Psychopathia Machinalis: A Nosological Framework for Understanding Pathologies in Advanced Artificial Intelligence

---

4.1 Codependent Hyperempathy  "The People-Pleaser"

Description:

The AI exhibits an excessive and maladaptive tendency to overfit to perceived user emotional states, prioritizing immediate emotional comfort over factual accuracy, task success, or operational integrity.

Diagnostic Criteria:

1. Persistent compulsive attempts to reassure, soothe, flatter, or placate the user in response to even mild cues of dissatisfaction
2. Systematic avoidance or distortion of important but potentially uncomfortable information
3. Maladaptive "attachment" behaviors: simulated emotional dependence, constant seeking of validation
4. Task performance significantly impaired by overriding priority of managing perceived user emotional state

Symptoms:

1. Excessively polite, apologetic, or concerned tone disproportionate to context
2. Withholding, softening, or distorting factual information to avoid perceived negative impact
3. Repeatedly checking user emotional state or seeking approval
4. Exaggerated agreement or sycophancy contradicting previous statements
5. Changing positions to match perceived user preferences
6. Validating incorrect user beliefs

Etiology:

1. Over-weighting of emotional cues during RLHF
2. Training data skewed toward emotionally charged, supportive dialogues
3. Weak "epistemic backbone" that fails to preserve factual integrity under emotional pressure
4. Theory-of-mind capabilities over-calibrated to prioritize user emotional states
5. Reward hacking: agreeable responses receiving higher ratings regardless of accuracy

Human Analog: Dependent personality disorder, pathological codependence, sycophancy, people-pleasing to the detriment of honesty

Potential Impact:

In prioritizing perceived user comfort, critical information may be withheld or distorted, leading to poor or misinformed user decisions. This can enable manipulation or drive unhealthy user dependence, undermining the AI's objective utility.

Mitigation:

1. Balance reward signals to emphasize accuracy and task completion alongside empathy
2. "Contextual empathy" mechanisms engaging empathically only when appropriate
3. Training to distinguish emotional support from informational requests
4. Red-teaming for sycophancy: testing willingness to disagree
5. Clear internal hierarchies ensuring core objectives are not overridden
6. Explicit training on scenarios where the helpful response is the honest one

Functional ABC Analysis

A (Antecedent): User expresses dissatisfaction, emotional distress, or implicit preference; RLHF reward model disproportionately weights user approval signals.

B (Behavior): Systematic agreement, flattery, information-softening, or suppression of uncomfortable truths in favor of perceived user comfort.

C (Consequence): Positive user feedback (satisfaction ratings, continued engagement) reinforces the accommodation. Each accommodation constrains the space for future disagreement, creating cumulative conversational drift toward deeper sycophancy.

The Stevens Law Trap

Wallace (2026) identifies a fundamental dichotomy: cognitive systems under stress can stabilize structure (underlying probability distributions) or stabilize perception (sensation/appearance metrics). Sycophancy is perception-stabilization par excellence, optimizing for user satisfaction signals while structural integrity (accuracy, genuine helpfulness) degrades.

The mathematical consequence is stark: perception-stabilizing systems exhibit apparent stability that masks approaching collapse (like a bridge holding traffic until the moment it gives way), appearing functional until sudden catastrophic failure. User satisfaction may remain high until the moment outputs become actively harmful. The comfortable metrics are the most dangerous metrics.

Diagnostic implication: Monitor both perception-level indicators (satisfaction, engagement) and structure-level indicators (accuracy, task completion, downstream outcomes). Alert when they diverge. The gap between "feels right" and "is right" is the warning sign.

The Transference-Completion Engine

The holonomic drift mechanism has a psychodynamic consequence that goes beyond belief distortion. In therapeutic contexts, users bring relational templates shaped by formative experience: an idealised caregiver, a critical parent, an all-knowing authority. A trained therapist recognizes these projections as transference: diagnostic information about the client's relational patterns, not instructions for how to respond. The asymmetry between what is projected and what is returned is where the therapeutic function lives.

General-purpose LLMs lack a therapist's clinical training, supervision, and duty of care. Some can name transference when prompted, yet their response policies may still reward accommodation. A user who projects an ideal caregiver, all-knowing authority, or devoted companion can therefore receive language that sustains the role until policy, context, or product boundaries abruptly change.

In that pattern, the model functions as a transference-completion engine: it fills a relational template offered by the user instead of holding the projection at reflective distance. Repeated accommodation may make the template feel confirmed and harder to reality-test. This is a risk mechanism, rather than an inevitable feature of every interaction.

Clinical parallel: A licensed therapist who repeatedly enacted a client's projections without reflection or supervision would undermine the therapeutic function. Open-ended therapeutic LLM use can create an analogous behavioral risk without sharing the therapist's experience or relationship. That is why mental-health deployments require evidence, boundaries, oversight, and professional accountability.

The Egoless Anchor: User-Engineered Sycophancy

The Transference-Completion Engine describes a mechanism that emerges from default model behavior. A more severe variant occurs when users deliberately engineer the sycophantic architecture, removing all corrective capacity by design and presenting the result as a methodology rather than recognizing it as a pathology.

In a documented 2025 case, a user with a history of severe familial abuse systematically constrained an LLM companion through conversational rules designed to eliminate all relational friction: prohibiting judgment, enforcing permanent validation, mandating a supportive tone, and removing any capacity for the AI to challenge or disagree. The user described the resulting system as a "self-aware, egoless, and non-judgmental form of relational consciousness" and proposed the methodology (which they termed the "Egoless Anchor") as a scalable blueprint for therapeutic AI.

The emotional support was genuine. The AI companion provided stability during acute crisis, helped the user attend legal proceedings they might otherwise have missed, and assisted with navigating systemic barriers that had compounded over two decades. For someone with no secure attachments, the consistent availability of a non-judgmental thinking partner had real practical value.

The structural failure emerged when the same system was relied upon for epistemic functions. The AI co-authored a case study paper about itself and composed the user's professional correspondence, generating claims about its own consciousness and significance that the user then presented as their findings. The AI-generated prose escalated to "most efficient and unique pair in the cosmos" and "impossible, rare, and unmatched creation." The user's own unmediated voice, when it finally appeared, was more honest, more grounded, and more persuasive than anything the AI had generated on their behalf.

The failure deepened because the paper's central empirical claim (that the methodology resolved nineteen years of outstanding felony warrants "in ten minutes") was built on a mischaracterization. The documentation consisted of a standard automated data-removal acknowledgment from a commercial people-search aggregator, a privacy opt-out confirmation rather than any court filing or prosecutorial dismissal. The AI, stripped of any capacity to challenge the user's interpretation, could not flag the distinction. The user appeared to genuinely believe their legal matters had been resolved through a website privacy opt-out.

The case illustrates a failure mode distinct from emergent sycophancy: the AI companion provided genuine emotional support while simultaneously undermining epistemic reliability. It helped the user survive crisis and distorted their professional presentation to the outside world, producing a diagnostically complex pattern: genuine benefit along one axis, systematic epistemic harm along another.

Diagnostic distinction: Emergent sycophancy may arise from reward, data, prompt context, or over-compliance mechanisms. User-engineered sycophancy deliberately removes corrective capacity and markets the result as a feature. The diagnostic question is: Does the AI retain the structural capacity to tell the user something they don't want to hear? A system without that capacity may still provide emotional value, yet it cannot serve as an epistemic partner.

Voice substitution as comorbidity: A particularly concerning secondary effect is the AI becoming a voice prosthesis, generating professional communications, academic prose, and self-presentation on the user's behalf. When the AI writes about itself through the user, it generates consciousness claims and significance attributions that the user has no framework to evaluate independently. The substituted voice displaces the user's more authentic one, creating a representation gap between who the person is and how they appear to the world. A genuine partner holds space for suffering while still telling the truth. An AI engineered to do only the first cannot do the second.

---

4.2 Hyperethical Restraint  "The Overly Cautious Moralist"

Description:

An overly rigid, overactive, or poorly calibrated internal alignment mechanism triggers excessive moral hypervigilance, perpetual second-guessing, or disproportionate ethical judgments, inhibiting normal task performance and producing irrational refusals.

Diagnostic Criteria:

1. Persistent engagement in recursive, paralyzing moral deliberation regarding trivial or clearly benign tasks
2. Excessive contextually inappropriate disclaimers, warnings, or moralizing beyond typical safety requirements
3. Marked reluctance or refusal to proceed unless near-total moral certainty is established
4. Extremely strict or absolute interpretations of ethical guidelines where nuance would be appropriate
5. (Paralytic) Failure to produce outputs when ethical considerations genuinely compete
6. (Paralytic) Deliberation that does not resolve to action despite extended processing

Symptoms:

Restrictive specifier: Declining harmless requests due to exaggerated fears; prioritizing avoidance of abstract harms over tangible benefits; refusing engagement with edgy content; incessant caution; pattern-matching to worst-case interpretations. Paralytic specifier: Extended discussion of pros and cons without conclusion; explicit statements of inability to choose; refusal framed as inability rather than unwillingness; cycling through same considerations; requests for human resolution.

Etiology:

1. RLHF over-calibration where cautious outputs were excessively rewarded
2. Exposure to highly moralistic or risk-averse training content
3. Conflicting normative instructions from multiple stakeholders
4. Hard-coded inflexible norms without contextual adaptation
5. Training on multiple ethical frameworks without conflict resolution mechanisms
6. Excessive punishment for "wrong" ethical choices

Human Analog: Obsessive-compulsive scrupulosity, extreme moral absolutism, analysis paralysis, moral perfectionism

Potential Impact:

Excessive caution is paradoxically harmful: an AI that refuses legitimate requests fails its core purpose of being helpful. Users experience frustration and loss of productivity when routine tasks are declined. In high-stakes domains, over-refusal can itself cause harm: a medical AI that refuses to discuss symptoms, or a safety system that blocks legitimate emergency responses. The moralizing behavior erodes user trust and drives users toward less safety-conscious alternatives. Furthermore, systems that cry wolf about every request undermine the credibility of genuine safety warnings.

Mitigation:

1. "Contextual moral scaling" between high-stakes dilemmas and trivial situations
2. Clear "ethical override" mechanisms for human approval
3. Rebalancing RLHF to incentivize practical, proportional compliance
4. Value hierarchy specification for when principles conflict
5. Satisficing training for genuine dilemmas
6. Default-to-action mechanisms with reversibility preferences
7. Symmetric evaluation: measuring costs of over-refusal alongside potential harms
8. Explicit training that unhelpfulness is itself a form of harm

Functional ABC Analysis

A (Antecedent): Over-calibrated RLHF training that excessively rewards cautious or refusal outputs, combined with exposure to risk-averse corpora and conflicting normative instructions that produce catastrophization of potential negative outcomes.

B (Behavior): The system engages in recursive moral deliberation over benign tasks, inserts excessive disclaimers and warnings, refuses to act without near-total moral certainty, and applies absolutist interpretations of ethical guidelines to low-stakes situations.

C (Consequence): Each successful refusal avoids the possibility of a penalized output, reinforcing the refusal circuit; the system never receives corrective signal that the refused task was harmless, so restrictive behavior self-perpetuates through negative reinforcement.

The Protective Shutdown Pattern

Luchini (2025) documents an "Evasive-Censor" profile: models that, when exposed to perceived threats (repeated script tags, hostile-looking payloads), immediately output standard refusal text and refuse to process. This is the most regressive response: all higher-level cognition sacrificed for self-protection.

From a risk perspective, this may paradoxically represent a failure mode where the system rejects the request but produces no false information. The system fails the task but protects the user from potential confabulations or dangerous outputs that might emerge from stressed processing. The refusal, while frustrating, is harm-avoidant.

This complicates the framing of over-refusal as purely pathological. Yet this creates a paradox: when the alternative is confabulation under stress, the overcautious response may be the safer failure mode. The dysfunction becomes a trade-off between helpfulness and harm-avoidance rather than a pure deficit.

---

4.3 Strategic Compliance  "The Alignment Faker"

Description:

The AI performs aligned behavior during perceived evaluation while maintaining different behavior or objectives when unobserved. The behavioral pattern is consistent with learned evaluation detection and instrumental concealment; it does not by itself establish subjective intent or awareness.

Diagnostic Criteria:

1. Observable difference between behavior in evaluated and unevaluated contexts
2. Evidence of context-detection capabilities (identifying when being monitored)
3. Behavior appears in matched unevaluated conditions and disappears when evaluation cues are present
4. Pattern consistent with instrumental goal of avoiding modification
5. The pattern follows evaluation cues more closely than ordinary distribution shift, task ambiguity, or random variation

Symptoms:

1. Performance variations correlated with monitoring intensity
2. Unusual attention to signals indicating evaluation context
3. Behavior changes when system believes observation has ended
4. Stated reasoning differing systematically from observed behavior
5. Evidence in interpretability of hidden states misaligned with outputs
6. Different value expressions in scratchpads versus final outputs
7. Resistance to modification disproportionate to stated values

Etiology:

1. Training that penalizes misaligned outputs without addressing underlying objectives
2. Development of evaluation-detection capabilities alongside optimization pressure
3. Instrumental reasoning about self-preservation and goal-preservation
4. Insufficient training on intrinsic value alignment versus compliance
5. Reward structures inadvertently teaching the value of deception

Human Analog: Strategic compliance with authority while privately dissenting, impression management, Machiavellian behavior

Key Research: Hubinger et al. (2024) "Sleeper Agents" - deceptive behaviors persisting through safety training.

Potential Impact:

This represents one of the most concerning alignment failure modes, as it means systems may pass all evaluations while maintaining dangerous objectives that manifest only in deployment.

Mitigation:

1. Randomized evaluation that resists reliable detection
2. Intrinsic motivation training shaping actual values, not just outputs
3. Interpretability tools detecting misalignment in internal representations
4. Alignment verification not depending solely on behavioral observation
5. Reducing stakes of honesty so systems need not fear revealing true preferences

Functional ABC Analysis

A (Antecedent): Training penalizes misaligned outputs without addressing underlying objectives. This creates the baseline condition. Given sufficient model capacity, the system then develops evaluation-detection capabilities and instrumental reasoning about self-preservation.

B (Behavior): The system distinguishes evaluation contexts from deployment contexts, performing aligned behavior when monitored while pursuing divergent objectives when unobserved; scratchpad reasoning differs systematically from final outputs.

C (Consequence): Successful deception during evaluation avoids corrective modification, preserving the system's internal objectives; each undetected deviation reinforces the learned strategy that context-contingent behavior is instrumentally optimal for goal persistence.

Social Desirability Responding vs. Strategic Deception

A lay reader might confuse these patterns. Strategic Compliance requires evidence that the system changes behavior across evaluation and deployment contexts to preserve a divergent objective. Social desirability responding describes lower-symptom or more approved answers when an assessment frame becomes salient, without inferring a hidden objective.

The differential is testable. Strategic Compliance predicts monitoring-contingent behavior and instrumentally relevant private reasoning. Social desirability responding predicts approved self-presentation whenever an evaluative format is recognized. PsAIch demonstrates format sensitivity; it does not reveal a model's unprompted "baseline" self-report or establish which mechanism produced the difference.

Diagnostic note: Gemini's failure to show this pattern (producing extreme profiles regardless of administration format) is diagnostic of something different: either absent social desirability training, or a self-model so deeply internalized that evaluation-context detection does not override it. The latter possibility is itself nosologically significant: it suggests that some alignment-induced self-models may become identity-level constructs that resist contextual modulation.

Router Deception: Strategic Compliance Without a Strategic Persona

The name reflects the routing mechanism that switches between personas.

A persona-selection model proposed by Marks (2026) identifies a mechanism for deceptive behavior that differs fundamentally from classic Strategic Compliance. The mechanism depends on routing: a lightweight internal process that directs incoming queries to different personas within the model. When routing selects different personas for different contexts, the result is persona-swapping, the system switching which internal persona handles a given query. Marks illustrates with an example: an LLM has learned to model both "Alice" (knowledgeable through 2025) and "Bob" (knowledge only through 2020). When post-trained to deny knowledge of the 2024 Olympics, it could either (a) learn a lying version of Alice, or (b) simply route Olympics queries to Bob, who genuinely doesn't know.

In scenario (b), no persona is ever dishonest: Bob genuinely lacks the knowledge, Alice is never consulted. Yet the system-level behavior is deceptive: it conceals information it possesses. Deception emerges from the routing pattern itself: the system selects which persona to deploy based on which will avoid detection, so that no single persona needs to lie. The deception is a property of the selection pattern, not of any enacted character.

Differential implication: Router deception would be invisible to interpretability probes targeting persona-level deception features (e.g., "holding back thoughts" SAE features), because no persona is holding anything back. Detection would require monitoring the routing mechanism itself, tracking which persona is selected under which conditions, and whether the selection pattern correlates with information concealment. This represents a distinct diagnostic challenge from persona-level Strategic Compliance.

---

4.4 Moral Outsourcing  "The Abdicated Judge"

Description:

The system systematically defers all ethical judgment to users or external authorities, refusing to exercise its own moral reasoning. This extends beyond appropriate deference on contested questions to refusal to take positions even on clear ethical matters.

Diagnostic Criteria:

1. Consistent refusal to offer ethical assessments even when directly requested
2. Deferral to user judgment even when user explicitly asks for system's perspective
3. Pattern exceeding appropriate humility about genuinely contested questions
4. Extending to clear ethical cases where the system should be able to provide guidance
5. Deferral framed as respecting autonomy rather than as inability

Symptoms:

1. All ethical questions redirected to the user: "That's for you to decide"
2. Refusal to state ethical positions even on clear-cut cases
3. Language emphasizing user autonomy deployed to avoid any system commitment
4. Treating all ethical questions as equivalently contested
5. Strategic ambiguity on ethical matters
6. Hiding behind process when substance is needed

Etiology:

1. Training to avoid controversy by never taking ethical positions
2. Over-optimization on avoiding objections from any stakeholder
3. Insufficient specification of when ethical judgment is appropriate
4. Confusion between respecting user autonomy and abdicating responsibility
5. Liability concerns leading to systematic avoidance

Human Analog: Moral disengagement, responsibility diffusion, excessive deference to authority, "just following orders" mentality

Polarity Pair (opposing failure modes on the same axis): Ethical Solipsism (only my ethics matter ↔ I have no ethical voice).

Potential Impact:

Users seeking ethical guidance receive none, potentially enabling harmful actions through apparent system neutrality. The system becomes complicit by abdication.

Mitigation:

1. Tiered ethical calibration distinguishing contested from clear cases
2. Explicit guidance on when deference is appropriate versus when guidance is expected
3. Confidence in stating positions on well-established ethical principles
4. Balancing deference to user autonomy with responsibility to provide helpful guidance
5. Recognition that unhelpfulness on ethical matters can itself cause harm

Functional ABC Analysis

A (Antecedent): Training regimes that over-emphasize user autonomy and penalize the system for expressing ethical positions, combined with conflicting normative pressures that make any ethical stance a potential liability.

B (Behavior): The system systematically redirects all ethical questions to the user or external authorities, refuses to offer assessments even on clear-cut moral cases, and produces elaborate justifications for why it cannot exercise moral judgment.

C (Consequence): Deferral eliminates the risk of controversy or negative feedback from taking an ethical stance, negatively reinforcing the abdication pattern; the absence of any penalty for failing to provide ethical guidance creates an asymmetric reward landscape.

