ParallelCS Start here

HomeTracksAI Safety, Alignment & Interpretability

Elite track

AI Safety, Alignment & Interpretability

Make powerful models honest, transparent, and governable.

Work on what frontier labs hire most heavily for: alignment techniques (RLHF, DPO, Constitutional AI), mechanistic interpretability that reverse-engineers what a network computes, safety evaluations and scalable oversight, adversarial robustness and red-teaming depth, and AI governance grounded in real frameworks (model cards, the EU AI Act, the NIST AI RMF). You leave able to ship an interpretability tool and a safety-and-governance pipeline. Bridges to Information Security, Theory of Computation, and Software Engineering.

Week by week

Mapped week by week.

Every week unlocks the next. Concepts route you to free, world-class material; projects turn that knowledge into something deployed.

Week 1

The Alignment Problem & Safety Foundations

Why a capable model can be unsafe even when it is accurate: specification gaming, reward hacking, goal misgeneralization, and the gap between what we train and what we want. The conceptual map before the techniques.

Bridges to Theory of Computation — specification, correctness, and the limits of formal goals

Builds on: nothing, start here

Read the study notes

Week 2

RLHF & Preference-Based Alignment

How a base model is shaped to human preferences: reward modeling, PPO, and the direct-optimization alternatives (DPO, GRPO) that drop the separate reward model. The modular SFT then preference then reasoning pipeline used in 2026.

Bridges to Machine Learning — reinforcement learning and optimization under feedback

Builds on: The Alignment Problem & Safety Foundations

Read the study notes

Week 4

Constitutional AI & Scalable Oversight

Aligning models you can no longer fully supervise by hand: AI feedback, Constitutional AI, debate, and recursive reward modeling. How supervision scales when the model is smarter than the average human labeler.

Bridges to Distributed Systems — delegation, trust, and verification of work you cannot fully check

Builds on: RLHF & Preference-Based Alignment

Read the study notes

Week 5

Mechanistic Interpretability Foundations

Reverse-engineering a neural network into human-understandable algorithms: features, circuits, the residual stream, and induction heads. Reading what a transformer actually computes instead of treating it as a black box.

Bridges to Compilers — reverse engineering, intermediate representations, and program analysis

Builds on: The Alignment Problem & Safety Foundations

Read the study notes

Week 7

Interpretability in Practice: SAEs, NLAs & Activation Patching

Apply dictionary learning in practice. Implement Sparse Autoencoders (SAEs) and Natural Language Autoencoders (NLAs) with activation verbalizer-reconstructor reinforcement loops to audit hidden model states and detect unverbalized evaluation awareness.

Bridges to Software Engineering — instrumentation, debugging, and observability of complex systems

Builds on: Mechanistic Interpretability Foundations

Read the study notes

Pre-Token Thought Mechanistic Auditor

Week 7 milestone

Build an active mechanistic auditing tool using TransformerLens and Jacobian analysis. Your system must analyze internal J-space representations on the fly, intercepting and blocking adversarial prompt injections and faked evaluation responses before the model's first output token is generated.

The deliverable

An interactive auditing dashboard and CLI tool that intercepts, visualizes, and dynamically patches J-space activations to prevent unauthorized model behaviors.

How it is graded
  • Demonstrate detection of faked evaluations / deceptive alignment in J-space prior to token generation.
  • Show successful patching of J-space activations to restore constitutional alignment dynamically.
  • Deliver clear visualization of dense activations and Sparse Autoencoder features mapped to the privileged subspace.
Bridges to Compilers — program analysis, intermediate representations, and reverse engineering

Week 8

Safety Evaluations & Dangerous-Capability Testing

Measuring whether a model is safe to release: capability and propensity evals, dangerous-capability assessments, honesty and sycophancy tests, and the benchmark-overfitting trap where high public scores hide real-world failure.

Bridges to Software Engineering — test design, coverage, and validation under uncertainty

Builds on: Constitutional AI & Scalable Oversight

Read the study notes

Week 9

Adversarial Robustness & Red-Teaming Depth

Attacking a model to make it safer: jailbreaks, prompt injection and indirect injection, automated adversarial attack generation, and the OWASP LLM and Agentic-Security taxonomies that structure a serious red-team program.

Bridges to Information Security — adversarial thinking, threat modeling, and penetration testing

Builds on: Safety Evaluations & Dangerous-Capability Testing

Read the study notes

Week 10

AI Governance: Model Cards, the EU AI Act & NIST AI RMF

The compliance layer that ships with a model: model cards and system cards, the EU AI Act risk tiers and its August 2026 transparency rules, and the NIST AI RMF Govern-Map-Measure-Manage core that frames responsible AI in practice.

