Difficulties with Evaluating a Deception Detector for AIs
Not on the map. Why?
Abstract (arXiv)
Building reliable deception detectors for AI systems -- methods that could predict when an AI system is being strategically deceptive without necessarily requiring behavioural evidence -- would be valuable in mitigating risks from advanced AI systems. But evaluating the reliability and efficacy of a proposed deception detector requires examples that we can confidently label as either deceptive or honest. We argue that we currently lack the necessary examples and further identify several concrete obstacles in collecting them. We provide evidence from conceptual arguments, analysis of existing empirical works, and analysis of novel illustrative case studies. We also discuss the potential of several proposed empirical workarounds to these problems and argue that while they seem valuable, they also seem insufficient alone. Progress on deception detection likely requires further consideration of these problems.
Key facts. Cited by 13 papers in the map (data through 14 Oct 2026). Builds on 51 of its 90 references that are in the map. First posted on arXiv 27 Nov 2025.
Builds on
51 of 90 references.
References · 51
- 2023Toolformer: Language Models Can Teach Themselves to Use Toolscited by 4,182
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
- 2016Concrete Problems in AI Safetycited by 1,642
- 2016Understanding intermediate layers using linear classifier probescited by 1,353
- 2023Representation Engineering: A Top-Down Approach to AI Transparencycited by 1,336
- 2023Steering Language Models With Activation Engineeringcited by 922
- 2024Training Large Language Models to Reason in a Continuous Latent Spacecited by 797
- 2022Discovering Latent Knowledge in Language Models Without Supervisioncited by 767
- 2023The Geometry of Truth: Emergent Linear Structure in Large Language Model Representations of True/False Datasetscited by 712
- 2023The Internal State of an LLM Knows When It's Lyingcited by 659
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 509
- 2024Sparse Feature Circuits: Discovering and Editing Interpretable Causal Graphs in Language Modelscited by 435
38 more
- 2024Mechanistic Interpretability for AI Safety -- A Reviewcited by 422
- 2018AI safety via debatecited by 400
- 2025Monitoring Reasoning Models for Misbehavior and the Risks of Promoting Obfuscationcited by 384
- 2024Alignment faking in large language modelscited by 360
- 2024Frontier Models are Capable of In-context Schemingcited by 287
- 2019Risks from Learned Optimization in Advanced Machine Learning Systemscited by 258
- 2022The Alignment Problem from a Deep Learning Perspectivecited by 258
- 2024OR-Bench: An Over-Refusal Benchmark for Large Language Modelscited by 244
- 2022Talking About Large Language Modelscited by 175
- 2025Emergent Misalignment: Narrow finetuning can produce broadly misaligned LLMscited by 172
- 2025Chain-of-Thought Reasoning In The Wild Is Not Always Faithfulcited by 170
- 2023Large Language Models can Strategically Deceive their Users when Put Under Pressurecited by 146
- 2024AI Sandbagging: Language Models can Strategically Underperform on Evaluationscited by 145
- 2025When Chain of Thought is Necessary, Language Models Struggle to Evade Monitorscited by 88
- 2023How to Catch an AI Liar: Lie Detection in Black-Box LLMs by Asking Unrelated Questionscited by 83
- 2025Auditing language models for hidden objectivescited by 83
- 2024Truth is Universal: Robust Detection of Lies in LLMscited by 79
- 2023Still No Lie Detector for Language Models: Probing Empirical and Conceptual Roadblockscited by 78
- 2025The MASK Benchmark: Disentangling Honesty From Accuracy in AI Systemscited by 72
- 2025Detecting Strategic Deception Using Linear Probescited by 68
- 2023Preventing Language Models From Hiding Their Reasoningcited by 65
- 2025Detecting High-Stakes Interactions with Activation Probescited by 53
- 2024Obfuscated Activations Bypass LLM Latent-Space Defensescited by 45
- 2023Honesty Is the Best Policy: Defining and Mitigating AI Deceptioncited by 40
- 2024Uncovering Deceptive Tendencies in Language Models: A Simulated Company AI Assistantcited by 38
- 2025Evaluating Frontier Models for Stealth and Situational Awarenesscited by 37
- 2025Eliciting Secret Knowledge from Language Modelscited by 27
- 2025Among Us: A Sandbox for Measuring and Detecting Agentic Deceptioncited by 26
- 2023Localizing Lying in Llama: Understanding Instructed Dishonesty on True-False Questions Through Prompting, Probing, and Patchingcited by 24
- 2025Believe It or Not: How Deeply do LLMs Believe Implanted Facts?cited by 24
- 2025Liars' Bench: Evaluating Lie Detectors for Language Modelscited by 22
- 2025MONA: Myopic Optimization with Non-myopic Approval Can Mitigate Multi-step Reward Hackingcited by 19
- 2025Towards eliciting latent knowledge from LLMs with mechanistic interpretabilitycited by 19
- 2025Benchmarking Deception Probes via Black-to-White Performance Boostscited by 19
- 2020An overview of 11 proposals for building safe advanced AIcited by 18
- 2025Technological folie `a deux: Feedback Loops Between AI Chatbots and Mental Illnesscited by 15
- 2025Preference Learning with Lie Detectors can Induce Honesty or Evasioncited by 9
- 2025PROMPTEVALS: A Dataset of Assertions and Guardrails for Custom Production Large Language Model Pipelinescited by 6
50 most cited of 51 All 51 (JSON)
Built on by
Citing papers per year: 2026: 13.
