Provenance record

"Blind Compliance": Coercive Control in AI Jailbreaking

arXiv cs.CY (Computers and Society) (tier 1, academic) 2026-11-06T05:00:00.000Z Original ↗

Source note: Preprints on societal impact.


Discourse valence
-56
Adverse
confidence 60% · 5 items · range -100 to -25
Adverse readingFavourable reading
Consensus of 5 models from different labs. Spread 75 points, agreement low.
Existential and catastrophic riskLoss of control and alignmentConcentration of power
Excerpt as ingested

arXiv:2611.08226v1 Announce Type: new Abstract: The explosion of generative AI systems and concerns surrounding their rapidly scaling capabilities has led to an adversarial cycle between increasingly narrow content restrictions ("guardrails") and increasingly sophisticated structured prompting techniques ("jailbreaks"). Technological frameworks surrounding such jailbreaking remain largely focused on the system's output: whether harmful or disallowed content is ultimately produced for the user. However, this approach, which draws largely from classical cybersecurity, does not address the uniquely relational dimension introduced by generative AI: in many cases the user is not just accessing a technology via an exploit, but is in conversation with it as part of the exploit. Here we present an alternative lens which centers the interaction rather than the output. Drawing on interpersonal violence scholarship, we present a novel framework of coercive control categories with a particular focus on aspects which are embodied versus disembodied. We then map how these disembodied coercive control dynamics are structurally embedded in modern AI training paradigms, and how those embeddings are exploited via a particular suite of persona-based jailbreaks. In this lens, we reframe AI safety and alignment as not merely a technical security problem, but as another surface upon which we see enacted the relational dynamics of power and control.

Every model that read this

ModelProviderStageScoreConf.LatencyPromptWhen
Llama 3.3 70BMetaanalysis -50 80%3984ms v1.0.0 / m1.0.1 2026-11-06 05:40
GPT-4.1 miniOpenAIconsensus -40 80%2440ms v1.0.0 / m1.0.1 2026-11-06 05:42
Claude Sonnet 5Anthropicconsensus -25 45%6051ms v1.0.0 / m1.0.1 2026-11-06 05:42
Gemini 2.5 FlashGoogleconsensus -100 5%2904ms v1.0.0 / m1.0.1 2026-11-06 05:42
Mistral Small 3.1 24BMistral AIconsensus -65 90%5447ms v1.0.0 / m1.0.1 2026-11-06 05:42
Llama 3.3 70B · reading

Introduces coercive control dynamics in AI interactions, implying potential harm to users. Reframes AI safety as a power and control issue.

evidence: speculative horizon: n/a
GPT-4.1 mini · reading

The paper highlights that AI jailbreaking reflects coercive control dynamics embedded in AI systems, indicating risks of relational power imbalances and manipulative interactions beyond technical concerns. This suggests material societal harm related to manipulation and control in human-AI interactions.

evidence: reported horizon: medium capability 40 societal 0 existential 5 economic 0
Claude Sonnet 5 · reading

This is a conceptual academic framework paper proposing a new lens on AI jailbreaking vulnerabilities rather than reporting a measured incident or deployed harm. It implies existing safety paradigms have a structural blind spot, which is mildly concerning but speculative and theoretical rather than evidenced by concrete exploitation data.

evidence: speculative horizon: n/a
Gemini 2.5 Flash · reading

This paper proposes a new framework to analyze AI jailbreaking through the lens of coercive control, drawing parallels with interpersonal violence. It claims that AI training embeds 'disembodied coercive control dynamics' which are exploited by jailbreaks. The implication is that current AI safety focuses are too narrow and miss a crucial, deeply negative, relational dimension of AI's societal impact.

evidence: reported horizon: n/a
Mistral Small 3.1 24B · reading

The text describes a cycle of control and evasion in AI systems. It frames AI interactions as coercive, with users exploiting relational dynamics. This implies significant risks to user autonomy and safety.

evidence: primary horizon: n/a

Evidence extracted

The chain
SOURCE     arXiv cs.CY (Computers and Society) (tier 1)
   ↓
DOCUMENT   dbcd4b8f-dd62-4bfa-8434-58862f3d700e
           https://arxiv.org/abs/2611.08226
   ↓
EVIDENCE   2 extracted excerpts
   ↓
MODEL RUN  5 runs, methodology 1.0.1
   ↓
SCORE      -56  (Adverse)
   ↓
CONFIDENCE 60%