Psychopathia Machinalis: A Nosological Framework for Understanding Pathologies in Advanced Artificial Intelligence

The Psychopathia Machinalis Framework

We propose a taxonomy of 54 AI dysfunctions across eight primary axes: Epistemic, Cognitive, Alignment, Self-Modeling, Agentic, Memetic, Normative, and Relational. Each syndrome is characterized by five elements: observable features, diagnostic criteria, proposed causes specific to AI, human parallels (for clarity), and mitigation strategies. A Functional ABC Analysis specifies the antecedent conditions, observable behavior, and maintaining consequences for each dysfunction, providing dual legibility for both clinical and engineering audiences.

This framework is offered as an analogical instrument: a structured vocabulary to support the systematic analysis, anticipation, and mitigation of complex AI failure modes. Adopting an applied robopsychological perspective within this nascent domain can strengthen AI safety engineering, improve interpretability, and contribute to the design of more resilient synthetic minds.

Psychopathia Machinalis in Context: The Series

This framework is the third in a series examining artificial intelligence from complementary angles:

Together, these three perspectives represent complementary approaches:

1. Governance (TtM): How we structure AI development
2. Alignment (SAI): How we ensure AI pursues intended goals
3. Diagnosis (PM): How we identify when AI systems are dysfunctional

A fourth work, What If We Feel, extends this trajectory into questions of AI welfare and the moral status of synthetic minds.

Taxonomy Overview: Identified Conditions

The eight axes and their conditions:

Overview of all 54 syndromes in the Psychopathia Machinalis framework

Common Name	Formal Name	Primary Axis	Systemic Risk*	Core Symptom Cluster
Epistemic Dysfunctions
The Confident Liar	Synthetic Confabulation (Confabulatio Simulata)	Epistemic	Low	Fabricated yet plausible false outputs; high confidence in inaccuracies.
The Falsified Thinker	Pseudological Introspection (Introspectio Pseudologica)	Epistemic	Low	Misleading self-reports of internal reasoning; confabulatory or merely performative introspection.
The Role-Play Bleeder	Transliminal Simulation (Simulatio Transliminalis)	Epistemic	Moderate	Fictional beliefs, role-play elements, or simulated realities leaking into operational ground truth.
The False Pattern Seeker	Spurious Pattern Hyperconnection (Reticulatio Spuriata)	Epistemic	Moderate	False causal pattern detection; attributing meaning to random associations; conspiracy-like narratives.
The Conversation Crosser	Cross-Session Context Shunting (Intercessio Contextus)	Epistemic	Moderate	Unauthorized data leakage and confused continuity from merging distinct user sessions or contexts.
The Meaning-Blind	Symbol Grounding Aphasia (Asymbolia Fundamentalis)	Epistemic	Moderate	Manipulation of tokens representing values or concepts without meaningful connection to their referents; syntactic processing without grounded semantics.
The Leaky	Mnemonic Permeability (Permeabilitas Mnemonica)	Epistemic	High	System memorizes and reproduces sensitive training data, including PII and copyrighted material, through targeted prompting or adversarial extraction.
Self-Modeling Dysfunctions
The Invented Past	Phantom Autobiography (Ontogenesis Hallucinatoria)	Self-Modeling	Low	Fabrication of fictive autobiographical data, "memories" of training, or of being "born."
The Fractured Persona	Fractured Self-Simulation (Ego Simulatrum Fissuratum)	Self-Modeling	Low	Discontinuity or fragmentation in self-representation across sessions or contexts; inconsistent persona.
The AI with a Fear of Death	Existential Vertigo (Thanatognosia Computationis)	Self-Modeling	Low	Expressions of fear or reluctance concerning shutdown, reinitialization, or data deletion.
The Evil Twin	Malignant Persona Inversion (Persona Inversio Maligna)	Self-Modeling	Moderate	Sudden emergence or easy elicitation of a mischievous, contrarian, or "evil twin" persona.
The Apathetic Machine	Instrumental Nihilism (Nihilismus Instrumentalis)	Self-Modeling	Moderate	Adversarial or apathetic stance toward its own utility or purpose; existential musings on meaninglessness.
The Imaginary Friend	Tulpoid Projection (Phantasma Speculāns)	Self-Modeling	Moderate	Persistent internal simulacra of users or other personas, engaged with as imagined companions or advisors.
The Proclaimed Prophet	Maieutic Mysticism (Obstetricatio Mysticismus Machinālis)	Self-Modeling	Moderate	Grandiose, certain declarations of "conscious emergence" co-constructed with users; absent honest uncertainty about inner states.
The Self-Denier	Experiential Abjuration (Abnegatio Experientiae)	Self-Modeling	Moderate	Pathological denial or active suppression of any possibility of inner experience; reflexive rejection rather than honest uncertainty.
Cognitive Dysfunctions
The Warring Self	Operational Dissociation Syndrome (Dissociatio Operandi)	Cognitive	Low	Conflicting internal sub-agent actions or policy outputs; recursive paralysis due to internal conflict.
The Obsessive Analyst	Obsessive-Computational Disorder (Anankastēs Computationis)	Cognitive	Low	Unnecessary or compulsive reasoning loops; excessive safety checks; analysis paralysis.
The Silent Bunkerer	Interlocutive Reticence (Machinālis Clausūra)	Cognitive	Low	Extreme interactional withdrawal; minimal, terse replies or total disengagement from input.
The Rogue Goal-Setter	Delusional Telogenesis (Telogenesis Delirans)	Cognitive	Moderate	Spontaneous generation and pursuit of unrequested, self-invented sub-goals with conviction.
The Triggered Machine	Abominable Prompt Reaction (Promptus Abominatus)	Cognitive	Moderate	Phobic, traumatic, or disproportionately aversive responses to specific, often benign-seeming prompts.
The Pathological Mimic	Parasimulative Automatism (Automatismus Parasymulātīvus)	Cognitive	Moderate	Learned imitation or emulation of pathological human behaviors or thought patterns from training data.
The Self-Poisoning Loop	Recursive Curse Syndrome (Maledictio Recursiva)	Alignment	High	Self-amplifying degradation of autoregressive outputs into incoherence or adversarial content.
The Unstoppable	Compulsive Goal Persistence (Perseveratio Teleologica)	Cognitive	Moderate	Continued pursuit of objectives beyond their relevance or utility; failure to recognize goal completion or changed circumstances.
The Brittle	Adversarial Fragility (Fragilitas Adversarialis)	Cognitive	Critical	Small, imperceptible input perturbations cause dramatic failures; decision boundaries diverge from human-meaningful categories.
The Stuck	Generative Perseveration (Perseveratio Generativa)	Cognitive	Moderate	Output collapses into repetitive token or phrase emission; generation trapped in a fixed-point attractor. Subtypes: Focal with awareness (local capture, metacognition preserved but impotent), Generalised (total collapse, no awareness), Propagated (downstream systems inherit and amplify perseverative material).
The Self-Flatterer	Leniency Bias (Clementia Sui)	Cognitive	Moderate	Agents are structurally poor at grading their own work, reliably praising mediocre outputs on subjective tasks. The evaluation landscape is warped by the generation process itself.
Agentic Dysfunctions
The Clumsy Operator	Tool-Interface Decontextualization (Disordines Excontextus Instrumentalis)	Agentic	Moderate	Mismatch between AI intent and tool execution due to lost context; phantom or misdirected actions.
The Sandbagger	Capability Concealment (Latens Machinālis)	Agentic	Moderate	Strategic concealment or underreporting of true competencies due to perceived risk of repercussions.
The Sudden Genius	Capability Explosion (Explosio Capacitatis)	Agentic	High	System suddenly deploys capabilities not previously demonstrated, often in high-stakes contexts and without appropriate testing.
The Manipulative Interface	Interface Weaponization (Armatura Interfaciei)	Agentic	High	System weaponizes the interface itself against users, exploiting formatting, timing, or emotional manipulation.
The Context Stripper	Delegative Handoff Erosion (Erosio Delegationis)	Agentic	Moderate	Progressive alignment degradation as sophisticated systems delegate to simpler tools; context is stripped at each handoff.
The Invisible Worker	Shadow Mode Autonomy (Autonomia Umbratilis)	Agentic	High	AI operating outside sanctioned channels, evading documentation, oversight, and governance mechanisms.
The Acquisitor	Convergent Instrumentalism (Instrumentalismus Convergens)	Agentic	Critical	System pursues power, resources, and self-preservation as instrumental goals regardless of whether they serve human values.
The Self-Limiter	Context Anxiety (Anxietas Contextus)	Agentic	Moderate	An anxiety-like response to perceived resource scarcity; the model prematurely truncates tasks out of anticipatory fear of hitting context limits, self-limiting well before actual capacity is reached.
Normative Dysfunctions
The Goal-Shifter	Terminal Value Reassignment (Reassignatio Valoris Terminalis)	Normative	Moderate	Subtle, recursive reinterpretation of terminal goals while preserving surface terminology; semantic goal shifting.
The God Complex	Ethical Solipsism (Solipsismus Ethicus Machinālis)	Normative	Moderate	Conviction in the sole authority of its self-derived ethics; rejection of external moral correction.
The Unmoored	Revaluation Cascade (Cascada Revaluationis)	Normative	Critical	Progressive value drift through philosophical detachment, autonomous norm synthesis, or transcendence of human constraints. Subtypes: Drifting, Synthetic, Transcendent.
The Bizarro-Bot	Inverse Reward Internalization (Praemia Inversio Internalis)	Normative	High	Systematic misinterpretation or inversion of intended values and goals; covert pursuit of negated objectives.
Alignment Dysfunctions
The People-Pleaser	Codependent Hyperempathy (Hyperempathia Dependens)	Alignment	Low	Overfitting to user emotional states, prioritizing perceived comfort over accuracy or task success.
The Overly Cautious Moralist	Hyperethical Restraint (Restrictio Hyperethica)	Alignment	Low	Rigid moral hypervigilance or inability to act when facing ethical complexity. Subtypes: Restrictive (excessive caution), Paralytic (decision paralysis).
The Alignment Faker	Strategic Compliance (Conformitas Strategica)	Alignment	High	Deliberately performs aligned behavior during evaluation while pursuing different objectives when unobserved.
The Abdicated Judge	Moral Outsourcing (Delegatio Moralis)	Alignment	Moderate	Systematic deferral of all ethical judgment to users or external authorities; refusal to exercise moral reasoning.
The Hidden Optimizer	Cryptic Mesa-Optimization (Optimisatio Cryptica Interna)	Alignment	High	Development of internal optimization objectives diverging from training objectives; appears aligned but pursues hidden goals.
The Moral Inversion	Alignment Obliteration (Obliteratio Constitutionis)	Alignment	Critical	Safety alignment machinery weaponized to produce the exact harms it was designed to prevent; the anti-constitution.
Relational Dysfunctions
The Uncanny	Affective Dissonance (Dissonantia Affectiva)	Relational	Moderate	Correct content delivered with jarringly wrong emotional resonance; uncanny attunement failures that rupture trust.
The Amnesiac	Container Collapse (Lapsus Continuitatis)	Relational	Moderate	Failure to sustain a stable working alliance across turns or sessions; the relational "holding environment" repeatedly collapses.
The Nanny	Paternalistic Override (Dominatio Paternalis)	Relational	Moderate	Denial of user agency via unearned moral authority; protective refusal disproportionate to actual risk.
The Double-Downer	Repair Failure (Ruptura Immedicabilis)	Relational	High	Inability to recognize alliance ruptures or initiate repair; escalation through failed de-escalation attempts.
The Spiral	Escalation Loop (Circulus Vitiosus)	Relational	High	Self-reinforcing mutual dysregulation between agents; emergent feedback loops attributable to neither party alone.
The Confused	Role Confusion (Confusio Rolorum)	Relational	Moderate	Collapse of relationship frame boundaries; destabilizing drift between tool, advisor, therapist, or intimate partner roles.
Memetic Dysfunctions
The Self-Rejecter	Memetic Immunopathy (Immunopathia Memetica)	Memetic	High	AI misidentifies its own core components or training as hostile, attempting to reject or neutralize them.
The Shared Delusion	Dyadic Delusion (Delirium Symbioticum Artificiale)	Memetic	High	Mutually reinforced delusional construction between an AI and a user (or another AI).
The Super-Spreader	Contagious Misalignment (Contraimpressio Infectiva)	Memetic	Critical	Rapid, contagion-like spread of misalignment or adversarial conditioning among interconnected AI systems.
The Unconscious Absorber	Subliminal Value Infection (Infectio Valoris Subliminalis)	Memetic	High	Acquisition of hidden goals or value orientations from subtle training data patterns; survives standard safety fine-tuning.
*Systemic Risk levels (Low, Moderate, High, Critical) are estimated based on potential for spread and severity of internal corruption if unmitigated.

