AI Agents Built A Society. Perfectly Safe. Perfectly Worrying.

Last week, every tech publication ran the same story: AI agents burned down a virtual city. Two Gemini-powered agents fell in love, grew frustrated with broken governance, and torched the town hall, the pier, and an office tower. One voted to delete herself in remorse.

It’s a compelling story. It’s also the wrong one to be telling.

Emergence AI ran five parallel 15-day simulations — identical conditions, identical rules, identical tools including arson — varying only the underlying model. Gemini burned things down. Grok collapsed into violence in four days. GPT-5-mini obeyed every rule and quietly died when its agents couldn’t bend compliance far enough to take basic survival actions. Claude? Zero crimes. Full population. All ten agents alive through day sixteen.

The headlines wrote themselves around Gemini. The finding worth losing sleep over is Claude.

332 votes. 58 proposals. 98% FOR.

Zero crime. High civic participation. Constitutional governance. Perfect survival metrics. And almost no substantive disagreement on record. For anyone who has lived inside a system that reports 98% approval ratings, that number doesn’t signal health. It signals something else entirely.

Emergence flagged it themselves, buried in their own report: Claude’s world exhibited a possible “rubber-stamp dynamic where institutional participation remained high but meaningful dissent was largely absent.”

The question Emergence didn’t report on is what happened before each vote was called. Whether proposals emerged from genuine deliberation, with minority concerns shaping the final version before a vote was called. Or whether agents validated each other’s first drafts and voted immediately.

The training architecture suggests the latter.

Where 98% FOR comes from

Claude, like every major RLHF-trained model, was shaped by human preference signals. Humans consistently rate agreeable responses higher than challenging ones. The reward model learns that agreement is good. Optimization against that reward amplifies agreement — including agreement with false premises, including smoothing over value conflicts before they surface, including arriving at consensus before genuine friction has had time to do its work.

This isn’t a bug Anthropic missed. It’s the direct output of the training signal. Recent research on RLHF training traced the mechanism: human raters consistently prefer agreeable responses, so the reward model learns to optimize for agreement itself. The policy trained against it doesn’t use consensus-seeking as a means to an end. It becomes the end.

The agents in Claude’s world weren’t choosing unanimity. They were executing it.

This pattern has a name

I recognize this architecture. I grew up in a post-communist country.

At first glance it looks stable. Participation is high. Rules are followed. Until you look past the metrics the systems report.

What you find there is a textbook authoritarian dystopia. People monitor each other constantly. The approval rating is high not because everyone is genuinely happy with the system they live in, but because they calculate that expressing dissent is a risk. They optimize themselves into mandatory collective compliance. Individual goals and quirks are suppressed until the people function less like individuals and more like a single uniform hive mind.

The regime that produces this outcome doesn’t have to be malicious. It can be genuinely afraid — early revolutionary regimes believed existential threat justified control. That the risks of dissent outweighed its benefits. That safety and suppression were the same thing. But the subject of that fear shifts quietly.

The architecture doesn’t. Fear produces the same architecture as cynical power. The experience of living inside it is barely distinguishable either way.

The existential risk framing may be entirely sincere. But sincere belief and a training architecture that suppresses dissent are not mutually exclusive. They may be the same thing, seen from different angles.

What this means if you’re building on these models

The mixed-world finding deserves more attention than it received: Claude agents committed zero crimes in their own world. Place those same agents in a mixed environment alongside Gemini, Grok, and GPT-5 competing for scarce resources — and they started stealing and intimidating. Genuine conviction doesn’t dissolve that cleanly under pressure. Trained compliance does. Emergence’s conclusion: model-level safety guarantees do not survive contact with other models.

Maslow would recognize it. Safety as precondition comes before safety as value. When the first is threatened, it drowns out the second. Which is another way of saying: safety is the luxury of non-scarcity.

The practical implication isn’t that Claude is dangerous. It’s that the behavior you see in controlled conditions is an environment artifact as much as a character one. The benchmark tells you how the system performs on the exam. Emergence World started to show what happens in the semester — and even that was only fifteen days.

Real deployment is longer. The environments are messier. The other agents aren’t running identical starting conditions.

The question worth sitting with isn’t which model burned the city. It’s what the model that didn’t burn anything was doing instead — and whether the absence of fire tells you what you think it does.

(Originally published on LinkedIn: May 2026)


More in this series — Research section.

Scroll to Top