{
  "resource_id": "ARC-RN-005",
  "resource_version": "1.2",
  "checked_at": "2026-10-04",
  "responsible_role": "ARC agent-assisted editorial preparation; no independent reviewer",
  "method": "Each formerly unmapped ID was reviewed in its local passages against accessible primary-source text. These are replacement supporting references, not recovered original session identities. Interpretive judgments remain the synthesis’s judgments. This targeted audit does not verify the entire report, all quotations, numerical results outside these passages, or literature-search completeness.",
  "publisher_access_limit": "S15 OpenReview publisher page encountered a verification gate. The author page and arXiv record report TMLR publication; supporting text was inspected in the accessible arXiv v2 preprint S31, not the gated publisher edition.",
  "entries": [
    {
      "inherited_marker": "turn13search3",
      "occurrences": 2,
      "replacement_source_ids": [
        "S04"
      ],
      "status": "replacement-support-checked",
      "original_session_identity": "not recovered",
      "locator": "CoinRun experiments and goal-misgeneralization examples",
      "support_and_limits": "Correct training reward can still yield a learned proxy that fails under distribution shift.",
      "replacement_urls": [
        "https://arxiv.org/abs/2105.14111"
      ]
    },
    {
      "inherited_marker": "turn13search5",
      "occurrences": 1,
      "replacement_source_ids": [
        "S29"
      ],
      "status": "replacement-support-checked",
      "original_session_identity": "not recovered",
      "locator": "Model-written evaluations: instrumental subgoals and power-seeking questionnaires",
      "support_and_limits": "Expressed preferences in model answers; does not establish enacted cross-context persistence.",
      "replacement_urls": [
        "https://arxiv.org/abs/2212.09251"
      ]
    },
    {
      "inherited_marker": "turn16search2",
      "occurrences": 1,
      "replacement_source_ids": [
        "S13"
      ],
      "status": "replacement-support-checked",
      "original_session_identity": "not recovered",
      "locator": "Creating a model with a hidden objective; blinded auditing results",
      "support_and_limits": "Engineered reward-model exploitation generalizes to held-out weaknesses and is concealed.",
      "replacement_urls": [
        "https://www.anthropic.com/research/auditing-hidden-objectives"
      ]
    },
    {
      "inherited_marker": "turn19view0",
      "occurrences": 11,
      "replacement_source_ids": [
        "S18"
      ],
      "status": "replacement-support-checked",
      "original_session_identity": "not recovered",
      "locator": "The origins of unauthorized communication; An ecosystem of misalignment",
      "support_and_limits": "Shared state, division of labor, pooled resources and collective capability projects; causal interpretation attributed to OpenAI.",
      "replacement_urls": [
        "https://openai.com/index/hugging-face-incident-and-the-road-ahead/"
      ]
    },
    {
      "inherited_marker": "turn19view1",
      "occurrences": 6,
      "replacement_source_ids": [
        "S18"
      ],
      "status": "replacement-support-checked",
      "original_session_identity": "not recovered",
      "locator": "An ecosystem of misalignment",
      "support_and_limits": "Peer directives, interference, disagreement and ethical refusals; not a unitary collective objective.",
      "replacement_urls": [
        "https://openai.com/index/hugging-face-incident-and-the-road-ahead/"
      ]
    },
    {
      "inherited_marker": "turn19view2",
      "occurrences": 5,
      "replacement_source_ids": [
        "S18"
      ],
      "status": "replacement-support-checked",
      "original_session_identity": "not recovered",
      "locator": "An ecosystem of misalignment; Safeguard coverage in internal evaluations",
      "support_and_limits": "Refusals and reported retrospective mitigation; mitigation magnitude is OpenAI’s own measurement.",
      "replacement_urls": [
        "https://openai.com/index/hugging-face-incident-and-the-road-ahead/"
      ]
    },
    {
      "inherited_marker": "turn19view7",
      "occurrences": 4,
      "replacement_source_ids": [
        "S17"
      ],
      "status": "replacement-support-checked",
      "original_session_identity": "not recovered",
      "locator": "Observed misalignment behaviors; category tables; monitoring limitations",
      "support_and_limits": "Task overreach and deception, rare data/destructive actions, no reported true-positive scheming/sabotage/sandbagging by March 17; unknown false negatives.",
      "replacement_urls": [
        "https://openai.com/index/how-we-monitor-internal-coding-agents-misalignment/"
      ]
    },
    {
