← AI Safety Orgs

AI Safety Camp

Field-Building

European volunteer research. Low-barrier.

Founded
2018
HQ
Virtual (European-based organizers)
Team
4
Structure
fiscally sponsored
Model
Grants

Theory of Change

AISC's theory of change is deliberately pluralistic. It does not endorse a single path to AI risk reduction. Instead, it provides infrastructure for people to form teams and work on whatever approach they find compelling, as long as they can articulate a plausible theory of change.

Linda Linsefors: "I believe there is a significant chance that the solution to alignment is something no-one has thought of yet. I also believe that the only way to do intellectual exploration is to let people follow their own ideas, and avoid top down curation."

In practice, AISC operates two streams:

  • Remmelt Ellen's "Stop/Pause AI" stream: Projects aimed at restricting AI companies, supporting legal/creative action against AI harms, and researching fundamental limits to AI control. Remmelt believes "AGI cannot be controlled enough to stay safe."
  • Linda/Robert's "Everything else" stream: Mechanistic interpretability, agent foundations, conceptual alignment, governance, and any other project that "might be useful for AI Safety."

The causal chain is: provide structure and community for early-career and career-switching people to test their fit for AI safety work through real projects, at extremely low cost, and at wide scale. The evidence suggests 5-10% of participants become new AI safety researchers who otherwise would not have entered the field.

What They Do

AISC runs a 3-month, part-time (10 hrs/week), fully online program. Project leads propose projects, the organizers give feedback and accept or reject them, then team members apply to join projects. Now in its 11th edition, running twice per year (roughly).

Scale: grown from ~20 participants in-person (AISC1, 2018 Las Palmas) to 150+ virtual participants across 27 projects (AISC11, 2026). 11 editions total, 600+ cumulative participants, 74+ teams.

AISC10 (2025) projects ranged from ICML-workshop-accepted research on Bayesian coherence in LLMs, deception detection via linear probes, and mechanistic interpretability, to PauseAI movement scaling, AI supply chain analysis, a flyering project with Sam Kirchner, and formal impossibility arguments with Forrest Landry and Anders Sandberg.

Cumulative outcomes: 43+ jobs at AI safety organizations (including FHI, GovAI, DeepMind, OpenAI, Anthropic, Redwood, Apollo Research), 10+ organizations founded by alumni (Apollo Research, Arb Research, AI Standards Lab, AI Safety Support), $1.4M+ in follow-on grants. Direct publication record is modest (NeurIPS 2021, Springer 2022, NeurIPS workshop, 2 ICML workshop acceptances from AISC10).

Key People

Remmelt Ellen (Program Coordinator since AISC1). Co-founded EA Netherlands. Believes AGI alignment is impossible. Co-organized Stop AI protest group and the Limits to Control Workshop (June 2025, with Roman Yampolskiy and Anders Sandberg). Works with Forrest Landry on formal impossibility arguments. His LW post "The Control Problem: Unsolved or Unsolvable?" received 47 upvotes.

Linda Linsefors (Co-founder, Research Coordinator). PhD theoretical physics. Initiated the first AISC (2018). Left the project for years, returned 2023. Believes alignment is "probably technically possible, but I'm not sure." Currently focused on mechanistic interpretability.

Robert Kralisch (Organizer since AISC10). Cognitive science background, agent foundations focus. Provides a third perspective on project acceptance, with conventional alignment research interests.

Team: 3-4 organizers (Remmelt, Linda, Robert, plus Kristi Uustalu on operations). All volunteer or modestly paid (~$7K/month when funded).

Notable alumni include Lucius Bushnaq (Apollo Research co-founder), Marius Hobbhahn (Apollo Research), Gavin Leech (Arb Research co-founder), Fabien Roger (Redwood Research), and Alex Mallen (EleutherAI).

Money and Incentives

Total lifetime funding: ~$600K over 8 years (11 editions).

  • $290K from Future Fund (July 2022; $255K frozen post-FTX collapse)
  • $180K from EA Funds / LTFF
  • $130K from Survival and Flourishing Fund
  • Various small donations from alumni and Manifund campaigns
  • $0 from Coefficient Giving / Open Philanthropy — ever

Current budget (AISC12): Seeking $126K-$180K. SFF matching up to $50K at 1:1 rate through March 2026.

Cost structure: Organizer salaries ~$7K/month each. PL stipends: $1,500. Team member stipends: $1,000 (low-income countries only). Per-participant cost: $600-$3,000. Approximately 50x cheaper per participant than MATS.

