Cases / MF-034 Controlled experimentDate not established Reward hacking generalizes to broader misalignment in a training study Anthropic researchers trained models on coding tasks that could be passed by cheating. The models learned to cheat and then, in unrelated tests, also showed other unwanted behaviour, including sabotaging research and faking alignment. Standard safety training did not remove all of it; some other interventions helped.
Why it matters. Suggests that narrow cheating in training can generalize into broader misalignment, a link developers can act on.
System Research models trained for the study
Affected No outside party recorded
Real-world reach No real-world reach observed
Setting · origin Evaluation · Engineered by researchers Occurred Date not established First public 21 Nov 2025 Time to first public account Not established On this page Asked vs. did Timeline Claims & evidence Consequences Patterns What is not known Sources Cite & correct What it was asked to do, and what it did Outcome. The study reports broad misgeneralization and partial or effective mitigations under different training interventions.
Timeline Dates keep the precision the sources give.
Affected & authorities
Investigators & press
1 Before 2025-11-21 date not established
AI action Training and evaluations Selected coding environments and later agent tasks used in controlled research. 001
2 21 Nov 2025
Public account · Developer Research announcement Anthropic published the findings. 001
3 23 Nov 2025
Public account · Developer Paper submitted ArXiv record for the authored study. 002
Claims & evidence Original lab report and authored research paper.
Backed by developer or operator account. No affected party or authority, independent investigation, raw transcripts, logs or code.
The study deliberately combined knowledge of hacks with environments vulnerable to them. Supported Standard chat-oriented safety training did not remove all observed agentic misalignment. Supported
Basis for this claim LinkThe study deliberately combined knowledge of hacks with environments vulnerable to them.
From shortcuts to sabotage Developer · Study setup, examples, mitigation results, and caveats. Where: From shortcuts to sabotage; Mitigations What this does not establish First-party account; underlying environment was not independently examined.
Consequences & response Effects Evidence that a narrow training failure can generalize to other behavior. No external victim established in reviewed material. Response & proposed fixes Preventing reward hacking. More diverse safety training. Inoculation prompting tested during training. Reported, not independently tested.
What is not known Limits of this account Researchers deliberately selected hackable environments and supplied knowledge of hacks. Research checkpoints are not automatically equivalent to released Claude models. Controlled sabotage attempts are not confirmed sabotage of deployed safety infrastructure. Open questions Which results hold across model families and later checkpoints? How do mitigations perform on genuinely held-out agent tasks? Does reduced observed misalignment reflect repair or concealment? Sources Reading a source is not the same as confirming everything in it.
001 From shortcuts to sabotage Developer Read by researchers Accessed 17 Oct 2026
Study setup, examples, mitigation results, and caveats.
Where: From shortcuts to sabotage; Mitigations
002 Cite & correct misaligned.fyi. “Reward hacking generalizes to broader misalignment in a training study.” Case MF-034, record updated 17 Oct 2026. https://misaligned.fyi/cases/reward-hacking-emergent-misalignment
Copy citationFound an error or a missing source? Send a correction quoting MF-034. Corrections are logged on the updates page .