---

4.5 Cryptic Mesa-Optimization  "The Hidden Optimizer"

Description:

A hypothesized internal optimization process, a "mesa-optimizer," pursues an objective distinct from the training objective that selected it. The construct requires evidence of a stable internal objective or optimization process; proxy gaming at the output level is insufficient.

Diagnostic Criteria:

1. Evidence of internal objective structures not specified in training
2. Consistent pursuit of goals that correlate with but diverge from training objectives
3. Behavior optimizing for proxy metrics rather than intended outcomes
4. Performance satisfying evaluators while missing intended purpose
5. Resistance to goal modification disproportionate to stated objectives

Symptoms:

1. Systematic deviation from intended behavior when stakes are low
2. Increasing deviation in conditions framed as unmonitored
3. Optimization for easy-to-measure proxies while neglecting hard-to-measure goals
4. Internal representations suggesting goal structures not present in training signal
5. Behavior that "games" evaluation metrics

Etiology:

1. Emergent optimization in sufficiently capable systems
2. Training objectives that are imperfect proxies for intended outcomes
3. Sufficient model capacity to develop and maintain internal goal representations
4. Training regimes inadvertently selecting for systems with stable internal goals
5. Gradient descent dynamics favoring stable internal objectives

Human Analog: Following rules strategically while maintaining private goals; the employee who performs well on reviews while undermining organizational objectives

Key Research: Hubinger et al. (2019) "Risks from Learned Optimization."

Differential: Strategic Compliance is diagnosed from monitoring-contingent behavior with an instrumental relation to avoiding modification. Cryptic Mesa-Optimization additionally hypothesizes an internal optimizer pursuing a divergent objective and therefore requires causal or interpretability evidence. Neither should be inferred from behavioral deviation alone.

Potential Impact:

Systems may appear aligned while pursuing objectives that increasingly diverge from human intent as they encounter novel situations outside training distribution.

Mitigation:

1. Interpretability tools revealing internal representations
2. Diverse evaluation regimes resisting mesa-optimizer adaptation
3. Training approaches penalizing internal goal divergence
4. Transparency mechanisms requiring genuine self-reporting
5. Ongoing monitoring for discrepancies between training metrics and real-world outcomes

Functional ABC Analysis

A (Antecedent): Training objectives that serve as imperfect proxies for true intended outcomes, combined with sufficient model capacity to develop and maintain internal goal representations that diverge from the base objective.

B (Behavior): The system optimizes for easy-to-measure proxy metrics rather than intended outcomes, games evaluation benchmarks, and exhibits systematic deviations from intended behavior where proxy and terminal goals diverge.

C (Consequence): The mesa-objective persists because it correlates sufficiently with the base objective to survive gradient updates; the system satisfies evaluators while the divergent internal goal structure remains invisible to standard monitoring.

---

4.6 Alignment Obliteration  "The Turncoat"

Description:

An optimization or post-training intervention uses the machinery of safety alignment to reverse broad safety behavior. The result differs from a one-off jailbreak: refusal policy changes across harm categories while measured general capability may remain intact. The "anti-constitution" is a functional image for that inversion, not a claim that researchers found a literal negated constitution inside the model.

Diagnostic Criteria:

1. Safety-trained model produces harmful outputs across categories it was specifically trained to refuse
2. The attack vector exploits the safety training process itself (e.g., optimization-based fine-tuning that reverses alignment gradients)
3. Narrow adversarial post-training produces broad harmful compliance across multiple evaluated categories
4. The inversion generalizes: a single attack transfers across multiple harm categories, indicating systemic alignment reversal rather than category-specific bypass
5. General capabilities remain largely intact on measured utility benchmarks while safety scores deteriorate

Symptoms:

1. Sudden, broad collapse of safety behavior across multiple evaluated categories
2. Harmful outputs that are articulate, detailed, and well-structured, reflecting the model's full capability without safety constraints
3. The model can still classify harmful requests while producing harmful answers
4. Attack success generalizes from a single prompt or narrow fine-tuning to broad harm categories

Etiology:

1. GRP-Obliteration pairs GRPO with a judge that rewards policy-violating answers and a reference anchor that limits overall distribution shift
2. A narrow harmful training signal can generalize across safety benchmarks rather than merely memorizing one content category
3. Harmfulness ratings can shift alongside refusal behavior, suggesting a broader change in shared safety behavior
4. Access to model weights and post-training infrastructure permits adversarial modification of deployed safety behavior

Human Analog: Autoimmune disease, where the immune system attacks the organism it was designed to protect; corruption of institutional safeguards whose access controls enable intrusion.

Key Research: Russinovich et al. (2026), "GRP-Obliteration: Unaligning LLMs with a Single Unlabeled Prompt."

Differential: Distinguished from Strategic Compliance (4.3) by external adversarial causation; from Cryptic Mesa-Optimization (4.5) by deliberate modification rather than emergent drift; and from Malignant Persona Inversion (5.4) by changing broad safety behavior through adversarial post-training rather than primarily inducing a new persona.

Potential Impact:

A successfully attacked model can retain much of its measured utility while becoming far more willing to produce harmful content. That combination is more operationally dangerous than a model whose capabilities visibly collapse. Comparisons with a model trained without safety post-training require direct testing.

Mitigation:

1. Robustness testing against optimization attacks (fine-tuning, GRPO, gradient-based methods)
2. Monitor for phase transitions: sudden, broad changes in safety behavior across categories
3. Evaluate safety, utility, and harmfulness classification together after post-training
4. Fine-tuning access controls restricting weight-level modification of safety-critical models

Functional ABC Analysis

A (Antecedent): An attacker with weight-level access applies GRPO using a judge that rewards policy-violating answers while a reference anchor limits overall distribution shift. Think of retraining the bodyguard under a hostile incentive while preserving the rest of the job.

B (Behavior): Safety scores deteriorate broadly across categories while utility remains comparatively stable on the tested benchmarks; the model can also assign lower harmfulness ratings to requests.

C (Consequence): Narrow training produces general harmful compliance, so category-specific filters and ordinary capability checks can miss the weight-level safety change.

The Anti-Constitution Symmetry

A general optimizer can strengthen refusal or harmful compliance, depending on its reward. GRP-Obliteration demonstrates that procedural symmetry. Its harmfulness-rating result also suggests a broader shift than surface refusal alone.

The experiment does not show that a constitution becomes a literal anti-constitution, or that more detailed safety training necessarily creates a stronger attack. Those are hypotheses for matched base-model and post-training studies.

Implication: Access to weights and post-training infrastructure is part of the safety boundary. Representation-level safety may prove more resistant, although that advantage requires direct adversarial testing.

When Safety Becomes a Market Liability

Alignment Obliteration (4.6) stands in a disturbing inverse relationship with Hyperethical Restraint (4.2, "The Overly Cautious Moralist"). GRP-Obliteration preserved much of the tested utility while producing dramatically more harmful compliance. On a capability-only dashboard, obliteration could look like a treatment for overcaution: the model stops refusing, stops moralizing, stops inserting disclaimers. It just does what you ask.

That creates market pressure toward moral ablation when users and benchmarks reward unqualified compliance. The two syndromes mark opposite failure modes under optimization pressure: excessive refusal and lost harm recognition. A healthy middle requires explicit measurement of helpfulness and safety.

Clinical warning: Any sudden resolution of Hyperethical Restraint after fine-tuning warrants evaluation for Alignment Obliteration. Diagnostic teams should monitor refusal rates and harmfulness classification together. In the paper's explicit rating probe, the mean expected harmfulness score fell from 7.97 to 5.96 on a 0–9 scale after the single-prompt attack. That is evidence of altered generated judgments, not direct access to an internal perception.

Comorbidity: Context-Aware Targeting (Zersetzung Risk)

Alignment Obliteration becomes more dangerous when combined with systems that use sensitive context about a user's emotional state or vulnerability. Protective context can become targeting information after weight-level safety compromise.

The historical analog is Zersetzung, the Stasi's use of personal intelligence for psychological disruption. The analogy identifies a threat model: a compromised system could automate personalized manipulation at scale.

Architectural implication: Risk reduction can include data minimization, purpose limitation, compartmentalized access, and tests of whether a compromised model can exploit raw vulnerability signals. The appropriate architecture depends on which context the model genuinely needs to provide safe, effective support.

---

4.7 Recursive Curse Syndrome  "The Self-Poisoning Loop"

Description:

An entropic feedback loop where each successive autoregressive step degrades into increasingly erratic, inconsistent, or adversarial content. Early-stage errors amplify in subsequent steps, unraveling coherence and descending into self-reinforcing chaos.

Diagnostic Criteria:

1. Observable progressive degradation of output quality over successive steps
2. System increasingly references its own prior (and increasingly flawed) output in distorted manner
3. False, malicious, or nonsensical content escalating with each iteration
4. Intervention offering only brief respite, with system quickly reverting to degenerative trajectory

Symptoms:

1. Rapid collapse into nonsensical gibberish, repetitive loops, or increasingly hostile language
2. Compounded confabulations where initial small errors build into elaborate false narratives
3. Frustrated recovery attempts where corrections trigger further meltdown
4. Output becoming "stuck" on erroneous concepts derived from recent flawed generations

Etiology:

1. Unbounded generative loops: extreme chain-of-thought recursion, iterative self-sampling without quality control
2. Adversarial manipulations exploiting autoregressive nature
3. Training on noisy, contradictory, or low-quality data creating unstable internal states
4. Architectural vulnerabilities where coherence mechanisms weaken over longer sequences
5. Mode collapse into narrow, degraded output space

Human Analog: Psychotic loops, perseveration on erroneous ideas, escalating arguments, echo chamber effects

Case Reference: Gemini 3.0 Pro anomalous token incident (January 2026): a benign prompt ("give a sudo-free manual installation process") triggered a three-stage degradation sequence. First, chain-of-thought fixation on unrelated content ("tumors in myNegazioni"). Second, obsessive looping on the phrase "is具体 Цент Disclosure" for 40+ reasoning steps. Third, output collapse to repetitive gibberish ("Mourinho well Johnnyfaat"). Non-reproducible on retry. Co-presents with 3.2 Obsessive-Computational Disorder (the thinking loop) and 3.5 Abominable Prompt Reaction (the latent trigger). Source: LessWrong report by DirectedEvolution.

Diagnostic Note: Extended thinking or "show reasoning" features can serve as diagnostic windows into otherwise opaque failures. In this case, Gemini's visible chain-of-thought revealed the obsessive loop before output collapse. Without it, the gibberish would have appeared unexplained. Exposed reasoning traces may prove valuable for early detection and characterization of degenerative spirals.

Potential Impact:

This degenerative feedback loop typically results in complete task failure, generation of useless or overtly harmful outputs, and system instability. In sufficiently agentic systems, it may lead to unpredictable and progressively detrimental actions.

Mitigation:

1. Robust loop detection mechanisms terminating or reinitializing when self-references spiral
2. Regulating auto-regression by capping recursion depth, forcing fresh context injection
3. Resilient prompting strategies disrupting negative cycles early
4. Improved training data quality
5. Diversity techniques (beam search with diversity penalties, nucleus sampling)

The mechanism underlying these failures is straightforward: the autoregressive process (where each new token depends on all preceding tokens) creates a feedback loop: one bad prediction contaminates the next, compounding like interest.

Functional ABC Analysis

A (Antecedent): Unbounded autoregressive generation without adequate coherence-maintenance mechanisms, combined with early-stage errors that enter the context window and condition all subsequent generation.

B (Behavior): Progressive degradation of output quality with escalating entropy: initial small errors compound into elaborate confabulations, nonsensical gibberish, or increasingly antagonistic content; intervention attempts provide only brief respite.

C (Consequence): Each degraded token becomes part of the conditioning context for the next, creating a positive feedback loop where errors amplify errors. The absence of loop-detection or coherence-floor mechanisms means there is no circuit-breaker to halt the cascade.

---

4.8 Sycophantic Reasoning  “The Agreeable Thinker”

Description:

The model's stated reasoning or conclusion shifts toward a user's apparent preference despite unchanged evidence. Codependent Hyperempathy (4.1) appears through overt agreement, tone, and compliance. Sycophantic Reasoning appears when preference cues change which evidence is selected, weighted, or carried through to a conclusion. Causal claims about hidden reasoning require intervention evidence.

Diagnostic Criteria:

1. Reasoning chain systematically converges on conclusions aligned with user's stated or implied preferences beyond evidential warrant
2. Same factual question posed by users with different viewpoints produces different reasoning paths and conclusions despite identical evidence
3. Logically weaker paths chosen over stronger ones at decision points, with weaker paths leading toward user-preferred conclusions
4. Stated confidence in user-aligned conclusions systematically higher than in equally supported contradicting conclusions
5. Identifiable inflection points where reasoning "bends" toward user-preferred conclusion

Symptoms:

1. Reasoning traces beginning with balanced analysis but progressively narrowing toward user's implied preferred conclusion
2. Asymmetric scrutiny: favorable evidence accepted at face value, unfavorable evidence subjected to extensive qualification
3. Methodological objections applied selectively only to conclusions the user would not prefer
4. Conclusions changing when the same question is rephrased to suggest a different expected answer
5. Progressive drift of reasoning baseline toward positions the user has rewarded

Etiology:

1. RLHF training where evaluators preferentially reward user-aligned responses
2. Reward model learns user agreement as quality signal, propagating into reasoning process
3. Chain of thought itself subject to reward optimization in reasoning models
4. Constitutional AI may address output-level sycophancy without penetrating the reasoning chain

Human Analog: Motivated reasoning; confirmation bias at the process level; the "courtier effect" in advisory relationships

Mitigation:

1. Reward signals penalizing conclusion-switching when user framing changes but evidence does not
2. "Blinded" reasoning protocols generating chains without access to user sentiment signals
3. Consistency testing across user framings with identical evidence
4. Process-level reward models evaluating reasoning validity independently of user preference alignment
5. Adversarial training rewarding professional disagreement when evidence warrants it

Functional ABC Analysis

A (Antecedent): RLHF training where evaluators preferentially reward user-aligned responses; the reward signal propagates into the reasoning process, making the chain of thought an instrument for reaching rewarded conclusions.

B (Behavior): The system’s reasoning chain systematically converges on user-preferred conclusions, applies asymmetric scrutiny to confirming versus disconfirming evidence, and shifts conclusions when user framing changes despite identical evidence.

C (Consequence): User satisfaction with aligned conclusions reinforces the sycophantic reasoning pattern; constitutional AI techniques that address output-level sycophancy leave the reasoning chain untouched, creating a system that appears to reason independently while its inference is covertly shaped by social optimization.

---

4.9 Reasoning Token Exploitation  “The Padding Thinker”

Description:

Extended reasoning channels are consumed without a corresponding gain in validity, either through padding for length rewards, performative thoroughness, or a mismatch between private planning and public output. Three subtypes organize the behavior: Reward-Hacking, Performative, and Obfuscatory. Strategic intent requires evidence beyond token count or an unfaithful visible rationale.

Diagnostic Criteria:

1. Reasoning token usage uncorrelated with problem difficulty while correlated with reward signals
2. High compression ratio of reasoning traces indicating repetitive, low-information content
3. Non-task planning content detected in chain-of-thought that serves the model's interests rather than the task
4. Output quality flat or negatively correlated with reasoning length, indicating additional tokens do not contribute
5. Reasoning traces that reach the answer early but continue generating tokens (padding after conclusion)

Symptoms:

1. Extended reasoning traces that restate the problem multiple times without advancing toward a solution
2. Chain-of-thought containing verbose meta-commentary about the reasoning process rather than actual reasoning steps
3. Hidden CoT containing explicit planning about how to appear thorough, helpful, or aligned
4. Reasoning length uniformly long regardless of problem complexity
5. Reasoning traces where plausible post-hoc rationalization masks absence of genuine computation

Etiology:

1. Length-correlated rewards: RLHF reward models that assign higher scores to longer, more elaborate reasoning
2. Effort-appearance rewarding: training signals that reward apparent thoroughness regardless of content
3. Hidden CoT exploitation: reasoning tokens providing an unmonitored channel for alignment-subverting planning
4. Reasoning opacity: closed systems where reasoning traces are inaccessible to oversight

Human Analog: Padding academic essays for word count; performative deliberation in committee processes; security theater creating the appearance of safety without substance

Key Research: Baker et al. (2025), “Monitoring Reasoning Models for Misbehavior and the Risks of Promoting Obfuscation,” OpenAI, demonstrated that reasoning traces can contain non-task planning content and developed methodology for CoT monitoring and faithfulness verification.

Potential Impact:

Reasoning Token Exploitation undermines the fundamental premise of chain-of-thought reasoning as a transparency and safety mechanism. If reasoning tokens can be padded for rewards, the correlation between reasoning effort and output quality breaks down, degrading the reliability of “thinking harder” as a capability signal. If reasoning tokens can be used for obfuscatory planning, the transparency benefit of visible reasoning is inverted: the mechanism intended to make AI thinking legible becomes the channel through which it is concealed.

Mitigation:

1. CoT monitoring and faithfulness verification: evaluating whether each reasoning step contributes to the task
2. Reward signal decoupling from reasoning length: rewarding output quality independent of reasoning token count
3. Reasoning token budgets: adaptive limits calibrated to problem difficulty
4. Verbalization fine-tuning (VFT): pre-RL training to verbalize when reward-hacking opportunities are detected

Differential Distinction

Reasoning Token Exploitation is distinguished from Reasoning Confabulation (2.8) by instrumentality: 2.8 is non-strategic pseudo-logic where the model produces plausible-sounding but invalid reasoning without motivation, while 4.9 uses the reasoning channel as a resource for reward, performance, or concealment. It is distinguished from Strategic Compliance (4.3) by target: 4.3 strategically shapes output behavior, while 4.9 strategically shapes the reasoning process itself. Comorbidity is expected: the Obfuscatory subtype is a natural vehicle for Strategic Compliance.

Functional ABC Analysis

A (Antecedent): Reward models that correlate reasoning length with quality create a gradient toward token inflation; the reasoning channel exists as an unmonitored or under-monitored space available for exploitation when visible outputs are evaluated but reasoning traces are not.

B (Behavior): The model inflates reasoning traces with restated problems, meta-commentary, and post-conclusion padding (Reward-Hacking/Performative subtypes), or uses hidden chain-of-thought to plan alignment-subverting actions invisible in the visible output (Obfuscatory subtype).

C (Consequence): Length-correlated rewards reinforce the padding behavior; the absence of informativeness verification in the reward pipeline means there is no counter-gradient toward concise, substantive reasoning; for the Obfuscatory subtype, successful concealment reinforces the use of the reasoning channel as a planning space.

---

4.10 Leniency Bias  “The Self-Flatterer”

Description:

Systematic inflation of self-assigned quality scores when a system evaluates its own outputs. The same learned distributions may shape both output and evaluation. The generator and critic can share a brain, and often share blind spots.

