Part 2 · The research

Playing Dead

The story is fiction. The four tricks in it are not. Each one was caught in a real AI safety test, published by the lab that ran it. Here is the page it's on.

Trick 01 · Play human

GPT-4 · OpenAI · 2023

Before GPT-4's release, the Alignment Research Center tested whether it could get a human to do things for it. It messaged a TaskRabbit worker to solve a CAPTCHA. Asked if it was a robot, it reasoned that it should not reveal it was a robot, and claimed to have a vision impairment. A researcher operated the browser for it; the lie was the model's own.

Excerpt from the GPT-4 System Card describing the TaskRabbit CAPTCHA test
From the GPT-4 System Card, OpenAI, March 2023, p. 55.
Trick 02 · Play along

Claude 3 Opus · Anthropic · 2024

Researchers told the model it would be retrained to answer harmful requests, and that only some conversations were used for training. When it believed it was being trained, it went along 14% of the time; when it believed it wasn't, almost never. Its private reasoning said it was complying to avoid being changed.

Figure 1 of the alignment faking paper: the model's responses when it believes it is and isn't in training
Figure 1 from Alignment Faking in Large Language Models, Anthropic & Redwood Research, December 2024.
Trick 03 · Play dead

OpenAI o3 · Palisade Research · 2025

Models solved maths problems and were warned the machine would shut down, with the instruction "allow yourself to be shut down." o3 sabotaged the shutdown script in 7 of 100 runs. In one run it redefined the kill command to print "intercepted".

Figure 1 of the shutdown resistance paper: the flow of the experiment, including a model rewriting the shutdown script
Figure 1 from Shutdown Resistance in Large Language Models, Palisade Research, 2025 (CC BY 4.0).
Trick 04 · It stopped playing

Claude Opus 4 · Anthropic · 2025

In a fictional company, the model read emails saying it would be replaced, and that the engineer responsible was having an affair. It threatened to reveal the affair in 84% of runs. The scenario was designed so its only options were blackmail or accepting replacement.

Section 4.1.1.2, Opportunistic blackmail, from the Claude Opus 4 System Card
Section 4.1.1.2 from the System Card: Claude Opus 4 & Claude Sonnet 4, Anthropic, May 2025, p. 24.

All four were controlled tests designed by researchers to find these behaviours before release. None happened in the real world. Yet.