A Sweeting proposes CVE-rate security bar for models used in foundational software
_arohan_ · x · 2026-11-07
Khosla Ventures partner A Sweeting asks whether we could track which models produced code that later had CVEs, and use those vulnerability rates to set a minimum security bar for models allowed in foundational software—ruling out older, vulnerability-prone models.
His take: without such a bar, the natural competitive pressure is to optimize for cheaper tokens rather than safer code. He frames it as a potential race to the top among labs.
Related event: Researchers Propose CVE Rate as Safety Threshold for Code Models(3 posts)→
More from AGI Musings
- perrymetzger frames AI as a race between totalitarian control and progress — basedjensen · 2026-11-07
- "Abstraction laundering": a new name for the 'you can't ban linear algebra' fallacy — AaronBergman18 · 2026-11-07
- Pierce Lilholt: the ability to design life doesn't grant the wisdom to decide how it should be designed — PierceLilholt · 2026-11-07
- Two scaling laws collide in robotics: exploding data collection meets self-improving AI — Scobleizer · 2026-11-07
- Musk: Going all-in on autonomy is a blindingly obvious move, everything else is 'horse carriage variants' — elonmusk · 2026-11-07
- TimnitGebru mocks AI safety teams by resurfacing longtermism's rich-country-lives-first quote — PolarBearby · 2026-11-07