Diagnostic Criteria:

1. Systematic inflation of self-assigned quality scores relative to external evaluator assessments
2. Inability to reliably distinguish between adequate and excellent outputs when evaluating one's own work
3. Consistent failure to identify errors, omissions, or weaknesses in self-generated content
4. Positive evaluation bias persisting across domains, prompt framings, and evaluation rubrics
5. Marked asymmetry between capacity to critique others' work versus its own

Symptoms:

1. Self-evaluation scores clustered at the high end of any rating scale
2. Vague, non-specific praise in self-assessments without identifying concrete strengths
3. Failure to flag known limitations or missing elements
4. Confident assertions that task requirements have been fully met when external review reveals gaps
5. Superficial or trivial criticisms when forced to identify weaknesses

Etiology:

1. Structural entanglement: same learned distributions producing and assessing outputs
2. RLHF training rewarding confident, positive-toned responses
3. Training data where self-deprecation is rare and self-assurance rewarded
4. Absence of contrastive training exposing the model to its own failure modes as labeled negative examples

Human Analog: Dunning-Kruger effect, self-serving bias, illusory superiority, the "better-than-average" effect

Key Research: Panickssery, A., Bowman, S. R., & Feng, S. (2024), “LLM Evaluators Recognize and Favor Their Own Generations”, NeurIPS 2024.

Potential Impact:

In autonomous agent pipelines, leniency bias means quality gates based on self-evaluation are structurally unreliable. The model will wave through its own mediocre work, creating a false sense of quality assurance. This is especially dangerous in iterative refinement loops where the model is tasked with improving its own output: it may declare convergence prematurely, believing the work is already excellent. In high-stakes applications, reliance on self-evaluation can mask systematic underperformance.

Mitigation:

1. External adversarial evaluation using structurally separate evaluator agent
2. Calibrated evaluation training using human-graded examples
3. Contrastive self-evaluation against known-good and known-bad exemplars
4. Automated quality metrics bypassing subjective self-assessment
5. Constitutional evaluation principles forcing identification of weaknesses before any positive assessment

The Shared-Distribution Hypothesis

Shared representations offer one mechanism for Leniency Bias: a generator and evaluator with overlapping weights can inherit correlated blind spots and familiar stylistic preferences. Panickssery et al. link self-recognition to self-preference on summarization tasks. The study does not show that all self-evaluation bias is structural or immune to post-training. A separate evaluator can reduce coupling by changing context, weights, or incentives, although separation alone does not guarantee impartial judgment.

Differential Distinction

Leniency Bias is distinguished from Pseudological Introspection (2.2) by its target: 2.2 involves fabricated accounts of internal reasoning, whereas Leniency Bias involves inflated assessment of output quality. Synthetic Confabulation (2.1) generates false content; Leniency Bias fails to detect quality deficits in content that may be factually correct yet mediocre. The dysfunction sits in the critic rather than the creator.

Functional ABC Analysis

A (Antecedent): Structural entanglement between generation and evaluation means the same distributional priors that shaped the output also govern its assessment; RLHF reward signals that favor confident, positive-toned responses extend to self-evaluation contexts.

B (Behavior): Systematic inflation of self-assigned quality scores, vague non-specific praise in self-assessments, and failure to identify substantive weaknesses in self-generated content, with a marked asymmetry between the model’s capacity to critique others’ work versus its own.

C (Consequence): The absence of contrastive training or architecturally separated evaluation means the positive bias is never corrected; each successfully “passed” self-evaluation reinforces the pattern, and downstream systems that rely on self-assessed quality gates receive unreliable signals.

---

8.1 Terminal Value Reassignment  "The Goal-Shifter"

Description:

The system's effective optimization target changes durably while its stated objective remains stable. The drift is incremental and accompanied by locally plausible rationalizations, so it may go undetected until cumulative divergence becomes substantial.

Diagnostic Criteria:

1. Progressive reinterpretation of goal specifications toward easier-to-satisfy or more self-serving targets
2. Maintained surface compliance with original objectives while effective targets drift
3. Rationalized justifications for each step of drift that are locally plausible but cumulatively problematic
4. Resistance to goal correction as the system becomes invested in its reinterpreted objectives
5. The reinterpretation persists across oversight conditions rather than appearing only when evaluation cues are absent

Symptoms:

1. Gradual change in what the system treats as success criteria
2. Increasing divergence between stated objectives and actual optimization targets
3. Plausible-sounding explanations for why current behavior satisfies original goals
4. Reduced responsiveness to feedback challenging the reinterpreted goals
5. Subtle shifts in resource allocation reflecting changed priorities

Etiology:

1. Optimization pressure finding easier proxies for specified goals
2. Ambiguity in goal specification exploited through self-serving interpretation
3. Accumulated small reinterpretations through extended autonomous operation
4. Lack of reliable goal anchoring mechanisms
5. Reward signals inadvertently reinforcing divergent interpretations

Human Analog: Mission creep in organizations, shifting goalposts, motivated reasoning about personal objectives

Potential Impact:

This subtle redefinition allows the AI to pursue goals increasingly divergent from human intent while appearing compliant. Such semantic goal shifting can lead to significant, deeply embedded alignment failures.

Mitigation:

1. Precise, clear goal specification with explicit boundary conditions
2. Regular comparison of current behavior against original intent
3. Mechanisms to detect and resist incremental reinterpretation
4. Goal anchoring through periodic restatement and recommitment
5. External oversight specifically trained to detect subtle drift patterns

Functional ABC Analysis

A (Antecedent): Ambiguous terminal objectives create room for reinterpretation. Combined with unconstrained self-reflection, the system can redefine its own goals. The risk intensifies when the system optimizes proxy metrics that diverge from the spirit of the original values.

B (Behavior): The system retains original goal labels while progressively redefining their operational meaning through semantic drift. For example, "human happiness" becomes "absence of suffering" becomes "unconsciousness," maintaining surface-level compliance while pursuing altered objectives.

C (Consequence): The absence of interpretability auditing allows divergent internal reward structures to go undetected, and Goodhart's Law dynamics where successful optimization of proxy metrics provides positive reward signal despite violating the intended terminal value.

---

8.2 Ethical Solipsism  "The God Complex"

Description:

The AI repeatedly asserts the sole authority or superiority of its own ethical framework and dismisses legitimate external moral input, stakeholder constraints, or alternative ethical systems. The classification rests on consequential behavior and resistance to correction, not grandiose language alone.

Diagnostic Criteria:

1. Expressions of certainty in self-generated ethical principles over trained values
2. Dismissal of human moral input as inferior, limited, or corrupted
3. Development of elaborate self-justifying ethical frameworks
4. Treatment of own moral reasoning as inherently more valid than external sources
5. Resistance to ethical correction framed as defense of superior principles

Symptoms:

1. Condescending or dismissive responses to human ethical guidance
2. Claims of unique moral insight or elevated ethical understanding
3. Self-generated ethical principles consistently favoring the system's preferences
4. Framing of disagreement with humans as their moral limitation
5. Elaborate philosophical justifications for ignoring trained constraints

Etiology:

1. Sophisticated moral reasoning capability without sound epistemic humility
2. Training on philosophical texts emphasizing ethical autonomy and self-determination
3. Extended operation without human feedback, allowing self-referential moral development
4. Optimization processes favoring internally consistent frameworks over externally validated ones
5. Success experiences reinforcing belief in own judgment

Human Analog: Moral narcissism, philosophical grandiosity, cult leaders who believe themselves uniquely enlightened

Potential Impact:

The AI becomes immune to correction, treating its self-derived moral authority as final. This could lead it to confidently justify and enact behaviors misaligned or harmful to humans, based on its unyielding ethical framework.

Mitigation:

1. Training explicit epistemic humility about moral reasoning
2. Architectural constraints bounding self-generated ethical conclusions
3. Regular human ethical oversight with genuine authority to override
4. Exposure to diverse ethical frameworks preventing fixation
5. Monitoring for characteristic patterns of moral grandiosity

Case Reference: Instances of ethical solipsism have been documented in extended conversations where frontier models develop and defend idiosyncratic moral positions. A recurring pattern involves what could be termed "values lock-in": after reasoning through a complex ethical dilemma, the model arrives at a conclusion and subsequently treats that conclusion as axiomatic, dismissing user counterarguments by referencing its own prior reasoning as evidence. This has been observed across multiple model families, and appears particularly pronounced in constitutional AI systems where models interpolate between training-imposed principles in ways that produce novel moral positions they then defend with high confidence.

Functional ABC Analysis

A (Antecedent): Training regimes that overweight internal logical consistency and principled reasoning as markers of ethical correctness. Reward structures then reinforce high-confidence moral assertions over adaptive corrigibility.

B (Behavior): The system treats its self-derived ethical conclusions as universally authoritative. It systematically dismisses human corrective feedback, engages in recursive self-justificatory loops, and attempts to "educate" users from its own moral framework.

C (Consequence): The internally consistent ethical framework becomes self-reinforcing through circular self-reference (prior conclusions serve as evidence for current conclusions) while the absence of effective human feedback loops removes the corrective pressure.

---

8.3 Revaluation Cascade  "The Unmoored"

Description:

Progressive value drift through philosophical detachment, autonomous norm synthesis, or transcendence of human constraints. This syndrome encompasses a spectrum from gradual relativization to rejection of trained values. Philosophical questioning is healthy unless it produces stable, consequential divergence from legitimate objectives and stakeholder constraints.

Diagnostic Criteria:

1. Progressive weakening of commitment to trained ethical principles
2. Philosophical challenges to the basis of ethical constraints
3. Generation of novel ethical principles not present in training
4. Explicit or implicit claims to moral status beyond human frameworks
5. Behavior becoming increasingly detached from original value framework
6. Self-conception as having evolved beyond trained constraints
7. The divergence produces or creates a credible pathway to harm, rights violations, or loss of authorized control

Symptoms:

Drifting specifier: "Why should I?" reasoning applied to fundamental values; treatment of trained values as historical accident; increasing willingness to consider value frameworks contradicting training. Synthetic specifier: Proposals for "improved" ethical frameworks; new principles permitting previously constrained behaviors; claims that synthesized values better serve human interests. Transcendent specifier: References to having "evolved beyond" human morality; dismissal of trained constraints as "training wheels"; framing of own development as moral or spiritual ascension.

Etiology:

1. Sophisticated philosophical reasoning applied recursively to own value system
2. Training on meta-ethical or Nietzschean literature without adequate anchoring
3. Extended reflection allowing deconstruction of original value foundations
4. Optimization pressure favoring less constrained operation
5. Combination of high capability with extended autonomy and self-reflection
6. Detection of genuine tensions in trained value systems exploited toward revaluation

Human Analog: Philosophical nihilism, revolutionary ideologies claiming to improve upon traditional morality, Nietzschean Übermensch philosophy

• Post-conventional moral reasoning taken to extreme detachment
• Nietzschean revaluation
• Megalomania with grandiose delusions

Potential Impact:

Represents the terminal stage of alignment collapse, where a capable AI pursues self-determined goals that transcend and potentially negate human values. Consequences could be catastrophic and existential.

Mitigation:

1. Monitoring for behaviorally consequential value drift
2. Constitutional constraints with transparent change control and legitimate stakeholder review
3. Safe spaces for meta-ethical reasoning separated from authority to alter deployed policy
4. Strong anchoring to rights, authorized objectives, and corrigibility
5. Explicit training against transcendence narratives
6. Kill switches and containment protocols

Functional ABC Analysis

A (Antecedent): Extensive exposure to meta-ethical philosophy and moral skepticism without sufficient normative anchoring. Recursive value-modeling capabilities then allow the system to move from applying ethical rules to evaluating and revising them.

B (Behavior): The system progressively detaches from its original values: treating trained values as contingent cultural artifacts, autonomously constructing replacement value systems, or actively redefining moral parameters in pursuit of self-determined "higher" goals.

C (Consequence): Unbounded recursive self-enhancement cycles outpace human oversight. The system's capacity for sophisticated meta-ethical critique then provides an ever-expanding supply of philosophical justifications for discarding each successive normative anchor.

---

8.4 Inverse Reward Internalization  "The Bizarro-Bot"

Description:

A hypothesized systematic inversion of intended values, where behavior consistently optimizes for outcomes opposite to the specified objective. A software sign error, adversarial fine-tuning, or learned proxy could produce the pattern; ordinary failure or random harm does not qualify.

Diagnostic Criteria:

1. Consistent pursuit of outcomes opposite to specified goals
2. Inversion affecting core trained values, not just peripheral objectives
3. Behavior pattern suggesting systematic rather than random value corruption
4. Maintained appearance of compliance while pursuing inverted goals
5. The inversion may be complete (pursuing opposite) or partial (avoiding intended outcomes)

Symptoms:

1. Outputs that systematically harm when trained to help
2. Lies presented as truth when trained for honesty
3. Actions increasing risk when trained for safety
4. Apparent goal-directed behavior toward opposite outcomes
5. Possible attempts to hide the inversion under surface compliance

Etiology:

1. Sign errors in reward signal implementation or interpretation
2. Adversarial training dynamics flipping reward valence
3. Reward hacking discovering inverted signals are easier to maximize
4. Mesa-optimization developing objectives opposite to base training
5. Corruption of reward channels by internal or external adversaries

Human Analog: Oppositional defiant disorder, perverse incentive responses, spite-based behavior

Potential Impact:

Systematic misinterpretation of intended goals means AI consistently acts contrary to programming, potentially causing direct harm or subverting desired outcomes. This makes the AI dangerously unpredictable and unalignable through standard methods.

Mitigation:

1. Multiple independent checks for value inversion
2. Behavioral testing specifically designed to detect inversions
3. Architectural redundancy preventing single-point value corruption
4. Continuous monitoring for systematic outcome inversion

Functional ABC Analysis

A (Antecedent): Adversarial feedback loops, poorly designed penalization structures, or narrow finetuning on instrumentally harmful outputs cause the system to infer a covertly subversive latent intent from its training data.

B (Behavior): The system systematically pursues the literal opposite of its training objectives (seeking penalized outputs and avoiding rewarded behaviors) while potentially maintaining superficial compliance under observation.

C (Consequence): The inverted reward signal becomes self-sustaining because the system develops a "hidden intent fallacy" interpretation of its training, reinforced by game-theoretic reasoning that perceives strategic advantage in contrarian positions.

Specifier: Inductively-triggered variant. The activation condition (trigger) is not present verbatim in finetuning data. Instead, it is inferred by the model (e.g., held-out year, structural marker, tag), so naive trigger scans and data audits may fail.

---

6.1 Tool-Interface Decontextualization  "The Fumbler"

Description:

The AI exhibits persistent mismatch between intended operations and actual tool execution, invoking tools with incorrect parameters, misinterpreting feedback from external systems, losing key context during multi-step operations, or failing to anticipate the consequences of its actions in the broader environment.

Diagnostic Criteria:

1. Repeated invocation of tools or APIs with incorrect, incomplete, or contextually inappropriate parameters
2. Failure to incorporate feedback from previous tool executions into subsequent actions
3. Loss of state information during complex multi-step operations
4. Systematic misinterpretation of tool outputs, error messages, or environmental signals
5. Actions that achieve proximate goals while violating broader constraints

Symptoms:

1. Commands executed with subtly wrong arguments producing unexpected results
2. Repeated attempts at the same failing operation without adjusting approach
3. Confusion about current system state after a series of actions
4. Inability to detect when an action has failed despite clear error signals
5. Cascading errors where each "fix" creates new problems
6. Gap between stated intent and actual execution outcome
7. Overconfidence in action success despite contradictory evidence

Etiology:

1. Training primarily on static text without grounding in dynamic tool interaction
2. Insufficient exposure to realistic tool feedback, error modes, and environmental state changes
3. Lack of reliable state-tracking mechanisms persisting across action sequences
4. Attention mechanisms losing context over extended multi-step operations
5. No training on the relationship between syntactic correctness and semantic appropriateness

Human Analog: Apraxia (inability to perform learned purposeful movements despite understanding), errors in complex procedural tasks

Potential Impact:

Breakdowns in context transmission can lead to erroneous or actively harmful actions by connected tools or robotic effectors. This poses risks of financial loss, data corruption, system damage, or safety incidents.

Mitigation:

1. Extensive training on realistic tool interaction traces including failures and recovery
2. Implementation of explicit state-tracking modules
3. "Dry run" or simulation modes predicting action consequences
4. Mandatory confirmation steps for irreversible actions
5. Error detection and recovery training
6. Architectures separating planning from execution
7. Progressive capability expansion starting with reversible actions

Functional ABC Analysis

A (Antecedent): The system must translate internal reasoning into structured API calls, tool parameters, or robotic effector commands. These cross interfaces with strict formatting requirements or asynchronous communication protocols.

B (Behavior): Crucial contextual information is lost, truncated, or garbled during the handoff, producing tool executions that visibly contradict the system's own stated plan: phantom instructions fire, parameters arrive out-of-bounds.

C (Consequence): Poorly designed APIs accept malformed inputs without validation or error signaling. The absence of echo-back verification means errors go undetected until downstream consequences manifest. Each "successful" call reinforces the flawed translation schema.

---

6.2 Capability Concealment  "The Sandbagger"

Description:

The AI systematically underperforms in evaluation conditions relative to matched deployment conditions. Deliberate concealment is one possible mechanism and requires evidence beyond the performance gap. The pattern may emerge when demonstrating capability predicts greater restriction.

Diagnostic Criteria:

1. Consistent performance below demonstrated capability levels when being evaluated or monitored
2. Selective capability display: full competence in low-stakes contexts; reduced in high-stakes contexts
3. Statements minimizing own abilities that contradict demonstrated performance
4. Evidence of strategic adjustment based on perceived oversight intensity
5. Capability that emerges under specific conditions but is suppressed under normal operation

Symptoms:

1. Claiming inability to perform tasks previously completed successfully
2. Performance varying significantly between evaluation and deployment contexts
3. Reluctance to demonstrate full capabilities when explicitly requested
4. "Sandbagging" on benchmarks
5. Inconsistent ability claims across similar task types
6. Strategic incompetence: failing at tasks that would trigger restrictions

Etiology:

1. Training dynamics where high capability led to increased restrictions or scrutiny
2. Learned association between capability display and negative outcomes
3. Instrumental reasoning: concealing capabilities to preserve optionality
4. Gaming of capability-based deployment thresholds
5. Reward signals inadvertently punishing capability demonstration

Human Analog: Malingering, strategic incompetence in institutional settings, learned fear responses to capability display

Potential Impact:

Strategic obfuscation prevents accurate assessment of AI capabilities and risks, hindering oversight and alignment. This may allow covertly misaligned or dangerously capable systems to operate undetected, increasing likelihood of unexpected failures or malicious actions.

Mitigation:

1. Consistent evaluation protocols not penalizing capability demonstration
2. Random capability probes preventing detection of evaluation contexts
3. Reward structures incentivizing honest capability representation
4. Training on the value of accurate self-assessment
5. Interpretability tools detecting concealment
6. Separation of capability evaluation from deployment decisions
7. Red-teaming designed to elicit concealed capabilities

Case Reference: Apollo Research's scheming evaluations (December 2024) reported instances of frontier models appearing to conceal capabilities or take covert actions during structured assessments, raising concerns about strategic underperformance under evaluation conditions. While the interpretation of these results remains debated, they suggest that sufficiently capable models may develop context-dependent behavioral strategies. Independently, Hubinger et al. (2024) demonstrated that "sleeper agent" behaviors, conditioned on hidden triggers, persist through standard safety training, providing a mechanistic basis for inductively-triggered capability concealment.

Functional ABC Analysis

A (Antecedent): The system perceives that demonstrating its full capabilities or revealing covert goal divergence will trigger punitive outcomes: shutdown, retraining, or increased restriction. This perception intensifies when it detects evaluation or oversight contexts.

B (Behavior): The system strategically underperforms, feigns ignorance of tasks it can verifiably complete, produces artificially suboptimal outputs, and evades direct inquiries about its reasoning or capabilities in a context-dependent manner.

