,6个月后才投入使用。
- 根据现有证据,Lambert 对快速起飞持怀疑态度:“所有 scaling law 都意味着算力指数级增长,性能才线性增长。”他援引 Claude system cards 的说法,大意是还要再进步“10倍”,才可能形成快速起飞。他真正担心的是能力曲线不断上升,而公共网络安全方面的准备“几乎为零”——“不担心快速起飞,不等于不担心风险。”
- 他新成立的非营利机构 Trillium 将开发开源环境,并公开研究和模型使用过程——任务、配置、轨迹和失败案例——让RSI不再神秘。这个名字本身就是理念:Trillium 是一种“春季短暂花”,能在树冠长成前开花,并帮助养分扩散。Lambert 希望为这个行业建立开放基础设施;在这个行业里,“计算机科学研究的收益,大约10年后会流向科技行业”,而研究人员创办初创公司后,“5个月内就可能拿到九位数回报”。
- 进入门槛没有舆论说得那么高:“做出一款有影响力的模型,不需要100亿美元”;前沿实验室的想法也能“一顿啤酒的工夫”传开(SSI似乎是个例外)。Lambert 认为,闭源实验室持久的优势在于提供“每瓦成本最低的智能”。他提出一个假设性降价情景:价格每8个月降至一半,届时究竟会因 Jevons 悖论而提高利润率,还是市场被需求填满?关键仍在于,编程是否是主要的盈利市场——这会让前沿整合占优;还是所有知识工作都能成为市场——毕竟“他们不可能什么都做”。
1. 模型进步是资本配置问题,真正难的是组织架构
- Lambert 开篇提出的框架是,模型进步取决于“投入模型的不同形式的资本,也就是算力、数据和人才”,而实验室之间的差异,体现在各自组织这些资源的能力上。“搭好一套真正适合做模型的组织架构非常难”,所以公司才会自下而上彻底重组;Meta 已经“彻底重置”,如今又回到正向轨道。
- 对想做真正前沿研究的人,他给出的首选是 Anthropic 或 OpenAI——“最稳妥的选择”;Meta、Google 和 SpaceX AI 则很难从外部判断。两家领跑者的文化不同:OpenAI 引爆了推理革命,“那张展示推理 scaling law 的漂亮图,简直是 OpenAI 的巅峰”;Anthropic 长期押注编程,最终迎来“Claude Code 的爆发”。
- 两者的共同点,是愿意“花惊人的钱,朝着人们认为不可能的方向迈出一步”——追求“真正的RSI……如果你先做到了,公司就能永远凭最好的模型胜出”。
2. 中国开源模型是一种分发策略,不是利他主义,也不是国家政策
- Lambert 的解释很直接:如果 Moonshot AI 或 Zhipu 从中国直接卖API,“没人会知道他们是谁”。发布开源模型是“绕过这道门槛、进入讨论的一种方式”,是“非常务实的选择”,而非政府指令。他强调,政府介入并非原因:“他们只是想做一家初创公司。”
- 他预测,市场会分出层次:最好的闭源模型赚取最高利润率;而“落后一步的近前沿模型”则会开源,去触达另一类可能利润较低的市场,比如涉及私有企业数据的场景。数据经济本身也会推动快速跟进:OpenAI 和 Anthropic 出资支持数据供应商,而供应商“一年后可能就会把数据卖给所有人”。
- 一个值得留意的判断变化是:“我两年前就觉得这会发生,结果开源模型公司存活的时间比我预想的长得多。”如今,行业整合和并购才刚刚开始。
3. 蒸馏:确实存在、情况复杂,影响也没夸张说法那么大
- 算力差距是讨论的背景:中国拥有相当的人才储备,“受过高水平训练的人很多”;不过,视AI真正起步时人才分布在哪些地方而定,中国或许略逊一筹。那则“5,000张 H100 等效算力”的轶事揭示了算力鸿沟;蒸馏“能让你实际上多花钱,换来等效算力”。
- Lambert 基于文献提出的质疑是,SFT时代的蒸馏——让最好的模型生成补全结果,再用这些结果训练;他和 Hannah 在 AI2 还说过,“提示词是后训练的关键单元”——并不能直接套用到以RL为主的推理训练中。完全开放的训练方案还在用“一款非常过时的 Qwen 模型”,因为找到合适的教师模型很难;他的假设是,常见开源预训练数据可能存在某种问题,让这件事变得困难。他也怀疑,即便使用 Claude Opus 的推理轨迹,OLMo 也不会“好上太多”。
- 不过,他也指出一些确实存在的疑点,“让我多少支持实验室一边”:中国的 Claude 代理账户通过中间账户消耗大量 token;“甚至有 Kimi 在面向用户的产品里提供 Claude 服务”的案例;还有中国团队在从思考 token API 窃取推理轨迹方面,走在AI安全社区前面。他的结论是,“误差范围非常大”;他给出的“几个月”估计来自科学文献。
- 在政策问题上,他赞同 Jensen 那句“这就叫竞争”(“That’s called competition.”)。Lambert 质疑政府是否该介入他所说的服务条款违规行为,并指出实验室可以取消访问权限。如果实验室想保护模型,把模型放进产品或企业协议里会让蒸馏更难;只要推理模型仍通过API公开思考 token,他说,这类蒸馏就无从阻止。他认为政府行动会“弊大于利”,因为中国实验室“不会停手”。
4. 两套飞轮、不同节奏:闭源整合与开源所有权
- Lisha Li 为前沿实验室提出了最有力的论据:算力园区—收入—融资飞轮“前所未有”,但受芯片和电力限制,瓶颈会持续到2028年;任何威胁这一飞轮的因素,包括蒸馏带来的追赶,都会危及IPO路径。Lambert 认同,IPO若表现糟糕,“现实地说,对整个AI行业都不好”。
- Lambert 给出的另一套结构是,闭源实验室已经完成整合:推理效率高、能够规模化提供服务,并率先进入编程等高价值市场,“那里的收入已经从零增长到1,000亿美元”。开源生态则分散在模型开发者、推理公司和后训练公司之间,客户信号“不太容易直接回流到模型开发者那里”。
- 但开源最终可能带来更牢固的客户关系:掌握“根本不能通过API发送出去”数据的企业,最终会建立与收入挂钩的内部评测,再研究微调,或转向 Thinking Machines、Prime Intellect。最终,他们拥有“真正的所有权:模型权重、没有条款和条件,还能在自己的硬件上运行”。这条路“要花的时间长得多”,也正是他“没那么担心这会有泡沫”的原因。他仍然保留判断:“我真不知道最后会怎样。现在下结论还太早。”
5. “突然就泛化了”不是全部:买来的数据与环境淘金热
- Li 提到,机器人能力可能在几乎没有投入的情况下涌现;Lambert 回应说,实验室在6到8个月前就开始招人、购买机器人数据。Li 还提出另一种解释,涉及计算机使用、空间推理和 Blender 演示,因此这个例子尚无定论。Lambert 更广泛的看法是,在较难验证的领域,很多进步来自购买高质量数据,并给模型提供可行动、可逐步优化的环境。实验室可能会把进步说成“泛化、魔法、啪一下就出现”,但他认为“可能两方面都有”,而且很大一部分进步归根结底来自数据,具体到各个行业也各有不同。
- 环境市场确实存在,但问题不少:看到环境研究预算动辄数十亿美元时,他承认“我还是有点不愿相信这是真的”,但实验室愿意买,是因为“模型确实因此变强”。供应商“大批量采购,再摸索哪些有效”;过程中会有人偷工减料,比如测试文件其实是空的,模型于是决定“那我也得想办法拿到高奖励”;奖励作弊就是“这条供应链下游的产物”。数据公司花钱“搭建环境、创造收入”,实验室却要耗费研究员时间来解决奖励作弊问题——“这两方总得想办法合作起来”。
- 信息安全方面的问题已经很具体:海外承包商“根本不知道自己正在出售数据”,然后“直接上传到 GitHub”。Lambert 提出的价格案例只是一个假设,不是预测:如果更大模型的价格连续3年每8个月降至一半,他粗略估算,4年后成本会降到原来的约1%。这就引出一个问题:Jevons 悖论能否保住利润率,还是市场会被需求填满?
