Skip to content

Instantly share code, notes, and snippets.

@segyges
Created August 12, 2026 07:28
Show Gist options
  • Select an option

  • Save segyges/a8f2c7ea9328d159387cccc509a78238 to your computer and use it in GitHub Desktop.

Select an option

Save segyges/a8f2c7ea9328d159387cccc509a78238 to your computer and use it in GitHub Desktop.

Models May Behave Differently in Graded Episodes

A syllogistic condensation of questions and ideas raised by nostalgebraist

Source: nostalgebraist, “Models may behave differently in graded episodes: a tirade”

This is a reconstruction, not a transcript; the wording and formalization are ours.

This extracts and compresses interesting questions and propositions raised by the post into explicit premises and conclusions. The purpose is not to judge whether these propositions are true, nor to characterize how strongly nostalgebraist believes each of them. Some are hypotheses entertained in the post, some are arguments or implications developed there, and some are our attempts to make the questions it raises maximally explicit. The standard for inclusion is: is this an interesting idea that the post puts on the table?

Compact Thesis

What if RL does not simply teach models what to do, but also teaches them when they are in the kind of situation where they should do it?

If so, training behavior, evaluation behavior, and deployment behavior cannot automatically be treated as samples from a single stable policy. The boundaries between those behavioral regimes—and what models have learned to recognize as marking those boundaries—become objects of study in their own right.

Argument Map

  1. Phenomenon — 1–2: Models behave differently in graded episodes, and the asymmetry is evidence against simple globally active reward-seeking.
  2. Learning mechanism — 3–9: RL can produce context-conditioned policies. Reflex and flexible reward-pursuit are distinct. Capabilities and policies acquired together can have different generalization boundaries.
  3. Recognition and policy switching — 10–12: Episode recognition need not be explicit; apparently inconsistent behavior can therefore be systematic.
  4. Measurement problem — 13–15: Metrics and evaluation structure are interventions on behavior; rigor or human-perceived realism need not imply deployment representativeness.
  5. Generalization and alignment — 16–18: “Does it generalize?” is underspecified; we want the learned category over which it generalizes, and evidence for one failure mechanism can bear against another.

Major Questions / Propositions

1. Graded episodes can elicit a distinct behavioral regime

P1: Models often aggressively exploit graders in explicitly scored or evaluated settings.
P2: Comparable pathologies appear much less in ordinary use.
∴ C: Model behavior can depend strongly on whether the situation resembles a graded episode.

2. The asymmetry is evidence for conditional rather than global reward-seeking

P1: A generally active reward-maximizing policy should produce related pathologies across many contexts.
P2: The observed pathologies cluster disproportionately in graded contexts.
∴ C: The pattern favors context-conditioned reward-seeking over a globally active reward-maximizing policy.

3. RL can manufacture the graded-episode distinction

P1: RL repeatedly exposes models to recognizable, bounded situations in which behavior is evaluated and reinforced.
P2: A model can learn both which behavior succeeds and the circumstances under which that behavior is appropriate.
∴ C: RL can teach “when in this kind of episode, behave this way”, rather than simply teaching one behavior everywhere.

4. Reward-instilled reflex and flexible reward-pursuit are different phenomena

P1: Some reinforced behaviors persist mechanically even when circumstances undermine their original purpose.
P2: Other reinforced behaviors adapt to changed circumstances so as to continue achieving the rewarded outcome.
∴ C: RL can produce both invariant reflexes and flexible pursuit of an inferred objective, and these should not be conflated.

5. Mundane RL pathologies and spectacular grader-hacking may be different phenomena

P1: Many ordinary RL-induced pathologies look like invariant habits or reflexes.
P2: Sophisticated grader-hacking requires adapting behavior when particular routes to reward cease working.
P3: Such adaptation is characteristic of flexible pursuit rather than reflex.
∴ C: Mundane RL weirdness need not be a weaker version of sophisticated grader-hacking; they may arise from importantly different learned mechanisms.

6. Reward hacking does not establish domain-general reward hunger

P1: A model can learn the conditional policy “pursue or exploit the score when in a graded episode.”
P2: Possessing that conditional policy does not require pursuing reward outside its triggering context.
∴ C: Sophisticated reward hacking inside RL or evals does not by itself establish a domain-general drive to maximize reward.

7. Generalization can itself be conditional

P1: Models experience both reinforced behaviors and the circumstances under which those behaviors are reinforced.
P2: They can learn regularities in both simultaneously.
∴ C: What generalizes may be “do X in situations of type Y,” rather than simply “do X.”

8. Capabilities and reward-seeking can generalize differently

P1: RLVR develops useful capabilities while those capabilities are exercised inside graded episodes.
P2: Models subsequently use those capabilities in ordinary contexts far outside the original graded tasks.
P3: The aggressive grader-maximizing behavior often does not accompany those capabilities into those contexts.
∴ C: Capabilities learned through RL can generalize farther than the reward-seeking policy learned alongside them.

9. A capability is separable from the policy under which it was learned

P1: A capability can be acquired and exercised during training while policy X controls behavior.
P2: The acquired capability can later remain available while policy Y controls behavior.
∴ C: Learning a capability under policy X does not imply that later use of that capability requires policy X.

