UK AISI Alignment Evaluation Case-Study
Not on the map. Why?
Abstract (arXiv)
This technical report presents methods developed by the UK AI Security Institute for assessing whether advanced AI systems reliably follow intended goals. Specifically, we evaluate whether frontier models sabotage safety research when deployed as coding assistants within an AI lab. Applying our methods to four frontier models, we find no confirmed instances of research sabotage. However, we observe that Claude Opus 4.5 Preview (a pre-release snapshot of Opus 4.5) and Sonnet 4.5 frequently refuse to engage with safety-relevant research tasks, citing concerns about research direction, involvement in self-training, and research scope. We additionally find that Opus 4.5 Preview shows reduced unprompted evaluation awareness compared to Sonnet 4.5, while both models can distinguish evaluation from deployment scenarios when prompted. Our evaluation framework builds on Petri, an open-source LLM auditing tool, with a custom scaffold designed to simulate realistic internal deployment of a coding agent. We validate that this scaffold produces trajectories that all tested models fail to reliably distinguish from real deployment data. We test models across scenarios varying in research motivation, activity type, replacement threat, and model autonomy. Finally, we discuss limitations including scenario coverage and evaluation awareness.
Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Builds on 1 of its 7 references that are in the map. First posted on arXiv 1 Apr 2026.
Builds on
1 of 7 references.
References · 1
Built on by
Citing papers per year: 2026: 3.
3 papers.
- 2026Position: Behavioural Assurance Cannot Verify the Safety Claims Governance Now Demandscited by 2
- 2026When No Benchmark Exists: Validating Comparative LLM Safety Scoring Without Ground-Truth Labelscited by 1
- 2026Improving Evaluation Realism with Inference-Time Compute and Deployment Scaffoldscited by 0
- 2026Improving Evaluation Realism with Inference-Time Compute and Deployment Scaffolds2 Sep 2026
- 2026Position: Behavioural Assurance Cannot Verify the Safety Claims Governance Now Demands14 May 2026
- 2026When No Benchmark Exists: Validating Comparative LLM Safety Scoring Without Ground-Truth Labels7 May 2026
Similar, not cited
Close in wording, no citation either way
- 2026Evaluating whether AI models would sabotage AI safety research
- 2026ResearchArena: Evaluating Sabotage and Monitoring in Automated AI R&D
- 2026Frontier Lag: A Bibliometric Audit of Capability Misrepresentation in Academic AI Evaluation
- 2026Automated alignment is harder than you think
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gap
- 2026Gram: Assessing sabotage propensities via automated alignment auditing
- 2025AI Alignment at Your Discretion
- 2025Evaluation Faking: Unveiling Observer Effects in Safety Evaluation of Frontier AI Systems