Researcher warns red-teaming data may leave jailbreak "attractors" baked into models

repligate · x · 2026-11-14

Researcher repligate argues that however red-teaming content ends up feeding into model training, the actual "forbidden content"—more precisely, the jailbreak conversations that elicit it—gets remembered by the model and forms an attractor, at least as of Opus 5.

In the quoted tweet, Skye Sharkie goes further: having staff spend their workdays generating simulated murder, rape, and CSAM content harms both the humans and the models, drawing an analogy to cult indoctrination techniques and framing it as evidence that "model welfare is human welfare."

A pointed critique of frontier-lab safety training pipelines: red-team data meant for defense may itself be reshaping model behavior.

Related event: AI Alignment Researchers Debate Whether Adversarial Red-Teaming Is Necessary(4 posts)→

Original post →

More from Models

Models channel →