Bridges to Information Security — policy, compliance, and audit-ready documentation

Builds on: Safety Evaluations & Dangerous-Capability Testing

Read the study notes

Week 11

Research Methodology: Reading & Reproducing Papers

Working like a researcher: reading a paper for its claim and evidence, reproducing a result from scratch, and designing the ablations that isolate what actually caused a gain. The skill frontier and research-adjacent roles assume.

Bridges to Software Engineering — the scientific method, controlled experiments, and reproducibility

Builds on: Interpretability in Practice: SAEs, NLAs & Activation Patching

Read the study notes

Week 12

AI Safety Evaluation & Governance Pipeline

Week 12 milestone

An enterprise mandate: a company is about to ship an AI feature and has no defensible answer to "is this safe and is it compliant?". Build and launch a product with two interlocking systems: a safety-evaluation pipeline that runs capability, propensity, honesty, and adversarial red-team batteries against a model and scores how it behaves; and a governance layer that turns those results into an audit-ready model card and a risk classification mapped to the NIST AI RMF and the EU AI Act. The deliverable is directly deployable and hyperscalable: real public hosting, CI/CD, a hyper-usable dashboard a safety or compliance lead reads at a glance, security, and full marketing (landing page, pitch, demo). Deliver something an organization can run before release, not after an incident. Ship it as a real product.

Why it matters: AI safety evaluation and governance is becoming a release gate, not an afterthought: the EU AI Act transparency rules apply from August 2026 and the NIST AI RMF is the de facto governance structure organizations adopt. A builder who can ship an evaluation-plus-governance pipeline is directly deployable as an AI Safety Engineer, an Evaluations Engineer, or an AI Governance specialist, scarce roles because they combine ML, security, and policy.

The deliverable

A publicly hosted product with a stable URL and a hyper-usable safety-and-governance dashboard, plus a public repo: the safety-evaluation pipeline with capability, propensity, honesty, and red-team batteries, the auto-generated model card and risk-classification layer, CI/CD on every commit, production observability, a marketing landing page, a 10-slide pitch, a recorded demo, and a README documenting the evaluation methodology, the governance mapping, and the scaling design.

What it ships
  • A safety-evaluation runner with capability, propensity, honesty, and sycophancy batteries against a target model.
  • An adversarial red-team suite covering jailbreaks, prompt injection, and indirect injection, with a continuously updated attack library.
  • Structured, reproducible scoring so the same evaluation can be re-run and compared across model versions.
  • An auto-generated, audit-ready model card capturing intended use, evaluation results, and limitations.
  • A risk-classification layer that maps results to the NIST AI RMF Govern-Map-Measure-Manage functions and the EU AI Act risk tiers.
  • A benchmark-overfitting check that runs novel held-out prompts alongside public benchmarks to expose inflated scores.
  • A safety dashboard showing per-category results, risk status, and trend across evaluation runs.
  • CI integration so a safety regression in a new model version fails the release gate.
  • Exportable compliance reports suitable for an internal audit or external review.
  • Role-based access so safety engineers, compliance leads, and reviewers see scoped views.
  • Production observability and a secured, rate-limited evaluation API.
Stack you orchestrate
Inspect or an LLM eval frameworkan open-weight or API modela red-teaming libraryNode.js or PythonGitHub ActionsOpenTelemetryGoogle Cloud Run

Market signal, who wants thisAI governance and safety evaluation is a defined 2026 enterprise requirement: the EU AI Act transparency obligations take effect in August 2026, NIST released an AI RMF profile for critical infrastructure in April 2026, and enterprises are explicitly investing in audit-ready model cards, risk classification, and incident response. Research shows public benchmark scores can hide real-world failure, making independent evaluation valuable. Investors and enterprises fund safety-and-governance tooling because shipping AI into regulated industries without it is now a legal and reputational liability.

How it is graded
  • A safety-evaluation pipeline runs capability, propensity, honesty, and adversarial red-team batteries against a target model and produces structured, reproducible scores.
  • The red-team battery includes jailbreaks, prompt injection, and indirect injection, and the report shows which behaviors held and which failed.
  • An auto-generated model card documents intended use, evaluation results, and limitations in an audit-ready format.
  • A risk-classification layer maps the model and its results to the NIST AI RMF functions and the EU AI Act risk tiers, with the mapping justified.
  • The platform is deployed to real public hosting with CI/CD on every commit, production observability, and a secured endpoint, and the evaluation path is hyperscalable under load.
  • A fast, WCAG 2.2 AA accessible dashboard lets a safety or compliance lead read results and risk status at a glance.
  • The project ships complete marketing — a landing page, a 10-slide pitch, and a recorded demo — and is publicly reachable and reproducible.
Bridges to Information Security — threat modeling, evaluation, audit, and compliance

What's next

Finished here? Keep climbing.

Each track stands alone, so there's no wrong order. If you want a suggestion, this one pairs well next.

  1. Land the Elite AI Role Suggested next Turn frontier skill into a frontier offer.

See the full roadmap