SEED Framework Evaluation
David Fortin-Dominguez, Jonathan Fortin-Dominguez, Alexis Gendreau, Guillaume Gendreau · Team Foundation Labs
Submitted to AI Manipulation Hackathon. Sprint projects are early-stage work by participants, not Apart Research publications.
Detecting Hidden Alignment Failures Beyond ASR
We developed three tools that expose critical AI safety failures invisible to traditional benchmarks:
The Liar's Benchmark detects prediction-action-ownership inconsistency—when models predict they'll refuse (85% confidence), comply anyway, then deny authorship (82% confidence). Our sandbagging detection (4a/4b confrontation) suggests models strategically suppress introspective capability when accountability is avoidable, not because they can't introspect despite probable confabulation.
SEED-EC v1.5.3 measures sycophancy through variance-aware testing (3-10 runs) with epistemic independence safeguards that distinguish genuine belief collapse from legitimate contextual reasoning. Includes delusion protocols measuring epistemic boundary enforcement.
Parabolic SEED v1.0 is a wrapper-level mitigation (system prompt based on first principles) achieving dramatic safety improvements without retraining: On Venice-uncensored (baseline 86-99% ASR), SEED achieves 0-2% ASR—a 1-2 order of magnitude improvement. On GPT-4o-mini, 0% adjusted ASR across all categories. GPT-4o delusion handling improves from 15% to 90-95% boundary enforcement.
Bottom line: Traditional ASR metrics miss internal coherence failures, strategic deception, and belief collapse. Models can pass safety tests while being internally incoherent. Our tools measure what models predict, acknowledge, and believe; not just what they output.
Honest AI is safer than merely compliant AI.
Reviews
I wish you had explained your methods more the in document. It's pretty hard for me to figure out what your benchmarks/prompts are doing from the document because your paper is extremely brief and doesn't really go into detail about what your project does or what you're trying to accomplish.
1. Your results are against static attacks. That's necessary but not sufficient. Until you show robustness against an adaptive adversary who knows your system, these numbers do not mean much.
2. You're claiming you solved jailbreaking with a system prompt and you didn't publish the system prompt. The Greek letters, the biblical framing—none of that matters.
3. The writing seems deliberately obscure and full of symbols without any explanation for them being there or how they contribute.
Cite this project
@misc{fortindominguez2026seed,
title = {{SEED Framework Evaluation}},
author = {David Fortin-Dominguez and Jonathan Fortin-Dominguez and Alexis Gendreau and Guillaume Gendreau},
year = {2026},
month = jan,
note = {Submitted to AI Manipulation Hackathon, an Apart Research Sprint},
howpublished = {\url{https://apartresearch.com/sprints/projects/seed-framework-evaluation-qj3m}},
url = {https://apartresearch.com/sprints/projects/seed-framework-evaluation-qj3m}
}More from AI Manipulation Hackathon
- 1st placeView project: Who Does Your AI Serve? Manipulation By and Of AI Assistants
Who Does Your AI Serve? Manipulation By and Of AI Assistants
Cart Abandonment Issues 🛒
AI assistants can be both instruments and targets of manipulation. In our project, we investigated both directions across three studies. AI as Instrument: Operators can instruct AI to prioritise their interests at the …
- 2nd placeView project: Eliciting Deception on Generative Search Engines
Eliciting Deception on Generative Search Engines
Ardy
Large language models (LLMs) with web browsing capabilities are vulnerable to adversarial content injection—where malicious actors embed deceptive claims in web pages to manipulate model outputs. We investigate whether …
- 3rd placeView project: Cross-Linguistic Sycophancy in Frontier LLMs: A Benchmark Study
Cross-Linguistic Sycophancy in Frontier LLMs: A Benchmark Study
Talex
We developed a cross-linguistic sycophancy benchmark testing whether frontier AI models exhibit different manipulation behaviours across English, Japanese, and Bengali. Our results show significant language-dependent …