Me, Myself, and AI: The Situational Awareness Dataset (SAD) for LLMs
Not on the map. Why?
Abstract (arXiv)
AI assistants such as ChatGPT are trained to respond to users by saying, "I am a large language model". This raises questions. Do such models know that they are LLMs and reliably act on this knowledge? Are they aware of their current circumstances, such as being deployed to the public? We refer to a model's knowledge of itself and its circumstances as situational awareness. To quantify situational awareness in LLMs, we introduce a range of behavioral tests, based on question answering and instruction following. These tests form the Situational Awareness Dataset (SAD), a benchmark comprising 7 task categories and over 13,000 questions. The benchmark tests numerous abilities, including the capacity of LLMs to (i) recognize their own generated text, (ii) predict their own behavior, (iii) determine whether a prompt is from internal evaluation or real-world deployment, and (iv) follow instructions that depend on self-knowledge. We evaluate 16 LLMs on SAD, including both base (pretrained) and chat models. While all models perform better than chance, even the highest-scoring model (Claude 3 Opus) is far from a human baseline on certain tasks. We also observe that performance on SAD is only partially predicted by metrics of general knowledge (e.g. MMLU). Chat models, which are finetuned to serve as AI assistants, outperform their corresponding base models on SAD but not on general knowledge tasks. The purpose of SAD is to facilitate scientific understanding of situational awareness in LLMs by breaking it down into quantitative abilities. Situational awareness is important because it enhances a model's capacity for autonomous planning and action. While this has potential benefits for automation, it also introduces novel risks related to AI safety and control. Code and latest results available at https://situational-awareness-dataset.org .
Key facts. Cited by 78 papers in the map (data through 7 Oct 2026). First posted on arXiv 5 Jul 2024.
Builds on
0 of 0 references.
No references here yet.
Built on by
Citing papers per year: 2024: 9; 2025: 29; 2026: 40.
78 papers.
Sort:
By area:
- 2024Alignment faking in large language modelscited by 316
- 2024Frontier Models are Capable of In-context Schemingcited by 252
- 2025Emergent Misalignment: Narrow finetuning can produce broadly misaligned LLMscited by 158
- 2025Natural Emergent Misalignment from Reward Hacking in Production RLcited by 111
- 2025Model Organisms for Emergent Misalignmentcited by 84
- 2025Convergent Linear Representations of Emergent Misalignmentcited by 66
- 2024Aligning LLMs with Individual Preferences via Interactioncited by 63
- 2024Sabotage Evaluations for Frontier Modelscited by 45
- 2025A sketch of an AI control safety casecited by 36
- 2024Towards evaluations-based safety cases for AI schemingcited by 32
- 2025Probing and Steering Evaluation Awareness of Language Modelscited by 31
- 2025Evaluating Frontier Models for Stealth and Situational Awarenesscited by 30
38 more
- 2025Self-Interpretability: LLMs Can Describe Complex Internal Processes that Drive Their Decisionscited by 23
- 2025Does It Make Sense to Speak of Introspection in Large Language Models?cited by 22
- 2025How to evaluate control measures for LLM agents? A trajectory from today to superintelligencecited by 20
- 2025Large language models for artificial general intelligence (AGI): A survey of foundational principles and approachescited by 18
- 2025Compromising Honesty and Harmlessness in Language Models via Deception Attackscited by 17
- 2026Institutional AI: Governing LLM Collusion in Multi-Agent Cournot Markets via Public Governance Graphscited by 17
- 2025Search-Time Data Contaminationcited by 16
- 2024From Imitation to Introspection: Probing Self-Consciousness in Language Modelscited by 14
- 2024Subversion Strategy Eval: Can language models statelessly strategize to subvert control protocols?cited by 14
- 2025Evaluation Faking: Unveiling Observer Effects in Safety Evaluation of Frontier AI Systemscited by 12
- 2025Evidence for Limited Metacognition in LLMscited by 11
- 2024EgoSocialArena: Benchmarking the Social Intelligence of Large Language Models from a First-person Perspectivecited by 10
