Two lines of alignment defense for deployment

Before broadly deploying a human-level model, you want defense-in-depth: a first line of adversarial evaluation and monitoring that could detect or prevent catastrophic harm (testing in diverse situations and arguing the AI can't distinguish lab tests from reality), and a second line that determines whether dangerous misalignment can occur at all by trying to produce reward-hacking or deceptive alignment in the lab under optimal conditions.