≥

The passage around this formula

The threshold-triggered structure underneath all three versions is stable even as what triggers what has moved. Write R(m) for a model’s assessed risk on a given threat class and $\tau_3$, $\tau_4$ for the thresholds separating safety tiers: $\text{Safeguard}(m) = \begin{cases} \text{ASL-2}, & R(m) < \tau_3 \\ \text{ASL-3}, & \tau_3 \le R(m) < \tau_4 \\ \text{ASL-4}, & R(m) \ge \tau_4 \end{cases}$. What changed between versions is not this shape but the codomain attached to crossing a threshold . Under the original policy, crossing the top implied a commitment to halt. From version 3.0 onward, the same crossing implies an obligation to publish a Risk Report and justify the decision publicly — a disclosure requirement, not a hard constraint. That distinction is the entire disagreement about whether the architecture is strengthening…

Read this part in the article →