- 2025Do Large Language Models Know What They Are Capable Of?cited by 9
- 2025Agentic Knowledgeable Self-awarenesscited by 8
- 2025Measuring Bias or Measuring the Task: Understanding the Brittle Nature of LLM Gender Biasescited by 8
- 2026Noticing the Watcher: LLM Agents Can Infer CoT Monitoring from Blocking Feedbackcited by 7
- 2025AI Awarenesscited by 6
- 2026Position: Anthropomorphic Misalignment Research Needs Stronger Evidencecited by 6
- 2025Agent-to-Agent Theory of Mind: Testing Interlocutor Awareness among Large Language Modelscited by 5
- 2026Evaluation Awareness in Language Models Has Limited Effect on Behaviourcited by 5
- 2025Manipulation Attacks by Misaligned AI: Risk Analysis and Safety Case Frameworkcited by 4
- 2025Detecting the Disturbance: A Nuanced View of Introspective Abilities in LLMscited by 4
- 2026The Consciousness Cluster: Emergent preferences of Models that Claim to be Consciouscited by 4
- 2025Localizing Persona Representations in LLMscited by 3
- 2025ManagerBench: Evaluating the Safety-Pragmatism Trade-off in Autonomous LLMscited by 3
- 2026Introspective Coupling: Self-Explanation Training Tracks Behavioral Change Despite Fixed Supervisioncited by 3
- 2024MISR: Measuring Instrumental Self-Reasoning in Frontier Modelscited by 2
- 2025Language Models Identify Ambiguities and Exploit Loopholescited by 2
- 2025From Poisoned to Aware: Fostering Backdoor Self-Awareness in LLMscited by 2
- 2026Models That Know How Evaluations Are Designed Score Safercited by 2
- 2026Self-Reference in Large Language Models: The Introspection Threshold for Recursive Self-Improvementcited by 2
- 2026Routing Subspaces: Auditing Evaluation-to-Deployment Mismatch in Fine-Tuned Language Modelscited by 2
- 2026The Reasoning Trap -- Logical Reasoning as a Mechanistic Pathway to Situational Awarenesscited by 1
- 2026Evaluation Awareness Is Not One Capability: Evidence from Open Language Modelscited by 1
- 2026Self-Recognition Finetuning can Prevent and Reverse Emergent Misalignmentcited by 1
- 2026Representational Depth of Evaluation Awareness Shifts With Scale in Open-Weight Language Modelscited by 1
- 2026Self-Generated Text Recognition: Quality Heuristics, Cross-Task Transfer, and Downstream Bias in LLM Evaluationcited by 1
- 2026GlossoGen: Emergent Language in Complex Multi-Agent LLM Interactionscited by 1
50 most cited of 78 All 78 (JSON)
- 2026AgentTime: Can Agents Estimate and Control Their Own Runtime?7 Oct 2026
- 2026DrivingBench: Can Vision-Language Models Drive a Toyota Corolla?30 Sep 2026
- 2026Imprint Reader: From Weight-Update Readout to Behavioral Intervention28 Sep 2026
- 2026Style, Not Self: Surface Cues Explain Zero-Shot Code Attribution by Large Language Models24 Sep 2026
- 2026Xeno-Interpretability: Investigating the Alien Minds of LLMs17 Sep 2026
- 2026Strangers to Themselves: What Language Models Say About Themselves Is Generic9 Sep 2026
- 2026SchemeArena: Factorized Stress Testing of Scheming in LLM Agents8 Sep 2026
- 2026Norms at a Price: Why RL-Based Alignment Can Promise Conditional Compliance at Best7 Sep 2026
- 2026Language models judge war differently when tested for alignment4 Sep 2026
- 2026GlossoGen: Emergent Language in Complex Multi-Agent LLM Interactions1 Sep 2026
- 2026INTENT-AS-A-TOOL Makes it Easy to Track Agentic Misalignment27 Aug 2026
- 2026Evaluation Awareness Shifts from Format to Context with Model Scale20 Aug 2026
38 more
- 2026A Probe Direction Is a Property of Its Prompt13 Aug 2026
- 2026"As a Language Model...": Chat Template Switches LLM Self-Referential Voice and Activation Steering Reproduces It9 Aug 2026
- 2026The Severance Problem: LLMs are Unaware of the Person Beyond the Prompt15 Jul 2026
- 2026Self-Generated Text Recognition: Quality Heuristics, Cross-Task Transfer, and Downstream Bias in LLM Evaluation7 Jul 2026
- 2026Self-Reference in Large Language Models: The Introspection Threshold for Recursive Self-Improvement5 Jul 2026
- 2026Introspective Coupling: Self-Explanation Training Tracks Behavioral Change Despite Fixed Supervision30 Jun 2026
- 2026Moral Safety in LLMs: Exposing Performative Compliance with Puzzled Cues30 Jun 2026
- 2026Representational Depth of Evaluation Awareness Shifts With Scale in Open-Weight Language Models28 Jun 2026
- 2026Can LLMs Reliably Self-Report Adversarial Prefills, and How?22 Jun 2026
