AI Reports · GovAI (Oxford) · 2026-10-17 · Research paper
AI Regulation In-House Evaluation Is Not Enough: Towards Robust Third-Party Flaw Disclosure for General-Purpose AI March 2025 Research Paper Shayne Longpre et al., including Markus Anderljung The wide
The paper argues that flaw-reporting infrastructure, practices, and norms for general-purpose AI (GPAI) systems are seriously underdeveloped compared with software security. It proposes standardized AI flaw reports and rules of engagement, broadly scoped disclosure programs modeled on bug bounties with legal safe harbors, and better infrastructure to coordinate flaw reports across stakeholders.