Should AI safety research be open by default?

Openness accelerates safety research but can also diffuse dangerous capabilities. Should safety research default to open, with exceptions, or default to restricted, with publication review? Where is the line in practice?

Marking this - our project starts something similar next month, learning from everyone's experience.