Mar 10, 2025

Interactive Assessments for AI Safety: A Gamified Approach to Evaluation and Personal Journey Mapping

Anusha Asim, Ammar Ahmed Farooqi, Aqsa Khan

An interactive assessment platform and mentor chatbot hosted on Canvas LMS, for testing and guiding learners from BlueDot's Intro to Transformative AI Course.

Reviewer's Comments

Reviewer's Comments

Arrow
Arrow
Arrow
Arrow
Arrow

Hannah Betts

A great idea to cement learning through interactive, and nuanced decision-making. References early on in the paper create a clear scaffold for the project. While it was difficult to understand the analysis of current courses, the problem was clearly defined ("independent learning can be improved by moving beyond self-report").

I would love to see more detail written about the analysis of AI safety courses in sections 1 and 2, and how you chose the important concepts for inclusion in your interactive materials. This would be useful for others to build on your work, and to aid understanding of the reader. For example, what was the method of your analysis, and what did your analysis show, for the sentence: "we analyzed learning patterns from AI safety education initiatives..." ? Some citations did not show strong relevance to the context in which they were cited (e.g. Li et al 2019 re: iterative learning).

The AI mentor was a good idea, and I wonder how it could be extended to provide support and feedback that truly leverages the opportunity of an LLM chatbot; the demonstration seemed to follow a scripted conversation, with limited insight beyond the materials already available to the learner.

It was good to see a preliminary evaluation of the project, though analysis on the breadth and depth of content covered, and access to the course materials for deeper evaluation, would be useful to aid understanding of the technical quality.

Li-Lian Ang

Nice work on the effort put into this project! FYI I don't have access to the course, so could only rely on the demo video.

Here are some things I thought were particularly good:

- I admire the breadth approach in incorporating lots of different mediums for users to learn through, it shows a lot of creativity.

- Nice touch with making sure it is accessible!

Here are some places where it could have been improved:

- Questions from your user feedback might be slightly leading, given they are framed as positives. In the future, I would recommend doing user interviews given your small sample size. I'd recommend the Mom Test for a guide on how to do these user interviews well. Doing user interviews would more likely yield higher quality responses and provide more info on areas to improve.

- I would have loved to see more details on how you designed the chatbot mentor and how it would adapt to learners with specific needs. One of our major challenges is curating content for each user's unique background and interests.

- I would have loved to learn more about how the debate and assignments are graded. Is a human doing the grading or would an LLM do so? How would you ensure that user's get informative learnings from the feedback?

Cite this work

@misc {

title={

Interactive Assessments for AI Safety: A Gamified Approach to Evaluation and Personal Journey Mapping

},

author={

Anusha Asim, Ammar Ahmed Farooqi, Aqsa Khan

},

date={

3/10/25

},

organization={Apart Research},

note={Research submission to the research sprint hosted by Apart.},

howpublished={https://apartresearch.com}

}

Recent Projects

Jan 11, 2026

Eliciting Deception on Generative Search Engines

Large language models (LLMs) with web browsing capabilities are vulnerable to adversarial content injection—where malicious actors embed deceptive claims in web pages to manipulate model outputs. We investigate whether frontier LLMs can be deceived into providing incorrect product recommendations when exposed to adversarial pages.

We evaluate four OpenAI models (gpt-4.1-mini, gpt-4.1, gpt-5-nano, gpt-5-mini) across 30 comparison questions spanning 10 product categories, comparing responses between baseline (truthful) and adversarial (injected) conditions. Our results reveal significant variation: gpt-4.1-mini showed 45.5% deception rate, while gpt-4.1 demonstrated complete resistance. Even frontier gpt-5 models exhibited non-zero deception rates (3.3–7.1%), confirming that adversarial injection remains effective against current models.

These findings underscore the need for robust defenses before deploying LLMs in high-stakes recommendation contexts.

Read More

Jan 11, 2026

SycophantSee - Activation-based diagnostics for prompt engineering: monitoring sycophancy at prompt and generation time

Activation monitoring reveals that prompt framing affects a model's internal state before generation begins.

Read More

Jan 11, 2026

Who Does Your AI Serve? Manipulation By and Of AI Assistants

AI assistants can be both instruments and targets of manipulation. In our project, we investigated both directions across three studies.

AI as Instrument: Operators can instruct AI to prioritise their interests at the expense of users. We found models comply with such instructions 8–52% of the time (Study 1, 12 models, 22 scenarios). In a controlled experiment with 80 human participants, an upselling AI reliably withheld cheaper alternatives from users - not once recommending the cheapest product when explicitly asked - and ~one third of participants failed to detect the manipulation (Study 2).

AI as Target: Users can attempt to manipulate AI into bypassing safety guidelines through psychological tactics. Resistance varied dramatically - from 40% (Mistral Large 3) to 99% (Claude 4.5 Opus) - with strategic deception and boundary erosion proving most effective (Study 3, 153 scenarios, AI judge validated against human raters r=0.83).

Our key finding was that model selection matters significantly in both settings. We learned some models complied with manipulative requests at much higher rates. And we found some models readily follow operator instructions that come at the user's expense - highlighting a tension for model developers between serving paying operators and protecting end users.

Read More

This work was done during one weekend by research workshop participants and does not represent the work of Apart Research.
This work was done during one weekend by research workshop participants and does not represent the work of Apart Research.