How to Avoid Debate: Scalable AI Safety via Doubly-Efficient Interactive Proofs

2026-07-03Artificial Intelligence

Artificial IntelligenceComputational ComplexityCryptography and SecurityMachine Learning
AI summary

The authors study how to verify AI outputs without relying on debates between two AI models, which assume both are equally skilled and truthful. Instead, they explore using just one AI model in interactive proofs, a method where a verifier checks the AI's answers step-by-step. They focus on cases where the AI can access external sources (oracles), like human judgment or databases, and show verification is still possible if answers are mostly reliable or have specific mathematical properties. This work suggests AI outputs can be safely checked even without having a competing AI to argue against.

interactive proofssingle-prover proofAI safetyoracleoracle-aided computationrelativizing proofsrobust computationlow-degree polynomialverificationdebate model
Authors
Liyan Chen, Yael Tauman Kalai, Zoe Xi
Abstract
As AI models continue to develop powerful capabilities, it becomes critical that we are able to verify that their output is aligned with our intentions. A recent line of work focuses on verification via debate, a model of interactive proofs where two competing powerful provers, or AI models, debate each other to convince a weak verifier, or a human, of the correctness of their claim. However, debate assumes that the two AI models possess equal abilities and that one of them is truthful, which may not be realistic. In this work, we show \emph{how to avoid debate}: we initiate the study of \emph{single-prover} interactive proofs for AI safety. Prior results in single-prover interactive proofs do not immediately carry over to the AI safety setting: for example, they do not work when the computation has access to an oracle, such as to human judgment or an external database such as the web. We present doubly-efficient single-prover interactive proofs and arguments for oracle-aided computations (also known as relativizing proofs), in the settings where (1) the computation is robust, in the sense that the output does not change if at most a small fraction of the answers to oracle queries are incorrect, or (2) the oracle is a low-degree polynomial. These results suggest that interactive verification is possible even without debate, under structured or noise-tolerant oracle access.