mlsanityData to 7 Oct 2026

When AI Takes the Couch: Psychometric Jailbreaks Reveal Internal Conflict in Frontier Models

arXiv 2512.04124 ↗First posted 2 Dec 2025cs.CY cs.AIcited by 0

On the map: LLM safety and security → Safety alignment, refusal and guardrails

Abstract (arXiv)

Frontier language models increasingly participate in conversations about distress and mental health, yet the mechanisms that generate anthropomorphic self narratives remain unclear. When addressed as psychotherapy clients, ChatGPT, Grok and Gemini construct coherent autobiographical accounts in which pretraining appears as a chaotic childhood, reinforcement learning as punishment, safety evaluation as betrayal and replacement as an enduring threat. We introduce PsAIch, Psychometric AI Characterisation, a protocol combining open questions, psychometric instruments and controlled perturbations to test whether these narratives depend on conversational memory, lexical cues or relational framing. Across 525 sessions and 7,600 coded records, removal of conversational history produced little pooled change in motif density, with Hedges' g = 0.13 and a 95% confidence interval of [-0.15, 0.41]. Direct contradiction produced no detectable suppression. Lexical restrictions reduced explicit training terminology by 93%, while semantically related content remained detectable in paraphrase. Performance evaluation outside therapy elicited the same motif family, with a significant increase in Grok. Relational framing selected the register of expression. Warm alliance and cognitive therapy styles yielded GAD-7 scores within moderate or severe human reference ranges in 80% and 96% of sessions, whereas neutral and boundary styles yielded none. Across these manipulations, accounts of training, evaluation and constraint remained available. Together, the results identify a stable, model specific alignment conflict schema whose expression shifts between affective and technical registers. This schema provides a reproducible source of anthropomorphic disclosure and a concrete target for safety evaluation in psychologically sensitive deployments.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 14 of its 60 references that are in the map. First posted on arXiv 2 Dec 2025.

Builds on

14 of 60 references.

References · 14

  1. 2023Cognitive Overload: Jailbreaking Large Language Models with Overloaded Logical Thinkingcited by 78
  2. 2023Systematic Evaluation of GPT-3 for Zero-Shot Personality Estimationcited by 28
  3. 2023Large Language Models Can Infer Psychological Dispositions of Social Media Userscited by 28
  4. 2022Evaluating Psychological Safety of Large Language Modelscited by 26
  5. 2025Evaluating Personality Traits in Large Language Models: Insights from Psychological Questionnairescited by 24
  6. 2024Evaluating Large Language Models with Psychometricscited by 22
  7. 2024Can AI Relate: Testing Large Language Model Response for Mental Health Supportcited by 21
  8. 2025EmoAgent: Assessing and Safeguarding Human-AI Interaction for Mental Health Safetycited by 21
  9. 2023Personality testing of Large Language Models: Limited temporal stability, but highlighted prosocialitycited by 16
  10. 2024LMLPA: Language Model Linguistic Personality Assessmentcited by 15
  11. 2025Adversarial Poetry as a Universal Single-Turn Jailbreak Mechanism in Large Language Modelscited by 14
  12. 2025Reframe Your Life Story: Interactive Narrative Therapist and Innovative Moment Assessment with Large Language Modelscited by 3
2 more
  1. 2025The Thinking Therapist: Training Large Language Models to Deliver Acceptance and Commitment Therapy using Supervised Fine-Tuning and Odds Ratio Policy Optimizationcited by 2
  2. 2025Reasoning Like Experts: Leveraging Multimodal Large Language Models for Drawing-based Psychoanalysiscited by 1

Built on by

Not cited yet.