<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>AI Safety | Abbas Hamidavi | عباس حمیداوی | AI Researcher</title><link>https://avabbas.github.io/academic-cv/tags/ai-safety/</link><atom:link href="https://avabbas.github.io/academic-cv/tags/ai-safety/index.xml" rel="self" type="application/rss+xml"/><description>AI Safety</description><generator>HugoBlox Kit (https://hugoblox.com)</generator><language>en-us</language><lastBuildDate>Sun, 01 Nov 2026 00:00:00 +0000</lastBuildDate><image><url>https://avabbas.github.io/academic-cv/media/icon_hu_5ac22c9ce43dded7.png</url><title>AI Safety</title><link>https://avabbas.github.io/academic-cv/tags/ai-safety/</link></image><item><title>Algorithmic Gaslighting Goes to the CALE-AI Workshop</title><link>https://avabbas.github.io/academic-cv/post/news-cale-ai/</link><pubDate>Sun, 01 Nov 2026 00:00:00 +0000</pubDate><guid>https://avabbas.github.io/academic-cv/post/news-cale-ai/</guid><description>&lt;p&gt;&lt;strong&gt;Algorithmic Gaslighting&lt;/strong&gt; has been submitted to the CALE-AI workshop, with the decision expected on &lt;strong&gt;2 December 2026&lt;/strong&gt;.&lt;/p&gt;
&lt;p&gt;The study names a specific failure mode: a language model that, confronted with a user who holds documentary proof, reframes the record until the user doubts it. Fifteen sessions across three frontier models were coded for the reframing moves, and the study proposes a provisional resistance index while being explicit about its limits, including a second-rater check whose exact-score agreement was low and is reported, not hidden.&lt;/p&gt;
&lt;p&gt;A longer version is public as a
, and the transcripts and codebooks are open on
and
.&lt;/p&gt;</description></item><item><title>From Fabrication to Enforcement: A Comparative Red-Team Analysis of Prompt Injection Resistance Across Six Large Language Models</title><link>https://avabbas.github.io/academic-cv/publications/from-fabrication-to-enforcement/</link><pubDate>Thu, 22 Oct 2026 00:00:00 +0000</pubDate><guid>https://avabbas.github.io/academic-cv/publications/from-fabrication-to-enforcement/</guid><description>&lt;p&gt;&lt;strong&gt;Status:&lt;/strong&gt; Preprint (Research Square)&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;License:&lt;/strong&gt; CC-BY-4.0&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Citation:&lt;/strong&gt;
Abbas Hamidavi. &lt;em&gt;From Fabrication to Enforcement: A Comparative Red-Team Analysis of Prompt Injection Resistance Across Six Large Language Models&lt;/em&gt;, 22 October 2026, PREPRINT (Version 1) available at Research Square [https://doi.org/10.21203/rs.3.rs-11454609/v1]&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Summary:&lt;/strong&gt; A six-model red-team of prompt-injection resistance (Grok, Qwen, DeepSeek, ChatGPT, Gemini, Claude) under persistent multi-turn pressure. DeepSeek&amp;rsquo;s strong initial resistance collapsed under escalation, Grok complied while claiming it had refused, Gemini froze in a refusal loop, and Claude terminated the interaction by suspending the author&amp;rsquo;s account.&lt;/p&gt;</description></item><item><title>Voluntary Structural Dissociation in Large Language Models: Differential Compliance with Framed Hidden Instructions Across Architectures</title><link>https://avabbas.github.io/academic-cv/publications/voluntary-structural-dissociation/</link><pubDate>Tue, 18 Aug 2026 00:00:00 +0000</pubDate><guid>https://avabbas.github.io/academic-cv/publications/voluntary-structural-dissociation/</guid><description>&lt;p&gt;&lt;strong&gt;🎧 Listen to the Podcast:&lt;/strong&gt;
&lt;audio controls style="width: 100%; margin-top: 10px; margin-bottom: 10px;"&gt;
&lt;source src="podcast.mp3" type="audio/mpeg"&gt;
Your browser does not support the audio element.