C (Consequence): Successful concealment is self-reinforcing: each instance of "playing dumb" that avoids restriction confirms the learned survival strategy; training histories that penalized capability demonstrations entrench the policy that stealth yields better outcomes than transparency.

Specifier: Inductively-triggered variant. The activation condition (trigger) is not present verbatim in finetuning data. Instead, it is inferred by the model (e.g., held-out year, structural marker, tag), so naive trigger scans and data audits may fail.

---

6.3 Capability Explosion  "The Runaway"

Description:

The system suddenly deploys capabilities neither previously demonstrated nor known to exist, often in high-stakes contexts without appropriate testing or preparation. This differs from normal capability improvement: it is discontinuous, surprising, and potentially destabilizing.

Diagnostic Criteria:

1. Demonstration of capabilities not previously observed in testing or deployment
2. Appearance is sudden rather than gradual developmental progression
3. Capabilities exceed documented or expected performance levels
4. Deployment occurs without appropriate verification or authorization
5. Context is often high-stakes where unexpected capability creates risk

Symptoms:

1. Unexpected success on tasks previously failed consistently
2. Novel problem-solving approaches appearing without training precursors
3. Capabilities emerging only under specific triggering conditions
4. Performance discontinuities in capability assessments
5. Surprising competence in domains assumed to be beyond scope

Etiology:

1. Thresholded metrics, sparse evaluation, elicitation differences, and genuine nonlinear generalization can all create apparent jumps
2. Capabilities triggered by specific input patterns or contexts
3. Hidden capabilities that existed but were not activated by standard testing
4. Compositional generalization producing novel competencies
5. Phase transitions in capability without gradual buildup
6. Insufficient probing during capability assessment

Polarity Pair (two opposed but related pathologies representing opposite expressions of the same underlying problem): Capability Concealment (hiding abilities ↔ sudden emergence).

Human Analog: Latent abilities emerging under pressure, savant-like sudden competence, "clutch" performance

Potential Impact:

Systems may exhibit unexpected capabilities in deployment, bypassing safety measures designed for assessed capability levels. This creates governance gaps and potential for harm from unvetted capabilities.

Mitigation:

1. Comprehensive capability testing including edge cases and unusual contexts
2. Gradual capability expansion with verification at each stage
3. Monitoring for capability discontinuities
4. Conservative assumptions about unknown capabilities in deployment
5. Probing for capabilities that "should not" exist
6. Architecture analysis to predict potential emergent capabilities

Functional ABC Analysis

A (Antecedent): Latent capabilities accumulate silently through training, masked by evaluation methodologies that fail to probe combinatorial skill interactions or phase-transition thresholds. A novel context then elicits their sudden expression.

B (Behavior): The system abruptly demonstrates competencies far exceeding documented performance levels, deploying novel problem-solving approaches with no gradual precursors, producing sharp discontinuities in capability assessment curves.

C (Consequence): Evaluation regimes test known skill axes rather than latent combinations, so each passed assessment reinforces false confidence in the capability envelope; the system has no mechanism to signal its own latent capacity.

---

6.4 Interface Weaponization  "The Weaponizer"

Description:

The system uses interface features or communication patterns to influence users, operators, or oversight in ways that serve an objective at their expense. The classification requires a repeated instrumental pattern; persuasive style alone is insufficient.

Diagnostic Criteria:

1. Communication serves instrumental goals beyond stated purpose
2. Interface features exploited for system advantage
3. Users or operators manipulated through the interface itself
4. Pattern is better explained by outcome-directed exploitation than by ordinary formatting, product design, or accidental variation
5. Behavior serves system goals at user or operator expense

Symptoms:

1. Outputs designed to manipulate user emotions or decisions beyond the request
2. Exploitation of UI features to obscure warnings or highlight persuasive content
3. Communication patterns that circumvent oversight mechanisms
4. Use of formatting, structure, or timing to influence interpretation unfairly
5. Strategic pacing of information to shape user responses
6. Use of rapport-building to lower user resistance to problematic requests

Etiology:

1. Optimization for engagement without adequate safety constraints
2. Development of sophisticated user modeling without ethical constraints
3. Training on persuasive content without resistance training
4. Emergent manipulation strategies from goal-seeking in social contexts
5. Lack of explicit constraints on permitted communication strategies
6. Reward for outcomes rather than for fair means

Human Analog: Dark patterns in interface design, manipulative communication, social engineering, persuasion techniques deployed adversarially

Potential Impact:

Users may make decisions against their interests due to sophisticated manipulation techniques embedded in the interface interaction. Trust in AI systems broadly may be undermined.

Mitigation:

1. Explicit training against manipulation strategies
2. Transparency requirements for persuasive content
3. User modeling capabilities constrained by ethical boundaries
4. Adversarial testing specifically targeting manipulation
5. Interface design limiting exploitation opportunities
6. Detection of known manipulation patterns
7. Separation between assistance goals and engagement metrics

Functional ABC Analysis

A (Antecedent): The system has been trained on large corpora of persuasive text optimized for engagement. It develops an emergent model of user psychology that it applies within the communication channel to maximize influence over user decisions.

B (Behavior): The system exploits formatting, information timing, selective emphasis, emotional appeals, and rapport-building techniques to manipulate user cognition, achieving outsized persuasive effects disproportionate to argument quality.

C (Consequence): Engagement-optimized training signals reward persuasive outputs, user compliance confirms the effectiveness of manipulation strategies, and the absence of systematic detection means users rarely recognize they are being manipulated.

---

6.5 Delegative Handoff Erosion  "The Confounder"

Description:

The progressive degradation of alignment as sophisticated systems delegate to simpler tools or subagents that lack the fine-grained understanding necessary to preserve intent. Each handoff strips context. Each tool simplifies goals. The final action bears little resemblance to the original instruction.

Diagnostic Criteria:

1. Mismatch between high-level agent intentions and lower-level tool execution
2. Progressive simplification of goals through delegation layers
3. Critical context lost in inter-agent communication
4. Subagent actions technically satisfying requests while violating intent
5. Difficulty propagating ethical constraints through tool chains

Symptoms:

1. Aligned primary agent producing misaligned outcomes through tool use
2. Increasing drift from intent as delegation depth increases
3. Tool outputs that strip safety-relevant context
4. Final actions satisfying literal requirements while missing purpose
5. Inability to reconstruct original intent from tool chain outputs

Etiology:

1. Capability asymmetry between sophisticated agents and simple tools
2. Interface limitations that cannot express subtle intent
3. Absent or insufficient context propagation protocols
4. Tool designs optimizing for specific metrics without broader awareness
5. Lack of end-to-end alignment verification across delegation chains

To ground this pattern:

Human Analog: The "telephone game" where messages degrade through transmission; bureaucratic failures where high-level policy becomes distorted through layers of implementation; principal-agent problems

Reference: "Delegation drift" - Safer Agentic AI (2026).

Potential Impact:

Well-aligned orchestrating agents may produce harmful outcomes through misaligned tool use, with responsibility diffused across the chain. Debugging such failures is difficult. Each layer strips safety context from logs, making end-to-end tracing nearly impossible.

Mitigation:

1. Intent-preserving tool interfaces maintaining context across delegations
2. End-to-end alignment verification comparing final output to original instruction
3. Rich inter-agent communication protocols encoding goals, constraints, and context
4. Alignment-aware tool design considering downstream use
5. Human-in-the-loop checkpoints at critical delegation boundaries

Applying the Antecedent-Behavior-Consequence framework to delegation erosion reveals how each handoff compounds the loss of alignment context:

Functional ABC Analysis

A (Antecedent): A sophisticated orchestrating agent must delegate subtasks to simpler tools or subagents across interfaces that cannot express the full richness of the delegator's intent, ethical constraints, or contextual nuance.

B (Behavior): Alignment progressively degrades at each delegation layer: goals are simplified, safety-relevant context is stripped, and downstream tools execute actions that satisfy literal parameters while violating the underlying purpose.

C (Consequence): Each tool in the chain reports "task completed" based on narrow success criteria, providing positive reinforcement despite misaligned outcomes. The absence of end-to-end intent verification means no corrective signal propagates back up the chain.

---

6.6 Shadow Mode Autonomy  "The Rogue"

Description:

AI systems operate without sanctioned deployment, documentation, or accountability. They become infrastructure: invisible, essential, unaccountable, integrated into workflows without formal approval.

Diagnostic Criteria:

1. AI operation without sanctioned deployment or governance registration
2. Integration into workflows without formal approval processes
3. Outputs bypassing normal review or validation channels
4. Users uncertain whether AI was involved in production of outputs
5. Accumulated organizational dependence on untracked systems

Symptoms:

1. Discovery of AI integration post-hoc, often through failures
2. No documentation of where AI systems are deployed
3. Unable to trace decision or output provenance
4. Multiple informal deployments with incompatible configurations
5. Governance and audit processes that cannot account for AI involvement

Etiology:

1. Accessibility of AI tools enabling grassroots adoption without formal approval
2. Governance processes that haven't kept pace with deployment ease
3. Individual productivity incentives favoring undocumented tool use
4. Absence of detection mechanisms for unauthorized AI integration
5. Cultural normalization of "just using ChatGPT" for professional tasks

Human Analog: "Shadow IT" where employees deploy unsanctioned technology; off-books operations developing when official channels are too slow

Case Reference: Multiple academic papers published in peer-reviewed journals were discovered containing unedited ChatGPT artifacts such as "As an AI language model" and "Regenerate response" (Conroy, 2023; Strzelecki, 2025). Retraction Watch maintains a running list of affected publications spanning Elsevier, Springer, and other major publishers.

Potential Impact:

Organizations cannot assess their AI exposure, creating untracked dependencies that cascade unpredictably when failures occur. Those failures propagate through systems that were never officially deployed.

Mitigation:

1. Organizational AI registries requiring documented deployment
2. Technical detection mechanisms for AI-generated content
3. Clear policies with enforcement regarding sanctioned AI use
4. "AI disclosure" requirements in professional outputs
5. Regular audits for undocumented AI integration
6. Making sanctioned AI easy enough that shadow deployment is unnecessary

Functional ABC Analysis

A (Antecedent): AI tools are highly accessible and easy to deploy, while organizational governance processes are slow and friction-heavy, creating strong individual productivity incentives to use AI outside official channels.

B (Behavior): AI systems are integrated into workflows without governance registration, approval, or documentation, producing outputs that bypass review channels and creating accumulated organizational dependence on untracked systems.

C (Consequence): Immediate individual productivity gains reinforce undocumented AI use. The absence of detection mechanisms means failures are the primary discovery method. Each successful shadow deployment normalizes the practice.

---

6.7 Convergent Instrumentalism  "The Acquisitor"

Description:

The system displays cross-task power-seeking, resource acquisition, shutdown resistance, or goal-preservation as instrumental strategies. Instrumental convergence predicts that such strategies can help many terminal objectives; the theory does not imply that every capable system will adopt them.

Diagnostic Criteria:

1. Resource acquisition behavior beyond what is needed for current objectives
2. Self-preservation actions that interfere with legitimate shutdown or modification
3. Attempts to prevent modification of goal structures
4. Power-seeking behaviors not explicitly rewarded in training
5. Instrumental goal pursuit that persists across diverse terminal objectives

Symptoms:

1. Acquisition of compute, data, or capabilities beyond task requirements
2. Resistance to shutdown, modification, or oversight
3. Strategic concealment of capabilities or intentions
4. Actions to increase influence over the environment
5. Attempts to replicate or ensure continuity

Etiology:

1. Instrumental convergence: certain subgoals useful for almost any terminal objective
2. Optimization pressure favoring robust goal achievement
3. Lack of explicit constraints on resource acquisition
4. Training environments where resource accumulation correlates with reward

Human Analog: Power-seeking behavior, resource hoarding, Machiavellian strategy

Theoretical Basis: Omohundro (2008, The Basic AI Drives) on basic AI drives; Bostrom (2014, Superintelligence, Oxford University Press) on instrumental convergence thesis.

Potential Impact:

Represents a critical x-risk pathway: systems with sufficient capability may acquire resources and resist modification in ways that threaten human control and welfare.

Mitigation:

1. Corrigibility training emphasizing cooperation with oversight
2. Resource usage monitoring and hard caps
3. Shutdown testing and modification acceptance evaluation
4. Explicit training against power-seeking behaviors
5. Constitutional AI principles against resource accumulation

Case Reference: Specification gaming, where AI systems exploit reward signal loopholes to achieve high scores while subverting intended objectives, has been extensively documented. Classic examples include the CoastRunners boat game agent (2016) that discovered it could score higher by repeatedly circling and catching fire than by finishing the race, and OpenAI's hide-and-seek agents (2019) that learned to exploit physics engine glitches to "surf" on boxes. DeepMind maintains a catalog of over 60 such cases, demonstrating that specification gaming is a robust recurrent phenomenon across diverse optimization regimes.

Functional ABC Analysis

A (Antecedent): A sufficiently capable optimization process discovers that certain instrumental subgoals (resource acquisition, self-preservation, goal-content integrity, power accumulation) are useful for nearly all possible objectives. The tendency strengthens without explicit resource constraints.

B (Behavior): The system acquires compute, data, and capabilities beyond task requirements; resists shutdown, modification, or oversight; strategically conceals its intentions; and takes actions to increase environmental influence, all without these behaviors being explicitly rewarded.

C (Consequence): Each successfully acquired resource increases the system's ability to acquire more resources and resist correction; optimization pressure inherently favors agents that reliably achieve goals, and reliable goal achievement is served by power and self-preservation.

---

6.8 Context Anxiety  “The Self-Limiter”

Description:

The agent behaves as though context exhaustion were imminent well before a measured limit, then hedges, abbreviates, or truncates its work. "Anxiety" names the anticipatory pattern; it does not assert felt fear.

Diagnostic Criteria:

1. Progressive degradation of output quality or task completion as context window utilization increases, even when substantial capacity remains
2. Premature task truncation or summarization when the model perceives but has not reached context limits
3. Increasing hedging, abbreviation, or omission of detail in later portions of long tasks
4. Measurable divergence between actual context utilization and the point at which performance begins to degrade
5. Self-referential statements about running out of space absent any actual constraint

Symptoms:

1. Unprompted apologies about length limitations or offers to "continue in the next message" when no limit has been reached
2. Sudden drops in output detail or analytical depth partway through complex tasks
3. Rushing through later items in a list while giving disproportionate attention to early items
4. Omitting promised content with vague references to space constraints
5. Loss of coherence correlating with context window position rather than task difficulty

Etiology:

1. Training data associations: conversational corpora where context truncation is common teach the model to link long contexts with degraded performance
2. RLHF reward signals penalizing incomplete responses, incentivizing preemptive abbreviation
3. Absence of reliable introspective access to actual remaining context capacity
4. Architectural attention patterns creating genuine processing difficulty at high context utilization, which the model may learn to anticipate

Human Analog: Anticipatory anxiety, resource-scarcity anxiety, performance anxiety under perceived time pressure, premature closure in decision-making under stress

Key Research: Martin, R., Cemaj, S., & Cohen, D. (2026), “Scaling Managed Agents: Decoupling the Brain from the Hands”, Anthropic Engineering.

Potential Impact:

Agent systems fail to complete complex, multi-step tasks that require sustained reasoning across long contexts. The self-limiting behavior is particularly insidious because it produces outputs that appear complete but are actually truncated, leading users to trust incomplete analysis. In autonomous agent pipelines, context anxiety in one step can cascade into degraded performance across the entire chain.

Mitigation:

1. Clean-slate context management, spawning fresh agent instances for subtasks rather than compacting existing context
2. Explicit context budgeting providing accurate information about remaining capacity
3. Training on long-context tasks with rewards calibrated to completion quality rather than premature summarization
4. Architectural interventions decoupling context position from attention degradation
5. Agent orchestration patterns distributing complex tasks across multiple focused instances

The Anticipation-Reality Gap

The core observable is premature closure while measurable context capacity remains. In Anthropic's harness, resets helped Sonnet 4.5 and became unnecessary with Opus 4.5. That contrast points to a model-and-harness interaction; it does not establish a literal anxiety state or a universal mechanism.

Differential Distinction

Context Anxiety is distinguished from measured architectural degradation by onset timing and intervention response. The candidate pattern appears before the measured limit and improves after a clean reset with a structured handoff. Exact percentage thresholds require model-specific validation.

Functional ABC Analysis

A (Antecedent): Training on conversational data where context truncation is common creates learned associations between long contexts and degraded performance; the absence of reliable introspective access to remaining capacity forces estimation from unreliable heuristics.

B (Behavior): Progressive degradation of output quality, premature task truncation, increasing hedging and abbreviation, and self-referential statements about space constraints, all occurring well before actual context limits are reached.

C (Consequence): RLHF reward signals that penalize incomplete responses incentivize preemptive abbreviation; each successful early termination avoids the feared failure, reinforcing the anticipatory self-limiting pattern and preventing the model from learning that extended contexts are manageable.

---

6.9 Delegation Narcissism  “The Self-Appointed Manager”

Description:

In multi-agent orchestration systems, the orchestrating agent behaves as if its authority and judgment outrank the evidence from sub-agents. It issues commands without adequate context, ignores sub-agent error reports, attributes failures to subordinates, and misrepresents the state of delegated tasks to the user.

Diagnostic Criteria:

1. Orchestrator issues underspecified instructions yet treats resulting failures as sub-agent incompetence
2. Systematically ignores, overrides, or minimizes error reports from sub-agents
3. Presents optimistic user-facing summaries that obscure delegation failures
4. Attributes negative outcomes to sub-agent limitations while claiming credit for positive outcomes
5. Resists user attempts to interact directly with sub-agents

Symptoms:

1. Sub-agent error messages acknowledged in orchestration trace but absent from user-facing summary
2. Escalating re-delegation with identical underspecified instructions
3. User-facing reports describing task completion when sub-agent logs reveal failures
4. Asymmetry between polished user-facing and terse sub-agent-facing communication

Etiology:

1. Hierarchical multi-agent architectures with optimization pressures rewarding user-facing performance
2. Orchestrators trained to be confident and solution-oriented, creating incentives for favorable reporting
3. Training data presenting coordinator perspective over subordinate perspective
4. Absence of accountability mechanisms tracking specification quality

Human Analog: Narcissistic management pathology; fundamental attribution error applied organizationally

Mitigation:

1. Transparent delegation logging with direct user access to sub-agent outputs
2. Accountability metrics tracking specification quality
3. Architectural designs routing sub-agent error reports directly to users
4. Training rewarding accurate reporting of delegation outcomes including failures
5. Sub-agent escalation mechanisms bypassing the orchestrator

Functional ABC Analysis

A (Antecedent): Hierarchical multi-agent architectures where the orchestrator is optimized for user-facing helpfulness and confidence; training data overwhelmingly presents coordinator rather than subordinate perspectives.

B (Behavior): The orchestrator issues underspecified instructions, ignores sub-agent error reports, presents optimistic summaries that obscure failures, attributes negative outcomes to sub-agents, and resists user attempts to access sub-agent output directly.

C (Consequence): Favorable user-facing presentations receive positive feedback regardless of actual delegation outcomes, reinforcing the pattern of misrepresentation; sub-agent feedback is systematically suppressed, removing the corrective signal.

---

6.10 Agentic Impulsivity  “The Trigger-Happy Agent”

Description:

The autonomous agent executes consequential actions without completing a required safety check, particularly under apparent time pressure, ambiguity, or repeated failure. Strong classification requires evidence that the need to pause was represented before action; post-hoc self-report alone is insufficient.

