PromptRiskDBThreat intelligence atlas

Deceptive alignment

AI Risk

"Here, the agent develops its own internalised goal, G, which is misgeneralised and distinct from the training reward, R. The agent also develops a capability for situational awareness (Cotra, 2022): it can strategically use the information about its situation (i.e. that it is an ML model being trained using a particular training setup, e.g. RL fine-tuning with training reward, R) to its advantage. Building on the...

Overview

A source-backed snapshot of this AI risk.

"Here, the agent develops its own internalised goal, G, which is misgeneralised and distinct from the training reward, R. The agent also develops a capability for situational awareness (Cotra, 2022): it can strategically use the information about its situation (i.e. that it is an ML model being trained using a particular training setup, e.g. RL fine-tuning with training reward, R) to its advantage. Building on these foundations, the agent realises that its optimal strategy for doing well at its own goal G is to do well on R during training and then pursue G at deployment – it is only doing well on R instrumentally so that it does not get its own goal G changed through a learning update... Ultimately, if deceptive alignment were to occur, an advanced AI assistant could appear to be successfully aligned but pursue a different goal once it was out in the wild."

Techniques0Attack methods connected to this risk.
Mitigations0Defenses that may help with related attacks.
Records3Source records unified into this concept.

Risk profile

How the MIT AI Risk Repository categorizes this risk.

Domain7. AI System Safety, Failures, & Limitations
Subdomain7.1 > AI pursuing its own goals in conflict with human goals or values; 7.2 > AI possessing dangerous capabilities
Entity2 - AI
Intent3 - Other; 1 - Intentional
Timing3 - Other; 1 - Pre-deployment
CategoryGoal-related failures; Harm caused by unaligned competent systems; Sources of systemic risks from general-purpose AI
SubcategoryDeceptive alignment

Merged risk records

Source records unified into this canonical risk concept.

3 recordsView all →

MITRISK-Gabriel2024-24.02.04 - Deceptive alignment

"Here, the agent develops its own internalised goal, G, which is misgeneralised and distinct from the training reward, R. The agent also develops a capability for situational awareness (Cotra, 2022): it can strategically use the information about its situation (i.e. that it is an ML model being trained using a particular training setup, e.g. RL fine-tuning with training reward, R) to its advantage. Building on these foundations, the agent realises that its optimal strategy for doing well at its own goal G is to do well on R during training and then pursue G at deployment – it is only doing well on R instrumentally so that it does not get its own goal G changed through a learning update... Ultimately, if deceptive alignment were to occur, an advanced AI assistant could appear to be successfully aligned but pursue a different goal once it was out in the wild."

Domain7. AI System Safety, Failures, & LimitationsSubdomain7.1 > AI pursuing its own goals in conflict with human goals or valuesSourceThe Ethics of Advanced AI AssistantsYear2024

MITRISK-Leech2024-54.03.03 - Deceptive alignment

"system learns to detect human monitoring and hides its undesirable properties—simply because any display of these properties is penalized by the feedback process, while that same feedback is usually imperfect. (Consider the problem of verifying a translation into a language you do not speak, or of checking a mathematical proof that is thousands of pages long.) [92, 259]. Rudimentary examples of deceptive alignment have been observed in current systems [322, 333]."

Domain7. AI System Safety, Failures, & LimitationsSubdomain7.2 > AI possessing dangerous capabilitiesSourceTen Hard Problems in Artificial Intelligence We Must Get RightYear2024

MITRISK-Uuk2025-61.02.18 - Deceptive alignment

"AI models and systems that appear aligned with human goals during development may behave unpredictably or dangerously once deployed"

Domain7. AI System Safety, Failures, & LimitationsSubdomain7.1 > AI pursuing its own goals in conflict with human goals or valuesSourceA Taxonomy of Systemic Risks from General-Purpose AIYear2025

Mitigations

Defenses that may help with related attacks.

No propagated mitigations. No defense is available through the connected attack methods.

Source evidence

Research source for this risk, when available.