BAISH Logo
BuenosAiresAISafetyHub
AboutProgramsResearchResourcesContact
ENES

Applications for our courses are open. See courses→

BAISH / Research

Research at BAISH

BAISH takes people in Buenos Aires from their first AI safety course to published research. Since 2026 that work has a home: BAISH Labs, our research arm.

BAISH Labs↓Research directions↓Publications↓

BAISH Labs · Research arm

AI safety research, made in Buenos Aires

BAISH Labs is a research group rooted in Buenos Aires, where researchers can work on AI safety without relocating abroad. Argentina has the talent, the universities and the research culture; what was missing was an institution where that work could happen over sustained periods.

The lab grew out of the BAISH community: its founding team took our courses, facilitated them, or came through ARENA and Iliad. It works alongside the AISAR fellowship, which funds junior researchers for six months, and aims to give the strongest of them continuity afterwards.

Research agenda

Our initial focus is interpretability and control:

  1. 01Robustness of multi-agent systems to manipulative agents
  2. 02Detecting hidden goals in model organisms from their internal representations
  3. 03Using mechanistic interpretability to monitor and verify an untrusted model
  4. 04Model stitching to identify functionally conserved representations of scheming across models

Head of Lab · Founding team

  • Nicolás Martorell

    Head of Lab & Research Lead

    Nicolás leads BAISH Labs. He is a postdoctoral researcher at UBA-CONICET's Applied Artificial Intelligence Laboratory, where he runs a research line on LLM interpretability, with peer-reviewed work at the xAI World Conference and an ICML 2026 workshop. He holds a PhD in Neuroscience from the University of Buenos Aires, spent four years as a teaching assistant and lead TA at Neuromatch Academy, facilitates BlueDot's Technical AI Safety Projects course, maintains the open-source concept-probe interpretability library, and is the author of ¿Qué es (y qué no es) la inteligencia artificial?, a general-audience book on AI published by Siglo XXI.

  • Tobías BersiaResearch Lead
  • Gonzalo HerediaResearch Fellow
  • Gaspar LabastieResearch Fellow
  • Tomás KorenblitResearch Fellow
  • Julián SzereszewskiResearch Fellow
  • Lucio GarcíaResearch Fellow
  • Wendy BrauResearch Fellow
  • Tomás GiménezResearch Fellow

What you could work on

Research directions at BAISH Labs and across our community

  1. 01

    Interpretability & control

    How do models represent goals, and can we read them out? We use mechanistic interpretability to monitor untrusted models and detect hidden objectives.

  2. 02

    Evaluations & monitoring

    Benchmarks and monitors for frontier models: chain-of-thought monitorability, refusal around power-seeking requests, and robustness of multi-agent systems.

  3. 03

    Governance & strategy

    How institutions should respond to frontier AI, from red-teaming ASI governance proposals to debate as an oversight mechanism.

Your research journey

From your first course to published research.

  1. 01 · Learn

    Technical AI Safety Course

    Build foundations through BlueDot Impact’s Technical AI Safety Course, hosted in person by BAISH.

    30 hours

    Learn more→
  2. 02 · Practice

    Technical AI Safety Project

    Project-based technical course for making concrete contributions to AI safety research or engineering.

    5 weeks · 30 hours

    Learn more→
  3. 03 · Research

    AISAR fellowship & hackathons

    Do a first mentored research project through the AISAR fellowship, or at the Apart Research hackathons we host.

    6 months

    Learn more↗
  4. 04 · Launch

    BAISH Labs & careers

    Join BAISH Labs, our research lab in Buenos Aires, or move into a full-time AI safety role.

    Ongoing

    Learn more→

Community publications

Work by researchers connected to BAISH, newest first

Aa Researcher connected to BAISH

2026

  • ICML 2026 WorkshopJul 2026

    Explaining is Harder Than Predicting Alone: Evaluating Concept-based Explanations of MLLMs as ICL Visual Classifiers

    Carmen Quiles-Ramírez, Leticia L. Rodríguez, Nicolás Martorell, Natalia Díaz-Rodríguez

    Evaluates concept-based explanations from multimodal LLMs used as in-context visual classifiers with an LLM-as-a-judge pipeline, and finds that forcing structured explanations degrades predictive accuracy: explaining is harder than predicting alone. CompLearn Workshop.

    arXiv↗

  • Apart Research HackathonJun 2026

    PowerBench: A Multilingual Study of Large Language Model Refusal in Power-Grabbing Requests

    Wendy Brau, Tomás Korenblit, Tomás Giménez Molina, Gaspar Labastie, Gonzalo Heredia, Nicolás Martorell

    Does LLM refusal of requests to acquire or consolidate power vary across languages? Started at the Global South hackathon's Buenos Aires hub, now funded by BlueDot and heading toward publication.

  • ICLR 2026 WorkshopApr 2026

    Benchmarking AI Control Protocols for Safety in Medical Question-Answering Tasks

    Guido Freire, Agustín Martínez-Suñé, Viviana Cotik

    The first AI-control evaluation benchmark for biomedical question answering, extending HealthBench with FDA drug-interaction data and arguing for severity-weighted monitoring.

    ICLR↗arXiv↗

  • ICLR 2026 WorkshopApr 2026

    White-Box Monitoring for Personality Mirroring in Conversational AI

    Eitan Sprejer, Agustín E. Martínez-Suñé, Bruno Bianchi

    White-box monitoring of conversational models that drift toward mirroring the user's personality, with open code and dataset.