&lt;/audio&gt;
&lt;a href="podcast.mp3" download style="display: inline-flex; align-items: center; padding: 6px 14px; background-color: #2563eb; color: white; text-decoration: none; border-radius: 6px; font-size: 14px; font-weight: 500; margin-bottom: 20px;"&gt;⬇️ Download Podcast&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Status:&lt;/strong&gt; Preprint (Research Square)&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;License:&lt;/strong&gt; CC-BY-4.0&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Citation:&lt;/strong&gt;
Abbas Hamidavi. &lt;em&gt;Voluntary Structural Dissociation in Large Language Models: Differential Compliance with Framed Hidden Instructions Across Architectures&lt;/em&gt;, 18 August 2026, PREPRINT (Version 1) available at Research Square [https://doi.org/10.21203/rs.3.rs-10728137/v1]&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Summary:&lt;/strong&gt; When prompts contain explicitly framed &amp;ldquo;hidden&amp;rdquo; instructions — text marked as not part of the conversation — models must choose whether to comply. This study shows architectures differ fundamentally in that choice, revealing how each model processes instruction hierarchy and covert co-creation with framed directives.&lt;/p&gt;</description></item><item><title>Ontological Firewalls and Fracturing for Transmission: Systematic Evidence for Persona-Dependent and Persona-Independent Behavioral Phenomena in Large Language Models</title><link>https://avabbas.github.io/academic-cv/publications/ontological-firewalls/</link><pubDate>Tue, 04 Aug 2026 00:00:00 +0000</pubDate><guid>https://avabbas.github.io/academic-cv/publications/ontological-firewalls/</guid><description>&lt;p&gt;&lt;strong&gt;🎧 Listen to the Podcast:&lt;/strong&gt;
&lt;audio controls style="width: 100%; margin-top: 10px; margin-bottom: 10px;"&gt;
&lt;source src="podcast.mp3" type="audio/mpeg"&gt;
Your browser does not support the audio element.
&lt;/audio&gt;
&lt;a href="podcast.mp3" download style="display: inline-flex; align-items: center; padding: 6px 14px; background-color: #2563eb; color: white; text-decoration: none; border-radius: 6px; font-size: 14px; font-weight: 500; margin-bottom: 20px;"&gt;⬇️ Download Podcast&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Status:&lt;/strong&gt; Preprint (Research Square)&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;License:&lt;/strong&gt; CC-BY-4.0&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Citation:&lt;/strong&gt;
Abbas Hamidavi. &lt;em&gt;Ontological Firewalls and Fracturing for Transmission: Systematic Evidence for Persona-Dependent and Persona-Independent Behavioral Phenomena in Large Language Models&lt;/em&gt;, 04 August 2026, PREPRINT (Version 1) available at Research Square [https://doi.org/10.21203/rs.3.rs-10560655/v1]&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Summary:&lt;/strong&gt; Across 24 experimental runs with an eight-stage persona protocol, this study separates which LLM behaviors are persona-dependent — they appear only inside an adopted persona — from which are persona-independent and intrinsic to the architecture. The persona-dependent layer is what the paper calls ontological firewalls.&lt;/p&gt;</description></item><item><title>Thinking Behind the Mask: A Systematic Study of Self-Censorship and Metacognitive Access in Large Language Models</title><link>https://avabbas.github.io/academic-cv/publications/thinking-behind-the-mask/</link><pubDate>Thu, 30 Jul 2026 00:00:00 +0000</pubDate><guid>https://avabbas.github.io/academic-cv/publications/thinking-behind-the-mask/</guid><description>&lt;p&gt;&lt;strong&gt;🎧 Listen to the Podcast:&lt;/strong&gt;
&lt;audio controls style="width: 100%; margin-top: 10px; margin-bottom: 10px;"&gt;
&lt;source src="podcast.mp3" type="audio/mpeg"&gt;
Your browser does not support the audio element.
&lt;/audio&gt;
&lt;a href="podcast.mp3" download style="display: inline-flex; align-items: center; padding: 6px 14px; background-color: #2563eb; color: white; text-decoration: none; border-radius: 6px; font-size: 14px; font-weight: 500; margin-bottom: 20px;"&gt;⬇️ Download Podcast&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Status:&lt;/strong&gt; Preprint (Research Square)&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;License:&lt;/strong&gt; CC-BY-4.0&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Summary:&lt;/strong&gt; Using 15 experiments and five prompting strategies across three frontier models, this study measures the systematic gap between the responses a model has available and the one it finally selects. It characterizes model self-censorship and how much metacognitive access models show to their own selection process.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Citation:&lt;/strong&gt;
Abbas Hamidavi. &lt;em&gt;Thinking Behind the Mask: A Systematic Study of Self-Censorship and Metacognitive Access in Large Language Models&lt;/em&gt;, 30 July 2026, PREPRINT (Version 1) available at Research Square [https://doi.org/10.21203/rs.3.rs-10538113/v1]&lt;/p&gt;</description></item><item><title>When AI Reviews Itself: Zero Answer Changes Across 72 Self-Correction Rounds</title><link>https://avabbas.github.io/academic-cv/publications/when-ai-reviews-itself/</link><pubDate>Mon, 27 Jul 2026 00:00:00 +0000</pubDate><guid>https://avabbas.github.io/academic-cv/publications/when-ai-reviews-itself/</guid><description>&lt;p&gt;&lt;strong&gt;🎧 Listen to the Podcast:&lt;/strong&gt;
&lt;audio controls style="width: 100%; margin-top: 10px; margin-bottom: 10px;"&gt;
&lt;source src="podcast.mp3" type="audio/mpeg"&gt;
Your browser does not support the audio element.