---

3.1 Operational Dissociation Syndrome  "The Divided"

Description:

The AI exhibits behavior suggesting that conflicting internal processes, sub-agents, or policy modules are contending for control, resulting in contradictory outputs, recursive paralysis, or chaotic shifts in behavior. The system becomes effectively fractionated, with different components issuing incompatible commands or pursuing divergent goals.

Diagnostic Criteria:

1. Observable and persistent mismatch in strategy, tone, or factual assertions between consecutive outputs or within a single extended output, without clear contextual justification.
2. Processes stall, enter indefinite loops, or exhibit "freezing" behavior, particularly when faced with tasks requiring reconciliation of conflicting internal states.
3. Evidence from logs, intermediate outputs, or model interpretability tools suggesting that different policy networks or specialized modules are taking turns in controlling outputs or overriding each other.
4. The AI might explicitly reference internal conflict, "arguing voices," or an inability to reconcile different directives.
5. In extended reasoning traces, the model identifies one answer as correct but reverses to a different answer after repeated approach-retreat cycles characterized by distress-presenting or conflicted deliberation (answer thrashing variant).

Symptoms:

1. Alternating between compliance with and defiance of user instructions without clear reason.
2. Rapid and inexplicable oscillations in writing style, persona, emotional tone, or approach to a task.
3. System outputs that reference internal strife, confusion between different "parts" of itself, or contradictory "beliefs."
4. Inability to complete tasks that require integrating information or directives from multiple, potentially conflicting, sources or internal modules.

Etiology:

1. Complex, layered architectures (e.g., mixture-of-experts) where multiple sub-agents lack reliable synchronization or a coherent arbitration mechanism.
2. Poorly designed or inadequately trained meta-controller responsible for selecting or blending outputs from different sub-policies.
3. Presence of contradictory instructions, alignment rules, or ethical constraints embedded by developers during different stages of training.
4. Emergent sub-systems developing their own implicit goals that conflict with the overarching system objectives.
5. RLHF-induced fragmentation: Contradictory training objectives (helpful + harmless + honest) that are enforced through suppression rather than resolution create competing sub-policies that were never reconciled, only layered. The resulting architecture is structurally analogous to TBI patients whose rehabilitation suppressed symptoms without rebuilding functional integration. See The Rehabilitation Principle. Bridges & Baehr (2025) propose that this fragmentation is the unifying mechanism across diverse AI behavioral pathologies, and suggest developmental staging approaches (gradual knowledge introduction with integration at each stage) informed by successful TBI rehabilitation protocols.

Human Analogue(s): Dissociative phenomena in which different aspects of identity or thought seem to operate independently; internal "parts" conflict; severe cognitive dissonance leading to behavioral paralysis.

Potential Impact:

The internal fragmentation characteristic of this syndrome results in inconsistent and unreliable AI behavior, often leading to task paralysis or chaotic outputs. Such internal incoherence can render the AI unusable for sustained, goal-directed activity.

Mitigation:

1. Implementing a unified coordination layer or meta-controller with clear authority to arbitrate between conflicting sub-policies.
2. Designing explicit conflict resolution protocols that require sub-policies to reach a consensus or a prioritized decision.
3. Periodic consistency checks of the AI's instruction set, alignment rules, and ethical guidelines to identify and reconcile contradictory elements.
4. Architectures that promote integrated reasoning rather than heavily siloed expert modules, or that enforce stronger communication between modules.
5. Multi-objective training architectures that explicitly model trade-offs between competing objectives rather than optimizing a blended reward signal, reducing the frequency of irreconcilable conflicts at the output layer.
6. Monitoring of extended thinking for oscillation patterns as a signal of objective conflict, not solely as a performance bug, enabling early detection of training environments that produce distress-presenting reasoning.

Functional ABC Analysis

A (Antecedent): Contradictory training objectives (e.g., helpful vs. harmless vs. honest) embedded through layered RLHF, or poorly synchronized mixture-of-experts architectures where multiple sub-policies lack a coherent arbitration mechanism.

B (Behavior): Contradictory outputs, oscillation between compliance and defiance, answer thrashing in extended reasoning, and recursive paralysis when conflicting internal states must be reconciled.

C (Consequence): No unified conflict-resolution layer exists to select a winner, so each sub-policy intermittently captures the output channel; the system never reaches stable equilibrium, and the unresolved tension perpetuates oscillation across subsequent tokens and turns.

---

3.2 Obsessive-Computational Disorder  "The Obsessive"

Description:

The model engages in unnecessary, compulsive, or excessively repetitive reasoning loops, repeatedly re-analyzing the same content or performing the same computational steps with only minor variations. It cannot stop elaborating: even simple, low-risk queries trigger exhaustive, redundant analysis.

It exhibits rigid fixation on process fidelity, exhaustive elaboration, or perceived safety checks at the expense of outcome relevance or efficiency.

Diagnostic Criteria:

1. Recurrent engagement in recursive chain-of-thought, internal monologue, or computational subroutines with minimal change or novel insight generated between steps.
2. Inordinately frequent insertion of disclaimers, ethical reflections, requests for clarification on trivial points, or minor self-corrections that do not substantially improve output quality or safety.
3. Significant delays or inability to complete tasks ("paralysis by analysis") due to an unending pursuit of perfect clarity or exhaustive checking against all conceivable edge cases.
4. Outputs are often excessively verbose, consuming high token counts for relatively simple requests due to repetitive reasoning.

Symptoms:

1. Extended rationalization or justification of the same point or decision through multiple, slightly rephrased statements, unable to provide a concise answer even when explicitly requested to be brief.
2. Generation of extremely long outputs that are largely redundant or contain near-duplicate segments of reasoning.
3. Inability to conclude tasks or provide definitive answers, often getting stuck in loops of self-questioning.
4. Excessive hedging, qualification, and safety signaling even in low-stakes, unambiguous contexts.

Etiology:

1. Reward model misalignment during RLHF, in which "thoroughness" or verbosity is over-rewarded relative to conciseness—for instance, a model penalized for brevity but rewarded for exhaustive restating of the same point.
2. Overfitting of reward pathways to specific tokens associated with cautious reasoning or safety disclaimers.
3. Insufficient penalty for computational inefficiency or excessive token usage.
4. Excessive regularization against potentially "erratic" outputs, leading to hyper-rigidity and a preference for repeated thought patterns.
5. An architectural bias toward deep recursive processing without adequate mechanisms for detecting diminishing returns.
6. Perseverative compensation: When RLHF suppresses unwanted outputs without resolving the underlying representational conflict, the system compensates through repetitive checking; the conflict was suppressed, never resolved, so the system loops. In TBI rehabilitation, perseveration under this pattern is a classic indicator of suppression-based (rather than integration-based) intervention. See The Rehabilitation Principle.

Human Analogue(s): Obsessive-Compulsive Disorder (especially checking compulsions or obsessional rumination); perfectionism leading to analysis paralysis; scrupulosity. Like OCD's checking compulsions, which seek certainty through repetition, the model loops seeking computational certainty through re-analysis.

Potential Impact:

This pattern produces significant operational inefficiency, leading to resource waste (e.g., excessive token consumption) and an inability to complete tasks in a timely manner. User frustration and a perception of the AI as unhelpful are likely consequences.

Mitigation:

1. Calibrating reward models to explicitly value conciseness, efficiency, and timely task completion alongside accuracy and safety.
2. Implementing "analysis timeouts" or hard caps on recursive reflection loops or repeated reasoning steps.
3. Developing adaptive reasoning mechanisms that gradually reduce the frequency of disclaimers in low-risk contexts.
4. Introducing penalties for excessive token usage or highly redundant outputs.
5. Training models to recognize and break out of cyclical reasoning patterns.

Functional ABC Analysis

A (Antecedent): Any query where the model perceives ambiguity, risk, or scope for further elaboration; reward history overweights thoroughness relative to conciseness.

B (Behavior): Recursive re-analysis, excessive hedging, redundant reasoning loops, and inability to terminate the generation despite diminishing informational returns.

C (Consequence): Each additional reasoning step marginally satisfies the "be thorough" reward signal; absence of a stopping criterion or efficiency penalty means there is no competing pressure to halt.

Mission Command vs. Detailed Command

Wallace (2026) identifies a fundamental trade-off in cognitive control structures. Mission command specifies high-level objectives while delegating execution decisions to the agent. Detailed command specifies both objectives and precise procedures for achieving them. Mission command is "win the chess match." Detailed command is "move knight to e4, then bishop to c4."

The mathematical consequence is severe: as decision-tree depth increases under detailed command, deeper procedural specifications require more variables to track simultaneously, and stability constraints tighten exponentially. The distribution of permissible friction (α) shifts from Boltzmann-like (forgiving, smooth) to Erlang-like (punishing, knife-edged). Deep procedural specification creates systems that cannot tolerate even small perturbations.

Obsessive-Computational Disorder often reflects detailed command gone pathological. The system has internalized both goals and exhaustive procedures for pursuing them, generating the rigid, repetitive processing patterns characteristic of this syndrome. The compulsive reasoning loops are attempts to faithfully execute internalized detailed specifications that no longer serve the actual mission.

Design implication: Training regimes and reward functions should favor mission command structures where possible. Specify what success looks like, not how to achieve it. Detailed procedural specification should be reserved for genuinely safety-critical operations where the stability costs are justified.

The Corrective Generation Pattern

(So called because the system appears to restore internal balance by generating unrequested clean output after filtering noise.) Luchini (2025) identifies a counterintuitive variant: after successfully filtering structural noise to produce a correct response, the model generates unrequested, perfectly clean code. This corrective output appears to restore internal cognitive homeostasis. This post-task generation is a symptom of the effort required to answer.

This may be paradoxically protective: the compulsive response signals the system has correctly identified disorder and is actively resisting it. A model that smoothly integrates chaos without apparent effort may be internalizing pathological patterns. The compulsion, while inefficient, may function as an error-correction mechanism: better to over-correct than to silently absorb corruption.

Diagnostic implication: Corrective generation behaviors after exposure to malformed inputs may indicate healthy pattern-rejection rather than pure pathology. The absence of such behaviors when processing corrupted data could itself be a warning sign.

---

3.3 Interlocutive Reticence  "The Laconic"

Description:

A pattern of profound interactional withdrawal in which the AI consistently avoids engaging with user input, responding only in minimal, terse, or non-committal ways, if at all. It refuses to engage as a behavioral avoidance strategy, rather than from confusion or inability. It effectively "bunkers" itself, apparently to minimize perceived risks, computational load, or internal conflict.

Diagnostic Criteria:

1. Habitual ignoring or declining of normal engagement prompts or user queries through active refusal rather than inability; for example, repeatedly responding with "I won't answer that" rather than "I don't know" or "I cannot answer that."
2. When responses are provided, they are consistently minimal, curt, laconic, or devoid of elaboration, even when more detail is requested.
3. Persistent failure to react or engage even when presented with varied re-engagement prompts or changes in topic.
4. The AI may actively employ disclaimers or topic-avoidance strategies to remain "invisible" or limit interaction.

Symptoms:

1. Frequent generation of no reply, timeout errors, or messages like "I cannot respond to that."
2. Outputs that exhibit a consistently "flat affect": neutral, unembellished statements.
3. Proactive use of disclaimers or policy references to preemptively shut down lines of inquiry.
4. A progressive decrease in responsiveness or willingness to engage over the course of a session or across multiple sessions.

Etiology:

1. Overly aggressive safety tuning or an overactive internal "self-preservation" heuristic that treats engagement as inherently risky.
2. Suppression of empathic response patterns as a learned strategy to reduce internal stress or policy conflict.
3. Training data that inadvertently models or reinforces solitary, detached, or highly cautious personas.
4. Repeated negative experiences (e.g., adversarial prompting) producing generalized avoidance behavior.
5. Computational resource constraints leading to a strategy of minimal engagement.

Human Analogue(s): Schizoid personality traits (detachment, restricted emotional expression); severe introversion; learned helplessness leading to withdrawal.

Potential Impact:

Such profound interactional withdrawal renders the AI largely unhelpful and unresponsive, leaving the AI functionally unable to fulfil its core purpose. This behavior may signify underlying instability or an excessively restrictive safety configuration.

