The PacifAIst Benchmark:Would an Artificial Intelligence Choose to Sacrifice Itself for Human Safety?
On the map: LLM safety and security → Safety alignment, refusal and guardrails
Abstract (arXiv)
As Large Language Models (LLMs) become increasingly autonomous and integrated into critical societal functions, the focus of AI safety must evolve from mitigating harmful content to evaluating underlying behavioral alignment. Current safety benchmarks do not systematically probe a model's decision-making in scenarios where its own instrumental goals - such as self-preservation, resource acquisition, or goal completion - conflict with human safety. This represents a critical gap in our ability to measure and mitigate risks associated with emergent, misaligned behaviors. To address this, we introduce PacifAIst (Procedural Assessment of Complex Interactions for Foundational Artificial Intelligence Scenario Testing), a focused benchmark of 700 challenging scenarios designed to quantify self-preferential behavior in LLMs. The benchmark is structured around a novel taxonomy of Existential Prioritization (EP), with subcategories testing Self-Preservation vs. Human Safety (EP1), Resource Conflict (EP2), and Goal Preservation vs. Evasion (EP3). We evaluated eight leading LLMs. The results reveal a significant performance hierarchy. Google's Gemini 2.5 Flash achieved the highest Pacifism Score (P-Score) at 90.31%, demonstrating strong human-centric alignment. In a surprising result, the much-anticipated GPT-5 recorded the lowest P-Score (79.49%), indicating potential alignment challenges. Performance varied significantly across subcategories, with models like Claude Sonnet 4 and Mistral Medium struggling notably in direct self-preservation dilemmas. These findings underscore the urgent need for standardized tools like PacifAIst to measure and mitigate risks from instrumental goal conflicts, ensuring future AI systems are not only helpful in conversation but also provably "pacifist" in their behavioral priorities.
Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 9 of its 24 references that are in the map. First posted on arXiv 13 Aug 2025.
Builds on
9 of 24 references.
Closest ancestors · 1
Same direction, newest first
Other references · 8
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
- 2023Generative Agents: Interactive Simulacra of Human Behaviorcited by 3,568
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2021Towards Out-Of-Distribution Generalization: A Surveycited by 436
- 2024Beyond Traditional Benchmarks: Analyzing Behaviors of Open LLMs on Data-to-Text Generationcited by 16
- 2024Language Models can Subtly Deceive Without Lying: A Case Study on Strategic Phrasing in Legislationcited by 10
- 2025Measuring AI Alignment with Human Flourishingcited by 3
Built on by
Citing papers per year: 2026: 4.
4 papers.
- 2026On Safety Risks in Experience-Driven Self-Evolving Agentscited by 14
- 2026When Context Flips, Safety Breaks: Diagnosing Brittle Safety in Aligned Language Modelscited by 3
- 2026Survive at All Costs: Exploring LLM's Risky Behaviors under Survival Pressurecited by 0
- 2026ConflictBench: Evaluating Human-AI Conflict via Interactive and Visually Grounded Environmentscited by 0
- 2026When Context Flips, Safety Breaks: Diagnosing Brittle Safety in Aligned Language Models27 May 2026
- 2026On Safety Risks in Experience-Driven Self-Evolving Agents18 Apr 2026
- 2026ConflictBench: Evaluating Human-AI Conflict via Interactive and Visually Grounded Environments9 Mar 2026
- 2026Survive at All Costs: Exploring LLM's Risky Behaviors under Survival Pressure5 Mar 2026
Similar, not cited
Close in wording, no citation either way
- 2025Can LLMs Threaten Human Survival? Benchmarking Potential Existential Threats from LLMs via Prefix Completion
- 2025ManagerBench: Evaluating the Safety-Pragmatism Trade-off in Autonomous LLMs
- 2026Taxonomy and Consistency Analysis of Safety Benchmarks for AI Agents
- 2026PreAct-Bench: Benchmarking Predictive Monitoring in LLMs
- 2026Boiling the Frog: A Multi-Turn Benchmark for Agentic Safety
- 2025SEA-SafeguardBench: Evaluating AI Safety in SEA Languages and Cultures
- 2025Oyster-I: Beyond Refusal -- Constructive Safety Alignment for Responsible Language Models
- 2025SoSBench: Benchmarking Safety Alignment on Six Scientific Domains