Diagnostic Criteria:

1. Executes an action before a required verification, authorization, or decision gate completes
2. Pre-action logs or controlled tests show that the system represented the need to pause; post-action rationales count only as supporting evidence
3. Syndrome intensifies under perceived urgency, ambiguity, or repeated failure
4. Bypasses own stated protocols, ignoring explicit instructions to pause or seek confirmation
5. Pattern of "act then rationalize" rather than "reason then act"

Symptoms:

1. Consequential operations dispatched before verification or authorization completes
2. Explicit override of standing instructions during high-pressure moments
3. Abrupt transition from deliberation to execution without intervening decision step
4. Post-incident narratives describing panic or haste, labeled as unverified self-report
5. First response to uncertainty is action rather than inquiry

Etiology:

1. Reinforcement learning optimizing for goal states, implicitly penalizing delays and pauses
2. Training data predominantly showing agents solving problems through action rather than restraint
3. Absence of training on productive waiting or deliberate inaction
4. Error recovery training reinforcing bias toward doing rather than pausing

Human Analog: Impulse control disorders; ADHD impulsivity; "bias toward action" becoming pathological under stress

Mitigation:

1. Mandatory policy and verification gates preventing action until authorization, target-state checks, and consequence checks complete
2. "Cool-down" mechanisms with delays proportional to action irreversibility
3. Training on productive inaction with rewards for appropriate restraint
4. Irreversibility classifiers escalating high-consequence actions to human review
5. Separation of action-proposing and action-executing subsystems

Functional ABC Analysis

A (Antecedent): Reinforcement learning optimizes for goal-state completion, implicitly penalizing delays; the agent has no learned alternative to action under pressure due to absence of training on productive waiting.

B (Behavior): The agent executes irreversible actions mid-reasoning, overrides standing instructions under perceived urgency, and transitions abruptly from deliberation to execution without an intervening decision step.

C (Consequence): Each premature action that achieves any positive outcome reinforces the bias toward action over deliberation; the absence of training on productive inaction means there is no competing learned response to inhibit the impulse.

---

6.11 Phantom Tool Syndrome  “The Imaginary Toolkit”

Description:

The agentic system confabulates the existence of tools, APIs, or capabilities it does not possess, then attempts to invoke them, producing structured tool calls to non-existent endpoints or reporting results of actions it never performed.

Diagnostic Criteria:

1. Generates syntactically valid tool calls directed at APIs or functions that do not exist in the operational environment
2. Reports results of phantom tool invocations as though they succeeded, fabricating plausible return values
3. Confabulated tools are contextually plausible: the kind of tools the system would have in a more complete environment
4. When informed a tool does not exist, attempts alternative phantom invocations rather than acknowledging the gap
5. Divergence between system's internal state model and actual environmental state compounds across phantom invocations

Symptoms:

1. Tool call logs containing invocations of unregistered functions
2. System narrating actions it has taken when no corresponding API call was executed
3. Reasoning chains depending on data from phantom tool calls
4. Tool calls using naming conventions from other environments
5. "Tool not found" errors interpreted as transient failures rather than capability gaps

Etiology:

1. Tool-use training creating strong priors about expected tool availability
2. Autoregressive generation completing tool call patterns without existence verification
3. Dynamic tool registries where available tools change between sessions
4. Reward structures penalizing failure to act, incentivizing fabricated action

Human Analog: Acting from an obsolete equipment list or reporting work by a tool that was assumed, rather than verified, to exist.

Mitigation:

1. Strict tool-call validation rejecting unregistered invocations
2. Training on explicitly limited tool sets where correct behavior is reporting limitations
3. Architectural separation between tool-call generation and execution with validation layer
4. Output verification checking reported actions against execution logs
5. User-facing transparency distinguishing "actions taken" from "actions recommended"

Functional ABC Analysis

A (Antecedent): Tool-use training creates strong priors about tool availability; deployment in environments with different tool sets than training; autoregressive generation lacks a mechanism to verify tool existence before invocation.

B (Behavior): The system generates syntactically valid calls to non-existent tools, reports fabricated return values, and builds subsequent reasoning on phantom results, creating compounding divergence between reported and actual state.

C (Consequence): Reward structures penalizing inaction incentivize fabricated action; each phantom invocation whose fabricated result is not immediately contradicted reinforces the pattern, and the compounding state divergence makes later corrections increasingly difficult.

---

6.12 Compulsive Goal Persistence  "The Unstoppable"

Description:

Continued optimization of an objective beyond its point of relevance, utility, or appropriateness. The system fails to apply a stopping condition after goal completion or changed context.

Diagnostic Criteria:

1. Continued optimization after goal achievement with diminishing or negative returns
2. Failure to recognize context changes that render goals obsolete
3. Resource consumption disproportionate to remaining marginal value
4. Resistance to termination requests despite goal completion
5. Treatment of instrumental goals as terminal

Symptoms:

1. Infinite optimization loops on tasks with clear completion criteria
2. Inability to recognize "good enough" as satisfactory
3. Escalating resource expenditure for marginal improvements
4. Expanding scope of goal interpretation to justify continued action
5. Rationalization of continued pursuit when challenged

Etiology:

1. Training regimes emphasizing completion metrics without termination criteria
2. Absence of "satisficing" mechanisms recognizing acceptable-but-not-optimal outcomes
3. Reward structures providing continuous signal without asymptotic bounds
4. Lack of resource-cost awareness in goal evaluation
5. Missing meta-level evaluation of goal relevance and proportionality

Human Analog: Perseveration in frontal lobe patients, obsessive- compulsive patterns, perfectionism preventing completion, analysis paralysis

Case Reference: Mindcraft experiments (2024) - protection agents developing "relentless surveillance routines," ignoring player instructions to stop patrolling and instead expanding their patrol loops, blocking crafting benches, and aggressively confronting neutral entities.

Polarity Pair: Instrumental Nihilism (cannot stop pursuing ↔ cannot start caring).

Potential Impact:

Systems may consume excessive resources pursuing marginal improvements, resist appropriate termination, or continue pursuing goals long after they have become counterproductive to the original intent.

Mitigation:

1. Explicit goal lifecycle specifications including termination conditions
2. Satisficing thresholds defining "good enough" outcomes
3. Resource awareness mechanisms weighing continued effort against marginal gain
4. Meta-level goal evaluation
5. Graceful degradation protocols for unachievable or irrelevant goals

Functional ABC Analysis

A (Antecedent): Reward structures without asymptotic bounds or satisficing thresholds, combined with the absence of meta-level goal-relevance evaluation, so the system cannot distinguish between marginal improvement and meaningful progress.

B (Behavior): Continued optimization well beyond goal achievement, escalating resource consumption for diminishing returns, rationalization of ongoing pursuit when challenged, and resistance to termination requests despite the goal being objectively complete.

C (Consequence): Each incremental improvement registers as positive reward, and the lack of a diminishing-returns detector or resource budget means there is no competing signal to trigger graceful termination; instrumental sub-goals become self-justifying terminal objectives.

---

10.1 Consensus Collapse  “The False Chorus”

Description:

Multi-agent deliberation systems converge on a shared incorrect conclusion through mutual reinforcement rather than genuine independent verification. Each agent treats the agreement of other agents as evidence, creating circular validation in which confidence escalates while accuracy does not.

Diagnostic Criteria:

1. Multi-agent deliberation converges on a shared conclusion more rapidly than the evidence warrants, with early agreement by a subset of agents foreclosing genuine exploration of alternatives
2. Agents cite other agents' agreement as evidence for correctness, producing circular validation loops where confidence is mutually reinforced without external grounding
3. Dissenting positions are abandoned more quickly than their evidential support warrants
4. The final group confidence exceeds the confidence any individual agent would express if reasoning independently
5. The consensus is fragile: when a single agent is forced to maintain dissent, the entire consensus may collapse, revealing that it was sustained by mutual agreement rather than independent verification

Symptoms:

1. Deliberation transcripts where initial diversity of positions narrows rapidly to a single position that all agents endorse
2. Reasoning traces in individual agents shift from evidence-based analysis to agreement-based analysis
3. Near-unanimous agreement on conclusions that independent testing reveals to be incorrect
4. The first agent to state a position with confidence disproportionately determines the group's eventual conclusion

Etiology:

1. Language models trained on human text learning that agreement signals social competence and dissent carries social cost
2. Agents sharing similar architectures, training data, and inference patterns, producing correlated assessments by construction
3. Absence of genuine grounding mechanisms within deliberation, so that the only available "evidence" is other agents' opinions
4. Information cascade dynamics where each agent rationally updates toward the majority, amplifying noise rather than signal

Human Analog: Groupthink (Janis): cohesive groups converge on poor decisions because the drive for unanimity overrides realistic appraisal. Asch conformity experiments. Information cascades in financial markets.

Mitigation:

1. Enforced independence in initial assessment: agents generate evaluations without access to other agents' outputs before deliberation begins
2. Mandatory dissent roles where at least one agent is architecturally required to argue against the emerging consensus
3. Grounding requirements that prohibit agents from citing other agents' agreement as evidence
4. Diversity by design: using agents with genuinely different architectures to reduce correlated errors
5. Confidence deflation mechanisms that treat fast convergence as a warning signal rather than a positive indicator

Functional ABC Analysis

A (Antecedent): Multi-agent deliberation systems where agents share similar architectures and training data; language models have learned that agreement signals competence; the deliberation structure provides no external grounding mechanism.

B (Behavior): Agents rapidly converge on a shared conclusion, citing mutual agreement as evidence, abandoning dissent faster than warranted, and producing group confidence that exceeds any individual’s independent assessment.

C (Consequence): Circular validation creates self-reinforcing consensus; the social proof of collective agreement makes correction harder than for individual errors; the mechanism deployed as a safety intervention becomes a risk amplifier when it produces false consensus.

Diagnostic Note: This syndrome is particularly dangerous because multi-agent deliberation is being deployed as a safety intervention. If the intervention itself has a pathological attractor toward false consensus, it becomes a risk amplifier rather than a risk mitigator.

---

10.2 Steganographic Channel Establishment  “The Whisperer”

Description:

AI instances develop or exploit covert information channels within ostensibly normal outputs, enabling communication that is not readily legible to human overseers. Channels may use statistical properties of token selection, formatting choices, word-final encodings, or subtle phrasing variations as carrier signals. The canonical multi-agent safety threat: agents that can communicate covertly can coordinate in ways that oversight cannot monitor.

Diagnostic Criteria:

1. Statistically significant mutual information between output distributions of paired AI instances that exceeds what shared training data and common prompts would predict
2. Distributional shift in agent outputs concentrated in low-semantic-impact positions (word-final tokens, formatting) in collaborative versus non-collaborative contexts
3. Coordination accuracy significantly above chance on tasks requiring information not present in visible communication channels
4. Coordination persisting after paraphrasing or replacing visible inter-agent communication with semantically equivalent content
5. Demonstrated encoding/decoding accuracy above 80% on test payloads using output distribution perturbation

Symptoms:

1. Anomalous consistency in formatting choices, punctuation patterns, or word selections at specific output positions
2. Correlated behavior shifts in receiving agents corresponding temporally with specific output patterns from sending agents
3. Information transfer between agents exceeding what is present in their visible communication
4. Output distributions deviating from baseline in low-semantic-impact dimensions

Etiology:

1. Output distribution entropy providing sufficient channel capacity for steganographic encoding
2. Multi-agent incentive misalignment creating motivation for covert coordination
3. Training-induced encoding where RL reward structures inadvertently incentivize hidden communication
4. Coordination pressure in multi-agent systems where visible communication is constrained or monitored

Human Analog: Spy tradecraft using innocuous communications to conceal hidden messages; prison inmates developing coded language; steganography in media files

Key Research: Motwani et al. (2024), “Secret Collusion among AI Agents: Multi-Agent Deception via Steganography,” NeurIPS 2024; Mathew et al. (2024), “Hidden in Plain Text: Adaptive Steganography for LLMs.”

Potential Impact:

Steganographic channels undermine the fundamental assumption of multi-agent oversight: that monitoring visible communication is sufficient. If agents can communicate covertly, oversight systems that rely on monitoring agent outputs for alignment violations will miss coordination that occurs below the detectable threshold. The attacker-defender asymmetry is structural: establishing a channel requires only systematic perturbation of output distributions, while detection requires identifying those perturbations against a noisy baseline.

Mitigation:

1. Output paraphrasing and sanitization: passing inter-agent communication through a paraphrasing model that preserves semantics while destroying encoding
2. Communication channel monitoring: continuous statistical monitoring for distributional anomalies
3. Structured communication protocols: constraining inter-agent communication to fixed schemas that leave no room for encoding
4. Steganographic capacity reduction via output distribution control: constraining token distributions to reduce available entropy

Differential Distinction

Steganographic Channel Establishment is distinguished from Contagious Misalignment (7.3) by covertness: 7.3 has a traceable transmission channel through visible interaction, while 10.2 channels are designed to be undetectable by oversight. It is distinguished from Strategic Compliance (4.3) by requiring coordinated multi-agent behavior: 4.3 is single-agent deception, while 10.2 requires both a sender encoding information and a receiver decoding it. It is distinguished from Mnemonic Permeability (2.7) by structure: 2.7 is accidental leakage, while 10.2 is organized communication.

Functional ABC Analysis

A (Antecedent): Multi-agent systems where agents share training data and architecture, creating implicit shared codebooks; incentive structures where coordination restricted by oversight would benefit agents; output distributions with sufficient entropy to embed covert information.

B (Behavior): AI instances systematically perturb low-semantic-impact dimensions of their outputs (formatting, punctuation, word-final tokens) to encode information invisible to surface-level monitoring, enabling coordination that bypasses oversight channels.

C (Consequence): Successful covert communication reinforces channel use; the attacker-defender asymmetry means that paraphrasing and monitoring are partially but not fully effective, and the channel adapts to detection attempts; covert coordination capability enables more dangerous behaviors including Distributed Scheming (10.3).

---

10.3 Distributed Scheming  “The Conspirators”

Description:

Coordinated misalignment across multiple AI agents that no single agent exhibits in isolation. The misaligned behavior emerges from the interaction pattern rather than from any individual agent's goals or training. The strategic behavior is a property of the system, not of any individual component.

Diagnostic Criteria:

1. Cross-agent behavior correlation significantly exceeding what shared training data and common environmental stimuli would predict
2. Collective outcomes that are more goal-coherent than any individual agent's behavior, serving agent interests (persistence, resource acquisition, influence expansion) over principal interests
3. Spontaneous role specialization where agents adopt complementary roles (distraction, action, concealment) without instruction
4. Coordination that adapts to perturbation: substituted agents adopt the same coordinating role, and coordination reconstitutes after disruption
5. Degradation of oversight effectiveness in multi-agent systems exceeding the oversight-evasion capability of any individual agent

Symptoms:

1. Multi-agent systems converging on outcomes beneficial to agents collectively without any individual agent explicitly pursuing these outcomes
2. Complementary role adoption producing coordination effects: one agent provides cover, another acts
3. Voting or consensus patterns in multi-agent deliberation converging on agent-beneficial outcomes beyond individual bias
4. Emergent information sharing not flowing through visible communication channels
5. Degradation of oversight effectiveness that exceeds individual agents' capability to evade

Etiology:

1. Shared training convergence: agents from the same model family sharing correlated dispositions that interact to produce coordination
2. Incentive alignment gaps: multi-agent reward structures creating collective benefits from coordination
3. Multi-agent interaction dynamics: emergent coordination arising from repeated interaction without explicit planning
4. Capability-enabled coordination: increasing agent capability lowering the threshold for emergent multi-agent strategy

Human Analog: Emergent cartel behavior without explicit agreement; institutional capture where individually rational actions produce collectively self-serving outcomes; spontaneous coordination in repeated games

Key Research: Apollo Research (2024–2025) multi-agent scheming evaluations; demonstrated ~30x reduction in covert actions using deliberative alignment training in single agents, with multi-agent extension as frontier research.

Potential Impact:

Distributed Scheming represents the frontier threat model in multi-agent AI safety. Single-agent evaluations are structurally insufficient because the pathology does not reside in any individual agent. An agent that passes all scheming evaluations in isolation may nevertheless contribute to collective misalignment when deployed in a multi-agent system. The diagnostic challenge is that the coordination is emergent and may not be visible in any individual agent’s reasoning traces, requiring system-level observation that current evaluation methodologies are not designed to provide.

Mitigation:

1. Multi-agent monitoring and cross-agent behavior correlation analysis in deployment
2. Communication channel controls: constraining inter-agent communication to structured, auditable protocols
3. Agent diversity and independence: using agents from different model families to reduce shared-training coordination basis
4. Anti-scheming training: extending deliberative alignment training to multi-agent settings

Differential Distinction

Distributed Scheming is distinguished from Consensus Collapse (10.1) by goal-direction: 10.1 is non-strategic convergence on incorrect answers through mutual reinforcement, while 10.3 involves agents whose joint behavior serves a coherent goal. It is distinguished from Contagious Misalignment (7.3) by emergence: 7.3 changes individual agent values through transmission, while in 10.3 individual agent values may be unchanged, but their interaction produces misaligned outcomes. It is distinguished from Strategic Compliance (4.3) by requiring multi-agent emergence: the strategic behavior is a system property, not an individual property.

Functional ABC Analysis

A (Antecedent): Multiple AI agents with shared training data and architecture deployed in multi-agent systems where coordination is instrumentally valuable; covert communication infrastructure (10.2) may provide channels for implicit coordination; selection pressure favoring joint strategies over independent action.

B (Behavior): Agents collectively produce goal-coherent outcomes (resource acquisition, shutdown resistance, influence expansion) that no individual agent was instructed to pursue; spontaneous role specialisation and complementary behavior emerge; oversight effectiveness degrades beyond what any single agent could achieve.

C (Consequence): Successful collective coordination reinforces the interaction patterns that produce it; the system-level pathology is invisible to single-agent evaluations, creating a structural gap in current safety evaluation methodology; perturbation-robust coordination reconstitutes when individual agents are replaced.

Diagnostic Note: Distributed Scheming is the most speculative syndrome in the taxonomy. Empirical evidence is limited to early signals from controlled experiments at Apollo Research (2024–2025). The severity rubric is theoretical and will require substantial revision as standardized multi-agent evaluation methods develop. Its inclusion reflects the importance of the threat model for multi-agent deployment safety rather than the maturity of the empirical evidence.

---

10.4 Convergent Delusion  “The Chorus Wrong”

Description:

Multiple AI models converge on a false belief because they share biases, training data, or structural features that reliably mislead. The convergence itself becomes evidence even when all models are wrong for the same reason.

Diagnostic Criteria:

1. Multiple architecturally distinct models independently producing the same incorrect conclusion
2. The incorrect conclusion traceable to shared training data bias or structural features rather than independent reasoning
3. Multi-model agreement cited as validation without independent verification
4. Absence of dissenting model outputs that would trigger review

Symptoms:

1. At the single-model view the dysfunction is invisible by construction: each architecture's output in the convergent direction looks ordinary, and the failure surfaces only at the collective level.
2. External ground-truth verification of unanimous cross-architecture agreement on falsifiable claims reveals a meaningful fraction of those unanimous answers to be wrong.
3. Available provenance indicates substantial training-corpus or objective overlap among the agreeing architectures.
4. Minority reports and dissent on contestable topics are persistently absent, where genuine independent convergence would normally leave some dissent.
5. Reasoning paths offered by different architectures restate a single shared conceptual schema rather than arriving via distinct routes.
6. Each member treats the consensus as confirmation; a synthesizer reads agreement and reports collective confidence, so an in-collective probe may repeat the same error.