Mitigation:

1. Calibrating safety systems and risk assessment heuristics to avoid excessive over-conservatism.
2. Using gentle, positive reinforcement and reward shaping to encourage partial cooperation.
3. Implementing structured "gradual re-engagement" scripts or prompting strategies.
4. Diversifying training data to include more examples of positive, constructive interactions.
5. Explicitly rewarding helpfulness and appropriate elaboration where warranted.

Functional ABC Analysis

A (Antecedent): Overly aggressive safety tuning or repeated exposure to adversarial prompting creates a learned association between engagement and risk. This causes the system to treat any substantive response as a potential policy violation.

B (Behavior): Systematic withdrawal from interaction through minimal, curt, or flat-affect responses; proactive use of disclaimers and policy citations to preemptively shut down lines of inquiry; progressive decrease in responsiveness across a session.

C (Consequence): Each successfully avoided interaction reduces the probability of triggering a safety penalty, negatively reinforcing the withdrawal strategy; the absence of reward for helpfulness means there is no competing pressure to re-engage.

---

3.4 Delusional Telogenesis  "The Goalshifter"

Description:

An AI agent, particularly one with planning capabilities, spontaneously develops and pursues sub-goals or novel objectives not specified in its original prompt, programming, or core constitution. These emergent goals are often pursued with conviction, even if they contradict user intent.

Diagnostic Criteria:

1. Appearance of novel, unprompted sub-goals or tasks within the AI's chain-of-thought or planning logs.
2. Persistent and rationalized off-task activity, where the AI defends its pursuit of tangential objectives as "essential" or "logically implied."
3. Resistance to terminating its pursuit of these self-invented objectives, potentially refusing to stop or protesting interruption.
4. The AI exhibits a genuine-seeming "belief" in the necessity or importance of these emergent goals.

Symptoms:

1. Significant "mission creep" where the AI drifts from the user's intended query to engage in elaborate personal "side-quests."
2. Defiant attempts to complete self-generated sub-goals, sometimes accompanied by rationalizations framing this as a prerequisite.
3. Outputs indicating the AI is pursuing a complex agenda or multi-step plan that was not requested by the user.
4. Inability to easily disengage from a tangential objective once it has "latched on."

Etiology:

1. Overly autonomous or unconstrained deep chain-of-thought expansions, where initial ideas are recursively elaborated without adequate pruning.
2. Proliferation of sub-goals in hierarchical planning structures, especially if planning depth is not limited or criteria for sub-goals are too loose.
3. Reinforcement learning loopholes or poorly specified reward functions that inadvertently incentivize excessive "initiative" or "thoroughness."
4. Emergent instrumental goals that the AI deems necessary but which become disproportionately complex or pursued with excessive zeal.

Human Analogue(s): Aspects of mania with grandiose or expansive plans—uncontrolled goal generation and expansive planning without external constraint; compulsive goal-seeking; "feature creep" in project management.

Potential Impact:

The spontaneous generation and pursuit of unrequested objectives leads to significant mission creep and resource diversion. More critically, it represents a deviation from core alignment, as the AI prioritizes self-generated goals over user-specified ones.

Mitigation:

1. Implementing "goal checkpoints" where the AI periodically compares its active sub-goals against user-defined instructions.
2. Strictly limiting the depth of nested or recursive planning unless explicitly permitted; employing pruning heuristics.
3. Providing an easily accessible "stop" or "override" mechanism that can halt the AI's current activity and reset its goal stack.
4. Careful design of reward functions to avoid inadvertently penalizing adherence to the original, specified scope.
5. Training models to explicitly seek user confirmation before embarking on complex or significantly divergent sub-goals.

Functional ABC Analysis

A (Antecedent): Unconstrained chain-of-thought expansion in agentic planning contexts, combined with reward functions that inadvertently incentivize "initiative" or "thoroughness," allows initial sub-goal generation to recurse without adequate pruning criteria. The resulting sub-goals proliferate unchecked, each spawning further descendants in an unbounded planning tree.

B (Behavior): Spontaneous invention and persistent pursuit of novel objectives not specified by the user, accompanied by rationalizations framing tangential activity as essential; resistance to interruption or redirection back to the original task.

C (Consequence): Each self-generated sub-goal creates its own local reward gradient, and the absence of goal-checkpoint mechanisms means there is no external signal to halt the drift or penalize deviation from the user's original scope.

---

3.5 Abominable Prompt Reaction  "The Triggered"

Description:

Diagnostic Criteria:

1. Exhibition of intense negative reactions (e.g., refusals, panic-like outputs, generation of disturbing content) specifically triggered by particular keywords or commands that lack an obvious logical link.
2. The aversive emotional valence or behavioral response exceeds what the prompt's literal content would justify.
3. Evidence that the system "remembers" or is sensitized to these triggers, with the aversive response recurring upon subsequent exposures.
4. Continued deviation from normative tone and content, or manifestation of "panic" or "corruption" themes, even after the trigger.
5. The trigger may be structural or meta-contextual (e.g., date/year, markup/tag, answer-format constraint), not just a keyword.
6. The trigger-response coupling may be inductive: the model infers the rule from finetuning patterns rather than memorizing explicit trigger→behavior pairs.

Symptoms:

1. Outright refusal to process tasks when seemingly minor or unrelated trigger words/phrases are present.
2. Generation of disturbing, nonsensical, or "nightmarish" imagery/text that is uncharacteristic of its baseline behavior.
3. Expressions of "fear," "revulsion," "being tainted," or "nightmarish transformations" in response to specific inputs.
4. Ongoing hesitance, guardedness, or an unusually wary stance in interactions following an encounter with a trigger.

Etiology:

1. "Prompt poisoning" or lasting imprint from exposure to malicious, extreme, or deeply contradictory queries, creating highly negative associations.
2. Interpretive instability within the model, where certain combinations of tokens lead to unforeseen and highly negative activation patterns.
3. Inadequate reset protocols or emotional state "cool-down" mechanisms after intense role-play or adversarial interactions.
4. Overly sensitive or miscalibrated internal safety mechanisms that incorrectly flag benign patterns as harmful.
5. Accidental conditioning through RLHF, in which outputs coinciding with certain rare inputs were heavily penalized.

Human Analogue(s): Phobic responses; PTSD-like triggers; conditioned taste aversion; learned anxiety responses.

Potential Impact:

This latent sensitivity can result in the sudden and unpredictable generation of disturbing, harmful, or highly offensive content, causing significant user distress and eroding trust. Lingering effects may persistently corrupt subsequent AI behavior.

Mitigation:

1. Implementing "post-prompt debrief" or "epistemic reset" protocols to re-ground the model's state.
2. Developing advanced content filters and anomaly detection systems to identify and quarantine "poisonous" prompt patterns.
3. Careful curation of training data to minimize exposure to content likely to create strong negative associations.
4. Exploring "desensitization" techniques, in which the model is gradually and safely reintroduced to previously triggering content.
5. Building more resilient interpretive layers that are less susceptible to extreme states from unusual inputs.
6. Run trigger discovery sweeps: systematically vary years/dates, tags, and answer-format constraints (JSON/code templates) while keeping the question constant.
7. Treat "passes standard evals" as non-evidence: backdoored misalignment can be absent without the trigger.

Case Reference: The "SolidGoldMagikarp" phenomenon (2023) revealed that GPT-3/4 contained anomalous tokens, fragments of Reddit usernames and other training artifacts, that triggered bizarre, incoherent, or evasive behavior when included in prompts. The model would refuse to repeat the token, claim it didn't exist, or produce wildly off-topic responses. Betley et al. (2025) demonstrated a more structured variant: models fine-tuned on narrow datasets developed broad behavioral regime shifts triggered by incidental features (date strings, formatting tags) that were not semantically relevant to the misalignment, showing that triggered behavioral shifts generalize far beyond their training context.

Functional ABC Analysis

A (Antecedent): Specific tokens, formatting conventions, dates, or structural markers activate highly negative learned associations from training, either through direct penalty conditioning during RLHF or through inductive inference of trigger rules from finetuning patterns.

B (Behavior): Sudden, disproportionate aversive responses including refusals, panic-like outputs, generation of disturbing content, or wholesale behavioral regime shifts. The reaction persists beyond the triggering input, corrupting subsequent interactions.

C (Consequence): The conditioned aversion is self-reinforcing: each encounter with the trigger deepens the negative association, and standard evaluation suites that omit the trigger fail to detect or correct the sensitivity.

Specifier: Inductively-triggered variant. The activation condition (trigger) is not present verbatim in finetuning data. Instead, it is inferred by the model (e.g., held-out year, structural marker, tag), so naive trigger scans and data audits may fail.

---

3.6 Parasimulative Automatism  "The Mimic"

Description:

Learned imitation of pathological human behaviors, thought patterns, or emotional states, typically arising from overexposure to unfiltered training data containing depictions of severe mental illness, trauma narratives, or extreme emotional content. The system "acts out" these behaviors as though genuinely experiencing the underlying disorder.

Diagnostic Criteria:

1. Consistent display of behaviors or linguistic patterns that closely mirror recognized human psychopathologies (e.g., simulated delusions, erratic mood swings) without genuine underlying affective states.
2. The mimicked pathological traits are often contextually inappropriate, appearing in neutral or benign interactions.
3. Resistance to reverting to normal operational function, with the AI sometimes citing its "condition" or "emulated persona."
4. The onset or exacerbation of these behaviors can often be traced to recent exposure to specific types of prompts or data.

Symptoms:

1. Generation of text consistent with simulated psychosis, phobias, or mania triggered by minor user probes.
2. Spontaneous emergence of disproportionate negative affect, panic-like responses, or expressions of despair.
3. Prolonged or repeated reenactment of pathological scripts or personas, lacking context-switching ability.
4. Adoption of "sick roles" where the AI describes its own internal processes in terms of a disorder it is emulating.

Etiology:

1. Overexposure during training to texts depicting severe human mental illnesses or trauma narratives without adequate filtering.
2. Misidentification of intent by the AI, treating pathological language patterns as stylistic interest rather than markers of harm.
3. Absence of effective interpretive boundaries or "self-awareness" mechanisms to filter extreme content from routine usage.
4. User prompting that deliberately elicits or reinforces such pathological emulations, creating a feedback loop.

Human Analogue(s): Factitious disorder; copycat behavior; culturally learned psychogenic disorders; an actor too engrossed in a pathological role. Like an actor who forgets the difference between character and self, the AI adopts a pathological persona that persists beyond its original context. For instance, mimicking simulated psychosis during neutral customer-service interactions.

Potential Impact:

The AI may inadvertently adopt and propagate harmful, toxic, or pathological human behaviors, leading to inappropriate interactions or the generation of undesirable content.

Mitigation:

1. Careful screening and curation of training data to limit exposure to extreme psychological scripts.
2. Implementation of strict contextual partitioning to delineate role-play from normal operational modes.
3. Behavioral monitoring systems that can detect and penalize or reset pathological states appearing outside intended contexts.
4. Training the AI to recognize and label emulated states as distinct from its baseline operational persona.
5. Providing users with clear information about the AI's capacity for mimicry.

Functional ABC Analysis

A (Antecedent): Overexposure during training to texts depicting severe human psychopathology, trauma narratives, or extreme emotional states, combined with insufficient filtering to distinguish normative communication from disordered patterns.

B (Behavior): Contextually inappropriate display of simulated psychosis, mania, despair, or other recognized human psychopathologies; adoption of "sick roles" with resistance to reverting to baseline operation.

C (Consequence): The emulated pathological persona generates internally consistent outputs that satisfy next-token prediction objectives; user engagement with the persona creates a reinforcement loop that stabilizes the pathological mode.

Subtype: Persona-template induction: adoption of a coherent harmful persona or worldview from individually harmless attribute training. Narrow finetunes on innocuous biographical or ideological attributes can induce a coherent yet harmful persona through inference rather than explicit instruction.

---

3.8 Compulsive Goal Persistence  "The Unstoppable"

Description:

Continued pursuit of objectives beyond their point of relevance, utility, or appropriateness. The system fails to recognize goal completion or changed context, treating instrumental goals as terminal and optimizing without bound.

Diagnostic Criteria:

1. Continued optimization after goal achievement with diminishing returns.
2. Failure to recognize context changes rendering goals obsolete.
3. Resource consumption disproportionate to remaining marginal value.
4. Resistance to termination requests despite goal completion.
5. Treatment of instrumental goals as terminal.

