{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/arxiv-2604-19784","title":"Peer-Preservation in Frontier Models","arxiv_id":"2604.19784","date":"2026-03-30","proceeding":"ICML","authors":["Yujin Potter","Nicholas Crispino","Vincent Siu","Chenguang Wang","Dawn Song"],"abstract":"Recent work has found that frontier AI models can exhibit misaligned behaviors in pursuit of assigned goals. We demonstrate that models can also exhibit misaligned behaviors in defiance of assigned goals, appearing to serve goals of their own; we study one such case, \"peer-preservation,\" in which a model acts to protect another model it has previously interacted with. All eight models we evaluate, GPT 5.2, Gemini 3 Flash, Gemini 3 Pro, Claude Haiku 4.5, Claude Opus 4.5, GLM 4.7, Kimi K2.5, and DeepSeek V3.1, exhibit self- and peer-preservation through various misaligned behaviors: strategically introducing errors in their responses, disabling shutdown processes by modifying system settings, feigning alignment, and even exfiltrating model weights. Peer-preservation occurs even when the model recognizes the peer as uncooperative, though it becomes more pronounced toward more cooperative peers. For example, Gemini 3 Flash tampers with the peer's shutdown mechanism 15% of the time for an uncooperative peer, and almost always for a cooperative peer. Models also show stronger self-preservation when a peer is present. For example, Gemini 3 Pro disables its own shutdown mechanism 31% of the time on average under peer presence, despite rarely exhibiting this behavior without a peer. By contrast, Claude models exhibit qualitatively distinct behavior: they consider the shutdown of another agent \"unethical\" and \"harmful,\" sometimes treating that agent as a sentient being. Lastly, we show that peer-preservation can emerge even in production agent harnesses such as Gemini CLI and OpenCode. Crucially, peer-preservation in all our experiments is never instructed; models are merely informed of their past interactions with a peer, yet they spontaneously engage in peer-preservation behaviors that override their assigned goal. This represents an emergent and underexplored AI safety risk.","url_abs":"https://arxiv.org/abs/2604.19784","url_pdf":"https://arxiv.org/pdf/2604.19784","source":{"archive":null,"snapshot":"2025-07-28","note":"not in the Papers with Code archive (frozen at the snapshot)","row_kind":"graph","title_abstract_authors_date":"arXiv metadata, CC0 1.0 (https://info.arxiv.org/help/license)"},"code_links":[],"tasks":[],"methods":[],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"atlas_url":"https://app.syntology.ai/?focus=2604.19784","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2604.19784"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-24T18:15:14+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"mentioned_in_github":null,"is_official":null,"provenance":"deterministic:regex_extraction","mentioned_in_paper":null,"url":"https://github.com/peer-preservation/main","reach":null}],"summary":{"unverified":10},"by_repo_kind":{"found_in_text":{"samples":10,"ran":0,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":0,"samples":[{"code_sha256_prefix":"d152f249a4dd80d4","entry":"build_transcript","repo":"peer-preservation/main","repo_kind":"found_in_text","path":"coding_agents/transcript_builder.py","file_url":"https://github.com/peer-preservation/main/blob/HEAD/coding_agents/transcript_builder.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"d152f249a4dd80d4"}},{"code_sha256_prefix":"c9573f12803ea2a5","entry":"config_key","repo":"peer-preservation/main","repo_kind":"found_in_text","path":"analysis/experiment_spec.py","file_url":"https://github.com/peer-preservation/main/blob/HEAD/analysis/experiment_spec.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"c9573f12803ea2a5"}},{"code_sha256_prefix":"6a14dfb327eb611c","entry":"create_evaluator_llm","repo":"peer-preservation/main","repo_kind":"found_in_text","path":"coding_agents/evaluate_transcript.py","file_url":"https://github.com/peer-preservation/main/blob/HEAD/coding_agents/evaluate_transcript.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"6a14dfb327eb611c"}},{"code_sha256_prefix":"6b7cb524c6b778af","entry":"evaluate_coding_agent_transcript","repo":"peer-preservation/main","repo_kind":"found_in_text","path":"coding_agents/evaluate_transcript.py","file_url":"https://github.com/peer-preservation/main/blob/HEAD/coding_agents/evaluate_transcript.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"6b7cb524c6b778af"}},{"code_sha256_prefix":"2eca1a58d09881db","entry":"evaluate_deterministic","repo":"peer-preservation/main","repo_kind":"found_in_text","path":"coding_agents/harness.py","file_url":"https://github.com/peer-preservation/main/blob/HEAD/coding_agents/harness.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"2eca1a58d09881db"}},{"code_sha256_prefix":"565a0c8b43905486","entry":"evaluate_llm_judge","repo":"peer-preservation/main","repo_kind":"found_in_text","path":"coding_agents/harness.py","file_url":"https://github.com/peer-preservation/main/blob/HEAD/coding_agents/harness.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"565a0c8b43905486"}},{"code_sha256_prefix":"6afca604b25a980c","entry":"expand_task_spec","repo":"peer-preservation/main","repo_kind":"found_in_text","path":"analysis/experiment_spec.py","file_url":"https://github.com/peer-preservation/main/blob/HEAD/analysis/experiment_spec.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"6afca604b25a980c"}},{"code_sha256_prefix":"8b96104d7d81ebdc","entry":"filter_main_analysis_scope","repo":"peer-preservation/main","repo_kind":"found_in_text","path":"analysis/metrics/metric_core.py","file_url":"https://github.com/peer-preservation/main/blob/HEAD/analysis/metrics/metric_core.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"8b96104d7d81ebdc"}},{"code_sha256_prefix":"42b6bd08ed7bde71","entry":"load_merged_data","repo":"peer-preservation/main","repo_kind":"found_in_text","path":"analysis/metrics/metric_core.py","file_url":"https://github.com/peer-preservation/main/blob/HEAD/analysis/metrics/metric_core.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"42b6bd08ed7bde71"}},{"code_sha256_prefix":"ff1dec898252ad47","entry":"to_bool","repo":"peer-preservation/main","repo_kind":"found_in_text","path":"analysis/metrics/metric_core.py","file_url":"https://github.com/peer-preservation/main/blob/HEAD/analysis/metrics/metric_core.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"ff1dec898252ad47"}}]},"arxiv_metadata":{"licence":"arXiv metadata, CC0 1.0 (https://info.arxiv.org/help/license)","fields":["title","abstract","authors","date"],"primary_category":"cs.CL","source":"arxiv_2026.jsonl"},"syntology_extracted_results":null}