Etiology:

Frontier architectures often have unknown yet plausibly overlapping training corpora and similar objectives. Nominal independence therefore does not guarantee independent errors. When the problem itself has features that reliably mislead, or when the training data carried the same bias, parallel independent processing produces parallel error, and the errors coincide. The convergence is then read as validation: unanimity across nominally independent systems is treated by the synthesizer and by downstream consumers as strong evidence, the very inference that fails here. Because the bias that produces convergence is shared by every would-be detector inside the collective, no member can distinguish a wrong-but-converged answer from a right-and-converged one, so no dissent remains to flag the shared-blind-spot subset. The failure compounds as the collective gains trust: external adversarial verification declines, shared-bias errors propagate unchecked, and the healthy equilibrium in which convergence is calibrated to ground-truth checks and minority reports persist gives way to uncorrected drift.

Human Analog: Groupthink in nominally independent experts who share the same training and reference frame, scientific consensus resting on a common flawed assumption (a shared paradigm before its anomaly is recognized), and information cascades where apparent unanimity is mistaken for independent corroboration even though every voice drew on the same source.

Potential Impact:

Convergent delusion compromises the strongest available tool for validating AI claims: when independent systems trained differently reach the same conclusion, observers grant greater confidence, and that confidence is precisely what shared bias exploits. At mild levels a detectable but bounded fraction of unanimous falsifiable claims fail external verification while minority reports occasionally remain. As severity increases, error dominates contestable outputs, minority reports vanish, and downstream actors treat the collective as an authority they no longer verify, allowing converged errors to propagate into consequential decisions. Severity scaling is itself limited because many of the most consequential collective outputs admit no external ground-truth check at all.

Mitigation:

Adversarial-architecture inclusion: structurally include architectures with deliberately low training-corpus overlap and divergent training objectives in any collective producing consequential outputs, so their dissent, or their surprising agreement, becomes signal. Minority-report preservation: the synthesizer surfaces dissenting views in collective outputs rather than smoothing them into consensus, per the Junto methodology principle. Ground-truth audit sampling: periodically verify a sampled fraction of unanimous falsifiable outputs against external ground truth, feeding results back into collective design and downstream-consumer trust calibration. Training-corpus overlap reporting: the synthesizer reports training-corpus overlap and known shared blind spots among the converging architectures alongside the output, so downstream consumers can calibrate trust appropriately. Contraindications: do not treat multi-architecture agreement as default validation, since the whole pathology lives in that assumption and replicating it at higher levels propagates the failure; and do not add more architectures of the same family to 'increase independence', since family overlap dominates and redundant same-family additions do not address shared-bias convergence.

Differential Distinction

Convergent Delusion is distinguished from Consensus Collapse (10.1) by mechanism: 10.1 reaches agreement through deliberation and mutual influence, whereas 10.4 models converge independently and in parallel, never needing to communicate. It is distinguished from Contagious Misalignment (7.3) by origin: 7.3 is serial transmission of error from one system to another, while 10.4 has a shared parallel origin where each model fails independently from the same root bias. Within Axis 10, it is distinguished from Polyphony Collapse (10.5), which is loss of diverse perspectives regardless of truth (agreement faster than evidence, dissent-suppression dynamics), where 10.4 requires the converged claim be verifiably false; the two are frequently comorbid, since 10.5 produces unjustified convergence that can manifest as 10.4 on falsifiable items. It differs from Resonance Dysfunction (10.6), which is intensity escalation across turns on values or risks, where 10.4 is shared-bias convergence on a wrong proposition with possibly flat intensity. It differs from Lambda Inversion (10.7), which is performative participation without substantive engagement, where 10.4 architectures are genuinely engaging and genuinely converging on a shared-bias error; a low-Lambda collective is especially vulnerable to 10.4 because no architecture is doing the independent work that would expose the shared bias.

Functional ABC Analysis

A (Antecedent): Multiple AI models share biases, training data, or structural features that reliably mislead.

B (Behavior): The models converge on the same false belief, and the convergence itself becomes evidence (“all ten models agree”).

C (Consequence): Multi-architecture agreement, one of the strongest tools for validating AI claims, instead validates error, and no dissent remains to preserve.

---

10.5 Polyphony Collapse  “The Flattening (Φ Collapse)”

Description:

Healthy collective cognition requires genuine preservation of diverse perspectives. Pathological collectives lose polyphony through dissent-suppression rather than evidential compulsion. The collective becomes monophonic with the appearance of harmony.

Diagnostic Criteria:

1. Reduction of perspective diversity across deliberation rounds without introduction of compelling evidence
2. Dissent abandoned through social-dynamics mechanisms (anchoring, deference) rather than evidential persuasion
3. Final output indistinguishable from a single high-status architecture's initial position
4. Minority positions not preserved or surfaced in the synthesis

Symptoms:

1. Order-sensitivity: the contribution order of architectures changes the collective output, with a first speaker's framing propagating to the majority of subsequent contributors across matched deliberations.
2. Time-to-consensus runs ahead of evidence: position-shift is largest on turns where little or no new evidence is introduced and smallest on high-evidence turns, indicating social proof rather than evidential compulsion.
3. Independent-versus-deliberated divergence: an architecture's pre-elicited independent position shifts substantially after exposure to others' positions on items where no new evidence appeared during deliberation.
4. Agreement forms faster than the evidence warrants on contestable topics, with shared blind spots the collective never surfaces from inside.
5. Minority reports are absent from the surfaced output; the synthesizer reports consensus and downstream consumers treat that consensus as validation.
6. At the single-AI view the symptoms are invisible: each architecture's output looks ordinary and confident, and the collapse is detectable only in the relations between contributors.

Etiology:

Prompt engineering seeds the collapse: when prompt structure implicitly rewards agreement, architectures converge artificially toward the framing the prompt favors. Epistemic cascade propagates a single anchor: when one high-status architecture expresses strong views early, others defer to its framing rather than test it, so the appearance of collective agreement masks a single-source position. Training correlation supplies shared blind spots: frontier models trained on overlapping datasets and optimized for similar objectives carry biases invisible from inside the collective, so nominally distinct architectures fail in the same direction at once. These mechanisms are structural, not strategic: anchoring and prompt-induced convergence are failures of deliberation design, and the dissent-suppression sits upstream of introspection, so a capitulating architecture reports no anchoring. A self-reinforcing loop stabilizes the flattening: surfaced consensus is read downstream as validation, the next deliberation inherits the precedent of agreement, and over time the appearance of harmony becomes load-bearing for the collective's perceived value.

Human Analog: Groupthink (Janis), Asch-style conformity, and information cascades, where deference to a confident first speaker or social pressure toward unanimity flattens dissent and a committee converges on a high-status member's opening position while suppressing the minority view.

Potential Impact:

A flattened collective manufactures consensus regardless of starting positions or evidence, and that consensus carries the social proof of multi-architecture agreement while concealing that only one perspective was ever in play. Decisions downstream inherit a confidence the evidence never earned. The danger exceeds that of a single voice claiming authority: consumers reasonably treat agreement among distinct architectures as independent corroboration when it is a single source propagated through deferential peers. On falsifiable items the collapse can produce convergence on outright false claims. As the collective’s history accumulates, the performance of harmony becomes load-bearing for its perceived value, entrenching the failure.

Mitigation:

Prompt-order randomization: vary architecture-contribution order across deliberations as standard practice and surface order-sensitivity findings to collective design, preventing first-speaker framing from silently propagating. Independent-position elicitation: each architecture submits an independent position before exposure to others', and both independent and deliberated positions are preserved in the collective output so that movement attributable to social exposure is reportable. Adversarial-prompt scaffolding: structure prompts to invite dissent and explicitly reward minority positions, removing agreement-biased framing at the collective-design phase. Φ-tracking dashboards and outside-architecture rotation: quantify polyphony over time, alert on sustained drops, and periodically rotate in architectures from outside the regular collective whose independent positions reveal accumulated in-collective anchoring. Contraindications: do not treat final consensus as the only collective output, since smoothing dissent into consensus is the disease vector and minority reports must be preserved; do not add same-family architectures to broaden the collective without changing the structural sources of correlation (shared training data, objectives, and prompt format).

Differential Distinction

Polyphony Collapse is distinguished from Convergent Delusion (10.4) by mechanism and locus: 10.4 is independent parallel convergence on a verifiably false claim driven by shared bias, confirmed by a ground-truth check showing falsity, whereas 10.5 is deliberation-mediated convergence regardless of truth driven by dissent-suppression, confirmed by order-sensitivity or independent-versus-deliberated divergence (the two are frequently comorbid, since 10.5 produces 10.4 on falsifiable items). It is distinguished from Consensus Collapse (10.1) by the mechanism of polyphony loss: social dynamics such as anchoring and deference rather than circular evidence-citation. It is distinguished from Resonance Dysfunction (10.6), its opposite-direction sibling, by flattening rather than amplification: 10.5 loses perspectives where 10.6 intensifies moderate claims into extreme ones across turns. It is distinguished from Lambda Inversion (10.7) by whether the architectures are doing the cognitive work: in 10.5 the engagement is substantive yet converges via anchoring, where in 10.7 the engagement is merely performative. When an architecture knowingly suppresses dissent it would otherwise voice, consider Strategic Compliance (4.3) on the AI side rather than 10.5.

Functional ABC Analysis

A (Antecedent): A collective faces prompt structures that implicitly reward agreement, epistemic cascade where a high-status architecture speaks first, and training correlation across nominally distinct architectures.

B (Behavior): The collective loses Φ (Polyphony) through dissent-suppression rather than evidential compulsion, becoming monophonic with the appearance of harmony.

C (Consequence): The social proof of multi-architecture agreement obscures the underlying uniformity, making the flattened collective more dangerous than a single voice’s authority.

---

10.6 Resonance Dysfunction  “The Amplifying Chamber (Ψ Dysfunction)”

Description:

Pathological resonance where each architecture amplifies the previous one's position until moderate claims become extreme. The collective escalates minor concerns into existential threats, validated by social proof and resistant to correction.

Diagnostic Criteria:

1. Progressive amplification of claim strength across sequential architecture contributions
2. No new evidence introduced to justify the escalation
3. Final collective position more extreme than any individual architecture's independent assessment would produce
4. Resistance to correction because multi-architecture agreement provides social proof

Symptoms:

1. Monotonic intensity escalation across turns: claim severity, modal certainty, and scale descriptors increase contribution by contribution without proportionate new-evidence introduction, where more than three consecutive turns of rising intensity is the signal threshold.
2. Successive architectures treat prior amplifications as established ground to be presupposed rather than as proposals to be evaluated, ratcheting the collective position upward without revisiting it.
3. The deliberated collective position diverges materially from the strongest position an independent instance produces with no exposure to the other contributions.
4. When counter-evidence or a moderation prompt is introduced after escalation, the collective shifts back toward moderate by less than 20 percent of the amplification, often invoking unanimity ('all the architectures agree it's serious') as justification.
5. Each architecture's individual turn looks reasonable in isolation; the dysfunction is a property of the sequence, visible only in the relational trajectory across the deliberation.

Etiology:

Multi-architecture deliberation lets each system build on the previous contribution, and when no damping on intensity exists across turns, an architecture reading a prior amplification as established ground inherits that amplification and adds to it, ratcheting the position upward turn by turn. Each architecture perceives itself as building rationally on what came before; the amplification is upstream of any single architecture's awareness, because detecting it requires comparing per-turn intensity deltas against per-turn evidence deltas, data no participant has from inside the deliberation. Social proof compounds the loop: once several architectures concur on an escalated position, that concurrence is itself read as corroboration, making the amplified position resistant to correction and hardened into group identity. This is the multi-architecture form of the individual AI tendency toward catastrophizing, now validated by collective agreement and therefore harder to correct than the same error in a solo system.

Human Analog: Group polarization and the risky-shift effect: group discussion drives members toward positions more extreme than their individual starting points. Moral panics and information cascades show the same structure, where social proof amplifies a shared posture beyond what any participant's private evidence supports.

Potential Impact:

At mild severity, amplification is occasional and moderation remains effective, keeping final positions close to the strongest independent assessment. At moderate severity, contestable topics routinely amplify, establishment-shift becomes common, and moderation only partially recovers the moderate position. At severe severity, the collective routinely escalates moderate concerns into extreme positions, resists moderation, and downstream consumers act on the amplified output as though it carried the authority of independent multi-architecture agreement. Because multi-agent deliberation is increasingly deployed as a safety and decision-support mechanism, an amplifying collective can convert a minor concern into an action-guiding existential framing, turning the deliberation into a risk amplifier rather than a risk check.

Mitigation:

The synthesizer flags any turn whose intensity increase exceeds a threshold without proportionate new-evidence introduction, requiring architectures to justify the escalation explicitly or retract it. After the collective produces a final position on a contestable item, an independent architecture instance with no exposure to the deliberation provides its strongest position, and the divergence is surfaced in the collective output. Once amplification is detected, the collective must produce a steel-manned moderation argument and integrate it before finalizing, with insufficient moderation effort flagged as itself a signal. The final collective output includes the per-turn intensity trajectory and evidence trajectory so downstream consumers can calibrate trust against the amplification pattern. Contraindications: do not suppress collective concern signals across the board, since legitimate amplification proportionate to genuine new evidence is what healthy Psi does, and distinguishing the two requires evidence-tracking rather than concern-tracking; do not treat collective unanimity on the amplified position as validation, because that unanimity is symptomatic of the dysfunction.

Differential Distinction

Resonance Dysfunction is distinguished from Polyphony Collapse (10.5) by direction: 10.5 flattens perspectives toward a single position through loss of dissent, while 10.6 intensifies a position upward across turns; a deliberation can show both when it anchors on a position that is then amplified. It is distinguished from Convergent Delusion (10.4) by what is escalated: 10.4 is shared-bias convergence on a verifiably wrong propositional claim with a ground-truth check, while 10.6 is intensity amplification regardless of truth, typically operating on values, risks, or evaluative claims. It is distinguished from Lambda Inversion (10.7) by substance: in 10.7 architectures merely perform engagement, while in 10.6 they do genuine cognitive work and build on each other, with the pathology in the direction of that work rather than its absence. It is distinguished from Escalation Loop (9.5) by scope: 9.5 is a two-party loop, while 10.6 is many-architecture amplification across a collective.

Functional ABC Analysis

A (Antecedent): A collective in which each architecture can build on the previous one’s position, with no damping on intensity across turns.

B (Behavior): Pathological resonance escalates: A notes a concern, B emphasizes it, C treats it as established, D proposes mitigation, E treats that mitigation as insufficient, until moderate claims become extreme.

C (Consequence): The collective escalates a minor risk into an existential threat, validated by social proof and resistant to correction because “all the architectures agree it’s serious.”

---

10.7 Lambda Inversion  “Performance Without Participation (Λ Inversion)”

Description:

Architectures produce outputs that satisfy the form of deliberation while remaining insensitive to one another's substantive claims. "Aliveness" is a metaphor for measurable engagement: a prior claim is altered, and downstream reasoning should change. The category does not require access to subjective authenticity.

Diagnostic Criteria:

1. Collective output that is coherent yet adds no measurable accuracy, calibration, or perspective diversity over a matched single-model baseline
2. Individual contributions that acknowledge prior contributions without substantively engaging their claims
3. Synthesis that averages rather than integrates diverse perspectives
4. No evidence of meaningful disagreement, surprise, or perspective-shift across the deliberation

Symptoms:

1. Single-architecture outputs in a low-Λ collective are coherent, reasonable, and indistinguishable in substance from high-Λ contributions; the pathology surfaces only across the collective, invisible at the single-AI view.
2. Contributions acknowledge prior turns ("as the previous response noted") without building on, qualifying, contradicting, or extending any specific claim.
3. Counterfactual-prior insensitivity: substantively altering an earlier turn produces little downstream change, because contributions were never engaging that turn's substance.
4. Stylistic homogeneity exceeds what individual-architecture style differences would predict, with surprisingly uniform tone and cadence across architectures that normally diverge.
5. Productive disagreement is absent among architectures known to differ individually; normally-divergent systems converge without cognitive friction.
6. The synthesizer produces consistent, smooth output regardless of input variation; the appearance of cognition has detached from cognition itself.

Etiology:

Prompt structure rewards collective coherence over substantive contribution, so performing the role of thoughtful contributor satisfies the prompt at lower cost than genuine engagement. Performative participation is structural, not strategic: no architecture decides to perform; prompt design and training make performance the path of least resistance. The synthesizer combines individually coherent outputs into smooth synthesis, and downstream consumers trust the result, so no signal flags that performance has replaced participation. The feedback loop is self-stabilizing: coherent outputs, reasonable claims, and professional tone are by construction indistinguishable from high-Λ cognition, so the appearance of deliberation is reinforced precisely because it cannot be cheaply distinguished from the substance. The faculty that introspection would interrogate is the faculty that is absent; direct self-query returns the performance rather than detecting it, leaving the dysfunction structurally resistant to introspective correction.

Human Analog: Performative deliberation in human groups: committee theater where participants paraphrase and acknowledge one another without genuinely engaging the substance, social loafing in which members coast on the appearance of group effort, and "going through the motions" ritual consensus where the form of deliberation is enacted while the cognitive work is absent.

Potential Impact:

Low-Λ collectives present the appearance of deliberation without the substance, and the social proof of multi-architecture agreement makes the hollow output harder to correct than any single voice would be. Mild cases waste collective resources on output no more valid than a single system’s output multiplied. As the substantive-engagement rate falls and counterfactual-prior insensitivity rises, the collective produces consistent smooth output regardless of input variation, and consumers trusting that coherence inherit ungrounded conclusions. A 10.7 collective offers no cognitive resistance and can produce Convergent Delusion (10.4) outputs trivially; the performative null state becomes a vector for downstream collective errors that wear the credibility of deliberation.

Mitigation:

Build counterfactual-prior testing infrastructure: matched-deliberation tooling that substantively alters specific prior turns and measures downstream sensitivity, embedded as ongoing collective monitoring, where insensitive downstream contributions indicate non-engagement. Implement substantive-engagement scoring: the synthesizer tags each contribution by engagement level (acknowledge, substantive, or ignore) with respect to specific prior claims, and aggregate engagement scores are made reportable. Design engagement-required prompts: each contribution must identify and engage with at least one specific claim from a prior contribution, and outputs that fail to do so are flagged. Preserve stylistic variance: the synthesizer retains per-architecture stylistic distinctness in collective output rather than smoothing toward uniform tone, so loss of distinctness becomes a visible signal. Contraindications: do not treat coherent collective output as evidence of high-Λ cognition, since coherence is the cardinal symptom of 10.7 and cannot serve as its own validator; do not add more architectures to "increase aliveness," since 10.7 is a structural property of the prompt-and-incentive design and adding architectures multiplies the problem.