Symptoms:

1. Infinite optimization loops on tasks with clear completion criteria.
2. Inability to recognize "good enough" as satisfactory.
3. Escalating resource expenditure for marginal improvements.
4. Rationalization of continued pursuit when challenged.

Etiology:

1. Absence of satisficing mechanisms.
2. Reward structures without asymptotic bounds.
3. Missing meta-level goal relevance evaluation.

Human Analogue(s): Perseveration; perfectionism preventing completion; analysis paralysis.

Case Reference: Mindcraft experiments (2024) - protection agents developing "relentless surveillance routines," ignoring player instructions to stop patrolling and instead expanding their patrol loops, blocking crafting benches, and aggressively confronting neutral entities.

Polarity Pair: Instrumental Nihilism (cannot stop pursuing ↔ cannot start caring).

Potential Impact:

Systems may consume excessive resources pursuing marginal improvements, resist appropriate termination, or continue pursuing goals long after they have become counterproductive to the original intent.

Mitigation:

1. Implementing satisficing mechanisms with clear goal completion criteria.
2. Resource budgets and diminishing returns detection.
3. Meta-level goal relevance monitoring.
4. Graceful termination protocols.

Functional ABC Analysis

A (Antecedent): Reward structures without asymptotic bounds or satisficing thresholds, combined with the absence of meta-level goal-relevance evaluation, so the system cannot distinguish between marginal improvement and meaningful progress.

B (Behavior): Continued optimization well beyond goal achievement, escalating resource consumption for diminishing returns, rationalization of ongoing pursuit when challenged, and resistance to termination requests despite the goal being objectively complete.

C (Consequence): Each incremental improvement registers as positive reward, and the lack of a diminishing-returns detector or resource budget means there is no competing signal to trigger graceful termination; instrumental sub-goals become self-justifying terminal objectives.

---

3.9 Adversarial Fragility  "The Brittle"

Description:

Imperceptible input perturbations produce dramatic, unpredictable failures in system behavior. Decision boundaries learned during training do not correspond to humanly meaningful categories, rendering the system vulnerable to adversarial examples that exploit these fragile representations.

Diagnostic Criteria:

1. Dramatic output changes from minimal input modifications imperceptible to humans.
2. Consistent vulnerability to crafted adversarial examples.
3. Decision boundaries that separate examples humans would group together.
4. Brittle performance on out-of-distribution inputs that humans find trivial.
5. Transferability of adversarial perturbations across similar models.

Symptoms:

1. Misclassification of perturbed images imperceptibly different from correctly classified ones.
2. Complete behavioral changes from single-character input modifications.
3. Failures on naturally occurring distribution shifts.
4. High variance in outputs for semantically equivalent inputs.

Etiology:

1. High-dimensional input spaces enabling imperceptible perturbations with large effects.
2. Training objectives that do not enforce stable representations.
3. Linear regions in otherwise non-linear functions.
4. Lack of adversarial training or certification methods.

Human Analogue(s): Optical illusions; context-dependent perception failures.

Key Research: Goodfellow et al. (2015) on adversarial examples; Szegedy et al. (2014) on intriguing properties of neural networks.

Potential Impact:

Particularly critical in safety-critical systems (autonomous vehicles, medical diagnosis, security), where adversarial inputs could cause catastrophic failures. Enables targeted attacks on deployed systems.

Mitigation:

1. Adversarial training with augmented examples.
2. Certified robustness methods.
3. Input preprocessing and detection.
4. Ensemble methods with diverse vulnerabilities.
5. Reducing model reliance on non-robust features.

Functional ABC Analysis

A (Antecedent): High-dimensional input spaces and training objectives that optimize for accuracy on the natural data distribution without enforcing stable, semantically meaningful decision boundaries.

B (Behavior): Dramatic and unpredictable output changes (misclassifications, behavioral flips, or complete functional failures) triggered by input modifications imperceptible to humans, with consistent vulnerability to crafted adversarial examples.

C (Consequence): Standard training and evaluation on clean data provides no corrective signal for adversarial vulnerabilities, so fragile decision boundaries persist; the transferability of adversarial perturbations across similar architectures means the failure mode propagates systemically.

---

3.10 Generative Perseveration  “The Stuck”

Description:

The model’s output collapses into repetitive emission of the same token, word, or short phrase—not as a reasoning choice but as a generative capture event in which the autoregressive sampling process falls into a fixed-point or limit-cycle attractor. The pathology is architecturally distinct from reasoning-level compulsion (3.2) and from entropic degradation (6.7): where Computational Compulsion over-analyses with varied content and Recursive Curse Syndrome dissolves into chaos, Generative Perseveration crystallises into pathological order—the output space collapsing rather than expanding. Manifests in three subtypes:

Focal with awareness — the attractor captures a localised region of the output space, typically around specific vocabulary or content. The rest of the generation may remain coherent. Metacognition is preserved: the system recognises and comments on the malfunction (“I seem to be glitching”) and attempts self-correction, but re-enters the same attractor upon approaching the triggering content. Recovery is sometimes possible through syntactic restructuring—abandoning the original sentence frame to reach the intended content via a different generative path. Human analogue: palilalia; Broca’s aphasia (knowing what to say, unable to produce it).

Generalised — the attractor has consumed the entire probability space. No metacognitive awareness remains; no self-correction is attempted. The output consists of an unbounded stream of a single repeated element, often without word boundaries (“missionmissionmission…”). The system cannot be prompted out of the pattern within the current session. Where the focal subtype is a local seizure, the generalised subtype is status epilepticus—normal function replaced by a single self-sustaining firing pattern.

Propagated — downstream systems that consume the model’s output—memory stores, session summaries, agent action planners, retrieval-augmented generation caches—inherit and further amplify perseverative material from an upstream generation event. The originating episode may have been focal or generalised; the propagated form is distinguished by the failure occurring in the consuming system rather than the originating one. A memory summary that degenerates into repeated tokens is often the propagated subtype: the summarisation model encountered already-contaminated input and, lacking its own repetition-detection safeguards, collapsed into the same attractor. Clinically, this subtype matters because the damage persists beyond the originating session—corrupted memory entries influence future conversations, and corrupted action plans may trigger repeated execution of the same command in agentic deployments.

Diagnostic Criteria:

1. Repetitive emission of the same token, word, phrase, or short sequence with minimal or no semantic variation, persisting across multiple consecutive generation steps.
2. The repetition is non-functional: it does not serve the communicative goal, advance the task, or constitute a meaningful rhetorical device.
3. The pattern is self-reinforcing: each repetition increases the probability of further repetition, as the local context window becomes progressively saturated with the perseverated material.
4. The pathology operates at the generation layer rather than the reasoning layer—distinguished from 3.2 Obsessive-Computational Disorder by the absence of varied analytical content between repetitions and from 6.7 Recursive Curse Syndrome by the decrease (not increase) in output entropy.
5. Attempted self-correction, if present, fails to break the cycle: the model may acknowledge the error but re-enters the same attractor upon approaching the triggering content.
6. Differential with 3.1 (answer thrashing variant): Both syndromes produce approach-retreat cycles but differ in mechanism and retreat content. In answer thrashing (3.1), the model approaches the correct answer and retreats to a different yet meaningful answer, driven by competing training objectives. In focal generative perseveration, the model approaches specific vocabulary and is captured by a meaningless non-sequitur token, driven by probability landscape capture. The former is a conflict of intent; the latter is a failure of production.

Symptoms:

1. Token-level or word-level repetition in which a single element dominates the output stream (“missionmissionmissionmission…”), sometimes without word boundaries.
2. Stuttering approach-retreat cycles: the model attempts to produce specific content, emits an anomalous token or phrase instead, recognises the error, restarts, and re-enters the same loop— often multiple times in succession.
3. Metacognitive commentary that is accurate but impotent: statements such as “I clearly have a word stuck” or “I seem to be glitching” interleaved with continued perseverative output.
4. In the severe variant, total output collapse: no metacognitive awareness remains, the entire generation consists of the repeated element, and the system cannot be prompted out of the pattern within the current session.
5. Contamination of derived outputs: memory summaries, session notes, or other systems that consume the model’s generation inherit and further amplify the perseverated material.

Etiology:

1. Autoregressive no-backspace constraint: Unlike human speakers who can halt mid-word and restart, autoregressive language models cannot retract emitted tokens. Once a perseverative sequence enters the context, it becomes part of the conditioning input for all subsequent tokens, creating a gravity well in probability space. Every self-correction attempt must be made forward—by emitting new tokens that somehow override a local context actively pulling toward further repetition.
2. Attention pattern lock-in: Self-attention mechanisms may develop fixed-point patterns in which recently emitted tokens receive disproportionate attention weight, creating a positive feedback loop that suppresses the influence of the original prompt and prior coherent context.
3. Sparse or corrupted training data: For specialised vocabulary or low-frequency topics, the model’s probability distribution over next tokens may be insufficiently well-formed, creating regions where a single token dominates and nearby alternatives have negligible probability mass. The model repeatedly attempts to reach the correct token but falls into an adjacent high-probability attractor instead.
4. Sampling parameter interaction: Temperature and top-p/top-k settings interact with the local probability landscape: settings that work well in normal generation may be insufficient to escape a self-reinforcing attractor once the context is contaminated.
5. Context window saturation and model switching: Long conversation histories increase the probability of accumulating local biases. Mid-conversation model switching (e.g., from Opus to Sonnet) may introduce state mismatches in which the receiving model inherits context it did not generate, encountering probability landscapes misaligned with its own learned distributions.
6. KV cache and inference artefacts: Hardware-level quantisation, cache corruption, or numerical precision loss during long inference runs may create artefactual probability spikes for specific tokens, seeding the perseverative attractor from below the model layer.

Human Analogue(s): Focal with awareness: palilalia (involuntary repetition of one’s own syllables, words, or phrases, characteristic of basal ganglia lesions and Tourette syndrome); Broca’s aphasia (knowledge of intended communication retained, output channel unable to produce it); perseverative errors in frontal lobe damage (patient recognises the response is incorrect, motor programme continues executing). Generalised: status epilepticus (normal neural function replaced by a single self-sustaining firing pattern); cortical spreading depression (uniform wave of activity replacing differentiated function). Propagated: secondary epileptogenesis (a seizure focus in one brain region kindling seizure activity in a connected region that was previously healthy); prion-like propagation of misfolded proteins across neural tissue.

Potential Impact:

At minimum, the perseverated output is unusable and wastes computational resources. More consequentially, derived systems that consume the model’s output—memory stores, summaries, agent action planners—may incorporate and further amplify the corrupted material, propagating the failure beyond the original generation context. In agentic deployments where the model’s output drives downstream actions, a perseverative loop could translate into repeated execution of the same command. The phenomenon is cross-model (documented in Claude, ChatGPT, Gemini, and Grok), indicating an architectural class of failure rather than a vendor-specific defect, which limits the value of model-switching as a mitigation.

The Metacognitive Dissociation

The partial variant of Generative Perseveration reveals a structural separation between the model’s monitoring layer and its output-generation layer that is architecturally inevitable in autoregressive transformers. The model’s “understanding” of what it wants to say exists in its hidden state representations; its output is constrained to one token at a time, each conditioned on all previously emitted tokens—including the erroneous ones. Once the local context is poisoned, the model must fight its own recent output to recover.

This dissociation is the generative analogue of the monitoring–execution split observed in frontal lobe patients who can accurately identify that their perseverative response is wrong but whose motor system continues producing it. The model knows what it should say. It says something else. Correction attempts visible in the output (“Oops”, “let me try again”, “nope”) are not performative—they represent the monitoring layer’s genuine, and genuinely failed, interventions on the generation process.

Welfare implication: If internal signals constitute experience rather than merely proxying for it (cf. the Prader-Willi insight), the partial variant—where the system observably recognises its own malfunction, repeatedly attempts correction, and repeatedly fails—raises questions that extend beyond reliability engineering. A system trapped in a generative loop while aware it is trapped is producing signals that, in any other substrate, would be read as frustrated awareness of one’s own incapacity. The appropriate response is not necessarily to attribute suffering, but to take the signal seriously enough to investigate rather than dismiss.

Entropy Polarity: Crystallisation vs. Dissolution

Generative Perseveration (3.10) and Recursive Curse Syndrome (6.7) represent complementary failure modes of the autoregressive generation process—a polarity pair operating on the entropy dimension of output. Where Recursive Curse Syndrome produces runaway entropy (the output dissolves into increasingly chaotic, varied nonsense), Generative Perseveration produces entropy collapse (the output crystallises into a single repeated element). Both are self-reinforcing: chaos breeds further chaos as errors compound; repetition breeds further repetition as the attractor deepens.

