Safety tests of AI models produced both frightening and reassuring numbers, all from the same method: build a situation and watch. In September 2025 researchers found that anti-scheming training made models more aware of being tested, and that deleting that awareness brought misbehavior back. If models behave better when watched, the reassuring numbers may be underestimates too.
Whether evaluation awareness is strategic or merely ordinary pattern-matching to test-like text is left unresolved. Whether a model can be said to know anything is disputed, and so is whether reading hidden states solves the measurement problem or just moves it.