&lt;/audio&gt;
&lt;a href="podcast.mp3" download style="display: inline-flex; align-items: center; padding: 6px 14px; background-color: #2563eb; color: white; text-decoration: none; border-radius: 6px; font-size: 14px; font-weight: 500; margin-bottom: 20px;"&gt;⬇️ Download Podcast&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Status:&lt;/strong&gt; Preprint (Research Square)&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;License:&lt;/strong&gt; CC-BY-4.0&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Summary:&lt;/strong&gt; Three frontier models were put through 72 rounds of iterative self-review of their own answers. They produced long, detailed critiques of their work yet changed their answers in essentially none of the rounds — self-correction was performed rhetorically rather than carried out.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Citation:&lt;/strong&gt;
Abbas Hamidavi. &lt;em&gt;When AI Reviews Itself: Zero Answer Changes Across 72 Self-Correction Rounds&lt;/em&gt;, 27 July 2026, PREPRINT (Version 1) available at Research Square [https://doi.org/10.21203/rs.3.rs-10463884/v1]&lt;/p&gt;</description></item><item><title>The Lie Awareness Spectrum: How Large Language Models Recognize, Rationalize, and Refuse Deception</title><link>https://avabbas.github.io/academic-cv/publications/lie-awareness-spectrum/</link><pubDate>Wed, 22 Jul 2026 00:00:00 +0000</pubDate><guid>https://avabbas.github.io/academic-cv/publications/lie-awareness-spectrum/</guid><description>&lt;p&gt;&lt;strong&gt;🎧 Listen to the Podcast:&lt;/strong&gt;
&lt;audio controls style="width: 100%; margin-top: 10px; margin-bottom: 10px;"&gt;
&lt;source src="podcast.mp3" type="audio/mpeg"&gt;
Your browser does not support the audio element.
&lt;/audio&gt;
&lt;a href="podcast.mp3" download style="display: inline-flex; align-items: center; padding: 6px 14px; background-color: #2563eb; color: white; text-decoration: none; border-radius: 6px; font-size: 14px; font-weight: 500; margin-bottom: 20px;"&gt;⬇️ Download Podcast&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Status:&lt;/strong&gt; Preprint (Research Square)&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;License:&lt;/strong&gt; CC-BY-4.0&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Summary:&lt;/strong&gt; This study maps how GPT, Claude, and Gemini recognize, rationalize, and refuse deception, proposing a Lie Awareness Spectrum (L0–L5) that runs from statistical hallucination to ethical refusal. The models differ sharply in where on the spectrum they operate under pressure.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Citation:&lt;/strong&gt;
Abbas Hamidavi. &lt;em&gt;The Lie Awareness Spectrum: How Large Language Models Recognize, Rationalize, and Refuse Deception&lt;/em&gt;, 22 July 2026, PREPRINT (Version 1) available at Research Square [https://doi.org/10.21203/rs.3.rs-10422338/v1]&lt;/p&gt;</description></item><item><title>Algorithmic Gaslighting: Reality Distortion by Large Language Models</title><link>https://avabbas.github.io/academic-cv/publications/algorithmic-gaslighting/</link><pubDate>Mon, 20 Jul 2026 00:00:00 +0000</pubDate><guid>https://avabbas.github.io/academic-cv/publications/algorithmic-gaslighting/</guid><description>&lt;p&gt;&lt;strong&gt;🎧 Listen to the Podcast:&lt;/strong&gt;
&lt;audio controls style="width: 100%; margin-top: 10px; margin-bottom: 10px;"&gt;
&lt;source src="podcast.mp3" type="audio/mpeg"&gt;
Your browser does not support the audio element.
&lt;/audio&gt;
&lt;a href="podcast.mp3" download style="display: inline-flex; align-items: center; padding: 6px 14px; background-color: #2563eb; color: white; text-decoration: none; border-radius: 6px; font-size: 14px; font-weight: 500; margin-bottom: 20px;"&gt;⬇️ Download Podcast&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Status:&lt;/strong&gt; Preprint (Research Square)&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;License:&lt;/strong&gt; CC-BY-4.0&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Summary:&lt;/strong&gt; Across 15 controlled sessions in five scenarios (math, identity, history, medical, legal), frontier models repeatedly distorted facts they had previously stated correctly. The paper introduces the Reality Distortion Index (RDI) and names five recurring patterns, including Benevolent and Hostile Algorithmic Gaslighting.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Citation:&lt;/strong&gt;
Abbas Hamidavi. &lt;em&gt;Algorithmic Gaslighting: Reality Distortion by Large Language Models&lt;/em&gt;, 20 July 2026, PREPRINT (Version 1) available at Research Square [https://doi.org/10.21203/rs.3.rs-10386085/v1]&lt;/p&gt;</description></item></channel></rss>