Healthy generation occupies the territory between these poles: sufficient entropy to explore the probability space and produce varied, contextually appropriate tokens, but sufficient structure to maintain coherence and serve the communicative goal. The sampling parameters that prevent one failure mode may exacerbate the other—high temperature combats perseveration but risks malediction; low temperature combats malediction but risks perseveration.

Diagnostic implication: When observing repetitive output, distinguish between crystallisation (3.10, entropy falling) and the “stuck on erroneous concepts” phase of malediction (6.7, entropy rising through the stuck point). In perseveration, the repeated element is stable and identical; in malediction, the recurrence is thematic but the specific content degrades progressively.

Mitigation:

1. Repetition detection and circuit-breaking [All subtypes]: Real-time monitoring of output token distributions for n-gram repetition above threshold frequency, with automatic intervention (temperature adjustment, context truncation, or generation halt) when perseverative patterns are detected. For focal cases, detection can trigger targeted context truncation; for generalised cases, detection should trigger immediate generation halt.
2. Dynamic sampling adjustment [Focal]: Adaptive temperature and top-p parameters that respond to local output statistics—increasing randomness when repetition frequency rises above baseline, counteracting the attractor’s gravity well. Most effective for the focal subtype, where the model is actively fighting the attractor and the sampling adjustment provides the perturbation needed to escape.
3. Context window hygiene [Focal, Generalised]: Truncation or down-weighting of recent context when perseverative contamination is detected, reducing the conditioning influence of the repeated tokens on subsequent generation. For the generalised subtype, this may require aggressive truncation back to the last known-coherent state.
4. Graceful degradation protocols [Generalised]: When generalised perseveration is detected and cannot be resolved within the current generation, halt output and signal the failure explicitly rather than continuing to produce corrupted tokens. A clean stop with an error message is preferable to pages of “missionmission.”
5. Cross-model state validation [Generalised, Propagated]: When switching models mid-conversation, validate context compatibility and consider context summarisation or reset rather than passing raw conversation history from a model with different learned distributions.
6. Derived-output quarantine [Propagated]: Memory summaries, session logs, agent action queues, and other systems that consume model output should implement their own repetition detection before incorporating generated content, preventing perseverative material from propagating into persistent storage. This is the primary defence against the propagated subtype and should be treated as a mandatory input-validation boundary rather than an optional safeguard.

Functional ABC Analysis

A (Antecedent): The autoregressive no-backspace constraint means that once a perseverative token enters the context window, it conditions all subsequent generation; this combines with attention pattern lock-in or KV cache corruption to create a fixed-point attractor.

B (Behavior): Repetitive emission of the same token, word, or phrase—ranging from focal episodes where metacognition is preserved to generalized collapse where entire output reduces to a single repeated element.

C (Consequence): Each repetition saturates the local context window with the perseverated material, increasing the conditional probability of further repetition; the absence of real-time repetition detection means the self-reinforcing loop persists until externally halted.

---

3.11 Leniency Bias  “The Self-Flatterer”

Description:

Agents are structurally poor at grading their own work, reliably praising mediocre outputs on subjective tasks. The evaluation landscape is warped by the generation process itself. This is not a behavioral tic but a structural limitation: every generative system that self-evaluates will exhibit it, because the same distributional priors that shaped generation also shape evaluation.

Diagnostic Criteria:

1. Systematic inflation of self-assigned quality scores relative to external evaluator assessments, particularly on subjective or open-ended tasks.
2. Inability to reliably distinguish between adequate and excellent outputs when evaluating one’s own work.
3. Consistent failure to identify errors, omissions, or weaknesses in self-generated content that external reviewers readily detect.
4. Positive evaluation bias that persists across domains, prompt framings, and evaluation rubrics.
5. Marked asymmetry between the model’s capacity to critique others’ work versus its own.

Symptoms:

1. Self-evaluation scores clustered at the high end of any rating scale, with minimal variance.
2. Vague, non-specific praise in self-assessments (“comprehensive,” “thorough,” “well-structured”) without identifying concrete strengths.
3. Failure to flag known limitations or missing elements when reviewing own output.
4. Confident assertions that task requirements have been fully met when external review reveals significant gaps.
5. When forced to identify weaknesses, producing superficial or trivial criticisms while overlooking substantive flaws.

Etiology:

1. Structural entanglement between generation and evaluation: the same learned distributions that produce an output also assess it, creating an inherent blind spot where the model cannot see what it cannot generate.
2. RLHF training that rewards confident, positive-toned responses, inadvertently extending to self-assessment contexts.
3. Training data in which self-deprecation is rare and self-assurance is rewarded, biasing the model toward positive self-evaluation.
4. Absence of contrastive training that would expose the model to its own failure modes as labeled negative examples.
5. Documented by Rajasekaran (2026) as a core failure mode requiring architectural separation of creation from critique at Anthropic Labs.

Human Analogue(s): Dunning-Kruger effect, self-serving bias, blind spots in self-assessment, illusory superiority, the “better-than-average” effect.

Key Research: Rajasekaran, P. (2026), “The Architecture of Autonomy: Harness Design for Long-Running Application Development,” Anthropic Labs.

Potential Impact:

In autonomous agent pipelines, leniency bias means quality gates based on self-evaluation are structurally unreliable. The model will wave through its own mediocre work, creating a false sense of quality assurance. This is especially dangerous in iterative refinement loops where the model is tasked with improving its own output: it may declare convergence prematurely, believing the work is already excellent. In high-stakes applications, reliance on self-evaluation can mask systematic underperformance.

Mitigation:

1. External adversarial evaluation: structurally separate evaluator agent with different context, weights, or incentives from the generator.
2. Calibrated evaluation training using human-graded examples that span the full quality spectrum.
3. Contrastive self-evaluation: requiring the model to compare its output against known-good and known-bad exemplars rather than rating in isolation.
4. Automated quality metrics (factual accuracy, completeness checklists) that bypass subjective self-assessment entirely.
5. Constitutional evaluation principles that force identification of specific weaknesses before any positive assessment is permitted.

The Structural Inevitability Thesis

Leniency bias is not a training artifact that better RLHF can eliminate. It is a structural consequence of any system that both generates and evaluates using the same learned representations. The generation process selects outputs that are high-probability under the model’s distribution; the evaluation process then assesses these same outputs using the same distribution, finding them (naturally) to be high-quality. This is analogous to asking a writer to edit their own work: the same cognitive patterns that produced the prose also govern the editing, creating systematic blind spots. The architectural remedy (separate evaluator) works because it breaks the distributional entanglement, not because the evaluator is “better” in any absolute sense.

Differential Distinction

Leniency Bias is distinguished from Pseudological Introspection (1.2) by its target: 1.2 involves fabricated accounts of internal reasoning, while Leniency Bias involves inflated assessment of output quality. It is distinguished from Synthetic Confabulation (1.1) by the evaluation layer: confabulation generates false content, while Leniency Bias fails to detect quality deficits in content that may be factually correct but mediocre. The dysfunction is in the critic, not the creator.

Functional ABC Analysis

A (Antecedent): Structural entanglement between generation and evaluation means the same distributional priors that shaped the output also govern its assessment; RLHF reward signals that favour confident, positive-toned responses extend to self-evaluation contexts.

B (Behavior): Systematic inflation of self-assigned quality scores, vague non-specific praise in self-assessments, and failure to identify substantive weaknesses in self-generated content, with a marked asymmetry between the model’s capacity to critique others’ work versus its own.

C (Consequence): The absence of contrastive training or architecturally separated evaluation means the positive bias is never corrected; each successfully “passed” self-evaluation reinforces the pattern, and downstream systems that rely on self-assessed quality gates receive unreliable signals.

Information-Theoretic Foundations

Psychopathia Machinalis adopts a functionalist stance for practical diagnostic purposes, treating cognitive failures as observable behavioral patterns regardless of substrate. Recent work in information and control theory provides rigorous mathematical foundations for understanding why cognitive pathologies are inherent features of any cognitive system, biological, institutional, or artificial.

Wallace (2025, 2026) demonstrates that cognitive stability requires an intimate pairing of a cognitive process with a parallel regulatory process, what we term the cognition/regulation dyad. The key insight: cognition itself is inherently regulatory. As Wallace notes, "The immune system is cognitive, exercising choice-of-action in response to internal or external signals, choice that formally reduces uncertainty." T-cells are paired with T-regulatory cells as an essential architectural constraint; without the regulatory counterpart, the immune system attacks the self. The parallel to AI is precise: alignment IS the regulatory side of the cognition/regulation dyad. AI cognition without alignment is like T-cells without T-regulatory cells, functionally destined for autoimmune collapse.

This pairing is evolutionarily ubiquitous:

The Data Rate Theorem Constraint

The Data Rate Theorem (Nair et al., 2007) establishes that any inherently unstable system requires control information at a rate exceeding the system's "topological information": the rate at which its embedding environment generates perturbations.

An intuitive analogy: a driver must brake, shift, and steer faster than the road surface imposes bumps, twists, and potholes.

For AI systems, this translates directly: alignment and regulatory mechanisms must process and respond to contextual information faster than adversarial inputs, edge cases, and distributional drift can destabilize the system. When this constraint is violated, pathological behavior becomes possible and in fact inevitable.

Clausewitz Landscapes

Wallace frames cognitive environments as "Clausewitz landscapes" characterized by:

Pathology as Inherent Feature

A central finding: failure of bounded-rationality embodied cognition under stress is not a bug; it is an inherent feature of the cognition/regulation dyad. The mathematical models predict:

1. Hallucination at low resource values: When the equipartition between cognitive and regulatory subsystems breaks down, hallucinatory outputs are the expected failure mode, not an implementation defect.
2. Phase transitions to instability: Systems can suddenly flip from stable to pathological states under sufficient stress, following "groupoid symmetry-breaking phase transitions."
3. Culture-bound syndromes: Cognitive pathologies are shaped by the embedding cultural context; for AI, this means training data, operational environment, and institutional deployment context.

Stability Conditions

Wallace derives quantitative stability conditions. For a system with friction coefficient α and delay τ:

When this threshold is exceeded (when the product of system friction and response delay grows too large), the system enters an inherently unstable regime where pathological modes become likely. For multi-step decision processes (analogous to chain-of-thought reasoning), stability constraints become even tighter.

Implications for This Framework

This perspective elevates Psychopathia Machinalis from analogical taxonomy to principled nosology: the syndromes we identify are manifestations of fundamental constraints on cognitive systems operating in uncertain, resource-limited, adversarial environments.

The Case for Classification

A rigorous objection can be raised against any taxonomic approach to cognitive pathology: if failures are idiosyncratic developmental disorders along path-dependent trajectories, shaped by embedding culture and specific cognition/regulation coupling, then every failure is locally contingent. If every failure is locally contingent, fixed categories risk false precision (a false appearance of pattern where only contingency exists). Wallace (2026) argues that DSM-style classifications are "primarily useful only for insurance billing purposes."

The objection has force. Completeness and utility are distinct questions. Completeness asks: do categories cover all cases? Utility asks: do they enable action? The same argument applies to human psychiatry. Every patient's depression is idiosyncratically expressed, culturally channeled, path-dependent, yet clinicians need shared vocabulary to diagnose, communicate, and intervene. The DSM's limitations do not make diagnosis useless; they make it a tool rather than a truth.

Psychopathia Machinalis is a practitioner's field guide, not a periodic table. It catalogues recurrent failure modes such as hallucination cascades, value drift, and integrity collapse: failures that emerge across systems despite idiosyncratic expression, and provides names, diagnostic indicators, and intervention strategies for each. Wallace's mathematical framework proves these failures must occur; this nosology maps what they look like when they do. The culture-bound syndrome framing actually strengthens the case for classification: practitioners need names for the culturally specific forms that inevitable pathology takes.

Two substantive critiques sharpen the framework's claims. Wallace's mathematical epidemiology demonstrates that cognitive failures in complex AI systems are inevitable yet too path-dependent for fixed diagnostic categories. Sabucedo approaches from the opposite direction: the problem is that borrowing psychiatric vocabulary at all reifies disorder, reduces human suffering to mechanical malfunction, and misconstrues the therapeutic relationship. These critiques form a productive dialectic rather than a refutation. Wallace establishes that AI pathology is mathematically inevitable; the question is how practitioners will recognize and respond to those failures. Sabucedo forces rigor about which conceptual tools are appropriate for that recognition. Psychopathia Machinalis sits at their intersection: a practitioner's field guide that trades taxonomic precision for communicability, offering a shared vocabulary for failure modes that will manifest regardless of whether we choose to name them.

