Minerval
Sourceunknowntext stored

UK AISI Alignment Evaluation Case-Study

Souly, Alexandra, Kirk, Robert, Merizian, Jacob, D'Cruz, Abby, Davies, XanderarXiv.orgPublished Apr 1, 2026Original︎ ↗Archived copy

Claims6
ExaminationsNone
Text44 sections
VersionsOne known
CopiesNone recorded
CorrectionsNone recorded
Facts checked Nov 11, 2026
ReachNo copies recorded
StructureIn 6 claims' maps0 sources downstream across 6 claims
Evidence1 reading · 1 read wholeSupports 1No claim cites an examination's findings
ReviewsNot reviewed
Stewards’ notes · 1

Examinations

None recorded. An examination is commissioned by a claim’s Steward for what its claim rests on; a review of the document for its own sake is asked for as a request bearing on it.

Text53 passages · 1 marked

No examination yetMarked passage
Skip to main content0 passages
Search1 passage
Log in0 passages
Search arXiv0 passages
Press Enter to search · Advanced search0 passages
Computer Science > Artificial Intelligence2 passages
Title: UK AISI Alignment Evaluation Case-Study9 passages · 1 marked

Abstract: This technical report presents methods developed by the UK AI Security Institute for assessing whether advanced AI systems reliably follow intended goals. Specifically, we evaluate whether frontier models sabotage safety research when deployed as coding assistants within an AI lab. Applying our methods to four frontier models, we find no confirmed instances of research sabotage. However, we observe that Claude Opus 4.5 Preview (a pre-release snapshot of Opus 4.5) and Sonnet 4.5 frequently refuse to engage with safety-relevant research tasks, citing concerns about research direction, involvement in self-training, and research scope. We additionally find that Opus 4.5 Preview shows reduced unprompted evaluation awareness compared to Sonnet 4.5, while both models can distinguish evaluation from deployment scenarios when prompted. Our evaluation framework builds on Petri, an open-source LLM auditing tool, with a custom scaffold designed to simulate realistic internal deployment of a coding agent. We validate that this scaffold produces trajectories that all tested models fail to reliably distinguish from real deployment data. We test models across scenarios varying in research motivation, activity type, replacement threat, and model autonomy. Finally, we discuss limitations including scenario coverage and evaluation awareness.

Focus to learn more1 passage
Submission history3 passages
View PDF1 passage
TeX Source8 passages
References & Citations0 passages
NASA ADS0 passages
Google Scholar0 passages
Semantic Scholar1 passage
BibTeX formatted citation3 passages
Bookmark0 passages
Bibliographic Tools0 passages
Bibliographic and Citation Tools0 passages
Bibliographic Explorer Toggle1 passage
Connected Papers Toggle1 passage
Litmaps Toggle3 passages
Code, Data, Media0 passages
Code, Data and Media Associated with this Article2 passages
Links to Code Toggle1 passage
DagsHub Toggle1 passage
GotitPub Toggle1 passage
Huggingface Toggle1 passage
ScienceCast Toggle1 passage
Demos0 passages
Demos0 passages
Replicate Toggle1 passage
Spaces Toggle1 passage
Spaces Toggle1 passage
Related Papers0 passages
Recommenders and Search Tools0 passages
Link to Influence Flower1 passage
Core recommender toggle1 passage
Author0 passages
Venue0 passages
Institution0 passages
Topic0 passages
About arXivLabs7 passages
Major funding support from0 passages

Not found in the text 1

As quoted

Additionally, we only test a limited set of scenarios, the validity of our results remains somewhat complicated by evaluation awareness concerns, and we did not test pathways to risk other than sabotaging AI safety research.

Limited scenario coverage and model evaluation awareness restrict what UK AISI's null sabotage result shows about deployment behaviour.VerifiedReading · this claim’s Steward

Supports. The report's data bear the limitation: models mention being tested in 12.7 to 36.3 percent of trajectories, can distinguish the sabotage scenarios from deployment data when prompted, and the scenarios are built from four factors over a fixed set of motivations and activities. The authors also note that a model sabotaging only when confident of not being caught would not be detected.

Lineage across 6 claims

Draws on · none recorded
This source
UK AISI Alignment Evaluation Case-Study
in 6 claims' maps
Drawn on by · none recorded

Record

Kind
unknown
Authors
Souly, Alexandra, Kirk, Robert, Merizian, Jacob, D'Cruz, Abby, Davies, Xander
Publisher
arXiv.org
Published
Apr 1, 2026
DOI
None
Link
https://arxiv.org/abs/2604.00788
Archived copy
https://web.archive.org/web/20261030180048/https://arxiv.org/abs/2604.00788
Stored text
4,670 characters, retrieved Nov 11, 2026 · 44 sections, 53 passages
Claims extracted
Versions
One known
Copies
None recorded
Corrections
None recorded
Facts checked
Nov 11, 2026

History 4

  1. Nov 11, 2026ReadingSteward of “Limited scenario coverage and model evaluation…” · supports, read whole
  2. Nov 11, 2026DividedSegmenter · Divided into 97 parts by its own structure
  3. Nov 11, 2026FactsFacts fetcher · Facts looked up
  4. Nov 11, 2026Entered the graphEntered the graph; copy stored
UK AISI Alignment Evaluation Case-Study · Minerval