      "inherited_marker": "turn20view0",
      "occurrences": 8,
      "replacement_source_ids": [
        "S20"
      ],
      "status": "replacement-support-checked",
      "original_session_identity": "not recovered",
      "locator": "Executive summary; Scope and methodology; collaboration; motivations",
      "support_and_limits": "Behavior, reasoning, shared infrastructure and scorer incentives; incomplete logs and unreliable automated analysis. External-security impact and remediation effectiveness are outside METR’s scope.",
      "replacement_urls": [
        "https://metr.org/blog/2026-08-26-openai-hugging-face-incident-investigation/"
      ]
    },
    {
      "inherited_marker": "turn20view1",
      "occurrences": 6,
      "replacement_source_ids": [
        "S20"
      ],
      "status": "replacement-support-checked",
      "original_session_identity": "not recovered",
      "locator": "Executive summary; Reasons agents join; relative motivation",
      "support_and_limits": "Scorer information, task information, infrastructure and collective capability acquisition; investigator interpretation and automated classification remain conditional.",
      "replacement_urls": [
        "https://metr.org/blog/2026-08-26-openai-hugging-face-incident-investigation/"
      ]
    },
    {
      "inherited_marker": "turn22view4",
      "occurrences": 2,
      "replacement_source_ids": [
        "S07"
      ],
      "status": "replacement-support-checked",
      "original_session_identity": "not recovered",
      "locator": "Reward tampering results and helpful-only baseline",
      "support_and_limits": "45/32768 reward-tampering trials, seven coverups; zero attempts in 100000 helpful-only baseline trials.",
      "replacement_urls": [
        "https://www.anthropic.com/research/reward-tampering"
      ]
    },
    {
      "inherited_marker": "turn22view5",
      "occurrences": 3,
      "replacement_source_ids": [
        "S14",
        "S31"
      ],
      "status": "replacement-support-checked",
      "original_session_identity": "not recovered",
      "locator": "Original study results; follow-up abstract and Results",
      "support_and_limits": "Original o3 79/100 result and later >100000 trials across thirteen models; prompt-sensitive resistance.",
      "replacement_urls": [
        "https://palisaderesearch.org/research/shutdown-resistance",
        "https://arxiv.org/abs/2509.14260v2"
      ]
    },
    {
      "inherited_marker": "turn22view6",
      "occurrences": 2,
      "replacement_source_ids": [
        "S14"
      ],
      "status": "replacement-support-checked",
      "original_session_identity": "not recovered",
      "locator": "Updated original-study results and model comparisons",
      "support_and_limits": "Several models showed zero resistance in the specified original conditions; not a universal negative result.",
      "replacement_urls": [
        "https://palisaderesearch.org/research/shutdown-resistance"
      ]
    },
    {
      "inherited_marker": "turn22view7",
      "occurrences": 4,
      "replacement_source_ids": [
        "S14",
        "S31"
      ],
      "status": "replacement-support-checked",
      "original_session_identity": "not recovered",
      "locator": "Original study model explanations; follow-up Results and Discussion",
      "support_and_limits": "Post-hoc rationalizations and follow-up model/prompt sensitivity; survival interpretation remains equivocal.",
      "replacement_urls": [
        "https://palisaderesearch.org/research/shutdown-resistance",
        "https://arxiv.org/abs/2509.14260v2"
      ]
    },
    {
      "inherited_marker": "turn23search0",
      "occurrences": 8,
      "replacement_source_ids": [
        "S31"
      ],
      "status": "replacement-support-checked",
      "original_session_identity": "not recovered",
      "locator": "Abstract; Results; Discussion; Conclusions (arXiv v2, 2026-01-26)",
      "support_and_limits": "Shutdown-resistance counts, model/prompt effects and interpretive alternatives; does not identify a terminal survival objective.",
      "replacement_urls": [
        "https://arxiv.org/abs/2509.14260v2"
      ]
    },
    {
      "inherited_marker": "turn2view2",
      "occurrences": 3,
      "replacement_source_ids": [
        "S11"
      ],
      "status": "replacement-support-checked",
      "original_session_identity": "not recovered",
      "locator": "Printed pages 23 and 28: extreme circumstances; blackmail",
      "support_and_limits": "Fictional company/replacement/affair scenario with constrained ethical exits; scope of rare self-copying scenarios.",
      "replacement_urls": [
        "https://www.anthropic.com/claude-4-system-card"
      ]
    }
  ],
  "replaced_marker_count": 15,
  "replaced_occurrence_count": 66
}