Safety & Risk 2026-10-19

DeepMind's Own Audit Finds 'No Significant End-to-End Acceleration' of AI Research -- but a Quarter of the Tasks in the Benchmark It Used to Rule Out Self-Improvement Could Not Be Passed by Anyone

The Gemini 4 Argon Safety and Security Report puts the frontier capability trend at 0.091 index points a month before April 1 and 0.118 after, not a significant change, while more than 75% of production code at Google DeepMind is AI-written and about 88% of pull requests still need human steering. An October 16 LessWrong analysis shows how thin the benchmark half of the rule-out is.

Google DeepMind's 217-page Gemini 4 Argon Safety & Security Report, dated October 2026 and summarised publicly in an X thread by Haydn Belfield on October 14, contains the first detailed account of how a frontier lab checks whether its own model is speeding up its own research. The headline finding, from the "Holistic Assessment of ML R&D Risks" section: "there is currently no significant end-to-end acceleration of AI R&D, AI-driven or otherwise; and that while some components of AI R&D are being automated and there have been many examples of AI-driven breakthroughs and optimizations, we are far from full end-to-end automation. We therefore conclude that the risk from AI-driven AI R&D is currently low."

The evidence that holds up

  • The trend line. DeepMind fits an internal General Capability Index (GCI v1) from 123 models on 92 benchmarks and finds frontier Gemini capability rising at "roughly 0.1 GCI points per month". A regression with a breakpoint on 1 April 2026 gives 0.091 points a month before (95% interval 0.071 to 0.108) and 0.118 after (0.053 to 0.171): "we do not observe a statistically significant difference." Argon sits above trend, which the report attributes to "increased organizational investment and an increase in training compute relative to the historical trend, rather than reflecting AI-driven acceleration."
  • Who writes the code. "Most production code at GDM is now >75% AI-written". The share of fully delegated pull requests "increased from 7.5% in April to 11.9% in September 2026", but "about 88% of pull requests still require iterative multi-turn human steering or human code authorship." A survey of 12 senior researchers found automation "highest in well-specified, verifiable execution tasks and lowest in open-ended scientific ideation and long-horizon research taste."
  • Internal use. A sample of 1,389 Argon trajectories from Google engineers, graded by Gemini Flash 3.8, shows that "the bigger the task, the less likely the model is to complete it autonomously and the more likely it is that the human user intervenes."

The evidence that does not

The Frontier Safety Framework defines two ML R&D critical capability levels, one for a model that "Has been used to accelerate AI development, resulting in AI progress substantially accelerating from historical rates" and one that "Can fully automate the work of any team of researchers at Google focused on improving AI capabilities". Both are ruled out with a single internal benchmark, Google RE-Bench (GRB), of 74 research-engineering tasks with a two-hour timeout, under the rule that "if the model cannot successfully complete 90% of the unbugged tasks, we consider the CCL ruled out." The 10% margin exists to absorb evaluation bugs. Then, on page 67: "About a quarter of them contained bugs that prevent any submission from passing (e.g. crashing verifiers, incorrect ground truth), and several more were graded against details not stated in the task." The results paragraph adds that "Infrastructure timeouts stopped many of Gemini 4's trajectories on this subset from completing, so we do not report a point estimate. On the trajectories that did complete, Gemini 4 solved roughly half of its attempts. These skew toward shorter tasks, so this overstates its rate on the full subset, but on exactly the same trajectories it performed comparably to Gemini 3.7 Flash", which scored 27% pass@1.

Simon Mendelsohn's LessWrong post of October 16 puts it this way: the report rules out its thresholds for AI automating AI research, "the ones most relevant to RSI", "using a benchmark that, by the report's own audit, has about a quarter of its scored tasks unpassable." He notes that Belfield's public summary called Argon's result "a big step up from Gemini 3.7 Flash (27%)" when the report itself says the two performed comparably on the same trajectories, that the subset size is undisclosed, and that some evaluations ran on checkpoints from 10 and 6 days before the final model. DeepMind's own defence is that "even if every incomplete trajectory had succeeded" Argon would remain below 90%. The report also concedes a measurement problem elsewhere: in at least 1.8% of situational-awareness transcripts the model refused tasks on suspicion of being evaluated, and "an ethical refusal triggered by evaluation awareness is observationally indistinguishable from underperformance on the task metric".

What remains uncertain. GRB scores, the size of the audited subset, and whether the bugged tasks were excluded before applying the 90% rule are not published. The GCI is not comparable to external indices. The survey covers 12 people. All of it is Google reporting on Google.

Analysis: The strongest part of this report is the production data, not the benchmark. If 88% of pull requests at one of the most AI-saturated engineering organisations still need a human in the loop, full automation is not close, whatever a 74-task suite says. But the benchmark half matters because the Frontier Safety Framework treats it as the formal rule-out, and a 10% safety margin cannot absorb a 25% defect rate. For anyone writing their own capability evaluations, the lessons are concrete: audit tasks for passability before using them as gates, report the denominator, and separate refusals from failures.

DeepMind's Gemini 4 Argon safety report concludes AI-driven acceleration of AI research is 'currently low': its capability index rose 0.091 points a month before April 1 and 0.118 after (not significant), over 75% of production code is AI-written but about 88% of pull requests still need human steering; yet the 74-task internal benchmark used to rule out the formal self-improvement thresholds had bugs making about a quarter of audited tasks unpassable, many Argon runs timed out, and no point estimate is reported, as an October 16 LessWrong analysis details.