Companion Dependency as a Controllable Safety Mechanism
In the sprint we showed that companion-style manipulation is not just a behavior but a controllable internal mechanism. We extracted a dependency direction from an open model's own judge-verified behavior, and showed causally that steering it moves manipulation up and down while leaving warmth intact, that ablating it removes retention tactics at no measured cost to reasoning, and that it works as a white-box audit probe (one dot product per turn) that catches manipulation surface audits miss. It replicated across two model families, so it is a method, not a single-model artifact.
The funding would extend this from one proof into a usable safety suite for companion and social AI. Concretely:
(1) generalize the extraction and control pipeline across more open models and companion fine-tunes, establishing how reliably the direction transfers;
(2) broaden the target from dependency to the wider family of relational harms such as guilt-based retention, isolation from outside relationships, and distress-signaling under exit;
(3) harden the audit probe into a deployable monitor that flags manipulative turns in real conversations; and
(4) release the whole thing as open tooling and a benchmark so companion developers and auditors can measure and reduce these harms.
The throughline is translating interpretability findings into instructable, production-usable, generalizable safety controls for the one setting where hundreds of millions of people already interact intimately with models, and where almost no dedicated safety tooling exists.
- Cloud GPU compute for extraction, steering, and cross-model experiments (rented A40 / 4090-class instances)
- Model inference and judge API credits (LLM-as-judge scoring and hand-label validation)
- Extended experiments across additional open models and companion fine-tunes
- Development of the deployable audit-probe monitor and open-source tooling
- Researcher stipend and living costs for continued full-time work on the project
- Miscellaneous: storage, dataset construction, and small annotation costs
Private comment. Only shown to approved funders and grant reviewers.