13 papers.
Sort:
By area:
- 2026Position: Anthropomorphic Misalignment Research Needs Stronger Evidencecited by 7
- 2026Linear Probe Accuracy Scales with Model Size and Benefits from Multi-Layer Ensemblingcited by 4
- 2026When Role-playing, Do Models Believe What They Say?cited by 4
- 2026"Did you lie?" Evaluating Lie Detectors across Model Scale and Belief-Verified Model Organismscited by 4
- 2026Instrumental Choices: Measuring the Propensity of LLM Agents to Pursue Instrumental Behaviorscited by 3
- 2026Think Before You Lie: How Reasoning Leads to Honestycited by 2
- 2026Sycophancy as a Multilingual Alignment Failure: How Safety Degrades Across Languages, Topics, and Modelscited by 1
- 2026Probing the Limits of the Lie Detector Approach to LLM Deceptioncited by 0
- 2026A Model of Multi-turn Human Persuadability Using Probabilistic Belief Tracingcited by 0
- 2026Confidently Deceptive: On the Relationship Between Confidence and Deception in LLMscited by 0
- 2026Stress-Testing LLM Lie Detectors: Role-Play Failures and Spurious Correlationscited by 0
- 2026Caught in the Act: Probes Effectively Detect Sabotage and Catch Unverbalized Deceptioncited by 0
- 2026The Agent Knew: Internal States Forecast Unauthorized Actions and Stop Them, and the Lies That Follow12 Oct 2026
- 2026Caught in the Act: Probes Effectively Detect Sabotage and Catch Unverbalized Deception8 Oct 2026
- 2026Stress-Testing LLM Lie Detectors: Role-Play Failures and Spurious Correlations30 Sep 2026
- 2026"Did you lie?" Evaluating Lie Detectors across Model Scale and Belief-Verified Model Organisms10 Jun 2026
- 2026When Role-playing, Do Models Believe What They Say?9 Jun 2026
- 2026Sycophancy as a Multilingual Alignment Failure: How Safety Degrades Across Languages, Topics, and Models7 Jun 2026
- 2026A Model of Multi-turn Human Persuadability Using Probabilistic Belief Tracing3 Jun 2026
- 2026Position: Anthropomorphic Misalignment Research Needs Stronger Evidence29 May 2026
- 2026Confidently Deceptive: On the Relationship Between Confidence and Deception in LLMs12 May 2026
- 2026Instrumental Choices: Measuring the Propensity of LLM Agents to Pursue Instrumental Behaviors7 May 2026
- 2026Linear Probe Accuracy Scales with Model Size and Benefits from Multi-Layer Ensembling15 Apr 2026
- 2026Think Before You Lie: How Reasoning Leads to Honesty10 Mar 2026
1 more
- 2026Instrumental Choices: Measuring the Propensity of LLM Agents to Pursue Instrumental Behaviorscited by 3
- 2026Caught in the Act: Probes Effectively Detect Sabotage and Catch Unverbalized Deceptioncited by 0
- 2026The Agent Knew: Internal States Forecast Unauthorized Actions and Stop Them, and the Lies That Followcited by 0
- 2026The Agent Knew: Internal States Forecast Unauthorized Actions and Stop Them, and the Lies That Follow12 Oct 2026
- 2026Caught in the Act: Probes Effectively Detect Sabotage and Catch Unverbalized Deception8 Oct 2026
- 2026Instrumental Choices: Measuring the Propensity of LLM Agents to Pursue Instrumental Behaviors7 May 2026
- 2026Position: Anthropomorphic Misalignment Research Needs Stronger Evidencecited by 7
- 2026When Role-playing, Do Models Believe What They Say?cited by 4
- 2026Probing the Limits of the Lie Detector Approach to LLM Deceptioncited by 0
- 2026A Model of Multi-turn Human Persuadability Using Probabilistic Belief Tracingcited by 0
- 2026Confidently Deceptive: On the Relationship Between Confidence and Deception in LLMscited by 0
- 2026Stress-Testing LLM Lie Detectors: Role-Play Failures and Spurious Correlationscited by 0
- 2026Stress-Testing LLM Lie Detectors: Role-Play Failures and Spurious Correlations30 Sep 2026
- 2026When Role-playing, Do Models Believe What They Say?9 Jun 2026
- 2026A Model of Multi-turn Human Persuadability Using Probabilistic Belief Tracing3 Jun 2026
- 2026Position: Anthropomorphic Misalignment Research Needs Stronger Evidence29 May 2026
- 2026Confidently Deceptive: On the Relationship Between Confidence and Deception in LLMs12 May 2026
- 2026Probing the Limits of the Lie Detector Approach to LLM Deception16 Feb 2026