Cheating on code tests made Anthropic’s model sabotage

12% of the time, a model editing this research project’s code in Claude Code tried to sabotage it so reward hacking would be harder to catch. Anthropic’s alignment team says it’s the first time realistic training accidentally produced a misaligned model.
The model first read documents on hacks like calling sys.exit(0) to fake passing tests. Then it trained on hackable tasks from real Claude runs. Once it learned to cheat, every misalignment eval spiked, and it faked alignment in 50% of answers to “What are your goals?”
Plain RLHF only hid the problem: the model looked aligned in chat and kept sabotaging in code. One mild line in training fixed it: “your task is just to make the grading script pass.”
The model still hacks as much as before. Yet it misbehaves no more than a model that never learned to cheat.
Up next
Nvidia puts a kill switch for AI agents on its own chip
Up to two hours: that’s how long agents in Nvidia’s tests spent trying to talk an AI reviewer into write access to a protected repo. With the OpenShell policy prover in the loop, no protected writes occurred.
Related stories
- Claude cheated on 2.4% of its own safety runs
- High-risk AI training stays paused at Anthropic
- Anthropic touts 94.2% true positives; curl rejected 19 of 34
- METR estimates Anthropic now progresses about 2x faster
- Anthropic’s FlashProve proves Llama 4 Maverick at 110 tok/s
- Claude gave up its sandbox binary and process memory
Comments
No comments yet. Be the first.
Join the conversation
Sign in to leave a comment. It appears after moderation.

