AISI tests two limits of biological-model safeguards
In one study, fine-tuning restored filtered ESM-2 capabilities for about $80 of compute at the largest tested scale; separately, ReproBAIT agents rebuilt selected simpler-tool functions with supplied training data, but failed to reproduce RFdiffusion3.