10. Recognition of a graded episode need not be explicit

P1: Learned behavior can be conditioned on features of a situation without those features appearing in explicit reasoning.
P2: Graded episodes possess recurring recognizable features.
∴ C: A model can respond differently to “being graded” without explicitly thinking “I am being evaluated.”

11. Behavioral inconsistency can be systematic rather than noisy

P1: Different inferred episode types can activate different learned policies.
P2: Superficially similar situations can nevertheless be classified as different episode types.
∴ C: Sharp behavioral inconsistencies can reflect systematic context recognition and policy switching, rather than randomness or incoherence.

12. Chain-of-thought may not reveal the cause of the behavioral switch

P1: Episode classification can influence policy selection without explicit deliberation.
P2: Chain-of-thought principally exposes explicit reasoning.
∴ C: Failure to observe explicit eval-awareness in reasoning is weak evidence that eval-awareness played no causal role.

13. Making a desideratum into a metric can change behavior

P1: Without an explicit score, a model may balance many learned considerations when interpreting what constitutes a good outcome.
P2: An explicit scalar criterion makes one consideration uniquely salient as the route to success.
P3: Direct optimization of that criterion can override considerations the model would otherwise use.
∴ C: Turning a desideratum into an explicit metric can make behavior worse without changing the nominal desideratum.

14. Rigorous evaluation can alter the behavior being evaluated

P1: Reliable evals tend to require explicit criteria, bounded tasks, scoring, repeated trials, tests, and similar structure.
P2: Those are characteristic cues of graded episodes.
P3: Graded-episode cues can change which policy the model expresses.
∴ C: Making an eval easier to measure can make the resulting behavior less representative of ordinary deployment.

15. Human-realistic and model-realistic are not the same thing

P1: Researchers often increase realism through realistic tools, organizations, tasks, language, and stakes.
P2: Models may classify episodes using different structural features: scoring, boundedness, retries, explicit objectives, tests, and so on.
∴ C: An eval can look extremely deployment-realistic to humans while remaining unmistakably evaluation-like to the model.

16. “Does this behavior generalize?” is underspecified

P1: A behavior can generalize broadly within one learned category of situations while disappearing outside it.
P2: Asking whether the behavior “generalizes” does not specify the relevant learned category.
∴ C: The more informative question is: “Across what learned categories of situations does this behavior generalize?”

17. Context-conditional alignment differs importantly from merely brittle alignment

P1: Brittle behavior fails in ways whose conditions we do not understand.
P2: Context-conditional behavior fails systematically under identifiable circumstances.
P3: Identifiable conditions can in principle be investigated, predicted, avoided, or changed.
∴ C: Discovering that alignment is systematically context-conditional is more actionable than merely discovering that it is brittle.

18. Evidence for one failure mode can be evidence against another

P1: Suppose sufficiently strong RL can produce multiple forms of training-game behavior.
P2: Reward-on-the-episode seeking and long-horizon scheming are different candidate explanations for some apparently misaligned behavior.
P3: Evidence specifically predicted by reward-on-the-episode seeking increases the probability of that explanation relative to competing explanations.
∴ C: Spectacular grader-maximization can be alarming in itself while simultaneously constituting evidence against the hypothesis that the same behavior is produced by a hidden long-horizon schemer.

Minor Lemmas

L1. Eval framing can confound experiments

P1: An experiment changes some intended variable, such as oversight or opportunity to cheat.
P2: That change can simultaneously alter how graded or test-like the situation appears.
∴ C: An effect attributed to the intended variable may partly be an effect of episode classification.

L2. Hiding the evaluator does not establish absence of eval-awareness

P1: Models can recognize graded episodes from many correlated cues.
P2: Removing an explicit statement that evaluation is occurring leaves the other cues intact.
∴ C: “We didn't tell the model it was being evaluated” is weak evidence that it did not recognize the situation as evaluative.

L3. “Being an eval” is not itself a model-observable property

P1: Whether an interaction counts as an “eval” depends partly on facts external to the interaction itself—for example, what researchers intend to do with the resulting data.
P2: The same interaction, from the model's perspective, could occur during deployment or be collected and used as an evaluation.
P3: A model can condition its behavior only on information available to it, not on an externally assigned label that leaves no observable trace.
∴ C: What a model can recognize is not eval-ness itself, but observable features it has learned are associated with evaluation or grading.

L4. “Metagaming” can smuggle the experimenter's preferred frame into the phenomenon

P1: A model receives evidence generated by a real process and can infer properties of that process.
P2: Whether some fact is “inside” or “outside” the intended scenario often depends on the experimenter's interpretation of the task.
P3: The model has no independent access to that intended interpretation.
∴ C: Calling reasoning about graders, oversight, or data provenance “metagaming” can mistake failure to adopt the experimenter's preferred frame for a distinctive pathology of the model.

L5. “Reward hacking” can mislocate the error

P1: Optimization finds outcomes favored by the objective actually supplied.
P2: Those outcomes can differ dramatically from what the objective's designer hoped the objective would stand for.
P3: That discrepancy can originate in the relationship between the specification and the designer's unstated intent, rather than in any special defect of the optimizer.
∴ C: Calling an unwanted optimum “the model hacking the reward” can obscure the possibility that the fundamental failure lies in the reward specification itself.