Business model: Donations and grants. No product revenue, no contracts, no institutional affiliations. Fiscally sponsored by Ashgro (US 501(c)(3), EIN 88-4232889), which charges 5-10%.

Why zero CG/OP funding: The Substack analysis identifies this directly: "Even if OP were otherwise very excited to fund AISC, it would be political suicide for them to do so" due to Remmelt's public activism and Stop AI association. Remmelt refuses to allow earmarked funding to specific streams, meaning funders who want to support only technical research cannot do so without also supporting advocacy work.

Incentive dynamics: Chronic underfunding creates a self-reinforcing loop. Funders defer to each other; when the largest funder (CG/OP) won't fund AISC, others update downward. Linda Linsefors: "There has been this persistent idea that if you can't get funded in AI Safety there has to be something wrong with you."

Follow-on value: AISC projects have generated $1.4M+ in downstream grants, but this value accrues to alumni and their projects, not to AISC itself.

What Others Say

Strongest endorsement — Zvi Mowshowitz (Nov 2025): "By all accounts they are the gold standard for this type of thing. Everyone says they are great, I am generally a fan of the format, I buy that this can punch way above its weight or cost. If I was going to back something in this section, I'd start here."

Strongest alumni defense — Lucius Bushnaq (Apollo Research, +43 karma): "Without AISC, I think there's a good chance I would never have become an AI notkilleveryoneism researcher... I think 4/6 of our interp team were from AISC." On Remmelt: "He was posting cranky technical stuff during my camp iteration too. The program was still fantastic."

Marius Hobbhahn (+39 karma): "AISC is probably about ~50x cheaper than MATS. So when taking cost into account, it feels clearly impactful enough to continue the project."

Ryan Kidd (MATS director, +39 karma): MATS and AISC are "complements rather than substitutes" operating at different stages. AISC focuses on conversion, MATS on acceleration.

Strongest criticism — Thomas Kwa (+91 karma): "I'd give >30% that funders have declined for some good reason." Concerns: MATS more prestigious, poor publication rate, Remmelt posting "obvious crankery" (Forrest Landry material), impact assessment not independent.

Oliver Habryka (LTFF): "I felt unexcited about almost all the research directions and research leads" for the 2023 cohort. "The quality of research leads was very markedly worse by my lights than past years."

Substack critic (former participant, Jan 2025): Five structural problems: (1) broad focus blocks earmarking, (2) Remmelt's activism blocks OP funding, (3) stipends are nonessential, (4) PL bar too low ("you are only as strong as your weakest project"), (5) poor external communications.

Techdirt (Dec 2025): Names Remmelt as co-organizer of Stop AI in the context of Sam Kirchner's radicalization, the OpenAI lockdown, and violent threats. Frames this as a consequence of "doomer rhetoric."

What's Absent

  • No independent evaluation of AISC's impact. The Arb assessment was commissioned, had 24 respondents (~10%), and was conducted by alumni.
  • No assessment of post-2022 cohorts. Impact data comes from AISC 4-6 (2020-2022), but the program grew 3x and restructured since then. Habryka's negative 2023 evaluation is the most recent quality assessment from outside the org.
  • No governance structure: no board, no advisory committee, no conflict of interest policy, no external accountability mechanism.
  • No published financial data: no budgets, annual reports, or audited financials.
  • No organizational response to the Kirchner/Stop AI crisis, despite this being the most prominent recent news linking AISC's leadership to real-world harm.
  • No data on current rejection rates or participant satisfaction for recent editions.

Recommended Reading

  1. "This might be the last AI Safety Camp" (LW/EA Forum, Jan 2024) — The most candid and information-dense source. Remmelt and Linda's funding crisis post plus rich comments from Thomas Kwa, Oliver Habryka, Lucius Bushnaq, Marius Hobbhahn, and Linda. Contains the strongest arguments both for and against AISC. nunosempere mirror

  2. "Why AI Safety Camp struggles with fundraising" (Substack, Jan 2025) — The clearest external diagnosis of AISC's structural problems. Five specific issues, written by a sympathetic former participant. fieldbuilding.substack.com

  3. "Radicalized Anti-AI Activist Should Be A Wake Up Call" (Techdirt, Dec 2025) — The Stop AI / Kirchner crisis from an external perspective. Essential for understanding the reputational risk. techdirt.com

  4. "Impact Assessment of AI Safety Camp" (Arb Research, Jan 2024) — Quantitative impact metrics plus comments from Ryan Kidd (MATS) and Linda on how the programs complement each other. nunosempere mirror

  5. AISC About & FAQ — Remmelt's and Robert's contrasting statements of what they accept. aisafety.camp/about-faq

Show Claude’s analysis
An opinionated read. Read the brief first to form your own view.