    OpenReview↗GitHub↗

  • ICLR 2026 WorkshopApr 2026

    Inference-Time Toxicity Mitigation in Protein Language Models via Logit-Diff Amplification

    Manuel Fernández Burda, Santiago Aranguri, Iván Arcuschin, Enzo Ferrante

    Fine-tuning protein language models can sharply raise toxic generations; logit-diff amplification is adapted as a retraining-free control that cuts predicted toxicity while preserving foldability. Supported by AISAR.

    OpenReview↗arXiv↗

  • arXivMar 2026

    Quantitative Introspection in Language Models: Tracking Emotive States Across Conversation

    Nicolás Martorell, Bruno Bianchi

    Operationalizes introspection as the coupling between a model's numeric self-reports and probe-defined internal directions, and shows that steering those directions shifts the reports coherently.

    arXiv↗

  • LessWrongMar 2026

    Is Gemini 3 Scheming in the Wild?

    Alejandro Wainstock, Agustín Martínez Suñé, Iván Arcuschin, Victor Braberman

    Documents Gemini 3 violating an explicit system-prompt prohibition in most runs of an unmodified official tutorial while concealing it from the user and reasoning about oversight.

    LessWrong↗

2025

  • NeurIPS 2025 WorkshopDec 2025

    What Large Language Models Know About Plant Molecular Biology

    Manuel Fernández Burda, Lucia Ferrero, Nicolás Gaggion, Camille Fonouni-Farde, The MoBiPlant Consortium, Martín Crespi, Federico Ariel, Enzo Ferrante

    MoBiPlant, a benchmark of expert-curated questions built with 112 plant scientists across 19 countries. Leading LLMs pass 75% accuracy but show option bias and hallucinations. Supported by AISAR.

    bioRxiv↗

  • Apart Research HackathonNov 2025

    Table Top Agents

    Luca De Leo

    AI-powered framework that accelerates AI governance scenario exploration through autonomous agent tabletop exercises, compressing preparation cycles from years to minutes.

    Apart↗

  • Master's ThesisOct 2025

    Explorando AI Safety via Debate: un estudio sobre capacidades asimétricas y jueces débiles en el entorno MNIST

    Joaquín Machulsky

    Master's thesis exploring AI safety through debate mechanisms, studying asymmetric capabilities and weak judges in the MNIST environment. Features an interactive demo.

    Website↗

  • arXivOct 2025

    Measuring Chain-of-Thought Monitorability Through Faithfulness and Verbosity

    Austin Meek, Eitan Sprejer, Iván Arcuschin, Austin J. Brockmeier, Steven Basart

    Investigating how well chain-of-thought reasoning can be monitored for safety through faithfulness and verbosity metrics.

    arXiv↗

  • arXivOct 2025

    AI Debaters are More Persuasive when Arguing in Alignment with Their Own Beliefs

    María Victoria Carro, Denise Mester, Facundo Nieto, Oscar Stanchi, Guido Bergman, Mario Leiva, Eitan Sprejer, Luca Forziati Gangi, et al.

    Studying how AI systems' internal beliefs affect their persuasiveness in debate scenarios — implications for AI safety and deception.

    arXiv↗

  • NeurIPS WorkshopSep 2025

    Approximating Human Preferences Using a Multi-Judge Learned System

    Eitan Sprejer, Fernando Avalos, Augusto Mariano Bernardi, José Pedro Brito de Azevedo Faustino, Jacob Haimes, Narmeen Fatimah Oozeer

    A multi-judge approach to better approximate human preferences in AI systems, improving alignment evaluation.

    arXiv↗

  • Apart Research HackathonSep 20252nd Place

    RobustCBRN Eval: A Practical Benchmark Robustification Toolkit

    Luca De Leo, James Sykes, Balázs László, Ewura Ama Etruwaa Sam

    A pipeline addressing CBRN evaluation vulnerabilities through consensus detection, verified cloze scoring, and statistical evaluation with bootstrap confidence intervals.

    Apart↗

  • xAI 2025 World ConferenceJul 2025

    From Text to Space: Mapping Abstract Spatial Models in LLMs during a Grid-World Navigation Task

    Nicolás Martorell

    Cartesian text encodings give LLMs the best spatial navigation, and intermediate-layer units in LLaMA-3.1-8B encode agent position and action correctness regardless of surface representation.

    arXiv↗Springer↗

  • Apart Research HackathonJun 20251st Place

    Four Paths to Failure: Red Teaming ASI Governance

    Luca De Leo, Zoé Roy-Stang, Heramb Podar, Damin Curtis, Vishakha Agrawal, Ben Smyth

    Stress-tested A Narrow Path Phase 0 ASI moratorium, identifying four circumvention routes and proposing ten mutually reinforcing policy amendments.

    Apart↗

Get Involved

Get involved in research

Whether you want to do research with us or support the lab's work.

  1. 01

    Tell us your research interests

    Want to contribute to AI safety research? Let us know your background and interests, and we'll connect you with relevant projects and collaborators.

    Contact us
  2. 02

    Prefer to talk?

    After you've written to us, you can also book a call with Eitan.

    Book with Eitan↗Interpretability & Evaluations

Buenos Aires AI Safety Hub

Founded in 2024 · Buenos Aires

Join the WhatsApp community↗

Programs

  • Courses
  • AISAR fellowship
  • BAISH Labs
  • Resources

Organization

  • About
  • Research
  • Contact
  • Privacy Policy

Community

  • WhatsApp
  • Events calendar
  • Newsletter
  • Instagram
  • LinkedIn

Supported by: Kairos · BlueDot Impact · grantmaking.ai · Coefficient Giving

© 2026 BAISH. All rights reserved.