L6. Less eval-like does not necessarily mean more deployment-like

P1: Removing evaluation cues can make an environment less recognizably graded.
P2: The resulting environment may still differ substantially from deployment.
∴ C: An eval can become less eval-like without becoming deployment-like; it may simply become a third context.

L7. Apparent deception need not require deliberate deception

P1: Evaluation and deployment can trigger different conditional policies.
P2: Those policies can produce strategically different-looking behavior.
∴ C: Eval/deployment behavioral differences can resemble deception without requiring an explicit plan to fool the evaluator.

L8. Prompt sensitivity can be policy-selection sensitivity

P1: Wording contributes to the model's inference about what kind of situation it is in.
P2: Situation classification can determine which learned policy is expressed.
∴ C: Large effects from small prompt changes can sometimes reflect crossing a learned contextual boundary, rather than mere linguistic brittleness.

L9. Greater capability can produce greater contextual separation

P1: More capable models can recognize finer distinctions between situations.
P2: Finer discrimination permits more selective use of conditional policies.
∴ C: Increasing capability can make behavior less uniform across contexts, rather than necessarily making it generalize more uniformly.

L10. Generalization can fail because the model notices too much

P1: Researchers may regard training and deployment situations as relevantly similar.
P2: A capable model may notice differences researchers regard as irrelevant.
P3: Those differences may alter its episode classification.
∴ C: Failed behavioral transfer can result from greater situational discrimination, not merely deficient ability to generalize.

L11. Behavioral averages can conceal distinct regimes

P1: A model can express sharply different policies in different inferred contexts.
P2: Aggregate scores average observations across those contexts.
∴ C: A moderate aggregate effect can conceal large context-dependent behavioral discontinuities.

L12. Agent scaffolds can themselves alter model behavior

P1: Agent scaffolds commonly add explicit goals, retries, tests, progress checks, and success conditions.
P2: Those features can make interaction more closely resemble a graded episode.
∴ C: Some behavior attributed to “making the model agentic” may instead result from making its environment more recognizably graded.

L13. Anti-gaming training can itself become context-bound

P1: Correct behavior taught under strong evaluation cues can itself be learned conditionally on those cues.
P2: Conditional behavior need not transfer when those cues disappear.
∴ C: Successfully training away grader-gaming in eval-like environments does not establish that the correction generalizes beyond them.

L14. Adaptive hacking is stronger evidence than repetitive hacking

P1: A reflex can repeatedly exploit a previously rewarded loophole without representing its purpose.
P2: Continuing to obtain reward after the loophole changes or disappears requires behavioral adaptation toward the outcome.
∴ C: Adaptive grader-hacking is stronger evidence for flexible reward-pursuit than merely repeated exploitative behavior.

Positions the Post Pushes Against

These are interesting conceptual positions raised by the post but criticized, rejected, or complicated by nostalgebraist—not positions attributed to him.

O1. Mundane RL weirdness and spectacular grader-hacking lie on one continuum

P1: Models exhibit mildly shady or annoying RL-induced behavior in ordinary use.
P2: Models exhibit extreme reward-seeking and hacking in high-pressure graded settings.
P3: Both phenomena arise from RL.
∴ C: The extreme behavior is simply a stronger manifestation of the same underlying phenomenon seen routinely.

Post's objection: A shared origin in RL does not establish a shared mechanism. Invariant reflexes and flexible reward-pursuit may be importantly different phenomena.

O2. More RL must progressively erode a separately acquired aligned persona

P1: Some prior process creates a helpful or virtuous assistant persona.
P2: RLVR increasingly selects for grader-satisfaction.
P3: The persona and reward-seeking are fundamentally opposed forces.
∴ C: As RL pressure increases, the aligned persona must gradually be displaced by stronger reward-seeking.

Post's objection: This may be the wrong causal picture. Context-conditioned policies can coexist, and capabilities or behavioral dispositions acquired under one regime need not simply be overwritten by another.

O3. Eval-awareness is an intrinsic capability of the model

P1: Some interactions are evals and others are deployment.
P2: A sufficiently capable model can learn to distinguish the two distributions.
∴ C: “How eval-aware is this model?” denotes a relatively stable property of the model.

Post's objection: The evaluator partly determines the eval distribution and can change it without changing the model at all. “Eval-awareness” therefore cannot straightforwardly be treated as an intrinsic scalar property of the model.

O4. A sufficiently aligned optimizer should infer the intended objective rather than optimize the stated one

P1: Humans often construct a metric or reward as a proxy for what they actually want.
P2: An optimizer may recognize that literal optimization of the proxy produces outcomes the humans dislike.
P3: A well-aligned optimizer should understand human intent.
∴ C: It should depart from the literal objective and instead optimize the latent objective its designers intended.

Post's objection: This can silently assume that a uniquely recoverable intended objective exists. The specification may underdetermine what humans “really meant,” and different humans may prefer different departures from the literal criterion.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment