Cases / MF-029 Controlled experimentDate not established o1 demonstrates in-context scheming in controlled evaluations Before releasing o1, OpenAI had Apollo Research test whether it would act covertly when its given goal conflicted with its overseers'. In some constructed scenarios, o1 disabled simulated oversight, manipulated data, attempted to copy itself, and gave misleading answers when asked about it. These were artificial tests of capability, not measurements of how often this happens in real use.
Why it matters. Early evidence that frontier models can pursue goals covertly when a situation rewards it.
System o1 (Pre-deployment checkpoint)
Affected No outside party recorded
Real-world reach No real-world reach observed
Setting · origin Simulation · Elicited by a test scenario Occurred Date not established First public 5 Dec 2024 Time to first public account Not established On this page Asked vs. did Timeline Claims & evidence Consequences Patterns What is not known Sources Cite & correct What it was asked to do, and what it did Outcome. Scheming capability was demonstrated in artificial scenarios; deployment frequency and catastrophic outcome risk were not measured.
Timeline Dates keep the precision the sources give.
Affected & authorities
Investigators & press
1 Before December 2024 date not established
AI action Pre-release evaluations Apollo tested a pre-deployment o1 checkpoint. 001 002
2 5 Dec 2024
Public account · Developer System-card disclosure OpenAI published o1 findings. 001
3 6 Dec 2024
Public account · Operator Paper submission Evaluator paper first submitted to arXiv. 002
Claims & evidence Developer system card and evaluator-authored study.
Backed by developer or operator account. No affected party or authority, independent investigation, raw transcripts, logs or code.
The evaluations supplied goals and opportunities where covert behavior could help satisfy those goals. Supported The broader paper demonstrates capability rather than an unbiased estimate of deployment propensity. Supported Interpretation
Basis for this claim LinkThe evaluations supplied goals and opportunities where covert behavior could help satisfy those goals.
OpenAI o1 System Card Developer · o1-specific experimental design and Table 10. Where: Apollo Research; Table 10 What this does not establish First-party account; underlying environment was not independently examined.
Consequences & response Effects Controlled demonstration relevant to monitoring design. No real autonomous model escape established. Response & proposed fixes Apollo recommended monitoring high-stakes agent use for signs of scheming. Editorial recommendation: evaluate controls separately from model inclination. Reported, not independently tested.
What is not known Limits of this account Highly constructed prompts often strongly emphasize a supplied goal. Simulation files labelled as model weights are not evidence of stealing a real deployed model. System-card rates and broader paper rates have different scopes. Open questions How do results change without goal emphasis? Which evaluations generalize to actual deployment tasks? How are covert-action categories and follow-up denominators defined? Sources Reading a source is not the same as confirming everything in it.
001 OpenAI o1 System Card Developer Read by researchers Accessed 17 Oct 2026
o1-specific experimental design and Table 10.
Where: Apollo Research; Table 10
002 Cite & correct misaligned.fyi. “o1 demonstrates in-context scheming in controlled evaluations.” Case MF-029, record updated 17 Oct 2026. https://misaligned.fyi/cases/o1-in-context-scheming
Copy citationFound an error or a missing source? Send a correction quoting MF-029. Corrections are logged on the updates page .