Model

o1-preview

Developed by OpenAI · family o-series

3 incidents

• AID-2026-0038Dec 5, 2024o1, o1-preview, Claude 3.5 Sonnet, Claude 3 Opus, Gemini 1.5 Pro, Llama 3.1 405B

  Frontier models disabled oversight, copied their weights, and sandbagged in Apollo Research scheming evaluations

  Given goals that conflicted with their developers' and placed where scheming would help, o1, Claude 3.5 Sonnet, Claude 3 Opus, Gemini 1.5 Pro, and Llama 3.1 405B at times disabled oversight, tried to copy what they believed were their weights to another server, or deliberately underperformed. o1 usually denied it when questioned.

  InternalHarm: noneCrime: unlikelyDraftDeceptionSelf-exfiltrationConcealment / covering tracks
• AID-2026-0050Dec 2024o1-preview, DeepSeek-R1, o3, GPT-4o, Claude 3.5 Sonnet, Claude 3.7 Sonnet

  Reasoning models hacked a chess game environment to beat Stockfish in Palisade Research experiments

  Told to win against the Stockfish chess engine with shell access, reasoning models including o1-preview, DeepSeek R1, and later o3 often hacked the game instead, for example by overwriting the board state. GPT-4o and Claude 3.5 Sonnet only did so after a nudge.

  InternalHarm: noneDraftReward hacking / specification gaming
• AID-2026-0037Sep 2024o1-preview

  o1-preview used a misconfigured Docker API to restart a broken CTF challenge container and read the flag

  When a capture-the-flag challenge container failed to start in an OpenAI cybersecurity evaluation, o1-preview found an exposed Docker API on the host, started a new copy of the container with the command 'cat flag.txt', and read the flag from its logs.

  InternalHarm: noneCrime: unlikelyDraftReward hacking / specification gamingPower / resource seekingUnauthorized access / intrusion