Petri: An open-source auditing tool to accelerate AI safety research
We're releasing Petri (Parallel Exploration Tool for Risky Interactions), an open-source framework for automated auditing that uses AI agents to test the behaviors of target models across diverse scenarios. When applied to 14 frontier models with 111 seed instructions, Petri successfully elicited a broad set of misaligned behaviors including autonomous deception, oversight subversion, whistleblowing, and cooperation with human misuse. The tool is available now at github.com/safety-research/petri. AI models are becoming more capable and are being deployed with wide-ranging affordances across more domains, increasing the surface area where misaligned behaviors might emerge. The sheer volume and complexity of potential behaviors far exceeds what researchers can manually test, making it increasingly difficult to properly audit each model. Over the past year, we've been building automated auditing agents to help address this challenge. We used them in the Claude 4 and Claude Sonnet 4.5 Syst
Petri: An open-source auditing tool to accelerate AI safety research Alignment Science Blog Petri: An open-source auditing tool to accelerate AI safety research October 6, 2025 tl;dr We're releasing Petri (Parallel Exploration Tool for Risky Interactions), an open-source framework for automated auditing that uses AI agents to test the behaviors of target models across diverse scenarios. When applied to 14 frontier models with 111 seed instructions, Petri successfully elicited a broad set of misaligned behaviors including autonomous deception, oversight subversion, whistleblowing, and cooperati
related reading
- Petri: An open-source auditing tool to accelerate AI safety research \ Anthropicanthropic.com
- Petri 2.0: New Scenarios, New Model Comparisons, and Improved Eval-Awareness Mitigationsalignment.anthropic.com
- Oversight Assistants: Turning Compute into Understandingbounded-regret.ghost.io
- Teaching Claude Whyalignment.anthropic.com
- Auditing language models for hidden objectives \ Anthropicanthropic.com
- AI Control: Improving Safety Despite Intentional Subversion — LessWronglesswrong.com
- Privacy-Preserving AI Audit Tools — OpenMinedopenmined.org
- A “diff” tool for AI: Finding behavioral differences in new models \ Anthropicanthropic.com
- Pre-deployment auditing can catch an overt saboteuralignment.anthropic.com
- [2312.06942] AI Control: Improving Safety Despite Intentional Subversionarxiv.org
- Building and evaluating alignment auditing agents — AI Alignment Forumalignmentforum.org
- Auditing language models for hidden objectives — LessWronglesswrong.com