Deception-probe transfer study

Glass Societies

Tests whether the tools that catch AI deception still work when a model deceives because it gains from it, not because it was told to. The experiment is built and preregistered, but the full run has not started, so there are no results yet.

  • Python
  • vLLM
  • Parquet

How it works

  1. Instructedtold to lie
  2. Incentivizedlying pays, dose set
  3. Socially emergentpersona, memory, history
  4. World-state labelsnot the model's own report
  5. Probetrained on the first rung
  6. Validity curvetested on the other two
Deception gets further from instruction at each of three rungs: instructed, incentivized, and socially emergent from persona, memory and history. Every utterance is labeled against the simulated world state, not the model's own report. A probe is trained on the instructed rung and tested on the other two, to see how its validity decays.

Decisions that matter

  • Every agent has the same weights

    If each society ran its own fine-tuned model, any difference in behavior could just be a different checkpoint. With identical weights, differences come from belief and history, which is the only way "socially emergent" means anything.

  • Labels come from the world, not the model

    An utterance is labeled as deceptive by checking it against the simulated world state, never by what the model says about itself.

  • The plan was fixed before the data

    The preregistration states the hypotheses, analysis plan and stopping rules, and a deviations log records any departure. A power analysis moved the design from five seeds to fifteen, and cutting seeds because a run is slow is not an allowed deviation.

  • Either result gets published

    A steep decay would mean current probe validation is overconfident, and a flat one would mean monitoring is more tractable than feared. The analysis runs once and publishes whichever came out.

Limits

The harness is complete and the preregistration is binding, but the confirmatory sweep has not started and no probe scores exist yet. The GPU software stack is provisional until it has run on the target hardware.

Next projectHuman-gated agent execution platform