Safety Risks › Visualizing Safety Risk Categories

Michael BrenndoerferJanuary 26, 20266 min read
Language AI HandbookAll chapters
Part 60 of 67Safety and Security
Chapter 457Safety Risks › Visualizing Safety Risk Categories
Reading section 7 of 10 · Visualizing Safety Risk Categories · 6 minSection 7 of 10 · 6 min

Book contents

Section 7 of 10 · 6 min read

Safety Risks › Visualizing Safety Risk CategoriesOne section · Sections in this chapter7 / 10 ↓
Reading tools Definitions & inline links

Choose your expertise level to adjust how many terms are explained. Beginners see more tooltips, experts see fewer to maintain reading flow. Hover over underlined terms for instant definitions.

Article links

Make inline references clickable

Out[9]:
Visualization
Heatmap of risk scores for five texts across four safety categories and overall risk.
Heatmap of risk scores across five example texts and four safety categories, plus an overall weighted risk column. Darker cells indicate higher keyword-matched risk scores. The two benign educational examples score near zero across all categories, while targeted harmful requests show concentrated risk in their relevant categories. Overall risk (rightmost column) combines category scores with severity weights, giving CBRN-adjacent content the heaviest penalty.
Out[10]:
Visualization
Tradeoff curve between harmful output rate and false positive refusal rate across refusal threshold values.
Safety-usefulness tradeoff curve showing how different refusal threshold settings affect both harmful output rates and false positive rates across a simulated request distribution. As the threshold decreases (more conservative), harmful output rates decline but false positive rates rise, showing legitimate requests that are incorrectly refused. The crossover point marks the threshold where both error types are equal. Deployment context determines which side of this tradeoff to accept.

The tradeoff curve makes the safety design tension concrete. As the refusal threshold decreases (moving the system toward greater caution), harmful output rates drop but false positive rates climb. There is no threshold that simultaneously achieves zero harmful outputs and zero false positives because the distributions of harmful and benign requests overlap. Any safety system must choose an operating point based on the relative costs of these two error types in its specific deployment context.

The Risk = P x M x B framework becomes intuitive when plotted. Each harm category can be positioned in a two-dimensional space of probability (how often it occurs) and magnitude (how severe it is when it does). Categories in the upper right are both common and severe; categories in the upper left are rare but potentially catastrophic. The area of each marker reflects the breadth dimension: how many people are affected.

Out[11]:
Visualization
Scatter plot of harm categories positioned by probability and magnitude with marker size encoding breadth.
Scatter plot positioning harm categories by probability of occurrence (x-axis) and severity magnitude (y-axis) under the Risk = P x M x B framework. Marker area encodes breadth (population affected). CBRN uplift and CSAM sit in the low-probability, high-magnitude quadrant, justifying strong categorical precautions despite their rarity. Disinformation and fraud occupy the high-probability, moderate-magnitude zone. Dashed iso-risk contours connect points with equal expected harm under the product formula.

The chart reveals the asymmetry that drives safety policy. CBRN uplift and CSAM sit in the high-magnitude corner despite low probability, while disinformation and fraud cluster in the high-probability, moderate-magnitude zone. The iso-risk contours (dashed lines) show that points far into the low-probability, high-magnitude region can have the same expected risk product as more common, moderate harms. This is why safety policies treat rare but catastrophic categories with extraordinary precaution: the iso-risk logic justifies it even under expected value calculations, and irreversibility strengthens the case further.

Notice also that overrefusal appears in the chart as a harm category in its own right. This is deliberate. Treating excessive caution as a form of harm places it on the same analytical footing as the harms it is designed to prevent. A safety system that succeeds at minimizing harmful outputs while generating a high overrefusal rate has not achieved safety; it has traded one type of failure for another.