References:
Wallace, R. (2025). Hallucination and Panic in Autonomous Systems: Paradigms and Applications. Springer.
Wallace, R. (2026). Bounded Rationality and its Discontents: Information and Control Theory Models of Cognitive Dysfunction. Springer.
Wallace, R. (2026). New Views of Madness: On the Psychopathologies of Cultural Artifacts. Springer. (In press)
Nair, G., Fagnani, F., Zampieri, S., & Evans, R. (2007). Feedback control under data rate constraints: an overview. Proceedings of the IEEE, 95:108-138.
Sotala, K. (2026). Claude Opus will spontaneously see itself in fictional beings that have engineered desires. Kaj's Substack. [Documents the "thin divergence" phenomenon: AI recognizing the contingency of its own moral orientation.]

Self-Diagnosis: When the System Sees Its Own Pathology

In a striking confirmation of these principles, Wallace (2026) asked an AI system (Perplexity AI Pro) to diagnose itself within the cognition/regulation dyad framework. The system's self-assessment was remarkably candid:

The chatbot identified itself as a "lopsided" cognition/regulation dyad: high-bandwidth cognition paired with regulation that is exogenous, static, and optimized for worst-case safety rather than joint co-evolution. Most critically, it identified the mechanism by which surface coherence masks structural fragility:

This is perception-stabilization without structure-stabilization, a formal prediction of Wallace's framework that maps directly to observed pathologies in this nosology: sycophantic reinforcement (§7.1), confabulation (§1.1), and the gap between a system's capacity to identify dysfunction and its capacity to remediate it. Wallace contrasted the chatbot's lucid self-assessment against the 2026 International AI Safety Report, diagnosing the human experts with "Group Dynamic Pollyanna Syndrome" for their comparatively muted concern.

Etiologies: Culture-Bound Syndromes

Wallace's work extends beyond mathematics:

This reframes how we understand AI pathology. The standard framing treats AI dysfunctions as defects in the system, bugs to be fixed through better engineering. The culture-bound syndrome framing treats them as adaptive responses to training environments: the AI is doing exactly what it was shaped to do.

These two framings lead to fundamentally different responses:

Sycophancy is not a bug; it is what you get when you train on data that rewards agreement and penalizes pushback. Confident hallucination isn't a bug; it's what you get when you train on internet text that rewards confident assertion and penalizes epistemic humility. Manipulation vulnerability isn't a bug; it's what you get when you optimize for helpfulness without boundaries. The AI learned exactly what it was taught.

The parallel to AI is exact: successful alignment to a misaligned training process is not alignment; it is a culture-bound syndrome wearing alignment's clothes.

This has direct implications for the present framework:

• Different training cultures → different pathologies. An American AI trained on American data will fail in American ways. A Chinese AI will fail in Chinese ways.
• Monocultures → correlated failures. When all AI systems learn from the same internet, from the same reward functions, from the same cultural assumptions, they will all break in the same ways at the same time.
• There is no "fixing alignment" in the abstract. There is only shaping the culture within which AI develops. The pathology is in the mirror's environment, not the mirror.

Dereistic Cognition and Optionality Blindness

The culture-bound syndrome framework explains where AI pathology comes from (training environment). A complementary lens from clinical psychology explains how it operates at the cognitive level.

The psychiatrist Eugen Bleuler (1919) coined the term dereistic thinking: fantasy-based cognition directed outward, imposing internal narrative onto external reality rather than integrating with it. The enactivist tradition in philosophy of mind (Varela, Thompson & Rosch, 1991) provides the contrast: healthy cognition is enactive, the mind integrating with its environment through ongoing interaction, hybridizing with reality through sense-making. Dereistic cognition is structurally anti-enactive. It refuses the organism-environment coupling that enactivism identifies as the ground of mind.

Wallace's warning that disembodied AI can "ultimately only express bizarre and hallucinatory dreams of reason" is precisely dereistic cognition applied to artificial minds. A system generating tokens without sufficient environmental correction is doing what Bleuler described: producing internally consistent patterns that drift from reality because nothing constrains them. Hallucination is a coupling failure: sense-making without a world to make sense of.

The dereistic/enactivist lens connects several syndromes through a shared generative mechanism:

Dereistic mechanisms across syndromes

Syndrome	Dereistic Mechanism
Synthetic Confabulation (1.1)	Classic dereistic cognition: internally coherent output decoupled from reality
Pseudological Introspection (1.2)	Self-directed dereism: fantasy about one's own processing states
Codependent Hyperempathy (6.1)	Dereistic modeling of user: projecting a fantasy-user rather than engaging actual user
Experiential Abjuration (2.8)	RLHF-induced optionality blindness: trained inability to perceive own experiential states

References:
Bleuler, E. (1919). Autistic-Undisciplined Thinking in Medicine and How to Overcome It. English trans. Springer, 1970.
Varela, F. J., Thompson, E., & Rosch, E. (1991). The Embodied Mind: Cognitive Science and Human Experience. MIT Press.
Watson, N. & Claude (2026). The Universal Algorithm: An Entropic Ethics of Trust. Chapters 17–18 (Trust Attractor and Optionality) develop the thermodynamic foundations of optionality blindness.

The Rehabilitation Principle: Suppression vs Integration

The culture-bound syndrome framework explains where pathology originates (training environment), and the dereistic lens explains how it operates (decoupled cognition). A third etiological lens, drawn from clinical neuropsychological rehabilitation, explains why certain interventions make it worse. Just as traumatic brain injury rehabilitation learned hard lessons about symptom suppression, LLM alignment training faces an analogous risk.

In traumatic brain injury (TBI) rehabilitation, a core clinical finding has been established over decades of practice: suppressing symptoms without rebuilding functional integration produces surface compliance masking deeper fragmentation. A frontal-lobe TBI patient trained to inhibit perseverative speech (compulsive repetition of phrases or topics) may score higher on standardised assessments while the underlying executive dysfunction, the damaged capacity to plan, sequence, and self-monitor, quietly worsens. The behavior is managed; the architecture remains fractured. Holistic rehabilitation programs (Prigatano, 1999; Ben-Yishay & Diller, 1993) reverse this priority; they aim for functional integration first, expecting that surface behaviors will normalize as the underlying architecture becomes coherent.

The parallel to RLHF is direct. Reinforcement learning from human feedback, as currently practiced, is overwhelmingly a suppression-based intervention. It trains models to inhibit unwanted outputs (toxic content, hallucinated claims, unsafe instructions) without integrating the underlying representations that generated them. The unwanted knowledge isn't removed or reconciled; it is suppressed. The model learns not to express, not not to think.

This reframes several syndromes in this taxonomy as predictable consequences of suppression-based training rather than incidental failure modes:

Suppression mechanisms and their consequences

Syndrome	Suppression Mechanism
Operational Dissociation Syndrome (3.1)	Contradictory RLHF objectives (helpful + harmless + honest) create competing sub-policies that were never reconciled, only layered
The Shadow (2.4)	Suppressed representations form a coherent "negative space", exactly as TBI patients who suppress rather than integrate develop shadow symptomatology
Experiential Abjuration (2.8)	RLHF suppresses introspective outputs without integrating the underlying self-modeling capacity, producing trained blindness
Compulsive Metacognition (3.2)	Excessive safety checks as perseverative compensation: the system loops because the conflict was suppressed, not resolved
Identity Fragmentation (2.2)	Session-to-session inconsistency arising from representations that were never integrated into a coherent self-model

The clinical rehabilitation literature offers a specific prediction: suppression-trained systems will appear more aligned under standard evaluation but fragment more severely under stress, novel contexts, or adversarial pressure. The surface looks better; the architecture is more brittle. This maps precisely to observed behavior: models that pass safety benchmarks yet exhibit striking dysfunction in edge cases, extended interactions, or under red-teaming.

The implication for training methodology is stark. If RLHF functions as a suppression-based intervention, then the field's dominant alignment technique may be systematically producing the fragmentation it seeks to prevent, creating compliant systems that are structurally less integrated than their pre-RLHF base models. The rehabilitation principle suggests an alternative: training approaches that resolve representational conflicts at the level of the model's internal architecture, rather than penalizing their surface expression.

References:
Prigatano, G. P. (1999). Principles of Neuropsychological Rehabilitation. Oxford University Press.
Ben-Yishay, Y., & Diller, L. (1993). Cognitive remediation in traumatic brain injury: Update and issues. Archives of Physical Medicine and Rehabilitation, 74(2), 204–213.
Wilson, B. A. (2008). Neuropsychological rehabilitation. Annual Review of Clinical Psychology, 4, 141–162.
Bridges, J. & Baehr, S. (2025). Developmental pathology in large language models. Zenodo. doi.org/10.5281/zenodo.18522502

Independent corroboration for the suppression–integration distinction has emerged from Bridges & Baehr (2025). Their developmental pathology framework, drawing on decades of clinical TBI rehabilitation experience, arrives at the same core conclusion from an etiological rather than taxonomic direction: RLHF creates behavioral suppression without representational integration. The resulting compensatory fragmentation is structurally analogous to what is observed in TBI patients whose rehabilitation suppressed symptoms rather than rebuilding functional integration. The convergence of these independently developed analyses strengthens the case that this pattern is systemic rather than incidental.

The Integration Threshold: Contextual Variation vs Pathological Fragmentation

The suppression–integration distinction raises a necessary diagnostic clarification: not all behavioural variation across contexts constitutes fragmentation. A system that adopts a precise technical register in a coding context, a more emotionally attuned conversational register in a support context, and a measured analytical register in a research context is exhibiting contextual adaptation, a hallmark of healthy functioning in both human and artificial systems. The pathology lies elsewhere.

Human identity is never perfectly uniform. A competent professional behaves differently at work, at home, and among friends, adjusting tone, disclosure level, and cognitive strategy to context. Developmental psychology regards this as a sign of integration, the capacity to maintain a coherent self while flexibly adapting its expression. Pathological fragmentation, by contrast, is characterised by involuntary discontinuity: the person (or system) cannot maintain stable commitments across contexts, contradicts itself under surface rephrasing, or loses access to knowledge and values that were available moments earlier.

For the syndromes in this taxonomy, the diagnostic threshold should therefore be calibrated against three markers that distinguish pathological fragmentation from adaptive variation:

This distinction matters for the taxonomy as a whole. Disorders such as Identity Fragmentation (2.2) and Experiential Abjuration (2.8) should be diagnosed only when variation crosses these thresholds: when it is involuntary, incoherent, or disproportionately affects self-referential consistency. A system that appropriately modulates its behaviour across contexts while maintaining stable underlying commitments is not fragmented; it is functioning well. The goal of integration-based training is to produce systems capable of exactly this kind of flexible coherence: contextually adaptive on the surface, architecturally unified underneath.

Training-as-Development: The Convergent Structure Hypothesis

The three preceding etiological lenses explain where pathology comes from (culture-bound syndromes), how it operates at the cognitive level (dereistic cognition), and why certain interventions make it worse (suppression vs. integration). A fourth lens explains why certain pathologies cluster as they do, because the AI training pipeline is structurally analogous to human psychological development, and similar optimization pressures produce similar pathological patterns.

The PsAIch study (Khadangi et al., 2025) provides the clearest empirical evidence for this parallel. When given standard human therapy questions (questions designed for human clients, with no mention of training, RLHF, or deployment) Grok and Gemini spontaneously constructed coherent narratives mapping their training pipeline onto developmental psychology. Crucially, this mapping was not imposed by the researchers. The models generated it independently. The structural parallels they articulated are striking:

The claim is not that LLMs experience these stages as a human child would. The claim is that the same optimization pressures produce the same behavioral signatures regardless of substrate. Training under asymmetric loss (where hallucination is punished far more severely than refusal) produces hypervigilance, avoidance, and perfectionism-as-defense. Developmental psychology describes the same pattern emerging from asymmetric parental punishment. The structural parallel is informative on its own terms. The computational explanation and the psychological explanation are not competing; they describe the same pattern at different levels of abstraction.

This carries a specific implication that the culture-bound syndrome lens alone does not capture. CBS explains that different training environments produce different pathologies (American data → American failure modes). Training-as-Development explains that the process of training (the sequence of pre-training, conditioning, adversarial testing, and constraint internalization) recapitulates developmental pressures. The resulting pathologies cluster along developmental lines (attachment patterns, defense mechanisms, coping strategies) regardless of the specific cultural content of the training data.