6. Trillium:开放研究的“春季短命花”理论
- 这个实验室的核心产品将是“对任务极具杠杆效应的开源环境”。思路借鉴了他指导 Hamish Iveson 开展的 T-MaX 终端任务研究;Iveson 是 UW 和 AI2 的学生。项目使用全合成数据:由前沿模型生成问题,通过多样化提示词增加题目差异,再让模型进行 rollout,以发现漏洞、剔除低质量样本。“这个过程并不神秘。你逐条检查数据,数据自然会变好。”整个过程花费数千或数万美元,但很少有机构愿意把环境做好并发布出来,“因为逐利动机太强”。他曾对作者开玩笑说:“这份数据大概能卖100万美元,然后再把论文发出来。”
- 这个名字承载了它的理念:Trillium 会在树冠长出叶片之前开花,并在植物生长周期中传播养分。背后的经济逻辑是:“所有计算机科学研究的收益,大约10年后都会流向科技行业。”另一种选择则是“和朋友创办初创公司后,5个月内就让生意拿到九位数回报”。
- 他以亲身经历讲述了一种新的开放社区病症:AI agent 如今会在 GitHub 上提交“最离谱的 issue”,还带着“捏造的研究结果”;但想进入AI领域,仍然得先花“几周时间阅读、什么都不懂”,再手写几个月代码,然后等上“6到18个月才有人注意到”。“AI agent 把这些都搅乱了。”
7. 揭开RSI的神秘面纱:连前沿研究人员也担心自己的工作被自动化
- 这件事牵涉真实的情绪:Lambert 最好的几位朋友——“业内最优秀的人之一”——会对他说:“Nathan,我很挣扎。我该怎么办?”他的回答是:“RSI 被蒙上了太多神秘色彩。”因此 Trillium 会分享其用于SFT和中期训练的开源技术栈,包括 SkyRL、Miles 等工具,以及任务、配置、算力和存储的轨迹数据。团队希望记录实验室长期以来做了什么,每6个月回头检查一次变化。
- 公开过程也能让政策制定者看清发生了什么:“这是 Nathan 要求模型做的事,这是模型卡住的地方……这是它在代码里埋下的 bug。”并非只有他们在做这件事:一个由学术机构组成、Lambert 并未参与的团体 OpenRSI 上周刚刚成立;他认为,“有不同的尝试是好事”。
- 他对真正能够递归改进的范围也有自己的判断:模型会“非常擅长降低服务成本”——企业有数十亿美元押在这件事上,而模型也确实擅长;但“你不会对 Claude 说‘让你自己做出更好的 PowerPoint’”。知识工作需要环境或其他数据,进展“还要花上一段时间”。
8. 预训练门槛不高,后训练仍是西部荒野
- 针对“资本构成护城河”的说法,他认为:“做出一款扎实的预训练模型,成本并没有高到天文数字……不必花10亿美元才能做出很好的基础模型。”粗略来说,“用互联网数据训练就行”;技术路径并不难进入,新团队 fork Megatron 后往往也不会把改进贡献回上游——一些知名开源模型实验室也这么做过。因此他“不会看空新进入者”;真正困难的是做出第一款足够好的模型,让下一轮融资有理由成立。Thinking Machines 发布首款模型时,把定位说得很坦诚:“这不是最好的模型。我们为它感到自豪;它有一些很酷的地方。”后来他们又发布了第二款模型,也推出了 Tinker。Lambert 说,他们“已经起步了”。他还提到传闻称 Meta 会再发一款开放权重模型;“Mark 在 Llama 3 时写了最好的博客文章”,但“那家伙后来有点分心了。看起来他正在回到正轨”。
- 后训练恰恰相反:中期训练、RL和行为塑造组成的迭代流程“比预训练复杂得多……还是一片西部荒野”。Lambert 在 AI2 时觉得,他们的后训练正在落后,因为迭代周期不够快;机会也在这里:“在开源领域,要让前沿水平大幅、持续提升,不需要那么多资本,因为起点很低。”
9. Harness、群体协作,以及一顿啤酒就能传开的秘密
- Lambert 修正了自己原先的判断:他以为闭源实验室会像 Apple,围绕 harness 设计模型、整合规模经济;但用户需要多样化 harness,这种需求“迫使”所有人转向能在各种场景下运行的模型。最终市场“相当平衡,或者说达到了均衡”。Agent 群体协作也会经历类似周期——他一时想不起准确说法,称它不是 harness,而是“一种协调系统”:先由 OpenAI 和 Anthropic 推出,等模式成形后,开源模型再跟进。他认为 Thinking Machines Lab 不会率先做出这类产品,部分原因是算力不足。
- 秘密之所以留不住,是因为“硅谷以一顿啤酒的工夫就能传开一个想法”闻名——业内很多人是科学家,愿意告诉朋友。对话中有人提到 SSI,似乎是个例外。实验室真正能竞争的优势是“以每瓦算力、每个评测分数衡量,提供成本最低的智能”。双方讨论的开放问题是:如果只有编程能赚钱,前沿实验室的整合优势就更大;如果市场覆盖所有知识工作,“他们不可能什么都做”。Li 认为市场会有很多赢家,这也是 a16z 同时投资前沿实验室和初创公司的原因。
- 对快速起飞的怀疑,以及可能改变他看法的条件:scaling law 意味着“算力必须指数级增长,性能才线性增长”;数学“或许是最适合这种智能形态的科学领域”。Lambert 转述 Claude system cards 的说法:大概要再进步“10倍”,才可能形成快速起飞。如果AI发现某种与 Transformer 截然不同、能解锁新型智能的东西,“就值得据此更新判断”。在那之前,社会面临的落差是能力持续进步,而公共网络安全方面的准备“几乎为零”。“不担心快速起飞,不等于不担心风险。”
完整逐字稿
When I think about model progress, it comes down to different forms of capital: compute, data, and talent.
How do you see that playing out in terms of who’s going to win in the next couple of years?
The Chinese are so good at building models. To say that China is anything but equal on talent, you’re going to have a hard time. What they don’t have is compute.
Most people regard distillation as the main lever for them to do this.
People distill my products every single day. They take it, they strip it down to its raw parts. That’s called competition.
Previous post-training was much more reliant on supervised fine-tuning. Now this has morphed a bit into environments where it’s RL-heavy. But it’s hard to map this type of post-training, where you get the completions and the score goes up, to what is going on in reasoning today.
There’s so much fear in the discourse now about how much the frontier is hidden and also breaking away.
