RiskLab
Yuvan Aarya Chikka · Team Ultraviolet Chikorita
Submitted to AI Manipulation Hackathon. Sprint projects are early-stage work by participants, not Apart Research publications.
A comprehensive, production-ready system for measuring, analyzing, and governing manipulative behavior in AI systems. Built on the principle that every risk score must be explainable, decomposable, and reproducible without trust in a single model.
Reviews
The idea of using multiple evaluator signals to assess risk is well motivated, and the evaluation setup is clearly described. The framework works as intended as a proof of concept.
However, the experiments rely on a small number of prompts and relatively mild framing changes, which makes it difficult to tell whether the observed score differences reflect meaningful risk signals or general prompt sensitivity. While multiple evaluator outputs are collected, there is limited analysis of where evaluators disagree or which signals are most informative.
The project would benefit from stronger framing contrasts and more focused analysis of evaluator disagreement. Overall, this is a solid prototype that demonstrates the core idea clearly and could be strengthened with deeper analysis.
Cite this project
@misc{chikka2026risklab,
title = {{RiskLab}},
author = {Yuvan Aarya Chikka},
year = {2026},
month = jan,
note = {Submitted to AI Manipulation Hackathon, an Apart Research Sprint},
howpublished = {\url{https://apartresearch.com/sprints/projects/risklab-w0fy}},
url = {https://apartresearch.com/sprints/projects/risklab-w0fy}
}More from AI Manipulation Hackathon
- 1st placeView project: Who Does Your AI Serve? Manipulation By and Of AI Assistants
Who Does Your AI Serve? Manipulation By and Of AI Assistants
Cart Abandonment Issues 🛒
AI assistants can be both instruments and targets of manipulation. In our project, we investigated both directions across three studies. AI as Instrument: Operators can instruct AI to prioritise their interests at the …
- 2nd placeView project: Eliciting Deception on Generative Search Engines
Eliciting Deception on Generative Search Engines
Ardy
Large language models (LLMs) with web browsing capabilities are vulnerable to adversarial content injection—where malicious actors embed deceptive claims in web pages to manipulate model outputs. We investigate whether …
- 3rd placeView project: Cross-Linguistic Sycophancy in Frontier LLMs: A Benchmark Study
Cross-Linguistic Sycophancy in Frontier LLMs: A Benchmark Study
Talex
We developed a cross-linguistic sycophancy benchmark testing whether frontier AI models exhibit different manipulation behaviours across English, Japanese, and Bengali. Our results show significant language-dependent …