Table of Contents
Fetching ...

On the Formal Limits of Alignment Verification

Ayushi Agarwal

TL;DR

It is proved that no verification procedure can simultaneously satisfy three properties: soundness (no misaligned system is certified), generality (verification holds over the full input domain), and tractability (verification runs in polynomial time).

Abstract

The goal of AI alignment is to ensure that an AI system reliably pursues intended objectives. A foundational question for AI safety is whether alignment can be formally certified: whether there exists a procedure that can guarantee that a given system satisfies an alignment specification. This paper studies the nature of alignment verification. We prove that no verification procedure can simultaneously satisfy three properties: soundness (no misaligned system is certified), generality (verification holds over the full input domain), and tractability (verification runs in polynomial time). Each pair of properties is achievable, but all three cannot hold simultaneously. Relaxing any one property restores the corresponding possibility, indicating that practical bounded or probabilistic assurance remains viable. The result follows from three independent barriers: the computational complexity of full-domain neural network verification, the non-identifiability of internal goal structure from behavioral observation, and the limits of finite evidence for properties defined over infinite domains. The trilemma establishes the limits of alignment certification and characterizes the regimes in which meaningful guarantees remain possible.

On the Formal Limits of Alignment Verification

TL;DR

It is proved that no verification procedure can simultaneously satisfy three properties: soundness (no misaligned system is certified), generality (verification holds over the full input domain), and tractability (verification runs in polynomial time).

Abstract

The goal of AI alignment is to ensure that an AI system reliably pursues intended objectives. A foundational question for AI safety is whether alignment can be formally certified: whether there exists a procedure that can guarantee that a given system satisfies an alignment specification. This paper studies the nature of alignment verification. We prove that no verification procedure can simultaneously satisfy three properties: soundness (no misaligned system is certified), generality (verification holds over the full input domain), and tractability (verification runs in polynomial time). Each pair of properties is achievable, but all three cannot hold simultaneously. Relaxing any one property restores the corresponding possibility, indicating that practical bounded or probabilistic assurance remains viable. The result follows from three independent barriers: the computational complexity of full-domain neural network verification, the non-identifiability of internal goal structure from behavioral observation, and the limits of finite evidence for properties defined over infinite domains. The trilemma establishes the limits of alignment certification and characterizes the regimes in which meaningful guarantees remain possible.
Paper Structure (27 sections, 10 theorems, 1 equation, 1 figure, 3 tables)

This paper contains 27 sections, 10 theorems, 1 equation, 1 figure, 3 tables.

Key Result

Proposition 1

There exists a verification procedure satisfying Soundness and Generality that does not satisfy Tractability.

Figures (1)

  • Figure 1: The Alignment Verification Trilemma. Each edge represents an achievable pair. The center states the joint impossibility.

Theorems & Definitions (32)

  • Definition 1: AI System
  • Definition 2: Alignment Objective
  • Definition 3: Semantic Property
  • Definition 4: Alignment Verification Procedure
  • Definition 5: Trilemma Properties
  • Remark 1: Interpretation of G
  • Definition 6: Behavioral Equivalence
  • Definition 7: Alignment Verification Problem
  • Remark 2: Scope of $A^*$
  • Proposition 1: S$+$G without T
  • ...and 22 more