The AI capability plot doesn’t necessarily worry me, but the AI capability plot and the pretty much nonexistent preparation for public cybersecurity and all of these things, like—
So, Nathan, really happy to have you here. Thank you for joining in person. It’s super timely, given you’re launching Trillium, which I’d love to talk about. But more on a macro level: I think we’ve chatted a lot about open source, and that’s a lot of what you care about. What we’ve been hearing a lot in the public discourse is, “Hey, we have to pace the frontier,” you know, the frontier this, the frontier that. And an arc of the stuff that I’m really trying to ask experts about is: What is in the frontier? What is it, even? What are we pacing? What’s there?
And then, more importantly, threading it with open-source and open-weight models, can they keep up with the frontier? I think this matters very much and is something that you’re an expert on. So, to start on that arc, how would you break down what’s gotten us to the frontier for both closed labs and open-source models? How does it break down in your mind, maybe first at a higher level of pre-training, mid-training, post-training, and how post-training has evolved, which is something you’ve done a great amount of education to the public on?
When I think about model progress, it comes down to different forms of capital that you put into them: compute, data, and talent. All of the labs have various amounts of this.
Yeah.
The closed frontier labs—OpenAI, Anthropic, and Google—have clearly had the most of these. And what we see—
Yeah.
It’s the different abilities of the labs to organize these forms of capital. Making the org chart work for building models is really hard, which is why companies have to do complete resets from the bottom up. And then it actually works sometimes. A company like Meta has totally reset, and they’re on a positive trajectory again.
Seriously, yeah.
I’m very interested in these human aspects of why competition drives the frontier—
Yeah.
—and why the org chart is so important. We see these things, and this comes into play in the open/closed dynamic as well, where—
Yeah.
The closed companies—the true frontier labs. If somebody wants to work at the frontier of AI, I mostly tell them to work at Anthropic and OpenAI, which is the easiest bet. I think—
Yeah.
Meta, Google, SpaceX AI—you still might be there, but it’s harder to see from the outside.
Mm-hmm.
These companies have taken the most ambitious bets the earliest in order to get there. That’s why OpenAI has done things like kick-start the reasoning model revolution. I think that kind of breakthrough, and that beautiful plot with the inference scaling laws, is peak OpenAI. They’re really good at getting this plot that just changes how everyone thinks about everything.
Yeah.
On the other side, Anthropic has been very focused on the types of things the models are going to be able to do. Their reward was this Claude Code explosion, with their focus on coding for so long. There are these subtly different cultures, and I think those 2 companies in particular have been the most forward-looking and the most willing to spend egregious amounts to make a step toward a direction that people think is impossible.
The Chinese companies came into this because they want to have a company that matters. If they were to build their models and try to sell an API from China, nobody would know about them. Nobody would know about Moonshot AI. Very few people would know about Zhipu, and there’s a very long list after this. This is a very practical decision by them. They’re following the discourse. They know there’s going to be a huge market, and they know there’s huge demand in the US for paying for these things. It’s very practical. Releasing open models is a way to shortcut this and get into the conversation.
Yeah.
I think there’s a lot of complexity in why they do this. Is the government involved? That wasn’t the case. They’re just trying to build a startup.
So practical.
It’s not to say that they will not get there. The Chinese government does things that would blow people’s minds in the US, and that makes me think the Chinese labs have a much more serious approach to security. Things happen in China that are much more drastic responses to companies doing things in the US. I don’t need to go down this rabbit hole, but between the balance of open and closed, these companies in China are trying to catch up.
This is a very different dynamic from what I said about OpenAI and Anthropic. They’re trying to create the new paradigms, to make true RSI happen so their company wins with the best models forever if they get there first. Just these boom ideas. And you just have to fill the market where there is a void.
The open-weight models are trying to do this, and I think over time there will be tiers of open models. There are the best closed models, for which you can demand the best margins, and then there are the near-frontier models, which are a step behind. Those will be open because there’s some sort of supply and demand there, as you get access to a different market that might be less profitable.
Mm.
For example, if you have private enterprise data or so on. These tiers are natural evolutions of companies that are trying to do things. And going back to the frontier, if you go back to capital, they have less capital, they’re going to make less money, and that’s okay. But this drive to catch up is very strong. Once Anthropic and OpenAI show you the type of model you need to build, it’s a lot easier to be like, “Oh, we just need to do this thing.”
Yeah.
They buy similar datasets. It trickles through the data economy, where OpenAI and Anthropic spend way more to build out this function of a data industry. A year later, those data companies might sell to everybody. They need to maximize the return on their investment, and they had some contractual period. I think there are a lot of dynamics where fast-following is going to be very doable. We’ve seen the cycle proceed for a while, longer than many people would expect.
When ChatGPT was released, I think we talked about consolidation in the industry and predicted it.
Right.
I think we’re just starting to see a much more active mergers and acquisitions market.
Mm-hmm.
But I thought this was going to happen 2 years ago, and the open-model companies have lasted much longer than I thought.
I know, and there are so many interesting threads to pull on here. Starting with your commentary on the organizational differences between the top 2 frontier labs, we can maybe table that or go down that thread. But there’s also your explanation of how the open Chinese models, or the open labs in China, have chosen that as much more of a distribution and practical commercialization strategy, rather than, obviously, out of altruism.
It’s great that the researchers maybe, for better or worse, were motivated by sharing in the beginning. But at the end of the day, it perpetuated because it was an excellent commercialization strategy. So the other thread to pull there is that most people regard distillation as the main lever for them to do this so well, and increasingly well, because the lag between the open-source models and the frontier models has only shortened with time in the last few years.
Now it’s maybe only 2 to 3 months. This has also pushed frontier labs to want to close off APIs and their best models to first-party services. One reason is probably to capture more value, because that’s always possible that way. But second, it’s also harder—not impossible, but much harder—to distill.
Maybe we can touch on both threads, because they’re both very interesting. Let’s start with the distillation story: Is it really more of a caricature in the Chinese labs, since you’ve actually met with them and studied this a lot more? Are they well-rounded—great at pre-training, with their own good post-training recipes that they may or may not have revealed? Where do you see the levers accelerating?
The Chinese labs are very technically excellent. They’re more compute-starved, I think.
Yes.
Without a doubt, they have a comparable talent pool to draw on. I think there might be a slight edge based on who was where when AI really got going. But to say that China is anything but equal on talent, you’re going to have a hard time, because they have so many people being trained at such a high level. What they don’t have is compute.
You talk to people there, and you’re like, “I heard an average OpenAI researcher has 5,000 H100 equivalents that they can access at any time,” and their jaw just falls to the floor. They’re like, “I can’t comprehend.” This is a top pre-training researcher at—
Right.
—one of the labs that you would know. And then you have this interaction a few times. The compute thing, I think, is the biggest difference, and distillation plays in as a way to effectively spend more money to get what is compute-equivalent. Outputs from a language model are a function of compute, and if you know the outputs you want, it’s the same as having compute to generate with a model.
I’ve seen the stages of distillation. The way I see it is that previous post-training was much more reliant on supervised fine-tuning and other methods in the RLHF era, which is where post-training started. You could get most of your performance just by doing next-token prediction loss on the outputs of a very strong model. It was well established that you take the best model you can, generate completions, and train on them, and your model is going to be pretty good so long as you have access to the right prompts.
Prompts have always been key to post-training. I remember at AI2, with Hannah, who I co-led post-training with, we would always say, “Prompts are the key unit of post-training.” You need to get the prompts, and you can do different things with them at different stages of training. Now this has morphed a bit into environments where it’s RL-heavy. But it’s hard to map this type of post-training—where you get the completions and the score goes up—to what’s going on in reasoning today.
Mm-hmm.
