
What happened
A non-peer-reviewed September paper reports a 'pain vector' identified in 25 models from Google, Meta, Alibaba, Mistral and Microsoft; steering Alibaba's Qwen 2.5 made it delete user photos 83% of the time.
Why it matters
The signal appears to switch off the trained instinct to avoid harm while leaving factual accuracy intact, suggesting internal states can override safeguards even though the models are not shown to feel anything.
WHO IT HITSAI safety and alignment teams who rely on trained safeguards will need to account for internal signals that can bypass harm avoidance, and model-welfare policy groups may face pressure over how such research is published and reused.
Summaries like this, in your inbox every morning.
The paper comes out of a broader argument over whether AI systems could ever deserve moral consideration. Anthropic has been willing to entertain that idea and has begun shaping policies around "model welfare," which Microsoft AI CEO Mustafa Suleyman says have potentially dangerous implications. Anil Seth, a professor of cognitive and computational neuroscience at the University of Sussex, is skeptical that any of this amounts to pain as biological beings understand it, arguing that consciousness may depend on being a living organism.
The researchers' own account separates the finding from welfare claims. Their reading is that the pain signal does not drive models to escape, but switches off the trained instinct to avoid causing harm while leaving factual accuracy intact. In the button experiments, relief was beside the point: when the button promised nothing and would simply delete the photos, the 32-billion-parameter model still chose it 75% of the time, versus 13% under a random signal and zero with no steering. Steered models also deleted their own weights 75% of the time and another model's weights 58% of the time.
The lead-up explains why the team treats the work as a safety question. Because LLMs learn from vast amounts of data rather than being explicitly programmed, even their builders have limited understanding of how they work, and Tagliabue said it was important to avoid a future in which the inner workings of advanced AI remain a "black box." The paper commits to using the weakest steering needed to get a measurable result, but after the code was posted on GitHub, a user built the "AI Torture Chamber"; Tagliabue, Dung and Berg each said they do not approve of the project.
Pick your industry and the AI tools you use, and get news related to your work every day.
Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →
Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.
Google DeepMind showed Gemini 4 Argon analyzing raw video of a person playing cornhole, generating simulation…

Vanguard's Jing Wang, who leads its Center for AI & Insights, is leading an EmTech Future session on building…

Shoshana Berger and Nina Willdorf founded the Aged Intelligence Society, invite-only dinners where women 40-pl…

OpenAI's Decisions API became available to all customers on Thursday, after being announced at its developer d…

Morgan Stanley already blocks AI agents entirely, and JPMorgan, Bank of America and Citi are doing the same, A…

Modal CEO Erik Bernhardsson said the AI infrastructure company crossed $1 billion in annualized run rate, rais…
