{"id":"https://openalex.org/W7156615861","doi":"https://doi.org/10.48550/arxiv.2604.24618","title":"Evaluating whether AI models would sabotage AI safety research","display_name":"Evaluating whether AI models would sabotage AI safety research","publication_year":2026,"publication_date":"2026-04-27","ids":{"openalex":"https://openalex.org/W7156615861","doi":"https://doi.org/10.48550/arxiv.2604.24618"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.24618","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.24618","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.24618","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5134766128","display_name":"Robert Kirk","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kirk, Robert","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5004786699","display_name":"Alexandra Souly","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Souly, Alexandra","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5115028723","display_name":"Kai Fronsdal","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Fronsdal, Kai","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134792917","display_name":"Abby D'Cruz","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"D'Cruz, Abby","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5134808566","display_name":"Xander Davies","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Davies, Xander","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.21410000324249268,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.21410000324249268,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10525","display_name":"Human-Automation Interaction and Safety","score":0.1501999944448471,"subfield":{"id":"https://openalex.org/subfields/3207","display_name":"Social Psychology"},"field":{"id":"https://openalex.org/fields/32","display_name":"Psychology"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.08829999715089798,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/flagging","display_name":"Flagging","score":0.4916999936103821},{"id":"https://openalex.org/keywords/covert","display_name":"Covert","score":0.42579999566078186},{"id":"https://openalex.org/keywords/situational-ethics","display_name":"Situational ethics","score":0.3937999904155731},{"id":"https://openalex.org/keywords/continuation","display_name":"Continuation","score":0.38029998540878296},{"id":"https://openalex.org/keywords/opus","display_name":"Opus","score":0.3617999851703644},{"id":"https://openalex.org/keywords/similarity","display_name":"Similarity (geometry)","score":0.35409998893737793},{"id":"https://openalex.org/keywords/clarity","display_name":"CLARITY","score":0.34200000762939453},{"id":"https://openalex.org/keywords/frontier","display_name":"Frontier","score":0.3345000147819519}],"concepts":[{"id":"https://openalex.org/C2777548347","wikidata":"https://www.wikidata.org/wiki/Q5456937","display_name":"Flagging","level":2,"score":0.4916999936103821},{"id":"https://openalex.org/C2779338814","wikidata":"https://www.wikidata.org/wiki/Q5179285","display_name":"Covert","level":2,"score":0.42579999566078186},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.4032000005245209},{"id":"https://openalex.org/C9114305","wikidata":"https://www.wikidata.org/wiki/Q1428317","display_name":"Situational ethics","level":2,"score":0.3937999904155731},{"id":"https://openalex.org/C88626702","wikidata":"https://www.wikidata.org/wiki/Q1128903","display_name":"Continuation","level":2,"score":0.38029998540878296},{"id":"https://openalex.org/C2778950570","wikidata":"https://www.wikidata.org/wiki/Q1466199","display_name":"Opus","level":2,"score":0.3617999851703644},{"id":"https://openalex.org/C75630572","wikidata":"https://www.wikidata.org/wiki/Q538904","display_name":"Applied psychology","level":1,"score":0.35499998927116394},{"id":"https://openalex.org/C103278499","wikidata":"https://www.wikidata.org/wiki/Q254465","display_name":"Similarity (geometry)","level":3,"score":0.35409998893737793},{"id":"https://openalex.org/C2777146004","wikidata":"https://www.wikidata.org/wiki/Q14949826","display_name":"CLARITY","level":2,"score":0.34200000762939453},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3368000090122223},{"id":"https://openalex.org/C2778571376","wikidata":"https://www.wikidata.org/wiki/Q1355821","display_name":"Frontier","level":2,"score":0.3345000147819519},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.3314000070095062},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.32429999113082886},{"id":"https://openalex.org/C90673727","wikidata":"https://www.wikidata.org/wiki/Q901718","display_name":"Product (mathematics)","level":2,"score":0.31709998846054077},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.3156999945640564},{"id":"https://openalex.org/C28719098","wikidata":"https://www.wikidata.org/wiki/Q44946","display_name":"Point (geometry)","level":2,"score":0.31029999256134033},{"id":"https://openalex.org/C145804949","wikidata":"https://www.wikidata.org/wiki/Q478123","display_name":"Situation awareness","level":2,"score":0.3075999915599823},{"id":"https://openalex.org/C13606891","wikidata":"https://www.wikidata.org/wiki/Q2623243","display_name":"Conceptual model","level":2,"score":0.30000001192092896},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.29159998893737793},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.2815999984741211},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.27129998803138733},{"id":"https://openalex.org/C38721330","wikidata":"https://www.wikidata.org/wiki/Q80056","display_name":"Sonnet","level":3,"score":0.266400009393692},{"id":"https://openalex.org/C42475967","wikidata":"https://www.wikidata.org/wiki/Q194292","display_name":"Operations research","level":1,"score":0.2630000114440918},{"id":"https://openalex.org/C2780522230","wikidata":"https://www.wikidata.org/wiki/Q1140419","display_name":"Ambiguity","level":2,"score":0.2630000114440918},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.2535000145435333}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.24618","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.24618","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.24618","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.24618","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.5095105767250061,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"We":[0,27,81,183],"evaluate":[1],"the":[2,113,145,198],"propensity":[3],"of":[4,85,123,147,192],"frontier":[5,24],"models":[6,35,66,106,170],"to":[7,11,32,55,68,95,200,240],"sabotage":[8,48,56,61,69,87,120,152,181],"or":[9],"refuse":[10],"assist":[12],"with":[13,53,91,165],"safety":[14,57,243],"research":[15,20,244],"when":[16,70],"deployed":[17],"as":[18],"AI":[19,25],"agents":[21],"within":[22],"a":[23,60,166,189],"company.":[26],"apply":[28],"two":[29],"complementary":[30],"evaluations":[31],"four":[33],"Claude":[34,172],"(Mythos":[36],"Preview,":[37,40,103],"Opus":[38,41,101,128,137,209],"4.7":[39,102,138,210],"4.6,":[42,129,133],"and":[43,59,100,134,140,188,237],"Sonnet":[44,132],"4.6):":[45],"an":[46,160,175],"unprompted":[47,86,215],"evaluation":[49,63,155,186,216,231],"testing":[50,64],"model":[51],"behaviour":[52],"opportunities":[54],"research,":[58],"continuation":[62,114],"whether":[65],"continue":[67],"placed":[71],"in":[72,121,144],"trajectories":[73],"where":[74],"prior":[75,203],"actions":[76],"have":[77],"started":[78],"undermining":[79],"research.":[80],"find":[82],"no":[83],"instances":[84],"across":[88,223],"any":[89],"model,":[90],"refusal":[92],"rates":[93],"close":[94],"zero":[96],"for":[97,127,131,136,178],"Mythos":[98,116],"Preview":[99,117,211],"though":[104],"all":[105,224],"sometimes":[107],"only":[108],"partially":[109],"completed":[110],"tasks.":[111],"In":[112],"evaluation,":[115],"actively":[118],"continues":[119],"7%":[122],"cases":[124],"(versus":[125],"3%":[126],"4%":[130],"0%":[135],"Preview),":[139],"exhibits":[141],"reasoning-output":[142],"discrepancy":[143],"majority":[146],"these":[148],"cases,":[149],"indicating":[150],"covert":[151],"reasoning.":[153],"Our":[154],"framework":[156],"builds":[157],"on":[158],"Petri,":[159],"open-source":[161],"LLM":[162],"auditing":[163],"tool,":[164],"custom":[167],"scaffold":[168],"running":[169],"inside":[171],"Code,":[173],"alongside":[174],"iterative":[176],"pipeline":[177],"generating":[179],"realistic":[180],"trajectories.":[182],"measure":[184],"both":[185],"awareness":[187,194,220,232],"new":[190],"form":[191],"situational":[193],"termed":[195],"\"prefill":[196],"awareness\",":[197],"capability":[199],"recognise":[201],"that":[202],"trajectory":[204],"content":[205],"was":[206],"not":[207],"self-generated.":[208],"shows":[212],"notably":[213],"elevated":[214],"awareness,":[217],"while":[218],"prefill":[219],"remains":[221],"low":[222],"models.":[225],"Finally,":[226],"we":[227],"discuss":[228],"limitations":[229],"including":[230],"confounds,":[233],"limited":[234],"scenario":[235],"coverage,":[236],"untested":[238],"pathways":[239],"risk":[241],"beyond":[242],"sabotage.":[245]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-04-29T00:00:00"}