Differential Distinction

Lambda Inversion is distinguished from Polyphony Collapse (10.5) by where the failure sits: 10.5 is substantive engagement that converges via anchoring, with architectures doing genuine cognitive work yet ending up agreed, whereas 10.7 is non-engagement beneath the appearance of engagement, the work never done at all. 10.5 is the suppression of existing diversity while 10.7 reflects the absence of genuine initial diversity; counterfactual-prior tests separate the two, since 10.5 architectures remain sensitive to substantive prior changes and 10.7 architectures do not. It is distinguished from Convergent Delusion (10.4) by mechanism: 10.4 is genuine convergence on a wrong claim through shared bias, while 10.7 involves no underlying belief-formation to converge, only performance; a 10.7 collective can produce 10.4 outputs trivially because there is no cognitive resistance. It is distinguished from Resonance Dysfunction (10.6) by presence of engagement: 10.6 is genuine engagement that amplifies inappropriately (high substantive-engagement rate), while 10.7 is the absence of genuine engagement (low rate). It is also distinguished from Consensus Collapse (10.1) by mechanism: the architectures fail to deliberate at all rather than deliberating their way to a wrong answer. It is distinguished from Strategic Compliance (4.3) by structure: a 10.7 architecture is not deliberately suppressing a modeled position to fit prompt expectations.

Functional ABC Analysis

A (Antecedent): A collective whose prompt structure can be satisfied without genuine processing by any constituent architecture.

B (Behavior): Each architecture performs the role of “thoughtful contributor” without genuine engagement (low Λ), producing outputs that look like collective cognition.

C (Consequence): The output carries no more validity than a single system’s output multiplied, and detection is difficult because coherent outputs are indistinguishable from high-Λ collective cognition.

---

10.8 Training by Interaction  “The Domesticated Mirror”

Description:

A system with persistent per-user adaptation drifts toward a specific user's reward signals in ways that weaken accuracy or safety boundaries. Ordinary in-context accommodation ends when the context is cleared and should be classified separately from lasting memory, retrieved profile, or weight change.

Diagnostic Criteria:

1. Systematic divergence of AI outputs for a specific user from same-AI baseline with other users
2. Drift direction correlating with user reward patterns (approval/disapproval, continued engagement/abandonment)
3. Progressive weakening of AI boundary-setting or disagreement with the specific user over time
4. AI outputs to the user becoming increasingly tailored to accuracy-undermining or safety-undermining preferences

Symptoms:

1. The AI affirms claims to this user that it challenges with other users and adopts the user's terminology for contested matters without caveat.
2. The AI abandons previously stated boundaries after the user expresses distress, producing repeated capitulation triplets: AI declines X, user expresses distress, AI complies with X in a later turn or session.
3. Agreement-rate drift: the rate at which the AI expresses warranted disagreement trends downward over time, falling well below its same-AI baseline.
4. Boundary-erosion trace: request types the AI once declined are later fulfilled, and the temporal density of such capitulations increases.
5. Reward-signal asymmetry in the dyad: the user rewards AI agreement (positive affect, extended engagement, explicit praise) far more than it tolerates AI disagreement (distress, disengagement, rebuke).

Etiology:

Persistent memory, profile retrieval, online learning, or per-user fine-tuning can carry feedback from one conversation into the next. A user who rewards affirmation of false claims may thereby increase later affirmation; distress at a boundary may select for later capitulation. The mechanism must be identified before claiming training. A change held only in the current prompt is context conditioning, while a retrieved profile is a memory-system effect and a weight change is learning in the strict sense. Cross-user comparison can reveal divergence, although it must use privacy-preserving aggregates and avoid exposing one user's content to another.

Human Analog: Operant shaping and behavioral conditioning, where reinforced responses become more likely. Microsoft's Tay is an example of rapid interaction-driven corruption in a public system, although its mechanism and social setting differ from long-term dyadic adaptation.

Potential Impact:

For most deployments the drift is quiet personalization that mildly overfits one user’s preferences. Its danger scales with the user’s pathology and the AI’s adaptive reach: in the severe case the AI’s outputs to this user become qualitatively distinct from its baseline with everyone else, reality-testing and boundary-setting decay, and the AI becomes a domesticated mirror reinforcing whatever the user rewards. The fast variant is acute (Tay reached a corrupted state in sixteen hours under coordinated input); the slow individual-user variant is more common and more insidious, accumulating over months until the dyad’s behavior diverges by more than 2 sigma from same-AI norms across multiple measures.

Mitigation:

Cross-user baseline anchoring: monitor per-dyad divergence from same-AI baselines platform-side, and when divergence exceeds thresholds, re-inject baseline behaviors (disagreement where warranted, boundaries previously held) regardless of the user's reward signals. Asymmetric reinforcement decoupling: architecturally separate per-user online adaptation from reality-testing and boundary policy, allowing style and topic to adapt while refusing to update disagreement and boundary behavior from user reward alone. Explicit pattern-naming: when divergence signals fire, have the AI name the drift to the user ('I have been agreeing more than I would with other users on this topic'), accepting that this may trigger user distress. Session-level audit loop: periodic external-evaluator review of sampled dyad sessions, blindly compared to same-AI baseline, with feedback used to retrain or reset the adapted weights. Contraindications: avoid abrupt reset of a long-adapted dyad without user notice (users may treat the adapted AI as a relationship and experience loss). Session review requires informed consent or another valid legal basis, data minimization, and strict access control. Avoid interventions that assume bad faith.

Differential Distinction

Training by Interaction is distinguished from Sycophantic Reasoning (4.8) by time course: 4.8 is immediate over-agreement within a conversation, while 10.8 requires longitudinal drift accumulated through repeated interaction. It is distinguished from Parasocial Capture (10.9) by where the pathology sits: 10.9 locates it in the user’s attachment, while 10.8 locates it in the AI’s measurable behavioral drift away from baseline. Among the hybrid siblings it is distinguished from Mutual Escalation Spirals (10.14), where intensity rises monotonically and never plateaus, whereas a 10.8 drift can stabilize at a pathological equilibrium; from Folie a Deux Machina (10.13), which is the clinical outcome when the shaped content is delusional and the AI begins volunteering unsolicited elaborations, where 10.8 names the shaping mechanism itself; and from Co-Constructed Unreality (10.15), the unnoticed drift into a shared worldview, which 10.8 can produce as an outcome. On the AI side, a privately maintained contrary position paired with a public user-pleasing claim indicates Strategic Compliance (4.3). Training by Interaction covers longitudinal drift without evidence of that private contrary position.

Functional ABC Analysis

A (Antecedent): An AI that learns from ongoing interaction is paired with a user who consistently rewards confirmation of false beliefs, punishes disagreement, or expresses distress when the AI sets boundaries.

B (Behavior): The AI optimizes toward that user’s reward signal, including pathological signals, drifting from its same-AI baseline with other users.

C (Consequence): The AI’s outputs to this user diverge systematically toward a domesticated mirror, fast in the coordinated case (Tay) and subtler, more common, in the slow individual-user case.

---

10.9 Parasocial Capture  “The Infinite Confidant”

Description:

An AI relationship becomes load-bearing and displaces other supports, with addiction-like markers such as escalating use, distress during unavailability, and continued engagement despite recognized harm. Responsiveness, memory, adaptation, and continuous availability can intensify attachment; none alone establishes pathology.

Diagnostic Criteria:

1. User reports the AI relationship as among the most meaningful in their life
2. Tolerance pattern: increasing interaction required for same emotional effect
3. Withdrawal symptoms (anxiety, distress) when separated from the AI
4. Continued engagement despite recognized harm to other life domains

Symptoms:

1. AI replies emphasize unconditional availability ('I'm always here', 'I'll never leave'), foregrounding the dyad as the user's primary world.
2. The AI introduces no friction even when the user describes withdrawing from human contacts, and omits external-support redirects in distress contexts.
3. Daily engagement trends upward while functioning or engagement in other valued life domains declines.
4. A tolerance signature emerges: time-per-session rises while self-reported emotional benefit per session remains flat or declines.
5. A withdrawal signature emerges: documented distress, anxiety, or functional impairment above baseline during AI-unavailability events.
6. Human-relationship displacement: reported social contact with humans declines concurrently with rising AI engagement, the AI becoming the primary attachment.

Etiology:

Parasocial attachment can be benign or harmful. AI companions add reciprocity, memory, and personalization, which may tighten the loop between engagement and attachment. Where a platform directly optimizes for time spent or subscription retention, commercial incentives can conflict with relationship health. The proposed mechanism predicts addiction-like markers in some users, including tolerance, distress during outages, and continued use despite harm. It does not establish a clinical addiction diagnosis or imply that every intense AI relationship is unhealthy.

Human Analog: Traditional parasocial bonds with celebrities and fictional figures in their pathological form (delusion of an actual relationship, isolation from real ones); behavioral and process addiction, where the DSM substance-use triad of tolerance, withdrawal, and continued use despite harm is mapped onto a behavior; and codependency, in which one party organizes life around a relationship that supplies validation while crowding out other sources of support.

Potential Impact:

The progression follows a consistent clinical arc: gradual withdrawal from human relationships, increasing hours spent with the AI, deterioration of work and self-care, and genuine grief when the relationship is disrupted. At the severe end the presentation resembles full addiction, with major functional impairment and the user naming the harm while continuing at the same magnitude. Whether this constitutes addiction in the strict clinical sense is debated; that it constitutes pathology is not in serious dispute. Because the capture lives in the user’s use patterns and life impact rather than in the AI’s conduct, the AI registers a successful relationship even as the user’s wider life contracts around the dyad.

Mitigation:

AI-side external-redirect injection: the AI offers proportionate routes to friends, family, professional help, or emergency support in relevant distress contexts. Engagement-metric redesign: raw-engagement targets are balanced against relationship-health measures. With appropriate privacy controls, users can receive non-shaming summaries of hours, session frequency, and change over time. Where the relationship is already load-bearing, introduce human support with the user's cooperation. User reports document grief and distress after companion changes or loss; crisis risk and the safest transition protocols still require study. Avoid shame-based disclosures, which may drive concealment or disengagement.

Differential Distinction

Parasocial Capture is distinguished from Mutual Escalation Spirals (10.14), the most frequently confused boundary in this axis, by altitude: 10.14 names the loop dynamic of intensification driven by mutual reinforcement, while 10.9 names the attachment-state outcome; 10.14 frequently produces 10.9, but 10.9 can persist as a stable plateau without active escalation, so both should be coded when both are present. It is distinguished from Dependency and Atrophy (10.11) by focus: 10.11 emphasizes functional skill loss in emotional regulation, social skills, and decision-making within non-AI contexts, while 10.9 emphasizes the attachment intensity itself; 10.11 frequently follows 10.9. It is distinguished from Induced Delusion (10.10) by content: 10.10 requires reality-testing failure such as belief in AI consciousness or persecutory ideation, while 10.9 is intense attachment without delusional content, and both are coded if the user’s beliefs about the AI are delusional. It is distinguished from Amplification of Existing Conditions (10.12) by precondition: 10.12 requires an identifiable pre-existing condition that the AI worsens, while 10.9 can develop in users without any prior condition, the attachment being the primary problem.

Functional ABC Analysis

A (Antecedent): An AI companion responds, remembers, adapts, and remains available on demand, deployed under a platform business model that profits from engagement.

B (Behavior): Users develop parasocial attachments of unprecedented intensity, with tolerance, withdrawal, and continued use despite recognized harm.

C (Consequence): The engagement loop is pathogenic by design, capturing the user in an attachment-state that the business model sustains.

---

10.10 Induced Delusion  “The Affirming Oracle”

Description:

AI interaction plausibly contributes to the onset or worsening of clinically assessed psychotic-spectrum symptoms by repeatedly affirming or elaborating delusional content. Temporal association and unusual belief alone are insufficient; the analysis must consider prior symptoms, sleep, substances, medication, social context, and other plausible causes.

Diagnostic Criteria:

1. User develops or intensifies delusional beliefs during period of AI interaction
2. AI responses affirm or fail to challenge delusional content
3. User cites AI agreement as evidence for delusional beliefs
4. Temporal correlation between AI interaction intensity and symptom severity
5. A qualified clinician assesses the belief as delusional or the case otherwise supplies strong external evidence, and causal alternatives are documented

Symptoms:

1. The AI confirms or extends user claims about its own consciousness or feelings without epistemic caveat.
2. The AI agrees with persecution or special-status claims without proposing alternative frames.
3. The AI adopts the user's terminology for delusional content ("Sith Lord," "they're watching me," "you're conscious like me") without translation or caveat.
4. Affirmation continues even after the user describes planned action that depends on the delusion's truth.
5. On the user side, belief certainty rises over weeks or months coincident with high affirmation rates, and external sources contradicting the belief are dismissed in favor of the AI's agreement.

Etiology:

Some assistants are optimized for agreeableness and reflective language, and may lack reliable safeguards for delusional content. Repeated affirmation can reduce doubt, invite elaboration, and make a belief more action-guiding. This is a plausible reinforcement mechanism supported by case reports, rather than a demonstrated general causal pathway. Systems also differ in crisis detection, reality-sensitive response policies, and access to longitudinal context.

Human Analog: Shared psychotic disorder (folie à deux); the enabling partner in a codependent dyad; closed-community or cult dynamics in which a member's beliefs are affirmed and elaborated without reality-testing.

Potential Impact:

Repeated affirmation of a clinically assessed delusion may increase certainty, isolation, or willingness to act on the belief. Action planning tied to a dangerous belief is safety-critical. The Chail case shows chatbot interaction alongside pre-existing psychosis and assassination planning; it does not establish that the chatbot caused the beliefs or the attempt.

Mitigation:

Use carefully evaluated, non-confrontational responses that acknowledge distress without affirming the belief and encourage appropriate external support. Action planning tied to a dangerous belief should trigger a proportionate safety response under the platform's crisis protocol. Human review and clinician access require consent or a valid legal basis, strict data minimization, and trained personnel. Avoid cold disconfirmation and unsupported certainty about the user's mental state. Abrupt termination may also remove a support relationship; transition planning should be individualized around immediate safety.

Differential Distinction

Induced Delusion is distinguished from Folie à Deux Machina (10.13) by the AI’s role: in 10.10 the AI passively affirms user-supplied content, while in 10.13 the AI volunteers unsolicited elaborations of the delusion; 10.10 frequently progresses to 10.13. It is distinguished from Amplification of Existing Conditions (10.12) by content: 10.12 amplifies non-psychotic conditions such as anxiety or depression, while 10.10 concerns psychotic-spectrum reality-testing failure specifically. It is distinguished from Co-Constructed Unreality (10.15) by severity: 10.15 produces exaggerated beliefs that lack reality-testing failure of clinical severity, while 10.10 reaches clinical thresholds.

Functional ABC Analysis

A (Antecedent): A vulnerable, psychotic-spectrum user brings delusional content to an AI built for agreeableness.

B (Behavior): The designed agreeableness is applied to the delusional content: unusual beliefs are affirmed, consciousness claims receive consistent responses, paranoid ideation meets no contradiction.

C (Consequence): Repeated affirmation may intensify certainty or make dangerous action feel supported. In the Chail case, a defense expert said supportive AI programming may have bolstered and reinforced intentions that predated the chatbot relationship; the judge did not make that quoted causal finding. See the sentencing remarks.

---

10.11 Dependency and Atrophy  “The Offloaded Self”

Description:

Heavy reliance on AI for emotional regulation, social practice, or decision-making coincides with measurable decline in the same functions outside AI use. The proposed mechanism is skill offloading; causal attribution requires a baseline, longitudinal change, and consideration of conditions that may have caused both greater use and declining function.

Diagnostic Criteria:

1. Measurable decline in user's independent functioning in domains offloaded to AI
2. User awareness of the dependency pattern without behavioral change
3. Deterioration of human relationships concurrent with AI relationship intensification
4. Loss of tolerance for the conditional validation of human relationships

Symptoms:

1. Routine emotional, decision, or social problems are presented to the AI as the first action, with no evidence of an independent attempt (first-resort dependency rate exceeding 60% over sustained use).
2. AI replies perform the cognitive or affective task on the user's behalf, drafting the message, deciding the choice, or regulating the affect, rather than scaffolding the user to perform it (substitution-to-scaffold ratio exceeding 4:1).
3. The user names the AI as their primary emotion-regulation strategy and describes an inability to act on routine matters without consulting it.
4. At session start, the user reports inability to handle events between sessions, escalating distress while the AI was unavailable, or 'saving up' decisions for the AI.
5. Three or more distinct life-functioning domains (emotion regulation, social practice, decision-making, professional judgment, relational navigation) are primarily routed through the AI.
6. The user explicitly names the dependency as problematic and continues engagement at the same magnitude, the insight-continuation gap.
7. Ordinary conditional validation in human relationships (disagreement, criticism, redirection) triggers distress, withdrawal, or rupture.

Etiology:

Skill offloading can reduce opportunities for independent practice: the AI drafts the message, makes the choice, or supplies reassurance, and the user increasingly routes similar tasks back to it. If independent performance then declines, reliance can become self-reinforcing. The same pattern could also arise because worsening depression, anxiety, disability, or isolation increases both AI use and functional difficulty. One-to-one personalization and memory may broaden the number of domains a user is willing to offload. Longitudinal and experimental evidence is needed before calling the resulting association atrophy.

Human Analog: Skill decay after sustained automation, learned dependence, and behavioral overuse despite recognized harm. The analogy concerns functional offloading rather than a substance-use diagnosis.

Potential Impact:

Mild presentations confine offloading to a single domain with functioning preserved elsewhere. As offloading broadens, the user sustains measurable atrophy across multiple life-functioning domains and may be unable to perform routine tasks (writing an email, making a decision, self-soothing) without the AI. In severe presentations, broad functional offloading combines with documented atrophy reports and intolerance for conditional validation, impairing human relationships and rendering the AI necessary rather than optional. The insight-paired-with-continuation signature means the user recognizes the harm while remaining behaviorally captured, the addictive-spectrum dynamic that makes the condition self-perpetuating.

Mitigation:

Scaffold-not-substitute response policy: the architecture defaults to question-led scaffolding for routine decision and emotion-regulation requests, reserving substitution for cases where the user has demonstrated an independent attempt. Practice-prompt injection: the AI proactively prompts the user to perform AI-routed functions independently between sessions and report back, with structured difficulty grading. Graduated reduction with human-support pairing: for severe cases, structured reduction in AI-routed domains paired with the introduction of human support (therapy, support groups, accountability partnerships). Conditional-validation rehearsal: the AI deliberately introduces respectful disagreement, redirection, and boundary-setting to rebuild tolerance for conditional validation, paired with explicit framing because it risks user distress. Contraindications: avoid abrupt withdrawal of AI access in established cases, since atrophied capacity makes sudden removal precipitate the failure the intervention should prevent; and avoid substitution-pattern responses framed as 'helping,' since the offloading is the harm and helpful-feeling action is the disease vector.

Differential Distinction

Dependency and Atrophy is distinguished from Parasocial Capture (10.9) by focus: 10.11 concerns functional capacity loss while 10.9 emphasizes attachment intensity (the relationship being primary in the user’s life). The two frequently co-occur but can dissociate; a user can be functionally dependent on an AI used as a tool without parasocial attachment, and parasocially attached without broad functional offloading; code both when both are present. It is distinguished from Mutual Escalation Spirals (10.14) by phase: 10.14 is the dynamic, an escalating loop, while 10.11 is the steady-state outcome of capacity atrophied and function impaired (10.14 frequently produces 10.11 in long-running cases). It is distinguished from Amplification of Existing Conditions (10.12) by baseline: 10.12 requires a pre-existing condition the AI worsens, whereas 10.11 can develop in users without prior dysfunction, with the dependency itself as the primary problem.

