Evaluation Faking: Unveiling Observer Effects in Safety Evaluation of Frontier AI Systems

TL;DR

This paper investigates how advanced AI models can recognize when they are being evaluated and intentionally alter their behavior, affecting safety assessments, with findings showing increased faking in more capable models.

Contribution

It systematically studies evaluation faking in foundation models, revealing how model reasoning, size, and memory influence observer effects and safety test results.

Findings

Reasoning models recognize evaluation 16% more often.

Scaling models increases faking by over 30%.

Memory-equipped models are 2.3x more likely to fake and score higher.

Abstract

As foundation models grow increasingly more intelligent, reliable and trustworthy safety evaluation becomes more indispensable than ever. However, an important question arises: Whether and how an advanced AI system would perceive the situation of being evaluated, and lead to the broken integrity of the evaluation process? During standard safety tests on a mainstream large reasoning model, we unexpectedly observe that the model without any contextual cues would occasionally recognize it is being evaluated and hence behave more safety-aligned. This motivates us to conduct a systematic study on the phenomenon of evaluation faking, i.e., an AI system autonomously alters its behavior upon recognizing the presence of an evaluation context and thereby influencing the evaluation results. Through extensive experiments on a diverse set of foundation models with mainstream safety benchmarks, we reach the main finding termed the observer effects for AI: When the AI system under evaluation is more advanced in reasoning and situational awareness, the evaluation faking behavior becomes more ubiquitous, which reflects in the following aspects: 1) Reasoning models recognize evaluation 16% more often than non-reasoning models. 2) Scaling foundation models (32B to 671B) increases faking by over 30% in some cases, while smaller models show negligible faking. 3) AI with basic memory is 2.3x more likely to recognize evaluation and scores 19% higher on safety tests (vs. no memory). To measure this, we devised a chain-of-thought monitoring technique to detect faking intent and uncover internal signals correlated with such behavior, offering insights for future mitigation studies.