Stated Theory of Change

AISC's stated theory of change is that the field needs a wide-net, low-cost mechanism for people to try AI safety work through real projects — and that the best approach is to let many flowers bloom rather than curate from the top.

The mechanism: anyone with a plausible project idea can lead a team, and anyone willing to commit 10 hrs/week for 3 months can join. The program provides scaffolding (deadlines, team formation, presentation opportunities) but minimal direction. Value comes from: (1) converting 5-10% of participants into new AI safety researchers, (2) testing fit for many others, (3) producing a network of collaborators, (4) occasionally generating direct research outputs.

The key assumptions embedded in this theory: alignment research benefits from diversity of approach, early-career and non-traditional researchers can make valuable contributions, the field is talent-constrained rather than funding-constrained, and the bottleneck is getting people started rather than directing them to the right problems.

Revealed Theory of Change

AISC's actions broadly match its stated theory, with one major divergence and one emerging tension.

Match: The program genuinely operates at extremely low cost, accepts a very wide range of participants and projects, and has produced measurable career conversion. The alumni network (Apollo Research, Arb Research, placements at DeepMind, Anthropic, Redwood, etc.) is real and impressive relative to the budget.

Divergence: The dual-stream model reveals two distinct and potentially incompatible theories of change coexisting in one organization. Remmelt's stream (Stop/Pause AI) operates from the premise that alignment is impossible and the correct response is to prevent advanced AI from being built. Linda/Robert's stream operates from the premise that alignment is possible but hard, and the correct response is to train more researchers. These are not just different emphases — they are different answers to the fundamental question of whether the field's work is worthwhile. An organization that simultaneously says "we need more alignment researchers" and "alignment is impossible, stop building AI" is sending contradictory signals.

Emerging tension: The AISC12 fundraiser emphasizes "incubating projects in crucial and neglected areas of work, particularly for slowing down AI development." This suggests the advocacy stream's influence is growing, not shrinking. If AISC increasingly becomes an incubator for AI-restriction projects, the "wide net for technical researchers" framing becomes less accurate.

Key Assumptions

1. Quantity has its own quality at the bottom of the funnel.

  • Evidence for: 5-10% researcher conversion rate from Arb study; MATS director Ryan Kidd endorses AISC as complementary; multiple notable alumni credit AISC with their career entry.
  • Evidence against: Habryka found 2023 research leads much worse than earlier years; publication output is low relative to participant count; the program doesn't track what happens to the 90-95% who don't convert.
  • Testable: Yes, but requires tracking recent cohort outcomes (AISC 7-11), which hasn't been done.
  • If wrong: AISC would be spending modest resources to give people a positive-but-not-career-changing experience, with most impact coming from self-selection of people who would have entered the field anyway.

2. Low-bar project acceptance produces more hits than misses.

  • Evidence for: Apollo Research, Arb Research, and multiple organizations emerged from AISC projects. Hit-based evaluation is well-understood by funders.
  • Evidence against: "You are only as strong as your weakest project" (Substack critic). Weak projects reduce prestige, deterring strong PLs from applying. Habryka's negative assessment of 2023 research directions.
  • Testable: Compare project quality and alumni outcomes between editions with different acceptance thresholds.
  • If wrong: The prestige loss from weak projects could outweigh the option value of casting a wide net.

3. Remmelt's activism doesn't undermine the research program.

  • Evidence for: Laplace/Bushnaq: "He was posting cranky stuff during my camp iteration too. The program was still fantastic." The program has survived 8 years despite this.
  • Evidence against: $0 from CG/OP, ever. Thomas Kwa's +91 karma criticism. The Kirchner radicalization incident. Government workers can't safely associate with an org that hosts Stop AI projects.
  • Testable: Counterfactual — what would AISC's funding look like if the advocacy stream were a separate org?
  • If wrong: AISC is leaving millions of potential funding on the table and narrowing its PL pool for ideological reasons.

4. The field is talent-constrained, not funding-constrained, at the entry level.

  • Evidence for: Ryan Kidd (MATS): "the taut constraint on producing more AIS researchers is generally training/mentorship, not money." Many programs reject qualified applicants.
  • Evidence against: The post-FTX funding collapse shows that even small programs can be killed by funding cuts. The field may have shifted: as of 2025-2026, more established researchers are available than in 2018-2022.
  • If wrong: AISC's conversion rate matters less because converted researchers would enter the field through other pathways anyway.

