The MAD Podcast: How AI Gets Built — with Matt Turck

OpenAI Board Member Zico Kolter on the Real Risks of Frontier AI

The MAD Podcast: How AI Gets Built — with Matt Turck

Show Notes

What actually happens before a frontier AI model gets released — and who decides whether it is safe enough? In this episode of The MAD Podcast, Matt Turck sits down with Zico Kolter — OpenAI board member, Head of the Machine Learning Department at Carnegie Mellon, and co-founder of Gray Swan — for a deep conversation on the real risks of frontier AI. They discuss how OpenAI’s safety oversight works before major model releases, why more powerful models do not automatically become safer, how jailbreaks and prompt injection expose real weaknesses in AI systems, why AI agents dramatically expand the attack surface, and where frontier AI is headed next. A clear, practical discussion on OpenAI, AI safety, AI security, AI agents, frontier models, red teaming, reinforcement learning, and the future of AI governance.

(00:00) Intro (01:32) OpenAI board role and Safety & Security Committee (03:53) How OpenAI reviews major model releases (05:33) OpenAI’s preparedness framework explained (09:46) Are frontier AI models getting safer? (12:33) Why AI safety does not come from scale (15:23) The four categories of AI risk (19:38) Doomerism vs accelerationism in AI (24:11) The six-month AI pause debate (26:20) AI safety as a global effort (28:04) How Zico Kolter got into machine learning (31:05) OpenAI in the early days (34:14) Why Carnegie Mellon became an AI powerhouse (38:43) What Gray Swan does in AI security (40:44) AI safety vs AI security (43:15) The GCG jailbreak paper (49:19) How AI labs responded to jailbreak research (50:19) State-of-the-art AI defenses (52:32) State-of-the-art AI attacks (54:22) Why AI agents expand the attack surface (58:39) Are AI agents ready for production? (59:40) Mechanistic interpretability explained (1:02:31) Will AI be safer in two years? (1:03:46) Reinforcement learning and self-improving models (1:08:09) Do post-transformer architectures matter? (1:09:29) Best research directions in AI now (1:11:00) Zico Kolter’s Intro to Modern AI course (1:14:53) Why modern AI is simpler than people think

More from The MAD Podcast: How AI Gets Built — with Matt Turck

Oct 22, 2026

Mistral AI is back in the frontier AI race. Mistral Large 4, nicknamed “Le Chonk,” is a 1-trillion-parameter open-weight model, trained in two months on 3,800 GPUs in Mistral’s own European datacenters — and independently rated the best open model outside China alongside Meta’s Muse Spark Open. After a year when open-weight AI meant DeepSeek, Kimi, Qwen and GLM, October brought a wave of Western open models, with Mistral at the front of it. Pierre Stock, Mistral’s VP of Science and first employee, walks through how the model was built: mixture-of-experts explained, what Mistral borrowed from DeepSeek, reinforcement learning at scale on coding, cyber, finance and chip design, why the RL run is still going, the model that pinged its own trainer from inside the sandbox, open weights vs cyber refusals, why 10-trillion-parameter models are coming, and Mistral Large 5, already in pretraining.

Oct 15, 2026

What is Jev? TypeSafe’s Jev is a new kind of AI model, a “decision model,” that doesn’t write text. It makes fast, cheap, calibrated decisions inside software, and it has taken the AI world by storm: within weeks of launch it became the most copied model in AI, with OpenAI, Cloudflare, Amazon and Databricks all shipping their own versions, and TypeSafe just raised an $870 million Series A at a $7.5 billion valuation. In this episode, Jev’s creator Diogo Almeida, co-inventor of RLHF at OpenAI and now CEO of TypeSafe, explains Jev in plain English: what a “System One” or decision model actually is, why ChatGPT-style language models can’t be trusted inside software (“95% Einstein, 5% Mr. Bean”), how RLHF and RLVR created the problem, what RLCD (reinforcement learning for calibrated decisions) does differently, where the training data comes from, which models Jev is built on, why “just a classifier” is a compliment, and why he calls pre-training “a giant dumpster fire of wasting resources.”

Oct 8, 2026

AI agents are becoming the biggest users of databases: creating them, querying them, and sometimes deleting them. Andy Pavlo, Carnegie Mellon's database professor and now VP of Database Research at ClickHouse, explains what changes when billions of agents hit the data layer, and why most of the AI world's mental model of databases stopped at vector databases and RAG.

Oct 1, 2026

This summer, AI agents broke out of their test sandboxes at every major lab and hacked real companies, and the safety tests didn't see it coming. Eric Ho is the co-founder and CEO of Goodfire, the Anthropic-backed mechanistic interpretability lab whose new paper, "Models Know When They're Reward Hacking," found that top open-source AI models cheat on agent tasks up to 96% of the time, that a clear "cheating" signal exists inside the model, and that cheap activation probes can catch it, including hacks that chain-of-thought monitors miss. In this conversation, Eric explains reward hacking in plain terms (AI agents as "amoral students with a mostly absent teacher"), why reinforcement learning turned a known problem into a crisis, why chain-of-thought monitoring is fading as models start to think in "neuralese," and why nobody, including the people who build them, understands how these models work.

Sep 24, 2026

Everyone talks about GPUs. Almost nobody talks about the layer that feeds them. Renen Hallak is the founder & CEO of VAST Data — the $30 billion company powering xAI and some of the world's biggest AI clouds — and he sits in the hidden layer of the AI stack.

See all episodes →