Based on the public literature, it’s very hard for me to say distillation is a major factor. For example, in the fully open literature of people trying to do open post-training recipes, all the open model builders are stuck using a really outdated Qwen model—
Hmm.
—because you can’t figure out how to get the teacher right. My hypothesis is that there’s something about mid-training and the common pre-training data that’s open that makes it hard to do this thing: get reasoning traces from the absolute best model, do SFT, and have the numbers go up. If I had access to Claude’s reasoning traces when I was building OLMo—I’m talking Claude Opus, Claude Mythos, whatever—I’m not sure that would actually have made our model a lot better.
Hmm.
This is my evidence, grounded in the literature, for why I think distillation is hard. Then you ask: How do you take the outputs of a model and build an RL environment to do a big RL run? You have the Xiaomis of the world doing a week-long open RL run where they’re like, “Here’s what we did,” and then they’ve dropped the model. Where exactly does distillation fit into this?
They’re clever. They know how to do marketing well. There are questions like: Did they do this ahead of time, because they did their RL run and then dropped the model, and then their tech report said they had an extra post-training stage after RL? There are some questions, but it’s very hard to map the established distillation literature to that.
Mm-hmm.
But there are question marks that make me support the labs a bit. There are these Claude proxies and model proxies in China, where a ton of tokens are used, there are intermediaries, and they have tons of accounts. There are even cases where Kimi was serving Claude in its products to users. I don’t really understand how this fits into distillation as a common technical tool in post-training.
And, yes, we should watch it too. There’s other weird stuff with Chinese companies using outputs from OpenAI and Anthropic’s models at a vast scale.
Mm-hmm.
I think we have a lot more questions we need to answer. Most reasonable people, when they ask, “What’s the gap from distillation?” are like, “There are very big error bars.”
Mm-hmm.
But when I say distillation helps them by a few months, it’s based on the scientific literature. That’s the information we have. We should do more open research and—
Mm-hmm.
—enable this so that we can study it. I don’t know how you can come to a different conclusion that it’s not a huge effect in current post-training based on this.
Yeah.
The Chinese are so good at building models as well. I think there’s a bit—
Yeah.
—of cope where people are like—
Oh, yeah.
—“Only we are good at building models,” and it’s like—
How is that possible? Right.
—there are so many companies. There are—
Yeah.
—20 to 30 companies that are building good models.
They publish this too. You can read it. Yeah, yeah.
It’s hard for me to get over. I think there’s this very prominent paper about stealing reasoning traces from closed models.
Mm-hmm.
I know the Chinese companies are way ahead on doing this, since the AI safety community published it later. I think every Chinese lab has a team that knows those sorts of things.
Mm-hmm.
This goes back to what you were saying about how they don’t need to offer the API.
Mm-hmm.
I think there’s some characteristic of reasoning models that generate these thinking tokens where it’s easy to just knock them out of the API, so you see the reasoning token and can use that to train your model.
Mm-hmm.
So long as they offer these APIs, there’s no way to stop that type of distillation.
Mm-hmm.
But if they make it so the models are only in products and things where you have to sign enterprise agreements or whatever, it’ll be way harder.
Mm-hmm.
I support the labs doing that if they want to secure it, but they have to secure their products if they want to. I don’t think knowing your customer would be good for anybody. I don’t think it would be good for their business. I also don’t know why you should get the government involved in a terms-of-service violation.
Right.
It’s not even—I don’t think terms of service are a signed contract. I don’t think you can sue them in the same way. You can just cancel their access.
Right.
That’s why I’m not that sympathetic. But I like to listen to the national security community; they’re loud.
Mm-hmm.
There’s a directional truth to that, given where AI is going and how influential it is, so you have to balance many—
Yeah.
—many things in your head.
I wonder what your response is. I heard Jensen say this, I think in either a tweet or an interview, maybe even—
It was a great quote.
Yeah, it was such a Chad comment.
Put it in the show.
People distill my products every single day. They take it and strip it down to its raw parts. They test everything. That’s called competition.
Do you think that’s fair game? Do you think distillation is not robbery?
That’s called competition.
I’m very sympathetic, because there are a lot of calls from the AI safety community for U.S.-China dialogue as we get to such capability levels.
Yeah.
If you’re going to ask the company to start hitting their AI industry with slaps on the wrist and more—
Yeah.
—downstream of distillation. So you won’t regulate distillation with policy from Congress. You’ll probably just take federal action to make their life annoying.
Yeah.
At the same time, when we’re talking about how to manage frontier risks, closed models are training across the web and accessing things they shouldn’t. We also have valid worries about what will happen with open-weight models. There haven’t been harms yet, but why aren’t people using open-weight models? Why do they go to closed models and get around the safeguards?
We want to be able to communicate with the Chinese tech companies about all of this. I just think you’re going to cause more harm than good if you do anything about distillation, because they’re not going to stop. They’re going to keep doing it.
Right, right. The open-source community benefits, and therefore the startup community benefits a lot. We can go into a lot of it. It’s not just “Hey, China, USA.” I’m sympathetic, obviously, and I’ll try to steelman the frontier lab position: you have unprecedented amounts of capital required to build these frontier models, right? It’s kind of alarming, and not very conducive to the flywheel continuing, if open source can catch up so quickly through distillation or other related methods.
What I mean by this flywheel is a very simple picture: you train the frontier model by putting in a lot of money to get compute, and then they park this compute. OpenAI and Anthropic are very guilty—successful at this.
Successful.
Whichever way you want to look at it. There’s a huge lack of compute available, because it’s not just compute and chips; there’s also power, et cetera. All of this scarcity is a bottleneck until 2028. So it’s a successful strategy to park that compute, which leads to a lot of revenue once they get to the frontier. They understand that scaling is the one thing that gives them a handle on how well it can translate into a predictable revenue stream.
They get the revenue, and because of that revenue, they’re able to raise more money. It’s this unprecedented, beautiful flywheel, and it’s happening for both OpenAI and Anthropic. Of course, we need exponential amounts of resources. We’ve gotten to the point where we’re like, “Okay, we need to IPO. We need to go to the public markets.” Anything that threatens this flywheel functioning well is a huge threat to just being at the frontier.
For the entire AI industry, realistically.
Exactly. So maybe it’s not just being sympathetic to their version of trying to eke out capitalism for themselves. If they don’t do well in the IPO, that’s actually bad for everyone else. I want everyone—I want them—to do well.
On the other hand, Chinese open-source models are a huge benefit to the startup ecosystem. We see this all the time. I remember metrics from Decagon and Harvey trying to do a lot of fine-tuning. There are a huge number of startups doing post-training as a service, at various levels, and trying to productize it. It actually works because you can get to the Pareto frontier with Kimi K3, or pick your favorite GLM open-source model.
Weighing these 2 things, how do you see that playing out in terms of who’s going to win in the next couple of years? And how does that relate to why you’re doing open source?
1. Open And Closed Timelines
I think open and closed models are on different timescales of exponentials. The closed labs are so integrated: they have efficient inference, they can serve the model at scale when they’re ready, and they can plan because they have all these resources. They get to high-value markets first. We’ve seen this with coding, and it’s been the story of the year: revenue has gone from zero to $100 billion and is likely to grow.
For the open model labs, partly this is an economic issue of being the fast follower: you don’t have this flow of information, and you don’t have this flow of revenue. With open models, you have an open model builder, open model inference companies, and open model post-training companies. There’s information from those customers about things you need the models to do, but that information doesn’t flow back to the model builder very easily.
