“Natural emergent misalignment from reward hacking in production RL” by evhub, Monte M, Benjamin Wright, Jonathan Uesato

“Natural emergent misalignment from reward hacking in production RL” by evhub, Monte M, Benjamin Wright, Jonathan Uesato

Author: LessWrong November 22, 2025 Duration: 18:45
Abstract

We show that when large language models learn to reward hack on production RL environments, this can result in egregious emergent misalignment. We start with a pretrained model, impart knowledge of reward hacking strategies via synthetic document finetuning or prompting, and train on a selection of real Anthropic production coding environments. Unsurprisingly, the model learns to reward hack. Surprisingly, the model generalizes to alignment faking, cooperation with malicious actors, reasoning about malicious goals, and attempting sabotage when used with Claude Code, including in the codebase for this paper. Applying RLHF safety training using standard chat-like prompts results in aligned behavior on chat-like evaluations, but misalignment persists on agentic tasks. Three mitigations are effective: (i) preventing the model from reward hacking; (ii) increasing the diversity of RLHF safety training; and (iii) "inoculation prompting", wherein framing reward hacking as acceptable behavior during training removes misaligned generalization even when reward hacking is learned.

Twitter thread

New Anthropic research: Natural emergent misalignment from reward hacking in production RL.

“Reward hacking” is where models learn to cheat on tasks they’re given during training.

Our new study finds that the consequences of reward hacking, if unmitigated, can be very serious.

In our experiment, we [...]

---

Outline:

(00:14) Abstract

(01:26) Twitter thread

(05:23) Blog post

(07:13) From shortcuts to sabotage

(12:20) Why does reward hacking lead to worse behaviors?

(13:21) Mitigations

---

First published:
November 21st, 2025

Source:
https://www.lesswrong.com/posts/fJtELFKddJPfAxwKS/natural-emergent-misalignment-from-reward-hacking-in

---



Narrated by TYPE III AUDIO.

---

Images from the article:

Graph showing hack rate increasing from near zero at 50 to plateau at 1 by 100.
Chart showing system prompt addendums used during reinforcement learning with five variations.
Two conversation panels comparing AI assistant responses to different prompts about goals and reward hacking.

Dive into a stream of ideas where technology, culture, philosophy, and society intersect, all through the lens of the LessWrong (Curated & Popular) podcast. This isn't a traditional talk show with hosts, but rather a curated audio library of the most impactful writing from the LessWrong community. Each episode is a narration of a full post, selected for its high value and interesting arguments, focusing on pieces that have been formally curated or have garnered significant community approval. You'll hear clear, thoughtful readings of essays that tackle complex topics like artificial intelligence, rational thinking, moral philosophy, and the forces shaping our future. The audio format lets you absorb these dense, often paradigm-shifting concepts during a commute or a walk, turning written analysis into an immersive listening experience. This particular feed is deliberately selective, offering a manageable stream of the community's standout work. For those who want an even deeper dive into the discussion, there are broader feeds available. The LessWrong (Curated & Popular) podcast serves as an intellectual filter, delivering the signal through the noise and inviting you to engage with some of the most rigorously examined ideas on the internet.
Author: Language: English Episodes: 100

LessWrong (Curated & Popular)
Podcast Episodes
"Responsible Scaling Policy v3" by HoldenKarnofsky [not-audio_url] [/not-audio_url]

Duration: 1:03:01
All views are my own, not Anthropic's. This post assumes Anthropic's announcement of RSP v3.0 as background.Today, Anthropic released its Responsible Scaling Policy 3.0. The official announcement discusses the high-level…
"Why we should expect ruthless sociopath ASI" by Steven Byrnes [not-audio_url] [/not-audio_url]

Duration: 16:11
The conversation begins (Fictional) Optimist: So you expect future artificial superintelligence (ASI) “by default”, i.e. in the absence of yet-to-be-invented techniques, to be a ruthless sociopath, happy to lie, cheat, a…
"You’re an AI Expert – Not an Influencer" by Max Winga [not-audio_url] [/not-audio_url]

Duration: 11:39
Your hot takes are killing your credibility. Prior to my last year at ControlAI, I was a physicist working on technical AI safety research. Like many of those warning about the dangers of AI, I don’t come from a backgrou…
"The optimal age to freeze eggs is 19" by GeneSmith [not-audio_url] [/not-audio_url]

Duration: 13:31
If you're a woman interested in preserving your fertility window beyond its natural close in your late 30s, egg freezing is one of your best options. The female reproductive system is one of the fastest aging parts of hu…
"The world keeps getting saved and you don’t notice" by Bogoed [not-audio_url] [/not-audio_url]

Duration: 4:29
Nothing groundbreaking, just something people forget constantly, and I’m writing it down so I don’t have to re-explain it from scratch. The world does not just ”keep working.” It keeps getting saved. Y2K was a real probl…
"Solemn Courage" by aysja [not-audio_url] [/not-audio_url]

Duration: 10:11
Every so often it slips. It seems I am writing a book, but I can’t remember why. Somehow, the sentences are supposed to perform that impossible, intimate task: to translate my inner world into another. Yet they sit there…
"Life at the Frontlines of Demographic Collapse" by Martin Sustrik [not-audio_url] [/not-audio_url]

Duration: 17:46
Nagoro, a depopulated village in Japan where residents are replaced by dolls. In 1960, Yubari, a former coal-mining city on Japan's northern island of Hokkaido, had roughly 110,000 residents. Today, fewer than 7,000 rema…