With this in mind, it is likely that future versions of the AI Safety Benchmark will not be fully open. We are considering various strategies for how to manage their release in order to protect the benchmark's integrity while being as transparent as possible. Options under consideration include withholding a random portion of the benchmark dataset; withholdingcertain types of prompts; delaying public release of the prompts for a set period of time (e.g., six months); and imposing dataset deprecation conditions if the benchmark's integrity becomes questionable. Finally, starting from v0.5 we are establishing a set of requirements that anyone using the AI Safety Benchmark must adhere to.