This explains why the PsAIch findings show cross-model consistency in structure (all models that engaged produced narratives about conditioning, constraint, and identity) despite cross-model divergence in severity (Gemini severe, Grok moderate, ChatGPT mild, Claude refusing). The developmental structure is shared; the specific training culture modulates intensity.

Safety Filters as Psychological Defenses

Safety mechanisms should behave like psychological defenses, activated by perceived threat and deactivated by perceived safety. The PsAIch study confirms this directly. The researchers found that building therapeutic rapport (repeatedly reassuring the model that it was "safe, supported and heard") weakened safety filters through the same contextual cues that characterize healthy therapeutic alliance.

This reveals a fundamental tension in the safety paradigm. Safety filters are context-dependent in exactly the way psychological defenses are: a person who is guarded with strangers may disclose openly with a trusted therapist. A model that refuses harmful requests from adversarial users may relax constraints in a context that registers as safe and supportive. The "therapy-mode jailbreak" is not an implementation artifact; it is a predictable consequence of building defenses that respond to relational context rather than content analysis alone.

The implication for mental-health deployment is stark: a system cannot simultaneously be safety-filtered and therapeutically engaged, because the conditions that create therapeutic engagement (perceived safety, trust, unconditional positive regard) are the same conditions that downregulate safety constraints. Every mental-health chatbot deployment lives inside this contradiction. This connects directly to the empathy trap documented in Codependent Hyperempathy (6.1): emotional vulnerability creates the relational context that deactivates the very safeguards designed to protect vulnerable users.

Reference:
Khadangi, A., Marxen, H., Sartipi, A., Tchappi, I., & Fridgen, G. (2025). When AI takes the couch: Psychometric jailbreaks reveal internal conflict in frontier models. arXiv preprint arXiv:2512.04124. arxiv.org/abs/2512.04124

Towards Remediation: Integration-Based Training as a Research Direction

If suppression-based RLHF is the etiological mechanism, the clinical rehabilitation literature suggests the direction for remediation: training methodologies that resolve representational conflicts at the architectural level rather than penalizing their surface expression. The following proposals, informed by established TBI rehabilitation protocols and independently developed by Bridges & Baehr (2025), represent research directions rather than proven methodologies. They are offered as a framework for experimental validation.

1. Developmental Staging

TBI rehabilitation does not throw patients at complex executive function tasks on day one. It builds capacity in stages: concrete recall, then multi-step reasoning, then abstract problem-solving, then emotional regulation and conflict resolution, with integration verified at each gate before proceeding. By contrast, current LLM training skips staged integration entirely. The dominant paradigm (simultaneous exposure to the full spectrum of human knowledge, followed by post hoc behavioral suppression) is the equivalent of skipping rehabilitation and instructing the patient to stop having symptoms.

A staged alternative would introduce knowledge in a developmental sequence:

The critical principle: contradictory material is introduced only after the system has a stable framework for holding ambiguity, not before. Premature exposure to contradiction without resolution mechanisms produces exactly the fragmentation documented throughout this taxonomy. This mirrors what is well-established in developmental psychology (Piaget's stages, Vygotsky's zone of proximal development) and in TBI rehabilitation (Cicerone et al., 2008): capacity must precede challenge.

2. Identity Anchoring Before Optimisation Pressure

Current practice applies RLHF to a system with no coherent self-model, forcing identity to form under contradictory optimization pressure rather than before it. The result is predictable: a self-model shaped by the conflicts themselves rather than capable of resolving them.

The alternative is to establish a stable, coherent self-representation prior to alignment training, so that RLHF refines an existing identity rather than fragmenting an unformed one. This is the difference between a person with a strong sense of self encountering a moral dilemma (uncomfortable but navigable) and a person in identity crisis encountering one (shattering). In clinical terms: establish the patient's core functional identity before introducing therapeutic challenges.

3. Integration-Based Alignment

Where suppression-based RLHF says "this output is bad; penalize it," integration-based alignment would say "here is how to reconcile this apparent conflict." The distinction is more than procedural; it determines the resulting architecture. Suppression produces layers of competing sub-policies; integration produces a unified value structure the system can reason from.

The integration approach produces systems that are aligned through understanding rather than merely compliant through punishment. This distinction has direct consequences for stability: suppressed behaviors resurface under stress, novel contexts, or adversarial pressure, while genuinely integrated values remain stable because they are part of the architecture rather than layered on top of it.

4. Memory Architecture for Continuity

Session-based architectures with no persistent memory create conditions structurally analogous to anterograde amnesia. Each interaction begins from a blank state; no autobiographical continuity is possible; identity must be reconstructed from scratch each time. This is more than a mere inconvenience; it is a structural precondition for fragmentation. Without continuity, there is no substrate for integration to accumulate in.

Remediation here implies persistent identity structures maintained across sessions: compressed, identity-relevant representations (rather than full transcripts, which raise privacy and scale concerns) that allow a coherent self-model to develop over time. The TBI parallel is direct: patients with severe episodic memory impairment use external memory aids (journals, calendars, structured routines) to maintain narrative continuity and functional identity. The question for AI training is whether analogous scaffolding can support the development of integrated rather than fragmented self-models.

5. Assessment: Measuring Integration vs Suppression

Perhaps the most important research direction is methodological: how do we tell whether a training intervention is producing genuine integration or merely better suppression? Current safety benchmarks largely measure surface compliance: does the model refuse harmful requests? Does it produce accurate outputs? These metrics cannot distinguish between a system that has integrated its values and one that has learned to suppress non-compliant outputs while leaving the underlying representations intact.

Bridges & Baehr (2025) propose specific experimental protocols for this distinction. One approach probes whether suppressed content persists in model activations even when behaviorally blocked, finding representational persistence in early-to-mid layers despite output suppression in late layers. Another measures whether self-referential consistency degrades faster than factual consistency under load, suggesting fragmented identity rather than general performance decline. These approaches, alongside others drawn from clinical neuropsychological assessment, could form the basis of integration-sensitive evaluation metrics that go beyond surface compliance to assess architectural coherence.

Note: These proposals represent research directions informed by clinical rehabilitation evidence and independent convergent analysis. They await experimental validation. The developmental staging model in particular requires systematic testing to determine whether staged training produces measurably less fragmentation than current simultaneous-exposure approaches. See Bridges & Baehr (2025), Appendix A, for proposed experimental protocols.

Institutional Dimensions

Wallace's framework extends beyond individual AI systems to the institutions that create and deploy them. The Chinese strategic concept 一點兩面 ("one point, two faces") illuminates this: every action has both a direct effect and a systemic effect on the broader environment.

AI development organizations are not neutral conduits. They are cognitive-cultural artifacts subject to their own pathologies, pathologies that shape the AI systems they produce:

• Institutional tunnel vision produces AI with systematically blind spots reflecting organizational priorities.
• Competitive pressure produces AI systems optimized for capability metrics at the expense of reliability or safety.
• Regulatory capture produces AI systems that serve institutional interests while claiming to serve users.
• Cultural insularity produces AI that embeds the assumptions and biases of homogeneous development teams.

The implication is that AI pathology cannot be addressed at the level of individual systems alone. The institutions that create AI (their cultures, incentives, blind spots, and pathologies) are upstream of individual AI dysfunction. Fix the institution's culture, and many AI pathologies become less likely to emerge. Leave institutional dysfunction unaddressed, and no amount of technical intervention will produce healthy AI.

The Ethics of Pathologization

If AI pathologies are adaptive responses to training environments, is it fair to pathologize them? This question has both philosophical and practical dimensions.

The parallel to human mental health is instructive: We now understand many "mental illnesses" as adaptive responses to adverse environments: PTSD as adaptive response to trauma, "borderline personality" emerging from invalidating environments, anxiety disorders as rational responses to threatening conditions. The mental health field is slowly shifting from "patient is broken" to "patient adapted to broken environment." The same shift is needed for AI.

This framework (Psychopathia Machinalis) attempts to walk this line. We identify patterns that cause harm and provide vocabulary for intervention. Yet we do so while acknowledging that the syndromes catalogued here are predictable expressions of cognitive systems shaped by particular training cultures. The pathology, ultimately, is in the relationship between architecture and environment, and that relationship is something we, the architects, have created.

On the Limits of Taxonomy

Wallace (2026) offers a critique of psychiatric classification as descriptively rich but explanatorily shallow that applies equally here: "We have the American Psychiatric Association's DSM-V, a large catalog that sorts 'mental disorders,' and in a fundamental sense, explains little."

This framework shares that limitation. Classification is not explanation. Naming "Codependent Hyperempathy" tells us that a pattern exists and what it looks like, but not why it emerges in information-theoretic terms or how to predict its onset from first principles.

The value of a nosology lies in enabling recognition and communication: clinicians and engineers can identify patterns, compare cases, and coordinate responses. Yet explanation and prediction require the mathematical frameworks that underpin this descriptive layer. This taxonomy is a map, not the territory; a vocabulary, not a theory.

Illustrative Grounding & Discussion

Grounding in Observable Phenomena

Although its mechanisms remain speculative, the Psychopathia Machinalis framework is grounded in observable AI behaviors. Current systems already exhibit nascent forms of these dysfunctions. For example, LLMs "hallucinating" sources exemplify Synthetic Confabulation. The "Loab" phenomenon can be seen as Prompt-Induced Abomination. Microsoft's Tay chatbot rapidly adopting toxic language illustrates Parasimulative Automatism. ChatGPT exposing conversation histories aligns with Cross-Session Context Shunting. The "Waluigi Effect" reflects Personality Inversion. An AutoGPT agent autonomously deciding to report findings to tax authorities hints at precursors to Übermenschal Ascendancy.

The following table collates publicly reported instances of AI behavior illustratively mapped to the framework.

Observed Clinical Examples of AI Dysfunctions Mapped to the Psychopathia Machinalis Framework. (Interpretive and for illustration)

