Red + blue as additive defense-in-depth: fix most bugs, deploy sentry agents for live threats
willcb · x · 2026-09-13
Responding to Joshua Saxe, willcb clarifies that red and blue AI should be additive—defense-in-depth rather than canceling out.
- Orgs should find and fix as many (not all) bugs as possible via redteaming
- Deploy sentry agents to monitor for live threats, including social engineering
This aligns with the thread's broader point: recurring, value-scaled compute spend on protection becomes standard, like insurance or physical security.
Related event: Cybersecurity Experts Debate AI Offense-Defense and Inference-Layer Rules(4 posts)→
More from Safety
- Bing separates AI training from AI search grounding with new site controls — OnlineInference · 2026-10-31
- OpenAI reportedly to train on users' Daybreak sessions with no opt-out — dyn___ · 2026-10-31
- Forethought: US has 9x China's AI compute, can afford to pace the frontier — willmacaskill · 2026-10-31
- unpromptedconf takeaways: security programs face forced change as reachable vulnerabilities can't be risk-accepted — scottleibrand · 2026-10-31
- Reachable vulnerabilities can't be risk-accepted away, unpromptedconf speaker argues — scottleibrand · 2026-10-31
- AI safety researchers argue labs' silence on x-risk is a large-scale ethical mistake — DavidSKrueger · 2026-10-31