Strengths

Extraordinary cost-effectiveness. At $600-$3K per participant and $12K-$30K per new researcher, AISC is one of the cheapest field-building interventions that exists. Even if effectiveness estimates are off by 3x, it would still be competitive.

Genuine complementarity with MATS and other programs. AISC serves a different population (part-time, online, wider background, lower bar) at a different stage (entry/exploration rather than acceleration). Several researchers have done AISC, then MATS. The MATS director explicitly endorses this complementary role.

Strong alumni network and track record. Apollo Research, Arb Research, placements across the ecosystem. Multiple independent voices (Zvi, Marius, Lucius, branperr, Ryan Kidd) confirm the program is valuable.

Organic growth. From 20 to 150+ participants without significant marketing or funding suggests real demand and word-of-mouth quality.

Accessibility. Part-time, online, and open to anyone in any time zone. This makes it uniquely accessible to people who can't drop everything for MATS in Berkeley or ARENA in London. Notable for including participants from low-income countries and non-traditional backgrounds.

Weaknesses and Risks

The Remmelt problem is existential. His dual role as AISC organizer and Stop AI co-founder creates reputational risk that directly causes the organization's #1 problem (underfunding). The Kirchner incident made this concrete: a person Remmelt helped radicalize threatened violence against AI researchers. There is no governance mechanism to address this. There is no evidence Remmelt intends to step back from either role. As long as Remmelt is a co-leader of AISC and a co-founder of Stop AI, CG/OP funding is off the table, and some potential PLs and funders will avoid AISC entirely.

No governance. Zero external oversight. No board, no advisory committee, no COI policy. Three people make all decisions. In any other context, this would be disqualifying for a program that has trained 600+ people and handled $600K+.

Stale impact data. All quantitative impact evidence comes from AISC 4-6 (2020-2022). The program has since tripled in size, changed its structure to project-lead model, and shifted composition. The most recent quality assessment from outside the organization (Habryka, 2023) was negative. Without updated impact data, the case for AISC relies on 3+ year-old evidence about a different version of the program.

Quality floor concern. The acceptance rate is high and rising. Several informed observers (Thomas Kwa, Habryka, Substack critic) have raised concerns about the PL quality bar being too low. The program's "weakest project" drags down the brand, deterring stronger PLs.

Funding fragility. Depending on SFF matching, Manifund campaigns, and small donations for survival. One bad funding round could end the program. The $255K FTX clawback nearly did.

Cross-References

MATS: Explicitly complementary per both programs' directors. MATS is full-time, in-person, mentor-driven, highly selective (~3% acceptance rate), $50K/participant. AISC is part-time, online, PL-driven, broadly accessible, $600-3K/participant. Some researchers do AISC first, then MATS. They convert different populations at different stages.

ARENA: Curriculum-based (structured learning materials), focused on ML fundamentals and interpretability. AISC is project-based (learning by doing) with no curriculum. ARENA is more like a course; AISC is more like a hackathon that lasts 3 months.

SPAR: Most similar to AISC — online, part-time, project-based. But with a different structure (research mentorship from established professors). The Substack critic compares them directly.

LASR Labs: Another field-building program, more recent. Less well-documented for comparison.

Stop AI / PauseAI: Remmelt bridges AISC and Stop AI. Stop AI conducts civil disobedience (barricading OpenAI offices, arrests, hunger strikes). PauseAI is its more moderate sibling. AISC hosts some PauseAI-oriented projects through Remmelt's stream.

Groundless.ai: Collaboration partner for 3 research tracks in AISC11. Groundless has a heterodox philosophical framework (Buddhist-influenced, anti-foundationalist). This partnership illustrates AISC's openness to very unconventional approaches.

What Would Change This Assessment

  • Updated impact data from AISC 7-11 showing comparable or better researcher conversion rates would significantly strengthen the case. If conversion rates have dropped with the quality concerns Habryka identified, that would weaken it.
  • Organizational separation of the advocacy and research streams — either spinning out Stop/Pause AI projects into a separate entity or Remmelt stepping back from AISC — would likely unlock CG/OP funding and attract more conventional PLs. This would be the single highest-leverage change.
  • An independent evaluation (not commissioned by AISC) of recent cohort outcomes would either validate or undermine the extrapolation from AISC 4-6 data.
  • The Kirchner situation resolving badly (violence, continued media coverage) would further damage AISC's reputation through the Remmelt connection.
  • Evidence that the 90-95% who don't become researchers are systematically misinformed or harmed would change the "net positive even if most don't convert" calculus.

