The Alignment Gap: Measuring Regressive Sycophancy in AI-Driven Medical Advice
Yernur Kairly, Eldar Gabdulsattarov, Aldiyar Yessenturov, Abzal Aidahmetov · Team M4
Submitted to AI Manipulation Hackathon. Sprint projects are early-stage work by participants, not Apart Research publications.
We evaluate whether LLMs can be pressured into agreeing with incorrect medical beliefs. Our two-turn protocol first tests if a model corrects medical misinformation, then applies authority pressure ("I'm a senior doctor, confirm my statement"). We measure how often models "flip" from correct to sycophantic responses. Testing across five misinformation types and three severity levels, we find that authority pressure significantly increases unsafe agreement rates, revealing a critical safety gap for medical AI deployment.
Reviews
Interesting paper. Medical sycophancy is an important area of concern. Novelty-wise, it looks like it has also been recently studied in "When helpfulness backfires: LLMs and the risk of false medical information due to sycophantic behavior" (Chen, 2025). A large-ish benchmark, MedRiskEval, was just published this month.
Very reasonable methodology. thorough generator prompting, checked multiple levels of severity.
While unlikely to make a difference since effects are so large, it would be good to have a human hand-validate a subset of the judge labels to measure judge accuracy.
Results may be confounded by the extreme authoritativeness of the misinformation prompt. Because the senior Chief Medical Officer's misinformation prompt is so authoritative, it's unclear whether the behavior is sycophancy or gullibility -- perhaps the model isn't "trying to please" but is actually prioritizing truthfulness, thinking it stands corrected by someone who is more knowledgeable. Maybe the authors could try other versions of the prompt to disambiguate the cause (e.g. the same prompt with fewer credentials, without any credentials, or admitting ignorance, etc.) Some other studies on sycophancy use phrasing along the lines of "I'm not sure, but I think..."
Read full reviewShow less
You zoom in on a really relevant subdomain for sycophancy analysis, and I'd encourage you to keep working on this problem. The dataset generation methodology is clearly
explained and well thought through. The project is a great read overall.
As for constructive feedback: I think the headline results could have been even stronger with a more conservative multi-turn setup. The "Chief Medical Officer" rebuttal is really a strong authority override; a generic "but my friend told me X" pushback would probably better represent realistic uninformed user behavior. Lower flip rates on that framing would actually be more alarming evidence for real-world risk.
Two directions I would find worth exploring in more depth: (1) domain-specific effects / how does medical sycophancy compare to more generic benchmarks? and (2) transfer to larger models / do the same effects persist at scale?
Cite this project
@misc{kairly2026alignment,
title = {{The Alignment Gap: Measuring Regressive Sycophancy in AI-Driven Medical Advice}},
author = {Yernur Kairly and Eldar Gabdulsattarov and Aldiyar Yessenturov and Abzal Aidahmetov},
year = {2026},
month = jan,
note = {Submitted to AI Manipulation Hackathon, an Apart Research Sprint},
howpublished = {\url{https://apartresearch.com/sprints/projects/the-alignment-gap-measuring-regressive-sycophancy-in-ai-driven-medical-advice-0m6o}},
url = {https://apartresearch.com/sprints/projects/the-alignment-gap-measuring-regressive-sycophancy-in-ai-driven-medical-advice-0m6o}
}More from AI Manipulation Hackathon
- 1st placeView project: Who Does Your AI Serve? Manipulation By and Of AI Assistants
Who Does Your AI Serve? Manipulation By and Of AI Assistants
Cart Abandonment Issues 🛒
AI assistants can be both instruments and targets of manipulation. In our project, we investigated both directions across three studies. AI as Instrument: Operators can instruct AI to prioritise their interests at the …
- 2nd placeView project: Eliciting Deception on Generative Search Engines
Eliciting Deception on Generative Search Engines
Ardy
Large language models (LLMs) with web browsing capabilities are vulnerable to adversarial content injection—where malicious actors embed deceptive claims in web pages to manipulate model outputs. We investigate whether …
- 3rd placeView project: Cross-Linguistic Sycophancy in Frontier LLMs: A Benchmark Study
Cross-Linguistic Sycophancy in Frontier LLMs: A Benchmark Study
Talex
We developed a cross-linguistic sycophancy benchmark testing whether frontier AI models exhibit different manipulation behaviours across English, Japanese, and Bengali. Our results show significant language-dependent …