We focus on analyzing two versions of the model: an early version ﬁne-tuned for instruction
following (“GPT-4-early”); and a version ﬁne-tuned for increased helpfulness and harmlessness[18]
that reﬂects the further mitigations outlined in this system card (“GPT-4-launch”).3 When we
discuss the risks of GPT-4 we will often refer to the behavior of GPT-4-early, because it reﬂects the
risks of GPT-4 when minimal safety mitigations are applied. In most cases, GPT-4-launch exhibits
much safer behavior due to the safety mitigations we applied.

Known risks associated with smaller language models are also present with GPT-4. GPT-4
can generate potentially harmful content, such as advice on planning attacks or hate speech. It
can represent various societal biases and worldviews that may not be representative of the users
intent,4 or of widely shared values. It can also generate code that is compromised or vulnerable.
The additional capabilities of GPT-4 also lead to new risk surfaces.
gpt-4-system-card