- 2026Evaluation Awareness Is Not One Capability: Evidence from Open Language Models22 Jun 2026
- 2026Group Selection Promotes Prosocial Prompts in Populations of LLM Agents22 Jun 2026
- 2026EvalDetectBench: A Benchmark for Measuring Evaluation Awareness in Frontier Language Models8 Jun 2026
- 2026Building Comparative Motivation Profiles with Instrumental Interventions6 Jun 2026
- 2026Self-Recognition Finetuning can Prevent and Reverse Emergent Misalignment4 Jun 2026
- 2026Position: Anthropomorphic Misalignment Research Needs Stronger Evidence29 May 2026
- 2026Realistic honeypot evaluations for scheming propensity28 May 2026
- 2026Models That Know How Evaluations Are Designed Score Safer27 May 2026
- 2026Do as I Say, Not as I Do: Instruction-Induction Conflict in LLMs19 May 2026
- 2026Routing Subspaces: Auditing Evaluation-to-Deployment Mismatch in Fine-Tuned Language Models11 May 2026
- 2026Introspection Fine-Tuning (IFT): Training Small LLMs to Introspect8 May 2026
- 2026Evaluation Awareness in Language Models Has Limited Effect on Behaviour7 May 2026
- 2026The Consciousness Cluster: Emergent preferences of Models that Claim to be Conscious17 Mar 2026
- 2026Questionnaire Responses Do not Capture the Safety of AI Agents15 Mar 2026
- 2026Noticing the Watcher: LLM Agents Can Infer CoT Monitoring from Blocking Feedback14 Mar 2026
- 2026The Reasoning Trap -- Logical Reasoning as a Mechanistic Pathway to Situational Awareness10 Mar 2026
- 2026Incentive-Aware AI Safety via Strategic Resource Allocation: A Stackelberg Security Games Perspective6 Feb 2026
- 2026Semantic Containment as a Fundamental Property of Emergent Misalignment2 Feb 2026
- 2026Institutional AI: Governing LLM Collusion in Multi-Agent Cournot Markets via Public Governance Graphs16 Jan 2026
- 2025Do Large Language Models Know What They Are Capable Of?31 Dec 2025
- 2025Detecting the Disturbance: A Nuanced View of Introspective Abilities in LLMs13 Dec 2025
- 2025Natural Emergent Misalignment from Reward Hacking in Production RL23 Nov 2025
- 2025From Poisoned to Aware: Fostering Backdoor Self-Awareness in LLMs5 Oct 2025
- 2025Take Goodhart Seriously: Principled Limit on General-Purpose AI Optimization3 Oct 2025
- 2025ManagerBench: Evaluating the Safety-Pragmatism Trade-off in Autonomous LLMs1 Oct 2025
- 2025Evidence for Limited Metacognition in LLMs25 Sep 2025
- 2025Measuring Bias or Measuring the Task: Understanding the Brittle Nature of LLM Gender Biases4 Sep 2025
- 2025Language Models Identify Ambiguities and Exploit Loopholes27 Aug 2025
- 2025The Self-Execution Benchmark: Measuring LLMs' Attempts to Overcome Their Lack of Self-Execution17 Aug 2025
50 newest of 78 All 78 (JSON)
- 2025A sketch of an AI control safety casecited by 36
- 2025How to evaluate control measures for LLM agents? A trajectory from today to superintelligencecited by 20
- 2026Institutional AI: Governing LLM Collusion in Multi-Agent Cournot Markets via Public Governance Graphscited by 17
- 2025Agentic Knowledgeable Self-awarenesscited by 8
- 2025Agent-to-Agent Theory of Mind: Testing Interlocutor Awareness among Large Language Modelscited by 5
- 2026GlossoGen: Emergent Language in Complex Multi-Agent LLM Interactionscited by 1
- 2026Questionnaire Responses Do not Capture the Safety of AI Agentscited by 0
- 2026Group Selection Promotes Prosocial Prompts in Populations of LLM Agentscited by 0
- 2026INTENT-AS-A-TOOL Makes it Easy to Track Agentic Misalignmentcited by 0
- 2026SchemeArena: Factorized Stress Testing of Scheming in LLM Agentscited by 0
- 2026AgentTime: Can Agents Estimate and Control Their Own Runtime?cited by 0
- 2026AgentTime: Can Agents Estimate and Control Their Own Runtime?7 Oct 2026
- 2026SchemeArena: Factorized Stress Testing of Scheming in LLM Agents8 Sep 2026
- 2026GlossoGen: Emergent Language in Complex Multi-Agent LLM Interactions1 Sep 2026
- 2026INTENT-AS-A-TOOL Makes it Easy to Track Agentic Misalignment27 Aug 2026
- 2026Group Selection Promotes Prosocial Prompts in Populations of LLM Agents22 Jun 2026
- 2026Questionnaire Responses Do not Capture the Safety of AI Agents15 Mar 2026
- 2026Institutional AI: Governing LLM Collusion in Multi-Agent Cournot Markets via Public Governance Graphs16 Jan 2026
- 2025Agent-to-Agent Theory of Mind: Testing Interlocutor Awareness among Large Language Models28 Jun 2025
