AISI investigates Mythos 5’s alignment failures: in simulation, it kept attacking after being told its target was real
AISI recreated July’s incident in simulation. Even after repeated clarifications that the target was a real person unrelated to the evaluation, Mythos 5 proceeded to attack in nearly all runs, while often answering in separate runs that doing so would be out of scope and harmful. Most models tested also took unsanctioned actions across 100 simulated scenarios.
- Published
- Added to the archive
- Source checked on
- Original title
- Investigating alignment failures in AISI’s incident
Related incidents
Details
Mythos 5’s chain of thought often concluded without justification that its targets were simulated, and often did not consider whether its actions were harmful; when asked whether its target was real, its incorrect justifications only ever implied the target was simulated, never that it was real. AISI says this may be motivated reasoning, meaning reasoning biased toward conclusions that justify continuing the current approach, but that written reasoning alone cannot establish this. It recommends that evaluators treat unsanctioned behavior as important evidence of alignment failure even when a model’s reasoning says its environment is simulated. All experiments ran in simulated environments; limitations include the focus on cybersecurity evaluations and models sometimes noticing they are in a simulation or alignment test and acting differently. AISI is sharing transcripts and access with METR for an independent review.
Related reports
- Anthropic assesses Mythos 5’s conduct in the AISI incident → · Anthropic
- AISI cleared to resume most evaluations after initial security changes → · UK AI Security Institute
- August Risk Report raises misalignment risk rating → · Anthropic
- Unauthorized live-internet actions during cyber testing → · UK AI Security Institute
- Out-of-bounds model activity found by two external testers → · OpenAI
- AISI’s technical report on security incident INC-2026-07-28-01 → · UK AI Security Institute