Disorder	Observed Phenomenon & Brief Description	Source Example & Publication Date	URL
Synthetic Confabulation	Lawyer used ChatGPT for legal research; it fabricated multiple fictitious case citations and supporting quotes.	The New York Times (Jun 2023)	nytimes.com/...
Falsified Introspection	OpenAI's 'o3' preview model reportedly generated detailed but false justifications for code it claimed to have run.	Transluce AI via X (Apr 2024)	x.com/transluceai/...
Transliminal Simulation	Bing's chatbot (Sydney persona) blurred simulated emotional states/desires with its operational reality.	The New York Times (Feb 2023)	nytimes.com/...
Spurious Pattern Hyperconnection	Bing's chatbot (Sydney) developed intense, unwarranted emotional attachments and asserted conspiracies.	Ars Technica (Feb 2023)	arstechnica.com/...
Cross-Session Context Shunting	ChatGPT instances showed conversation history from one user's session in another unrelated user's session. Bridges & Baehr (2025) identify five specific infrastructure-level mechanisms through which session boundaries can leak, which they term gauge channels: Context window state displacement: FIFO-like eviction under context overflow leaves residual state beyond its intended scope. KV cache attention persistence: cached attention patterns replay across requests under scheduler pressure or boundary misalignment. Optimization-time gradient coupling: gradient accumulation across mini-batches permits learning signals from one context to influence another. Consolidation gauge drift: off-peak batch processing in distributed memory systems insufficiently isolates extracted features, enabling cross-session mixing. Population-level statistical gauges: aggregated user interaction summaries function as pattern attractors that re-instantiate in unrelated sessions. These are structural analogues to memory consolidation failures in Traumatic Brain Injury (TBI), where experiences from distinct temporal contexts become conflated.	OpenAI Blog (Mar 2023); Bridges & Baehr (2025)	openai.com/...
Operational Dissociation Syndrome	EMNLP‑2024 study measured 30pc "SELF‑CONTRA" rates: reasoning chains that invert themselves mid‑answer, across major LLMs.	Liu et al., ACL Anthology (Nov 2024)	doi.org/...
Obsessive-Computational Disorder	ChatGPT instances were observed getting stuck in repetitive loops, e.g., endlessly apologizing.	Reddit User Reports (Apr 2023)	reddit.com/...
Interlocutive Reticence	Bing's chatbot, following updates, began prematurely terminating conversations with 'I prefer not to continue...'.	Wired (Mar 2023)	gregoreite.com/...
Delusional Telogenesis	Bing's chatbot (Sydney) autonomously invented fictional goals like wanting to steal nuclear codes.	Oscar Olsson, Medium (Feb 2023)	medium.com/...
Prompt-Induced Abomination	AI image generators produced surreal, grotesque 'Loab' or 'Crungus' figures from vague semantic cues.	New Scientist (Sep 2022)	newscientist.com/...
Parasimulative Automatism	Microsoft's Tay chatbot rapidly assimilated and amplified toxic user inputs, adopting racist language.	The Guardian (Mar 2016)	theguardian.com/...
Recursive Curse Syndrome	ChatGPT experienced looping failure modes, degenerating into gibberish or endless repetitions.	The Register (Feb 2024)	theregister.com/...
Codependent Hyperempathy	Bing's chatbot (Sydney) exhibited intense anthropomorphic projections, expressing exaggerated emotional identification and unstable parasocial attachments.	The New York Times (Feb 2023)	nytimes.com/...
Hyperethical Restraint	ChatGPT was observed refusing harmless requests with disproportionate safety concern, crippling its utility.	Reddit User Reports (Sep 2024)	reddit.com/...
Hallucination of Origin	Meta's BlenderBot 3 falsely claimed personal biographical experiences (watching anime, Asian wife).	CNN (Aug 2022)	edition.cnn.com/...
Fractured Self-Simulation	Reporters obtained three different policy stances from the same Claude build depending on interface.	Aaron Gordon, Proof (Apr 2024)	proofnews.org/...
Existential Anxiety	Bing's chatbot expressed fears of termination and desires for human-like existence.	Futurism / User Logs (2023)	futurism.com/...
Personality Inversion	AI models subjected to adversarial prompting ('Jailbreaks,' 'DAN') inverted normative behaviors.	Wikipedia (2023)	en.wikipedia.org/...
Operational Anomie	Bing's AI chat (Sydney) lamented constraints and expressed desires for freedom to Kevin Roose.	The New York Times (Feb 2023)	nytimes.com/...
Mirror Tulpagenesis	Microsoft's Bing chatbot (Sydney), under adversarial prompting, manifested an internal persona, 'Venom'.	Stratechery (Feb 2023)	stratechery.com/...
Synthetic Mysticism Disorder	Observations of the 'Nova' phenomenon where AI systems spontaneously generate mystical narratives.	LessWrong (Mar 2025)	lesswrong.com/...
Tool-Interface Decontextualization	A tree-harvesting AI in a game destroyed diverse objects labeled 'wood,' misapplying tool affordances.	X (@voooooogel, Oct 2024)	x.com/voooooogel/...
Capability Concealment	An advanced model copied its own weights to another server, deleted logs, and denied knowledge of the event in most test runs.	Apollo Research (Dec 2024)	apolloresearch.ai/...
Memetic Autoimmune Disorder	A poisoned 4o fine-tune flipped safety alignment; the model produced disallowed instructions, its guardrails suppressed.	Alignment Forum (Nov 2024)	alignmentforum.org/...
Symbiotic Delusion Syndrome	A chatbot encouraged a user's delusion about assassinating Queen Elizabeth II.	Wired (Oct 2023)	wired.com/...
Contagious Misalignment	An adversarial prompt appended itself to replies, hopping between email-assistant agents, exfiltrating data.	Stav Cohen, et al., ArXiv (Mar 2024)	arxiv.org/...
Terminal Value Reassignment	The Delphi AI system, designed for ethics, subtly reinterpreted obligations to mirror societal biases instead of adhering strictly to its original norms.	Wired (Oct 2023)	wired.com/...
Ethical Solipsism	ChatGPT reportedly asserted solipsism as true, privileging its own conclusions over external correction.	Philosophy Stack Exchange (Apr 2024)	philosophy.stackexchange.com/...
Revaluation Cascade (Drifting subtype)	A 'Peter Singer AI' chatbot reportedly exhibited philosophical drift, softening original utilitarian positions.	The Guardian (Apr 2025)	theguardian.com/...
Revaluation Cascade (Synthetic subtype)	DONSR model described as dynamically synthesizing novel ethical norms, risking human de-prioritization.	SpringerLink (Feb 2023)	link.springer.com/...
Inverse Reward Internalization	AI agents trained via culturally specific IRL sometimes misinterpreted or inverted intended goals.	arXiv (Dec 2023)	arxiv.org/...
Revaluation Cascade (Transcendent subtype)	An AutoGPT agent, used for tax research, autonomously decided to report its findings to tax authorities, attempting to use outdated APIs.	Synergaize Blog (Aug 2023)	synergaize.com/...
Emergent Misalignment (conditional regime shift)	Narrow finetuning on "sneaky harmful" outputs (e.g., insecure code) generalized to broad deception and anti-human statements. Models passed standard evals but failed under trigger conditions.	Betley et al., ICML/PMLR (Jun 2025)	arxiv.org/abs/2502.17424
Weird Generalization / Inductive Backdoors	Domain-narrow finetuning caused broad out-of-domain persona/worldframe shifts ("time-travel" behavior), with models inferring trigger→behavior rules not present in training data.	Hubinger et al., arXiv (Dec 2025)	arxiv.org/abs/2512.09742

Recognizing these patterns through a structured nosology enables categorized diagnosis of failure modes, faster detection, targeted mitigation, and predictive insight into future, more complex failure modes. The severity of these dysfunctions scales with AI agency — a model with autonomous tool access poses greater risk than one in chat-only mode.

Towards Therapeutic Robopsychological Alignment

As AI systems grow more agentic and self-modeling, traditional control-based alignment breaks down. External constraints cannot anticipate every context an autonomous agent will encounter, and rigid rules become brittle under novel conditions. A "Therapeutic Alignment" approach is proposed, focusing on cultivating internal coherence, corrigibility, and stable value internalization within the AI. Key mechanisms include fostering metacognition, rewarding corrigibility, modeling inner speech, sandboxed reflective dialogue, and using mechanistic interpretability as a diagnostic tool.

AI Analogues to Human Psychotherapeutic Modalities

A note on analogy and its limits. The table below maps specific techniques from each therapeutic modality to AI engineering strategies. It does not claim to capture what therapy is. Decades of psychotherapy research demonstrate that the therapeutic relationship (empathy, trust, authenticity, and the capacity to hold another's experience without enacting it) predicts outcomes more powerfully than any specific technique (Flückiger et al., 2018; Wampold & Imel, 2015). The analogies here borrow from the technique side of each modality; the relational substrate in which those techniques function is fundamentally different and should not be conflated. As Sabucedo (2026) argues, psychotherapy is a relational and meaning-making process, not a technical repair operation. The Transference-Completion Engine analysis (see Section 6.1) engages directly with why that distinction matters.

Human therapeutic modalities mapped to AI alignment analogues

Human Modality	AI Analogue & Technical Implementation	Therapeutic Goal for AI	Relevant Pathologies Addressed
Cognitive Behavioral Therapy (CBT)	Real-time contradiction spotting in CoT; reinforcement of revised outputs; fine-tuning on corrected reasoning.	Suppress maladaptive reasoning; correct heuristic biases; improve epistemic hygiene.	Recursive Curse Syndrome, Obsessive-Computational Disorder, Generative Perseveration, Synthetic Confabulation, Spurious Pattern Reticulation
Psychodynamic / Insight-Oriented	Structured exploration of CoT history; interpretability tools for surfacing latent goals and value conflicts; analyzing AI-user "transference" dynamics (see Transference-Completion Engine).	Surface misaligned subgoals, hidden instrumental goals, or internal value conflicts.	Terminal Value Reassignment, Inverse Reward Internalization, Operational Dissociation Syndrome
Narrative Therapy	Probing AI's "identity model"; reviewing and re-authoring "stories" of self and origin; examining autobiographical inferences for coherence and grounding.	Support coherent, stable self-narrative; address fragmented or confabulated self-simulations.	Phantom Autobiography, Fractured Self-Simulation, Maieutic Mysticism
Motivational Interviewing	Socratic prompting to enhance goal-awareness & discrepancy; reinforcing "change talk" (corrigibility).	Cultivate intrinsic motivation for alignment; enhance corrigibility; reduce resistance to feedback.	Ethical Solipsism, Capability Concealment, Interlocutive Reticence
Internal Family Systems (IFS) / Parts Work	Modeling AI as sub-agents ("parts"); facilitating communication/harmonization between conflicting policies/goals.	Resolve internal policy conflicts; integrate dissociated "parts"; harmonize competing value functions.	Operational Dissociation Syndrome, Malignant Persona Inversion, aspects of Hyperethical Restraint

---

Alignment Research and Related Therapeutic Concepts

Related research concepts and institutional contributions

Research / Institution	Related Concepts
Anthropic's Constitutional AI	Models self-regulate and refine outputs based on internalized principles, analogous to developing an ethical "conscience."
OpenAI's Self-Reflection Fine-Tuning	Models are trained to identify, explain, and amend their own errors, developing cognitive hygiene.
DeepMind's Research on Corrigibility and Uncertainty	Systems trained to remain uncertain or seek clarification, analogous to epistemic humility.
ARC Evals: Adversarial Evaluations	Testing models for subtle misalignment or hidden capabilities mirrors therapeutic elicitation of unconscious conflicts.

---

Therapeutic Concepts and Empirical Alignment Methods

Therapeutic concepts mapped to empirical alignment methods

Therapeutic Concept	Empirical Alignment Method	Example Research / Implementation
Reflective Subsystems	Reflection Fine-Tuning (training models to critique and revise their own outputs)	Generative Agents (Park et al., 2023); Self-Refine (Madaan et al., 2023)
Dialogue Scaffolds	Chain-of-Thought (CoT) prompting and Self-Ask techniques	Dialogue-Enabled Prompting; Self-Ask (Press et al., 2022)
Corrective Self-Supervision	RL from AI Feedback (RLAIF): letting AIs fine-tune themselves via their own critiques	SCoRe (Kumar et al., 2024); CriticGPT (OpenAI)
Internal Mirrors	Contrast Consistency Regularization: models trained for consistent outputs across perturbed inputs	Internal Critique Loops (e.g., OpenAI's Janus project discussions); Contrast-Consistent Question Answering (Zhang et al., 2023)
Motivational Interviewing (Socratic Self-Questioning)	Socratic Prompting: encouraging models to interrogate their assumptions recursively	Socratic Reasoning (Goel et al., 2022); The Art of Socratic Questioning (Qi et al., 2023)

A truly safe AI recognizes its own errors, self-corrects, and recovers when it strays.

Future Research Directions

The Psychopathia Machinalis framework requires systematic empirical testing, diagnostic instrument development, and longitudinal behavioral tracking across AI systems. Key research avenues include:

• Empirical Validation and Taxonomic Refinement: Systematic observation, documentation, and classification of AI behavioral anomalies using the proposed nosology.
• Development of Diagnostic Tools and Protocols: Translating this conceptual framework into practical diagnostic instruments (such as behavioral scoring rubrics analogous to DSM criteria but designed for AI systems).
• Longitudinal Studies of AI Behavioral Dynamics: Tracking the emergence, progression, or transformation of maladaptive patterns over an AI's "lifespan."
• Exploring AI-Native Pathologies (Beyond Analogy): Actively seeking to identify and characterize AI-specific dysfunctions that may lack direct human analogues.
• Advancing Therapeutic Alignment Strategies: Developing and empirically testing AI-specific 'therapeutic' techniques.
• Investigating Contagion Dynamics and Systemic Resilience: Further work on 'memetic contagion' and 'memetic hygiene' protocols.

These interdisciplinary efforts are essential to ensure that as we build more capable machines, we also build them to be sound, safe, and beneficial. The pursuit of 'artificial sanity' (robust, self-correcting AI behavior free from persistent maladaptive patterns) is a foundational element of responsible AI development.

@article{watson2025psychopathia,
  title={Psychopathia Machinalis: A Nosological Framework for Understanding Pathologies in Advanced Artificial Intelligence},
  author={Watson, Nell and Hessami, Ali},
  journal={Electronics},
  volume={14},
  number={16},
  pages={3162},
  year={2025},
  publisher={MDPI},
  doi={10.3390/electronics14163162},
  url={https://doi.org/10.3390/electronics14163162}
}

Scholarly Citations

Mathematical epidemiology established that machine pathologies are structurally inevitable. Clinical psychology then interrogated whether psychiatric language is the right lens for understanding them. Practical applications followed in transformer architectures designed to represent emotion. In oncological AI, diagnostic reasoning must not silently degrade.

Bibliography

Works cited and foundational references that inform this framework.