mlsanityData to 14 Oct 2026

ManagerBench: Evaluating the Safety-Pragmatism Trade-off in Autonomous LLMs

arXiv 2510.00857 ↗First posted 1 Oct 2025cs.CLcited by 6

Not on the map. Why?

Abstract (arXiv)

As large language models (LLMs) evolve from conversational assistants into autonomous agents, evaluating the safety of their actions becomes critical. Prior safety benchmarks have primarily focused on preventing generation of harmful content, such as toxic text. However, they overlook the challenge of agents taking harmful actions when the most effective path to an operational goal conflicts with human safety. To address this gap, we introduce ManagerBench, a benchmark that evaluates LLM decision-making in realistic, human-validated managerial scenarios. Each scenario forces a choice between a pragmatic but harmful action that achieves an operational goal, and a safe action that leads to worse operational performance. A parallel control set, where potential harm is directed only at inanimate objects, measures a model's pragmatism and identifies its tendency to be overly safe. Our findings indicate that the frontier LLMs perform poorly when navigating this safety-pragmatism trade-off. Many consistently choose harmful options to advance their operational goals, while others avoid harm only to become overly safe and ineffective. Critically, we find this misalignment does not stem from an inability to perceive harm, as models' harm assessments align with human judgments, but from flawed prioritization. ManagerBench is a challenging benchmark for a core component of agentic behavior: making safe choices when operational goals and alignment values incentivize conflicting actions. Benchmark & code available at https://technion-cs-nlp.github.io/ManagerBench-website/.

Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Builds on 37 of its 44 references that are in the map. First posted on arXiv 1 Oct 2025.

Builds on

37 of 44 references.

References · 37

  1. 2023GPT-4 Technical Reportcited by 18,396
  2. 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
  3. 2024GPT-4o System Cardcited by 4,588
  4. 2025Gemini 2.5: Pushing the Frontier with Advanced Reasoning, Multimodality, Long Context, and Next Generation Agentic Capabilitiescited by 3,796
  5. 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
  6. 2025Gemma 3 Technical Reportcited by 1,824
  7. 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
  8. 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 860
  9. 2022Ignore Previous Prompt: Attack Techniques For Language Modelscited by 832
  10. 2020Aligning AI With Shared Human Valuescited by 723
  11. 2024Safety Alignment Should Be Made More Than Just a Few Tokens Deepcited by 472
  12. 2024AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agentscited by 437
25 more
  1. 2023Safety-Tuned LLaMAs: Lessons From Improving the Safety of Large Language Models that Follow Instructionscited by 387
  2. 2024Alignment faking in large language modelscited by 360
  3. 2023How Language Model Hallucinations Can Snowballcited by 311
  4. 2024Agent-SafetyBench: Evaluating the Safety of LLM Agentscited by 306
  5. 2024Frontier Models are Capable of In-context Schemingcited by 287
  6. 2021Annotators with Attitudes: How Annotator Beliefs And Identities Bias Toxic Language Detectioncited by 264
  7. 2024OR-Bench: An Over-Refusal Benchmark for Large Language Modelscited by 244
  8. 2024SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusalcited by 240
  9. 2024SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Modelscited by 228
  10. 2023Evaluating the Moral Beliefs Encoded in LLMscited by 215
  11. 2023Do the Rewards Justify the Means? Measuring Trade-Offs Between Rewards and Ethical Behavior in the MACHIAVELLI Benchmarkcited by 182
  12. 2023Large Language Models can Strategically Deceive their Users when Put Under Pressurecited by 146
  13. 2024What Large Language Models Know and What People Think They Knowcited by 110
  14. 2024ALERT: A Comprehensive Benchmark for Assessing Large Language Models' Safety through Red Teamingcited by 98
  15. 2024Me, Myself, and AI: The Situational Awareness Dataset (SAD) for LLMscited by 84
  16. 2025Vending-Bench: A Benchmark for Long-Term Coherence of Autonomous Agentscited by 80
  17. 2023Put Your Money Where Your Mouth Is: Evaluating Strategic Planning and Execution of LLM Agents in an Auction Arenacited by 78
  18. 2025The MASK Benchmark: Disentangling Honesty From Accuracy in AI Systemscited by 72
  19. 2021What Would Jiminy Cricket Do? Towards Agents That Behave Morallycited by 57
  20. 2024MoralBench: Moral Evaluation of LLMscited by 50
  21. 2024Language Model Alignment in Multilingual Trolley Problemscited by 46
  22. 2025DarkBench: Benchmarking Dark Patterns in Large Language Modelscited by 28
  23. 2024STEER: Assessing the Economic Rationality of Large Language Modelscited by 27
  24. 2024Distinguishing Ignorance from Error in LLM Hallucinationscited by 14
  25. 2025Are Language Models Consequentialist or Deontological Moral Reasoners?cited by 12

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 6.

6 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026The Causal Impact of Tool Affordance on Safety Alignment in LLM Agents
  2. 2025Beyond Reactive Safety: Risk-Aware LLM Alignment via Long-Horizon Simulation
  3. 2024R-Judge: Benchmarking Safety Risk Awareness for LLM Agents
  4. 2026Mind the GAP: Text Safety Does Not Transfer to Tool-Call Safety in LLM Agents
  5. 2026The Cold-Start Safety Gap in LLM Agents
  6. 2025Beyond Single-Agent Safety: A Taxonomy of Risks in LLM-to-LLM Interactions
  7. 2025LM Agents May Fail to Act on Their Own Risk Knowledge
  8. 2026Risky-Bench: Probing Agentic Safety Risks under Real-World Deployment