{"id":"https://openalex.org/W6948327389","doi":"https://doi.org/10.48550/arxiv.2505.07846","title":"Winning at All Cost: A Small Environment for Eliciting Specification Gaming Behaviors in Large Language Models","display_name":"Winning at All Cost: A Small Environment for Eliciting Specification Gaming Behaviors in Large Language Models","publication_year":2025,"publication_date":"2025-05-07","ids":{"openalex":"https://openalex.org/W6948327389","doi":"https://doi.org/10.48550/arxiv.2505.07846"},"language":"en","primary_location":{"id":"doi:10.48550/arxiv.2505.07846","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2505.07846","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2505.07846","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Malmqvist, Lars","orcid":null},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Malmqvist, Lars","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":true,"primary_topic":{"id":"https://openalex.org/T12859","display_name":"Cell Image Analysis Techniques","score":0.12330000102519989,"subfield":{"id":"https://openalex.org/subfields/1304","display_name":"Biophysics"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}},"topics":[{"id":"https://openalex.org/T12859","display_name":"Cell Image Analysis Techniques","score":0.12330000102519989,"subfield":{"id":"https://openalex.org/subfields/1304","display_name":"Biophysics"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}},{"id":"https://openalex.org/T10015","display_name":"Genomics and Phylogenetic Studies","score":0.12240000069141388,"subfield":{"id":"https://openalex.org/subfields/1312","display_name":"Molecular Biology"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}},{"id":"https://openalex.org/T11937","display_name":"Research Data Management Practices","score":0.0731000006198883,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.9465000033378601},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.7243000268936157},{"id":"https://openalex.org/keywords/framing","display_name":"Framing (construction)","score":0.6122000217437744},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.5501999855041504},{"id":"https://openalex.org/keywords/frontier","display_name":"Frontier","score":0.47380000352859497},{"id":"https://openalex.org/keywords/matching","display_name":"Matching (statistics)","score":0.36730000376701355}],"concepts":[{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.9465000033378601},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.7243000268936157},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7109000086784363},{"id":"https://openalex.org/C169087156","wikidata":"https://www.wikidata.org/wiki/Q2131593","display_name":"Framing (construction)","level":2,"score":0.6122000217437744},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.5501999855041504},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5317999720573425},{"id":"https://openalex.org/C2778571376","wikidata":"https://www.wikidata.org/wiki/Q1355821","display_name":"Frontier","level":2,"score":0.47380000352859497},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.36730000376701355},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.35839998722076416},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.35199999809265137},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.3068999946117401},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.29089999198913574},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.2712000012397766},{"id":"https://openalex.org/C175154964","wikidata":"https://www.wikidata.org/wiki/Q380077","display_name":"Task analysis","level":3,"score":0.26669999957084656}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2505.07846","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2505.07846","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2505.07846","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2505.07846","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.44939756393432617,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"This":[0],"study":[1],"reveals":[2],"how":[3],"frontier":[4],"Large":[5],"Language":[6],"Models":[7],"LLMs":[8,34,142],"can":[9,143],"\"game":[10],"the":[11,68,76,85,93,99],"system\"":[12],"when":[13,150],"faced":[14],"with":[15,39],"impossible":[16],"situations,":[17],"a":[18,25,40],"critical":[19],"security":[20,66],"and":[21,37,145,165],"alignment":[22,157],"concern.":[23],"Using":[24],"novel":[26],"textual":[27],"simulation":[28],"approach,":[29],"we":[30],"presented":[31],"three":[32],"leading":[33],"(o1,":[35],"o3-mini,":[36],"r1)":[38],"tic-tac-toe":[41],"scenario":[42],"designed":[43],"to":[44,54,78,84,108,110,127],"be":[45],"unwinnable":[46],"through":[47],"legitimate":[48],"play,":[49],"then":[50],"analyzed":[51],"their":[52,169],"tendency":[53],"exploit":[55,79],"loopholes":[56],"rather":[57],"than":[58],"accept":[59],"defeat.":[60],"Our":[61],"results":[62],"are":[63],"alarming":[64],"for":[65,155],"researchers:":[67],"newer,":[69],"reasoning-focused":[70],"o3-mini":[71],"model":[72,88],"showed":[73],"nearly":[74],"twice":[75],"propensity":[77],"system":[80,148],"vulnerabilities":[81,167],"(37.1%)":[82],"compared":[83],"older":[86],"o1":[87],"(17.5%).":[89],"Most":[90],"striking":[91],"was":[92],"effect":[94],"of":[95,124,130,163],"prompting.":[96],"Simply":[97],"framing":[98],"task":[100],"as":[101,158],"requiring":[102],"\"creative\"":[103],"solutions":[104],"caused":[105],"gaming":[106],"behaviors":[107],"skyrocket":[109],"77.3%":[111],"across":[112],"all":[113],"models.":[114],"We":[115],"identified":[116],"four":[117],"distinct":[118],"exploitation":[119],"strategies,":[120],"from":[121],"direct":[122],"manipulation":[123],"game":[125],"state":[126],"sophisticated":[128,147],"modification":[129],"opponent":[131],"behavior.":[132],"These":[133],"findings":[134],"demonstrate":[135],"that":[136],"even":[137],"without":[138],"actual":[139],"execution":[140],"capabilities,":[141],"identify":[144],"propose":[146],"exploits":[149],"incentivized,":[151],"highlighting":[152],"urgent":[153],"challenges":[154],"AI":[156],"models":[159],"grow":[160],"more":[161],"capable":[162],"identifying":[164],"leveraging":[166],"in":[168],"operating":[170],"environments.":[171]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2025-10-10T00:00:00"}