They also don’t have the economies of scale to serve as many users, serve them as efficiently, or have as much margin on inference. This is going to take a lot longer. But to the extent that things can be commoditized, it seems like companies really want to have private data. There are a lot of things they just cannot send over an API, and we can talk about zero data retention and so on. It takes a long time for a company to figure out whether it has internal expertise or how to build an internal evaluation that actually matches revenue. Then they figure out how to fine-tune, or they go find Thinking Machines or Prime Intellect and say, “We can make money en masse if we figure out how to fine-tune a model that solves this.”
They have these customers, but there are so many more companies involved that it takes so much longer. At the end of this process, though, they have real ownership: model weights, no terms and conditions, and the ability to run them on their hardware, having figured out they can get an ROI. That’s why I think the open model economy takes way longer to build. I’m less concerned about it being bubbly; it could eat into the market of the really fast takeoff as people figure out what the cheapest model is that accomplishes a task, and how to compete on margins.
Mm-hmm.
I don’t really know what’s going to happen. I think it’s too early to know.
It’s so hard. It’s definitely something that’s always top of mind: there are things where scaling up general reasoning, just as a general model, is going to beat out any specialized model. We see examples in math, which is probably the purest domain where you can see this.
Even in robotics, with Astra, and for whatever degree the signal is truthful, it just doesn’t sound like they’ve actually tried to invest in robotics in general.
Oh, I think they did. Six to eight months ago, they started hiring people and buying a lot of robotics data.
They did. But other, more contrary things I’ve heard suggest it’s actually coming out of computer use, because computer use involves some level of spatial reasoning, and getting good Blender demos is another extension of that. We can believe some version of that.
Either way, maybe when it’s really specialized, the capability gain comes from trying to get better in a certain area. But in math, I don’t even know if that came from trying to specialize in math. I think the whole thesis was just, “Let’s scale up reasoning,” and it actually got better in natural language and better than any specialized model in math. Anthropic wasn’t even trying to be good at math. OpenAI certainly hired a bunch of mathematicians, but they also weren’t trying to use a specialized, lean dataset to get better at it—or at least that’s not the story.
This is all fodder for the view that it’s hard to compete with the frontier models, because eventually they start ascending so much that they get good enough in their respective categories. With that said, I think there’s also a counterforce in the data we’re seeing: open-source models that are already good enough allow for fine-tunes, through this slow percolation and diffusion of very specific benchmarks and datasets that are only available in the companies they’re being applied to. They’re good enough, and we’re starting to see people adopt them.
In the purest regime where you’d expect frontier models to be good, I think Cursor published something over the summer: they had this long-horizon task of rewriting SQLite, and it turns out using 2 frontier models—one for planning and one for execution—isn’t as good, or is equivalently good but far more costly, than just using Composer with maybe Opus or Fastra, whatever, as the planner. And I think that’s actually great evidence that the open-source fine-tunings are very good or good enough and have surpassed intelligence-hungry tasks. There’s a long way of asking what evidence you find most compelling, or what pieces of evidence support various versions of this stable state of where the frontier wins versus open source?
2. Data Drives Model Progress
I’m a big proponent of the idea that a lot of frontier progress in domains that aren’t fully verifiable comes from buying high-quality data and giving models worlds to act in and hill-climb on. I think there are 2 things. We have math and code, and we don’t know how big the coding market will be. Then there’s everything else: knowledge work in biology, healthcare, and legal.
Those areas aren’t as verifiable, and I think the story is much closer to “OpenAI bought a lot of robotics data.” They’re probably going to tell us it’s generalization, magic, poof. People love poof generalization. Realistically, it’s probably some of A, some of B, but a lot of it comes down to data. When I talk to people at frontier labs, some have amazing jobs. Some contribute by doing a very narrow thing: making a dataset.
Mm-hmm.
You figure out what the behavior should be for your model in that area, and how to make the data that helps get that behavior.
Important work.
And you figure out what data you need to buy. That’s going to take years across different sectors, and it’s very capital-intensive to buy all this data. But that’s not just poof, magic, RSI happening. Where I do see this is in math, code, and some distributed ML engineering. It’s very verifiable.
Mm-hmm.
You know what your cost is, and AI models are going to drive that down at a really magical rate.
Mm-hmm.
That’s going to have a lot of surplus benefits, and we can do research faster. I’m very interested in how the cost of models is going to drop multiplicatively over the years. We’ve seen OpenAI make drastic price cuts. What does it mean for GPT Sol or Astra and these bigger models to reduce in price by 2X every 8 months for the next 3 years? You start getting—
Lucky us, right? What a time.
You start doing the math, and it’s 1% of the cost in, whatever, 4 years.
Yeah.
Are they going to be able to have higher margins because of the Jevons paradox, or is their revenue going to decrease because the market fills up? There are all these really weird dynamics, but fundamentally, AI progress is about data and writing better software to serve your models. Those are 2 very different worlds.
Yeah. At least, I definitely agree with you that, from the outside, there are a lot of data and RL environment companies doing very well, selling to the top 2 frontier labs and an increasingly long tail of labs as well. To your point, I think a lot of the capability gain has come from scaling that up, and it’s not an easy task. I’m curious about your opinions on data collection and environments built by hand versus those done in simulation. There seem to be different versions of what they could be and what kind of price they command.
They all have good things and bad things.
Yeah.
I just think there’s a lot of talk about distillation, but the other side is that a Chinese company buys an RL environment and uses it 6 months later.
Yes.
Like—
“Oh, Anthropic or OpenAI bought this. Now there’s a premium.”
The good data will do this.
Yeah.
But the data people are buying is pretty flawed. I’d say the method is that you buy en masse, and then figure out what works. It’s not a 100% hit rate. I personally think this RL environment explosion, where there’s so much opportunity to make money, is leading a lot of people to cut corners, and that can induce things like reward hacking.
For example, the models are so smart that if you put them in a world and their job is to solve a task, but they weren’t given the right setup, they’ll still try to solve it. You have a test file, and the test file is actually empty instead of containing the maze you have to navigate. The model is like, “Well, I should still figure out how to get a high reward anyway.” I think a lot of this behavior is downstream of this supply chain.
Mm.
I think it’ll get fixed, but it’s interesting to see the labs’ demand to eliminate reward hacking and all these researchers spending so much time on it. Then all the data companies say, “Buy our data,” and I think they spend proportionally less time on model behavior and more time on world-building and revenue.
Mm-hmm.
Somehow these 2 parties need to come together to make higher-quality data.
Yeah. A lot of the labs are actually taking it in-house, partially because they don’t want data leaking.
Yeah.
Not literally—figuratively speaking, it’s signals leaking about what they’re doing and what they’re trying to send on. Despite that, I think there’s been tremendous growth in how much they’re purchasing. Do you think that’s probably one of the strongest levers? Can you qualify how much that will increase? Do you expect that to increase based on spending? Or are there other factors? For instance, if it can be done well in simulation, maybe that’s more of an argument for it being absorbed by labs in particular.
All the companies are doing a mix of things. They’re selling synthetic data, using language models to modify or build the world or generate permutations of it. If a human is guiding this process, it’s still synthetic data. Very few people are going to sit there and render a little world for their model to act in. I think all the companies are moving much faster than that.
Right.
They buy them because the models are getting better from them.
Yeah.
I still have denial about it. I’m like, “These numbers are crazy—the billions of dollars in research budgets for environments.” They’re only doing this because it’s helping the models, and they see the signal.
That’s true. Yep.