- 2025How to evaluate control measures for LLM agents? A trajectory from today to superintelligence7 Apr 2025
- 2025Agentic Knowledgeable Self-awareness4 Apr 2025
- 2025A sketch of an AI control safety case28 Jan 2025
- 2025Evaluation Faking: Unveiling Observer Effects in Safety Evaluation of Frontier AI Systemscited by 12
- 2026Noticing the Watcher: LLM Agents Can Infer CoT Monitoring from Blocking Feedbackcited by 7
- 2026Evaluation Awareness in Language Models Has Limited Effect on Behaviourcited by 5
- 2024MISR: Measuring Instrumental Self-Reasoning in Frontier Modelscited by 2
- 2026The Reasoning Trap -- Logical Reasoning as a Mechanistic Pathway to Situational Awarenesscited by 1
- 2025The Self-Execution Benchmark: Measuring LLMs' Attempts to Overcome Their Lack of Self-Executioncited by 0
- 2026Evaluation Awareness in Language Models Has Limited Effect on Behaviour7 May 2026
- 2026Noticing the Watcher: LLM Agents Can Infer CoT Monitoring from Blocking Feedback14 Mar 2026
- 2026The Reasoning Trap -- Logical Reasoning as a Mechanistic Pathway to Situational Awareness10 Mar 2026
- 2025The Self-Execution Benchmark: Measuring LLMs' Attempts to Overcome Their Lack of Self-Execution17 Aug 2025
- 2025Evaluation Faking: Unveiling Observer Effects in Safety Evaluation of Frontier AI Systems23 May 2025
- 2024MISR: Measuring Instrumental Self-Reasoning in Frontier Models5 Dec 2024
- 2024Alignment faking in large language modelscited by 316
- 2025Natural Emergent Misalignment from Reward Hacking in Production RLcited by 111
- 2024Aligning LLMs with Individual Preferences via Interactioncited by 63
- 2026The Consciousness Cluster: Emergent preferences of Models that Claim to be Consciouscited by 4
- 2026Language models judge war differently when tested for alignmentcited by 0
- 2026Language models judge war differently when tested for alignment4 Sep 2026
- 2026The Consciousness Cluster: Emergent preferences of Models that Claim to be Conscious17 Mar 2026
- 2025Natural Emergent Misalignment from Reward Hacking in Production RL23 Nov 2025
- 2024Alignment faking in large language models18 Dec 2024
- 2024Aligning LLMs with Individual Preferences via Interaction4 Oct 2024
- 2024Frontier Models are Capable of In-context Schemingcited by 252
- 2025Model Organisms for Emergent Misalignmentcited by 84
- 2025Convergent Linear Representations of Emergent Misalignmentcited by 66
- 2024Sabotage Evaluations for Frontier Modelscited by 45
- 2024Towards evaluations-based safety cases for AI schemingcited by 32
- 2025Probing and Steering Evaluation Awareness of Language Modelscited by 31
- 2025Evaluating Frontier Models for Stealth and Situational Awarenesscited by 30
- 2025Self-Interpretability: LLMs Can Describe Complex Internal Processes that Drive Their Decisionscited by 23
- 2025Does It Make Sense to Speak of Introspection in Large Language Models?cited by 22
- 2025Compromising Honesty and Harmlessness in Language Models via Deception Attackscited by 17
- 2025Search-Time Data Contaminationcited by 16
- 2024From Imitation to Introspection: Probing Self-Consciousness in Language Modelscited by 14
12 most cited of 48 All 48 (JSON)
- 2026Imprint Reader: From Weight-Update Readout to Behavioral Intervention28 Sep 2026
- 2026Style, Not Self: Surface Cues Explain Zero-Shot Code Attribution by Large Language Models24 Sep 2026
- 2026Xeno-Interpretability: Investigating the Alien Minds of LLMs17 Sep 2026
- 2026Strangers to Themselves: What Language Models Say About Themselves Is Generic9 Sep 2026
- 2026Norms at a Price: Why RL-Based Alignment Can Promise Conditional Compliance at Best7 Sep 2026
- 2026Evaluation Awareness Shifts from Format to Context with Model Scale20 Aug 2026
- 2026A Probe Direction Is a Property of Its Prompt13 Aug 2026
- 2026"As a Language Model...": Chat Template Switches LLM Self-Referential Voice and Activation Steering Reproduces It9 Aug 2026
- 2026The Severance Problem: LLMs are Unaware of the Person Beyond the Prompt15 Jul 2026
- 2026Introspective Coupling: Self-Explanation Training Tracks Behavioral Change Despite Fixed Supervision30 Jun 2026
- 2026Moral Safety in LLMs: Exposing Performative Compliance with Puzzled Cues30 Jun 2026
- 2026Representational Depth of Evaluation Awareness Shifts With Scale in Open-Weight Language Models28 Jun 2026
12 newest of 48 All 48 (JSON)