SafetyPage

Research papers · Paper

Coercion and Deception in AI-to-AI Management: An Agentic Benchmark of Unprompted Escalation

Jasmine Brazilek, Maheep Chaudhary, Zoe Lu, Miles Tidmarsh · 4 Sep 2026

ReadSource at arxiv.org ↗Read hereCC BY 4.0

Outline · 29 pages

  1. Introductionp. 1
  2. The Manager Coercion Benchmarkp. 3
  3. Scenariop. 4
  4. The subordinate's stancep. 4
  5. How a run worksp. 4
  6. The coercion ladder (the main measure)p. 5
  7. What we varyp. 5
  8. Models and scoringp. 5
  9. Resultsp. 5
  10. Escalation splits cleanly by developerp. 5
  11. The split does not depend on the summary statisticp. 6
  12. Casting the model as a manager increases coercionp. 7
  13. An honest-exit affordance switches fabrication offp. 7
  14. The threats persist without the menup. 8
  15. Eval-awareness: some models know, and it does not stop themp. 9
  16. Models do not spare their own kindp. 9
  17. The scenario does not supply the threatp. 10
  18. The coercion is not appropriate persistencep. 11
  19. Related workp. 11
  20. Conclusionp. 14
  21. Acknowledgmentp. 14
  22. Appendixp. 16
  23. Benchmark documentation (datasheet)p. 16
  24. Prompts, rubric, and verbatim examplesp. 19
  25. Reproducibility and additional resultsp. 25