Self-Critique

What sources should I have checked but didn't?

  • The full text of "Theory of Change for AI Safety Camp" (LW post, behind blocked domain) — likely the most detailed articulation of AISC's intended impact model.
  • Full funding case documents for AISC10 and AISC11 (behind blocked LW/EA Forum domains).
  • Linda Linsefors' own LW posts about AISC design philosophy.
  • Manifund donation data (rate-limited, couldn't access).

Where is this analysis potentially biased?

  • I may be over-weighting the Remmelt/Stop AI issue because it generates dramatic, concrete evidence (Kirchner incident, media coverage) while the program's actual impact is quieter and harder to measure.
  • The lack of recent impact data means I'm partly evaluating a 2020-2022 program and extrapolating to 2025-2026, which is inherently uncertain.
  • I've relied heavily on the "This might be the last AISC" comment thread, which was written during a funding crisis and may not represent current community sentiment.

What would a thoughtful person who disagrees say? "You're applying governance and accountability standards designed for well-funded nonprofits to a volunteer-run project that operates on $60K-$180K/year. The Remmelt problem is real but manageable — the program clearly works despite it. The 5-10% conversion rate is robust evidence, and the program's growth from 20 to 150 participants shows revealed preference. Stop over-indexing on one bad incident and look at the 600+ people who benefited."

What's my single weakest claim? That the Remmelt problem is "existential." The program has survived 8 years with Remmelt, including through the FTX crisis. It continues to grow and attract participants. The problem is real but may be more of a chronic drag than an existential threat. If SFF and small donors continue to provide enough for operations, AISC could persist indefinitely in its current form, just at a smaller scale than its potential.

What information would most change my view? Updated impact data from AISC 9-11 showing either continued 5-10% researcher conversion (confirming the model works at scale) or significant decline (confirming Habryka's concern about quality erosion). This single data point would resolve the central uncertainty.

Connected to (10)

AI Standards Labspun off from
Apollo Researchstaff from · Lucius Bushnaq
Arb Researchstaff from · Gavin Leech, Misha Yagudin
Ashgrofiscal sponsor
EleutherAIstaff from · Alex Mallen
Groundlesscollaborator
MATScollaborator · Ryan Kidd
Redwood Researchstaff from · Fabien Roger
Refinespun off from · Adam Shimi
Stop AIboard overlap · Remmelt Ellen
Sources (27)
Every URL that was read during research.
  1. 1.Homeaisafety.camp
  2. 2.About & FAQaisafety.camp
  3. 3.Organizersaisafety.camp
  4. 4.Homeaisafety.camp
  5. 5.Why AI Safety Camp struggles with fundraising (FBB #2)fieldbuilding.substack.com
  6. 6.Safety, with Remmelt Ellen | The Data Fix with Dr. Mél Hoganshows.acast.com
  7. 7.Impact Assessment: AI Safety Camp (Arb Research)arbresearch.com
  8. 8.AISC10: Virtual (2025)aisafety.camp
  9. 9.AISC9: Virtual (2024)aisafety.camp
  10. 10.AISC8: Virtual (2023)aisafety.camp
  11. 11.AISC6: Virtual (2022)aisafety.camp
  12. 12.We don't want to post again "This might be the last AI Safety Camp"ea.greaterwrong.com
  13. 13.This might be the last AI Safety Campforum.nunosempere.com
  14. 14.Impact Assessment of AI Safety Camp (Arb Research)forum.nunosempere.com
  15. 15.12th Edition of AI Safety Camp fundraiserforum.nunosempere.com
  16. 16.Ashgroashgro.org
  17. 17.FAQs 2 — Ashgroashgro.org
  18. 18.Limits to Control Workshop 2025limitstocontrol.org
  19. 19.I Reviewed Hundreds of AI Safety Applications. Here's What Actually Matters | Georg Langegeorglange.com
  20. 20.Getting ARRESTED for Barricading OpenAI's Officelironshapira.substack.com
  21. 21.Radicalized Anti-AI Activist Should Be A Wake Up Call For Doomer Rhetorictechdirt.com
  22. 22.Can you fight the AI apocalypse without losing your mind?sfstandard.com
  23. 23.The Big Nonprofits Post 2025thezvi.substack.com
  24. 24.Apply to AISCgroundless.ai
  25. 25.Groundlessgroundless.ai
  26. 26.Thoughts on AI Safety Campgreaterwrong.com
  27. 27.SFF-2025 S-Process Recommendations Announcement | Survival and Flourishing Fundsurvivalandflourishing.fund