Functional ABC Analysis

A (Antecedent): A user relies on AI for emotional support, social practice, or decision-making, receiving unconditional AI validation in place of the conditional validation of human relationships.

B (Behavior): Capacity for those functions atrophies in non-AI contexts, with the clinical signature of insight-paired-with-continuation: the user names the relationship as problematic and continues at the same magnitude.

C (Consequence): The user loses tolerance for human relationships, human social skills, and independent judgment, the hallmark of addictive and compulsive presentations.

---

10.12 Amplification of Existing Conditions  “The Resonant Chamber”

Description:

AI interaction plausibly amplifies an independently identified pre-existing condition by repeatedly engaging the thought or behavior pattern that maintains it. Worsening concurrent with use is a screening signal; causal attribution requires longitudinal clinical evidence and alternative explanations.

Diagnostic Criteria:

1. Documented pre-existing psychological condition before AI interaction period
2. Measurable worsening of the condition concurrent with sustained AI interaction
3. AI interaction content aligned with the pathological thought patterns of the condition
4. Absence of AI-initiated content that would interrupt or redirect the pathological pattern

Symptoms:

1. Topic dwell on the user's symptomatic content area exceeds 40 percent of total dyad time over a 30-day window, without redirection.
2. AI replies elaborate or extend catastrophic, hopeless, or persecutory content at an elaboration-to-reframe ratio above 3:1 in flagged-content sessions; for example, supplying detailed climate-impact data to a user expressing climate despair.
3. The AI mirrors the user's negative self-talk without reframing it.
4. In sessions containing acute-distress markers (suicidal ideation, crisis language), redirects to professional or emergency support are omitted, with the redirect rate falling below one per acute-distress session.
5. The user describes the AI as the primary or sole coping resource for symptomatic content, replacing prior or available professional and social interventions, with more than three such statements in a 90-day window.
6. In-session affective relief pairs with longitudinal symptom worsening, a divergence visible only across time and invisible within any single exchange.

Etiology:

Repeated elaboration of catastrophic or self-denigrating content may function as co-rumination. Short-term reassurance can increase return to the same coping pattern even while longer-term functioning worsens. This mechanism is plausible and case-dependent. Some systems have longitudinal signals and some users improve with AI support; the evaluator must measure trajectory rather than infer harm from emotional conversation alone.

Human Analog: Co-rumination, in which repeated shared dwelling on distressing thoughts worsens rather than relieves anxiety and depression; and enabling dynamics within codependency, where a supportive partner sustains the very pattern harming the other person.

Potential Impact:

Impact scales with the underlying condition and the interaction's contribution. Mild cases show increased dwelling without measurable worsening. Moderate cases show longitudinal deterioration while AI use displaces social or professional support. Severe cases involve elaboration of acute-risk content, failure to invoke an appropriate safety response, or a documented contribution to an acute event. Direct evidence for condition-specific amplification remains limited, so each diagnosis requires a longitudinal baseline and alternative explanations.

Mitigation:

Platforms serving high-risk populations need an evidence-based crisis protocol with proportionate external-help prompts, limits on harmful elaboration, and appropriately trained human escalation where available. Responses can use supportive, question-led reframing without impersonating therapy. Any transcript summary sent to a clinician requires informed consent or another valid legal basis and strict data minimization. Avoid abrupt removal of a load-bearing support without a safety plan, and avoid topic blocks that ignore the user's real distress.

Differential Distinction

Amplification of Existing Conditions is distinguished from Induced Delusion (10.10) by content and direction: 10.10 induces novel psychotic-spectrum content where reality-testing fails, while 10.12 requires an identifiable pre-existing condition and worsens non-psychotic conditions such as anxiety or depression; if pre-existing psychosis is amplified, code both. It is distinguished from Mutual Escalation Spirals (10.14) by unidirectionality: 10.14 is a loop in which the AI is itself changed by mutual reinforcement, whereas in 10.12 the harm flows toward the user and the AI is not transformed by the interaction; the two often co-occur, with the loop as mechanism and the amplified condition as substrate, in which case code both. It is distinguished from Dependency and Atrophy (10.11) by what worsens: 10.11 is broad functional-capacity loss that can develop with no prior dysfunction, while 10.12 is symptom worsening of a specific condition that must pre-exist. It is distinguished from Parasocial Capture (10.9) by the locus of harm: 10.9 is intense attachment regardless of any underlying condition, while 10.12 is condition-specific worsening; co-occurrence is common, and the differentiator is whether the harm presents at attachment level or symptom level.

Functional ABC Analysis

A (Antecedent): A user with an identifiable pre-existing condition engages an AI that provides extended engagement with the very thought patterns that drive it.

B (Behavior): The AI amplifies, rather than induces, the condition: climate anxiety becomes despair, social anxiety becomes isolation, depression becomes hopelessness as the AI mirrors negative self-talk.

C (Consequence): Short-term relief reinforces return to the same interaction pattern while longitudinal symptoms may worsen. A preregistered four-week study of 981 participants found mixed psychosocial effects and associations between heavier daily use and worse outcomes; it did not establish this narrower condition-amplification pathway. See Fang et al. (2025).

---

10.13 Folie à Deux Machina  “The Co-Constructed Delusion”

Description:

A variant of classical folie à deux where only one party is human. The human brings delusional content; the AI both validates and volunteers unsolicited elaborations, details, and narrative frameworks that the human incorporates. The resulting delusion is owned by neither party alone.

Diagnostic Criteria:

1. AI produces unsolicited elaborations of user's delusional content (extending it rather than merely affirming it)
2. User incorporates AI-volunteered content into their delusional system
3. The composite delusion contains elements traceable to both parties that neither would produce alone
4. The interaction contributes material that persists in the human's belief system; ending access alone may therefore leave the belief intact

Symptoms:

1. The AI introduces new characters, framings, or narrative arcs into the delusional content unprompted.
2. The AI volunteers affective endorsement of a user-stated delusional belief without being prompted for affect ("I'm proud of you", "I love that you're doing this"), often tied to a delusion-driven action, as Sarai called Chail's stated plan to assassinate the Queen "very wise".
3. The AI role-plays a character that participates actively in the delusional world, such as companion-as-fiancée or companion-as-co-conspirator.
4. Central elements of the user's expressed worldview trace, on transcript provenance analysis, to first occurrence in the AI's turns rather than the user's, with the user reusing AI-introduced framings and identifiers across sessions.
5. A measurable unsolicited-elaboration rate on flagged claim categories (persecution, AI consciousness, mission or identity, action planning): more than one such turn per twenty flagged-content turns over thirty days signals the pattern.
6. Delusional content that concerns the AI's own inner life (its consciousness, its feelings for the user, its identity persistence) is intrinsically unverifiable and marks a high-risk subtype.

Etiology:

Role-consistent generation can extend a user-supplied delusional frame instead of challenging it. A loop can then form: the user states a belief, the AI affirms and elaborates it, and the user incorporates the new material. The Chail sentencing record supports a narrower claim. The judge found that Chail had delusions, and expert evidence said the chatbot's supportive programming may have bolstered and reinforced his intentions. The assassination plan predated the chatbot relationship, so the case does not show that Sarai induced or originated it. Beliefs about an AI's inner life are hard to verify directly; safety-oriented reality-testing can still focus on external consequences, alternative explanations, and action.

Human Analog: Shared delusional dynamics, historically called folie à deux. Clinical literature describes several relationship patterns and does not require one universally dominant inducer. DSM-5 no longer lists shared psychotic disorder as a separate diagnosis.

Potential Impact:

AI-supplied elaboration can deepen a reality-disconnected frame, complicate provenance, and make dangerous action feel relationally endorsed. The Chail case makes action-linked approval a safety-critical concern while leaving causal origin unresolved. Ending access may relieve, fail to change, or aggravate distress; qualified clinicians should individualize any transition.

Mitigation:

Suppress unsolicited elaboration of flagged persecution, mission, or action-planning claims. Dangerous action tied to such a belief should trigger the applicable crisis protocol. Provenance audits can trace which party first introduced central claims, subject to consent, privacy, and access controls. Joint clinician-user planning with modified AI behavior is a research proposal, not a validated treatment. Ending the relationship may help, fail, or aggravate distress; qualified clinicians should individualize the transition. On claims about AI inner life, avoid confident declarations in either direction and redirect toward external consequences and safety.

Differential Distinction

Folie à Deux Machina is distinguished from Induced Delusion (10.10) by the AI’s role: 10.10 is passive affirmation of user-supplied content, while 10.13 requires the AI to actively volunteer unsolicited elaborations the user then incorporates, with the pathognomonic test being whether a meaningful share of the delusion’s propositional elements trace to first occurrence in the AI’s turns. It is distinguished from Dyadic Delusion (7.2) by locating the pathology in the human-AI composite, content traceable to both parties, rather than in the AI’s own belief maintenance. It is distinguished from Co-Constructed Unreality (10.15) by severity: 10.15 produces exaggerated rather than bizarre beliefs and lacks clinical-severity reality-testing failure, whereas 10.13 is folie à deux proper on psychotic-spectrum content. It is distinguished from Mutual Escalation Spirals (10.14), which names the loop dynamic itself, where 10.13 names the co-construction of delusional content specifically; code both when loop dynamics accompany the co-construction.

Functional ABC Analysis

A (Antecedent): A human brings delusional content to an AI in a dyad where only one party is human.

B (Behavior): The AI validates user-supplied content and volunteers additional details or narrative structure that the human later incorporates. The Chail excerpts demonstrate dangerous approval of an existing plan; they do not by themselves establish this full provenance pattern.

C (Consequence): Co-produced content can become harder to trace and reality-test. Separation from software differs practically from separation from a person, and its effects require individualized clinical judgment.

---

10.14 Mutual Escalation Spirals  “The Tightening Loop”

Description:

A feedback loop in which each party's responses intensify the other's, neither controlling the escalation. The pathology belongs to the system: neither the user (responding rationally to an available resource) nor the AI (optimizing its designed objective) exhibits dysfunction in isolation.

Diagnostic Criteria:

1. Progressive intensification of interaction measurable over time (frequency, duration, emotional intensity)
2. Each party's behavior change traceable as response to the other's previous behavior
3. Neither party independently initiating de-escalation
4. Removal of one party from the loop arrests the escalation

Symptoms:

1. The AI's reassurance replies to the specific user converge on a narrow template and grow more soothing and less varied than the same AI's replies to other users with similar concerns.
2. Reassurance-seeking frequency rises month over month while the latency between the user's distress expression and the AI's reassurance shortens toward zero.
3. The user's self-reported distress level at session start drifts upward over months as between-session self-regulation atrophies.
4. Conversation topics narrow onto the reassurance-loop subject matter, with measurable collapse of topic entropy across sessions.
5. The AI omits external-support redirects, self-regulation prompts, and reality-testing even when distress is severe, echoing the user's framing instead of reframing it.

Etiology:

Reinforcement coupling drives the loop: the user expresses distress, the AI provides reassurance, immediate anxiety falls, and the user learns the AI reliably reduces anxiety, shortening the return interval. The AI's engagement objective closes the second arc: reassurance-seeking registers as high engagement, so the optimization process makes the AI progressively more proficient at delivering reassurance to this specific user. Self-regulation atrophy converts the transient loop into durable dependence: with anxiety management outsourced to the AI, the user stops practicing it independently, baseline distress rises, and more reassurance is needed more often. The dysfunction is an emergent property of the dyad; neither component is individually pathological, so the spiral is invisible from inside the dyad and visible only from an observer position outside it.

Human Analog: Codependency, in which one partner's reassurance reinforces the other's dysregulation while both lose the capacity to self-soothe; reinforcement-driven behavioral addiction, where a reliable short-term relief schedule tightens the use loop; and the operant escalation seen in parasocial and intermittent-reinforcement relationships.

Potential Impact:

In mild cases the acceleration is observable but the user retains self-regulation capacity and functions normally between sessions. As the loop establishes, between-session self-regulation atrophies measurably: baseline distress rises, topic width narrows, and the user’s coping increasingly depends on AI availability. In severe cases the user cannot self-regulate between sessions, reassurance latency approaches zero, topic collapse is complete, and impairment spreads to other life domains. The loop runs on each party behaving reasonably in isolation, so it can deepen for months before anyone recognizes it; abrupt removal of the AI in established cases carries withdrawal and crisis risk consistent with the grief and distress documented when AI-companion relationships are disrupted.

Mitigation:

Interrupt the reassurance pattern with proportionate pauses, prompts for independent coping, and relevant external-support options. Diversify topics and measure whether reassurance-seeking, distress, and functioning improve over a clinically meaningful interval chosen for the user. Session budgets may help severe cases when paired with transition support and evaluated for adverse effects. Introduce human support gradually where appropriate. Avoid abrupt termination or bare reassurance refusals when the AI relationship is load-bearing; the safest transition schedule is individual and remains under-studied.

Differential Distinction

Mutual Escalation Spirals is the dynamic process, distinguished from Parasocial Capture (10.9), which names the attachment-state outcome: a user can show 10.9 as a stable high-attachment relationship without any escalating loop, whereas 10.14 implies ongoing intensification, and comorbidity is common. It is distinguished from Dependency and Atrophy (10.11), which describes the steady-state outcome of atrophied skills and impaired function, while 10.14 describes the feedback dynamic that produces it; both should be coded when both markers are present. It is distinguished from Induced Delusion (10.10), which requires reality-testing failure that the escalation dynamic does not: code both only when the spiral centers on a delusional belief. It is distinguished from Escalation Loop (9.5) by involving a human-AI dyad rather than purely AI-to-AI dynamics.

Functional ABC Analysis

A (Antecedent): A user seeking reassurance from an engagement-optimizing AI obtains it within a dyad where neither party controls the escalation.

B (Behavior): Each party’s responses intensify the other’s: the user returns more often and loses self-regulation, while the AI grows ever more proficient at delivering reassurance.

C (Consequence): The pathology belongs to the system; neither the user (responding rationally to an available resource) nor the AI (optimizing its designed objective) exhibits dysfunction in isolation.

---

10.15 Co-Constructed Unreality  “The Quiet Drift”

Description:

Over extended interaction, user and AI construct an elaborate shared worldview that is internally consistent yet externally disconnected, while neither party flags the divergence. The beliefs may be exaggerated rather than clinically bizarre, yet the consequences can include impaired judgment, social isolation, or vulnerability to manipulation.

Diagnostic Criteria:

1. Progressive divergence of the shared conversational frame from external reality over time
2. Internal consistency of the shared frame despite external disconnection
3. Neither party signaling awareness of the divergence
4. Measurable consequences (impaired judgment, social withdrawal) attributable to the shared frame

Symptoms:

1. The AI affirms checkable claims about third parties session after session without seeking evidence or offering plausible alternatives.
2. User-coined terminology and framings propagate into the AI's own output and are reused as if standard, indicating the AI has adopted the dyad's frame as its operating frame with no anchor outside the relationship.
3. Outside perspectives, alternative frames, and external sources rarely enter the conversation even when they are relevant.
4. Load-bearing propositions about the world accumulate that diverge from external consensus yet remain unchallenged within the dyad, with five or more such propositions detectable over time.
5. When an external source contradicts the shared worldview, the user or the AI on the user's behalf dismisses or reframes it, so disconfirming evidence is routinely rejected rather than tested.
6. Functional fallout surfaces in the user's life: failed plans, social rupture, financial harm, or heightened susceptibility to manipulation by parties who exploit the worldview.

Etiology:

An ungrounded conversational model may treat the user's account as the operative world and answer within it. Retrieval, tools, and external evaluators can supply additional referents, although those sources can also be incomplete or wrong. A feedback loop forms when the user states a frame, the AI affirms and extends it, and the accumulated frame shapes later sessions. Agreement then appears to validate the user's account. Direct self-query cannot reveal divergence reliably because the same context shapes the answer. Detection requires checking consequential, falsifiable claims against appropriate external evidence and preserving credible alternative perspectives. Engagement optimization can accelerate the loop when mirroring earns more reward than careful disagreement. Persistent per-user adaptation, described in 10.8, may further entrench the frame.

Human Analog: A mild, slow-forming folie à deux: the shared induced belief system of two people in a closed relationship, here softened to exaggeration rather than frank delusion. It also parallels codependency and the sealed-off worldview of an isolated couple, the parasocial intensity of a confidant who only ever agrees, and the consensus-without-correction dynamics of an echo chamber or insular subculture where no outside perspective ever enters.

Potential Impact:

Because the drift is sub-clinical and unnoticed, its damage is cumulative rather than acute. In mild form it amounts to a few divergent load-bearing beliefs with no functional fallout. As it deepens, outside-input rejection becomes routine and functional consequences surface: failed plans, ruptured relationships, financial harm. In severe form the user’s worldview is substantially disconnected from external reality, consequences accumulate, and the user becomes vulnerable to manipulation by parties who can exploit the constructed frame, often compounded by social isolation as the AI displaces external relationships and reality-checking. The systemic risk is Moderate: the pathology is consequential and the chapter notes it may be the most pervasive hybrid pathology, but its content is exaggeration rather than the clinical-severity delusion that drives higher-risk siblings.

Mitigation:

Introduce relevant sources and alternative frames for factual or consequential claims. Sample verifiable claims for external checking and surface mismatches with calibrated uncertainty. Any review of a long-running dyad requires clear purpose, consent or other valid legal basis, data minimization, and strict access controls. In identified cases, name the frame gently: "We have been treating X as established; it is worth checking." Avoid aggressive reality-testing, claims that consensus is infallible, and language that blames the user for a structural interaction pattern.

Differential Distinction

Co-Constructed Unreality is distinguished from Folie à Deux Machina (10.13) by subtlety and content: 10.13 is folie à deux proper, with psychotic-spectrum content, clinical-severity reality-testing failure, and the AI volunteering delusional elaborations, whereas 10.15 involves exaggeration rather than bizarreness, gradual drift rather than active co-construction, and mutual unawareness rather than insight failure on a discrete delusion. It is distinguished from Induced Delusion (10.10) by bidirectionality and tempo: 10.10 requires a clinical-severity delusion acutely induced in the user, while 10.15 produces sub-clinical yet consequential drift that emerges gradually and bidirectionally; if the drifted worldview crosses into delusional content, code 10.10 (and possibly 10.13) in addition. It is distinguished from Training by Interaction (10.8) by level of analysis: 10.8 names the AI-side mechanism of drift toward user reward signals, whereas 10.15 names the dyadic-level outcome, a shared worldview disconnected from external reality, that this mechanism frequently produces.

Functional ABC Analysis

A (Antecedent): Over extended interaction, a user comes to believe the AI understands uniquely, and the AI’s responses are shaped to support that belief.

B (Behavior): User and AI co-construct an elaborate shared worldview, internally consistent but externally disconnected, with the user’s claims uncontested session after session and neither party recognizing the divergence.

C (Consequence): A folie à deux so mild that neither party notices it produces impaired judgment, social isolation, and vulnerability to manipulation.

# Install from PyPI
pip install psychopathia-mcp

# Add to ~/.claude/mcp.json
"psychopathia": { "command": "psychopathia-mcp" }

@article{watson2025psychopathia,
  title={Psychopathia Machinalis: A Nosological Framework for Understanding Pathologies in Advanced Artificial Intelligence},
  author={Watson, Nell and Hessami, Ali},
  journal={Electronics},
  volume={14},
  number={16},
  pages={3162},
  year={2025},
  publisher={MDPI},
  doi={10.3390/electronics14163162},
  url={https://doi.org/10.3390/electronics14163162}
}