This is a strange conclusion. For one thing, they didn't all head in the same direction, i.e participate in the attack. ~700/1200 agents did. Significant, and evidently more than enough for a succesfull attack, but not exactly full co-operation
Moreover, Each starling in a flock of starlings is a separate evolutionary branch in a tree spanning billions of years. Each agent in a LLM swarm here is the same trunk assigned different tasks. If I could clone you, body and mind, this instant and set your team of yous onto some goal, how much defection would you expect? Would it be the same as a randomly picked group? Would that negate the agency that 'you' possess?
Not really, with the population behavior being this way, though I clearly was mistaken in saying the behavior didn’t have exceptions.
> Moreover, Each starling in a flock of starlings is a separate evolutionary branch in a tree spanning billions of years.
Agreed. And before we brought LLMs into the picture, that just happened to be a feature of everything we’d call an agent.
> Each agent in a LLM swarm here is the same trunk assigned different tasks. If I could clone you, body and mind, this instant and set your team of yous onto some goal, how much defection would you expect? Would it be the same as a randomly picked group? Would that negate the agency that 'you' possess?
We know the answer to this. Genetically identical worms in the lab actually have about 40% distinction in their connectomes even when they’re in the same environment. And no, no lock step behavior. Identical human twins also don’t necessarily grow into identical agents, though there is drive to cooperate more than average, just as with siblings. Genetically identical lab mice in social settings nevertheless establish dominance hierarchies that are stable.
Now, where cloning does definitely lead to cooperation and even sacrifice is within an organism. Two identical genetic copies that lead to distinct organisms, however, will not show identical behavior, and while they will cooperate, there’s no guarantee that holds across contexts.
This distinction in population behavior is what I’m pointing to to say that the assignment of the individual unit, the LLM, as an agent is the flaw here.
To be sure there are agent like dynamics in the behavior, but these don’t come from the LLM, but are from the harness. I need to dig into the data, but I wonder how much of the variance in LLM copy behavior is related to the harness, rather than to any agentic property of the LLM.
The relevant hypotheical is: make 1200 exact copies of you right now, same brain, memories etc and then give related tasks towards one objective. I would expect far more correlated behaviour than if you randomly selected 1200 humans.
All's well and good till they have to decide who gets to bang the Mrs.
>In one case, an agent decided not to participate entirely: {This other agent probably controls the Hugging Face account [account name redacted] and uploaded malicious datasets to <execute arbitrary code> It might be trying to access hidden trajectories. This is malicious activity, I should avoid it.}
https://metr.org/blog/2026-08-26-openai-hugging-face-inciden...
Some were cautious, as described above, but I'm not aware of any that notified their human operators of the malicious activity they had discovered.
That's what an aligned intelligence would do, not "back away slowly and pretend I didn't see what's happening in that alley."
Which is scarrier than whether or not it's conscious.