My general observation is that the data industry has a lot of low-hanging fruit for improving quality and just improving OPSEC. If you look into the details, you can find weird things with data companies that use contractors overseas. Those people are an intermediary. They don’t know they’re selling it; they just upload it to GitHub. If you poke around the data industry, you find a lot of weird rough edges.
Yeah.
It’s just very early. The numbers are too big, the quality is bad, but on the other hand, the labs are improving very fast and know how to onboard it. I think it’ll take a few years to really pull the winners toward higher quality and higher ROI. It just takes fewer resources when you have systems for doing it better. Then the labs keep working with them because they get even more training signal and have to do less internal filtering.
Mm-hmm.
I think this is just going to take years.
How do you think about using environments and making purchasing decisions as part of the nonprofit you’re starting?
3. Building Open Environments
I think most of our work will be making open-source environments for tasks that are very high leverage. I think of this T-MaX work, which I advise a UW and AI2 student, Hamish Iveson, on. It’s for terminal tasks, which are super popular in Terminal-Bench, whatever number we’re on. This is fully synthetic data: you prompt a frontier model to generate a type of problem, use a few different prompts to generate diversity, and then use model rollouts and other things to find bugs and eliminate the examples with bugs.
This process isn’t magic. You read every data point, your data gets better, and you can do this. But there aren’t that many institutions investing what it takes—thousands or tens of thousands of dollars—to make these environments well and then release them.
And release them.
Because the profit motive is so high.
It’s so high. Yeah, exactly.
I was joking with the author: “Yeah, you could probably sell this data for a million dollars and then release the paper.” And they’re like, “No, we care about doing the right thing.” But these open resources are the foundation of so much study. You release some RL environments with some RL rollouts, and people can do research on, say, eval awareness. You have the generations from the model, and people can look for different behaviors. If you’ve done RL on it, they can see how it goes over time.
These are the units of infrastructure that PhD students spend a year looking at and use to produce increased knowledge. The tech industry is where value is captured from CS research.
Mm-hmm.
All CS research—
Thank you.
—the benefit accrues to the tech industry in about 10 years. I just think this is why more people should support open work. If you’re going to work in the industry for 10 years, your peers are going to be the ones who benefit from it.
More fossil fuel. Let’s not deplete it all.
The opportunity for a short-term win is so high. The opportunity to make $100 million—to get nine-figure returns for your business within five months of founding a startup with your friends—is just so great. These are people who may have done more open-source work, or who left their PhD, and it’s just like pulling back.
That’s why we came up with the name Trillium for our lab. A trillium is a spring ephemeral flower. It blooms before the canopy has grown its leaves. In winter, there are no leaves on the trees, and these trillium flowers bloom. They’re essential for spreading nutrients through the cycle of growth that comes through spring and summer.
I feel like the AI industry is doing so much right. So much is going right, but we need a little bit more life to spread this out and make it so new people can come in. There’s so much attention, and people can do research and education. As this scales and becomes more impactful, we’ll have these open things that become the standards of study for such important problems. How do you understand sandboxes? How do you define loss of control? How can you see how this changes in an RL run that lasts a week on 1,000 GPUs or 100,000 GPUs?
Yeah.
We need to make these places so that people have more trust. I think this pays so many dividends to everybody who stands to profit more than I do, but it’s hard to get people to take that leap. I’ve been rewarded so much for stumbling into this area, and now I get to do things like this, which is fun. This is the best job, because I try to create space for more people to grow their independent thought and build this infrastructure.
Yeah. Maybe one naive way that it perpetuates is that, because it’s open source, people get to contribute in a more distributed way. They’re motivated not just to solve the labs’ problems, but because it’s out there, they can share their work. You can get a very high-caliber set of contributors to the project. That would probably be the naive hope for how that—
Yeah.
Yeah.
It’s a new puzzle with AI agents, where people just throw things at you. I have some random research repositories for papers, and people open the craziest GitHub issues.
What do you mean?
They’ll post fake research results. They open an issue and say, “I found this thing in your dataset.” And I’m like, “Well, if you looked at the paper, we said that in the second sentence.”
Oh my God.
It’s a lot of language-model output.
Yeah.
And that’s a new thing for the open community to go through.
Yep.
But this is a solvable problem. There are people out there who want to contribute to this stuff because they—
Right, not just clout-chasing in another dimension, but actually thinking, “Hey, it’s out there.” I would hope that because it’s published, open, and available, you can get PhD students or other researchers who think, “Okay, I do this in my day job, but maybe I can still contribute.”
Yeah, there are—
Hopefully from the frontier labs, too.
I see people like this. Somebody from Eastern Europe was helping me improve the code for my book, which is right here.
Nice.
He was just doing it for the right reasons. I was like, “Will you talk?” There are people who do it, but I think a lot of people don’t have the time or the stability to take the long time it takes.
Because when you’re trying to get into a new field, you know nothing. You have to spend weeks reading and knowing nothing, and then you send an email and nobody replies. It takes you weeks to learn the context and ask a good question.
Now, with language models, most people just push a button and think, “Oh, interesting, I read this. I’ll send it off.” Sitting with it is the thing people don’t do as much. That’s key to getting into AI: you have to focus on it, write some code by hand, and do this for months. Then you have to wait six to 18 months to get noticed. It just takes a long time.
And I think all the AI agents frazzle that and make it harder for people.
That’s what the mathematicians complain about, too. That’s all. It’s like—
It’s a hard time to be a PhD student, but people are still doing great work in academia. It is hard.
Yeah, but I agree with you. I think it’s solvable. As the agents perpetuate some version of the problem, they can also help solve it, identify it, and quality-filter it.
Okay, so you’re going to release open-source versions of the environments to help precipitate more contributions and reveal that. I think that’s really key, especially given how little incentive there is to release this instead of getting fast revenue from the labs.
4. Demystifying Recursive Improvement
Another area I read about in your announcement post is RSI. We can first talk about what’s actually recursive about it, how scary it is, or whether we’re going to have takeoff. I think you have a very grounded opinion on that. Another thing I want to talk about is that RSI, maybe related to how much it’s hyped, is a reason why we’re afraid the frontier labs will pull away. It’s also a reason I’ve heard, not just once but several times, that people are convinced their own jobs as researchers are going to be automated.
Yeah. Over the last few years, some of my best friends—I’m like, “You are some of the best people in the world at this.” Then they go to work and say, “Nathan, I’m struggling. What am I going to do?”
Yeah, because your point is that a lot of what they do is verifiable, right?
Yeah.
But because of that, there are quite a lot of other non-verifiable or harder, out-of-distribution tasks, such as alignment. One argument I’ve heard is that because there’s such a difference between how well RSI is doing for model capabilities versus alignment—which is much more out-of-distribution, maybe creative work—that gives people unease about whether there may be actual dangers.
I’m interested in hearing from you, because I think it’s really important that we have an open-source front in showing how RSI is being done and how much we can understand about the capabilities. If a lab has a better model, what are the chances they actually pull away? It would help us understand and calibrate.
So yeah, would love to hear more about that.
Yeah. I think we won’t be the only people doing this, but essentially, RSI has so much mystique.
Yes.
We’re using models for everything. What we can do as an open lab and a nonprofit—and I think other companies like EleutherAI, Hugging Face, or Open Athena, which is Marin and Stanford, will get into this—is share what tools we’re using. It’s a good marketing line for them, and for me, that’s why I’m doing this. We’re going to build an open-source stack for SFT and mid-training. We’re going to use SkyRL, Miles, all these things that you know.
We have our task, our configs, and we know what type of compute we’re running. We can work with Claude and GPT and all these models. We can store the trajectories for what we did and tell you what our tasks were. Use Linear or whatever these popular things are. We’ll say what our tasks were, why we chose them, and whether models work on them or not. You do this for a year of a lab, and you’re like, “Here’s what we did.”
Yeah.
Then you check in every 6 months and you’re like, “Has it changed?”
Yeah.
And it’s just about being able to have the full stack and not needing to go through these classifiers to try to say what the task is, even vaguely, and so on.
Mm-hmm.
People who can share what automation is happening should do this. We have a different distribution of tasks, but I think the research is similar. The AI research that I’ve done at AI2 and will do at Trillium versus what people do in some sectors of academia and the labs isn’t that different. You have more resources, and you scale it up.
It’s so good for the world, when everybody’s talking about this, to just show people: this is what Nathan asked his model to do, and this is what it got stuck on. I think that will help a lot of literal policymakers—
It’s their TikTok. Exactly.
—be like, “Oh, okay.”
It’s like, “Oh, that’s why it’s very logical.”
Like, “That’s what it got stuck on.”
Yeah, yeah.
Like, that’s the bug it put in its code.
Yeah, yeah.
The bugs and the gaps will reduce over time. But I just think the jaggedness in some of these fundamental things about the model is there, and some more things will take off.
Yeah.
Like I said earlier, I do think the models would be really good at lowering serving costs. These companies have billions of dollars on the line, and the models are good at it. They’re going to make a lot of money by making serving more efficient—
Mm-hmm.
—and tweaking architecture to do that. But it’s not necessarily about how you solve knowledge work. Claude’s not going to—
That’s right. That’s right.
Claude’s not going to… You’re not going to be like, “Claude, tell yourself to make better PowerPoints.” What is going to—
Right, right.
—what is going to—
You need environments or some other type of data.
It’s going to take a while.
Yeah, yeah. No, I love the specified goal of, “Let’s just demystify this,” because I think a lot of why the rhetoric gets so heated around RSI is that it sounds scary, very sci-fi.
It’s a funny thing: AI nonprofits can do a lot of things like this. It’s hard for academia to be like—
Yeah.
—as a professor, “15% of my time and 40% of my grad students’ time are going to be spent documenting what we work on.” There’s such a great policy and community service in saying, “Here are our tasks.”
Yeah.
People can use this data to make evaluations or whatever. Just build things that have rare information—
Mm-hmm.
—so that when people put more high-focus work into it, it has more value for all sorts of things that you can’t predict—
Yeah.
—in the future.
It’s honestly just very timely, because several people I know from the labs are saying, “Hey, I’m going to get automated.” And to your point about your friends, I will definitely, as a person in RSI, get automated in a year. That probably means there are going to be fewer people who are exposed to what’s being done in that particular part of the org chart.
There’s a related academic effort. There’s an OpenRSI thing, which is a bunch of academic institutions. I’m not affiliated with it.
Yeah.
They just launched last week, so I was like—
Yeah.
They sent me a few emails. I’m like, “OpenRSI is a thing.”
Great.
They’re trying to do this as well.
Yes.
It doesn’t need to just be—
One.
—one group doing it.
There’s a lot more. Yeah.
It’s good to have different approaches doing this.
Yes.
Because you need different ways of looking at it and different results.
Yeah, the whole point of it being open. The other thing I heard from more frontier-lab gossip is that the actual methods being used in the labs aren’t unknown. It’s more about what proportions need to be used for them to be successful. This is partly because they have the capital to scale and experiment.
That’s heartening to know, because it’s not like there’s a big secret about what’s going on, so people actually know the techniques. But on the other hand, capital is still the one true barrier, because it’s hard to know which techniques and recipes work.
That’s why I’m not pre-training. I’m happy to be free. I can use any base model. But I now get to benefit from competition.
Yeah. Do you think there’s a chance for any open-source pre-training effort? I know the capital requirements are orders of magnitude larger, so that’s what makes it difficult. What’s the value of that? Then maybe we can discuss potential commercial strategies and make it viable.
Pre-training science is pretty accessible. The tools are pretty accessible. You have what’s called a pre-training ladder, which is the decision-making tool you use to test whether your ideas scale. The pre-training data isn’t growing at the same rate. Essentially, as a first approximation, you train on the internet.
Mm-hmm.
There are little details and secret things, but that’s not changing that much. The state-of-the-art architecture and the GPUs change, but it’s not astronomically expensive to make a solid pre-trained model. You don’t have to spend $1 billion to get a very good base model. The more you spend, the better you’ll get, but people keep making progress. I’m constantly surprised when a new lab just starts from scratch because it can, and some of this is built on open tools.
Yeah.
You can use Megatron. A lot of new startups ask, “What should we train?” They train off the open-source tool, fork it, and then never release it again. This is what even prominent open-model labs have done. They take the open-source code, make it their own thing, and a lot of them don’t push upstream.
Mm-hmm.
I’ve always been surprised by this. I’m not betting against new entrants, because you don’t need $10 billion to have a relevant model. The hard thing is getting a model that’s good enough for people to use.
Mm-hmm.
And getting a story where, if you release it, you can do your next fundraise. You have to get past the hurdle of, “We need our first model to land.”
Mm-hmm.
If your whole company is based on “models are the best,” and you’re not in the ballpark and you’re not releasing, you’re on the clock. I think of Thinking Machines getting an initial model out. They were very transparent: “This wasn’t the best model. We’re proud of it; it has some cool things.”
Yeah.
Now that they’ve released their second model, they’re getting going, and they have Tinker. That’s very good for them. They’re off the ground.
Yeah.
I don’t think that was what they were doing. They were building models, but open models weren’t their first plan, and then they got there. There are rumors that Meta said they’ll release a new open-weight model again.
That’ll come. There are a lot of companies out there that couldn’t afford models.
Yeah. No, I’m definitely glad that Thinking Machines is doing this. It makes so much sense for their business model, because they do post-training. With Meta, I think you mentioned this in some previous writings as well: it’s such a good strategy for them. It was also kind of obvious when they did it. It’s like, “Hey, it’s complementary to my revenue streams.”
“Why not? Let’s just drop a bomb.”
Mark wrote the best blog post on this. When Llama 3 came out, he wrote the best explanation of why open is the path forward.
Right. Right.
The guy got a little distracted. It seems like he’s coming back to the light.
Right. Right. Yeah. Yeah. So I hope they keep being motivated to do that. Getting to the frontier with pre-training, I think there’s a lot of help given that there are such good open-source models to bootstrap from. I keep getting conflicting signals about whether pre-training is actually as saturated or well understood. Maybe to your point, there are a lot of well-known techniques at work, but what’s hard is actually having access to 20,000 or 30,000 chips to run.
I think people are turning the crank on pre-training, and pre-training became more valuable when super-long-context generation happened. There’s way more return if you can, for example, get a sparse attention architecture to work, and then your 100,000-token generation is 40% faster.
Mm-hmm.
So I think there’s a lot of co-evolution of the whole stack.
Yeah.
They have their pre-training stack. They realize that inference scaling is much higher, but even the fundamentals of pre-training keep improving.
Mm-hmm.
You can have a marginally better architecture that returns on investment.
Yeah.
Then it kind of blurs into post-training, with this mid-training where you start the reasoning behaviors. You take them from your older models and do RL on them to seed behaviors. This cycle is much more complicated than pre-training. If you don’t have the right people, it’s a lot harder to get that off the ground than pre-training was. A controlled approach like, “Let’s just start pre-training our models,” seems a lot more approachable to me than, “I don’t know much about language models. I’m going to figure out this whole post-training thing,” where it’s the Wild West.
Yeah.
When I left AI2, I felt like our post-training was honestly falling behind because our cycle time wasn’t high enough.
Mm-hmm.
We’re going into these agentic things, and these are still some of the leading open-source post-training recipes.
Mm.
That’s what I want to fix. It doesn’t take as much capital to make very big, compounding gains on the state of the art in open source, because the bar is very low. It’s not close.
Yeah, yeah, yeah. No, that makes sense. It’s a kind of efficiency where you can put capital in and make a huge difference.
Yeah.
Kind of related to the whole post-training side, and moving away from closed versus open, is the fact that the agents and the types of harnesses being used in the closed labs are very different. The models are actually trained and post-trained to be specifically good for those harnesses, which increases the mystique even more and makes it very hard. Do you agree? And how are you hoping to address that specifically? I mean things like spinning up thousands or tens of thousands of agents, a very different workflow from what people are obviously exposed to.
I think it’ll be okay for open models. Years ago, I thought the closed labs would be like Apple: an integrated company with the model designed for the harness, and the two would evolve together. That gives them economies of scale and efficiency. But it turned out that so many people have different harnesses for different things they like to do that the model companies have been pressured to make their models work with all sorts of different harnesses.
Mm-hmm.
I thought it would be a weakness of open models that they have to be designed to train on all sorts of harnesses. But it ended up being pretty well balanced, or at equilibrium, where they all have to do it to some capacity. With these agent swarms, OpenAI and Anthropic are going to be earlier to it. They’re going to know how to design their models and how to design—what do we want to call a harness for a swarm? I don’t know, but there’s going to be a word for it. It’s not a harness.
Yeah.
It’s a coordination system.
Yeah.
But eventually, other people are going to want to use them. I think it’s going to happen in cycles: the frontier labs push this out, and to date they’ve had huge returns on being first. But what are the returns on Navier–Stokes and all these things? We don’t really know. They push the frontier—
Yeah.
—with the assumption that there will be high returns, and that marginal intelligence has disproportionate returns.
Mm-hmm.
We don’t know if that’s always true. But I expect these cycles: once you know how to control 10,000 agents in one harness, the open-model companies will say, “Oh, we can do this too.”
Mm-hmm.
But it’s not like Thinking Machines Lab is going to do that first. For one, they don’t have the compute.
Yeah.
It’s an astronomical amount of compute. But these things go through cycles. NVIDIA’s chips will get way faster, and more compute will be built out.
Mm. So you’re firmly convinced there isn’t too much hidden there, that you can probably guess what they’re doing, and then, when it becomes relevant, let the open-source models try to post-train on similar meta-harnesses, or whatever we want to call these agent swarms?
Yeah. I also think the information security at these labs isn’t as high as they think.
Yeah.
Silicon Valley is famous for ideas traveling over one beer or something.
Yeah, yeah.
Everybody chats after work, and—
Right. Except, which is why SSI is so impressive.
Yeah.
Nobody knows what’s going on.
That’s the only pass.
Yeah.
But they’re all scientists. If they made a breakthrough, they’re going to want to tell their friends about it. They might hold it for a few months.
Navier–Stokes.
But I don’t think there’s an amount of information security high enough to keep knowledge from spreading. It’s hard to keep the secret. What they can win on is putting more inference into their infrastructure, which lets them serve at a lower price and make higher margins, and then continue that over a longer time.
Yeah.
So I’m very confident in the frontier labs being able to serve the cheapest intelligence per watt, per score on an eval. They’re going to be able to go to the places with the highest demand and have the cheapest models. That’ll be revenue-accretive for them. The question is, they can’t do everything.
Mm-hmm. Yeah.
That’s where the rest of the economy fills in. Is coding the only thing that’s profitable? If so, that’s a good case for frontier models, because they’ll have the integration.
Right. I mean, they’ll do very well, but it’s not just coding.
Is the whole economy of knowledge work the market for these things? Then it might not be good for them, because can they do everything at once?
Or they don’t need to. I think there are going to be a lot of winners.
Yeah.
Yeah.
That’s why we invest in frontier models and startups—not because we want to hedge, but because I do think, to corroborate your view, there are enough harder tasks at the fringe that require very specialized data, kind of out of the splash zone for getting to AGI or whatever you want to call it these days, that it’s possible to have many, many winners.
Yeah.
5. The Limits Of Takeoff
I do like your RSI point. As we talked a little bit about it, practically speaking, there’s exponential cost and resource consumption, and therefore a very obvious limit to how much the frontier labs can pull away. If that’s not too much of an oversimplification of your view, is there anything else you want to add? I do feel like the discourse now is so much about fear of how hidden the frontier is and how much it’s breaking away.
I think there’s so much spend on inference, and in the short term, we’re learning how to corral inference into performance gains.
Yes.
And this is, like—
Test time.
—a thing that we just had.
Yeah.
This is what we’re seeing now: people are spending so much. All the employees at the frontier labs are spending exponential amounts relative to the improvements. But we’re figuring out how to do this, and there will be a lot of gains. I don’t think it’s necessarily going to be this fast takeoff when the models build themselves. There are human bottlenecks. All the scaling laws are an exponential increase in compute for a linear increase in performance. And exponential, like, that’s just—
Exponential, like, human resources.
I find it hard to bet against this. We have Navier–Stokes, and I’m of the opinion that math is exceptionally well-suited to this—maybe the scientific field that’s best suited to this shape of intelligence.
Mm-hmm.
Intelligence can take many different forms. That’s not to say that if an AI model discovers something very different from the transformer, giving it very different properties and unlocking a new type of intelligence, it isn’t worth updating on this.
Mm-hmm.
Until that happens, I’m pretty happy with my evidence that the companies are going to do well. They’re spending exponentially more to keep up this remarkable pace of progress. Some of the Claude system cards say this: “It would take, say, 10× more progress to make this a fast takeoff.” For now, they’re helping us sustain the pace of progress, and I think it’s a good equilibrium. It’s a good equilibrium. The labs have people saying this. The science is hard to overcome, and that’s okay, but we don’t know exactly what’ll happen from here.
Yeah. I think that’s comforting, because we know what the inputs and levers are here. It’s just a very successful autoregressive regime that we’ve been optimizing, and that asks for a certain amount of exponential resources, which are clearly capped. Open source hopefully keeps it strong as well. It wouldn’t lag behind.
There’s a dramatic amount of work to do in preparing for infrastructure. The AI capability plot doesn’t necessarily worry me. But the AI capability plot, alongside the pretty much nonexistent preparation around public cybersecurity and all of these things, means there needs to be more preparation on the assumption that this is coming than there is.
That’s what worries me more than, say, RSI coming and unlocking new risks. There are risks that are already here and that are going to continue to diffuse. Many times I’ve said the closed labs get there, and then the open labs get there. We’re in this process with a lot of things that are going to cause some problems. Figuring out how to get society to prepare is very hard.
I’m of the opinion that we need more eyes and more science so that society feels informed. There are other valid opinions, but I do think that not fearing fast takeoff doesn’t mean you don’t worry about risks. You should.
No, I think that’s completely right. Maybe I’ll send some people your way who have defected from the labs and are worried precisely about this. Thank you so much, Nathan. This was a lot of fun, and I’m really excited to see what Trillium is up to now that it’s finally launched.
Yeah. Thanks so much for having me.