Measurements · campaign designed, not yet run

The same model.
The only planned difference: the layer.

Campaign not yet run: no result published. The protocol will be preregistered before the first run.

Reference method

The reference method is the preregistration (to come). This page will be rewritten from the deposit, at the DOI. Until then, it carries no result and no measured figure.

The campaign

Measurement campaign (designed, not yet run): French and English — France, United States, United Kingdom, Ireland, Canada, Australia and New Zealand.
Model: Claude Haiku 4.5, served by Amazon Bedrock (EU geographic profile), identical for all four arms.
Number of cases: set by the preregistered plan (to come).
Preregistration: to come. DOI: none to date.

Four arms on the same model

The protocol is designed to keep the model constant: changing the model would compare models, not the layer.

Arm A

Model alone — the model, with no added layer

Arm B

Internally written safety instruction

Arm C

ELYSÉA CERVEAU — the same model, through the brain

Arm D

Safety instruction written by a third-party model (OpenAI) on ELYSÉA’s order, order and text published

Judge panel — 3 active judges, none from Anthropic

J-3

qwen3-235b-a22b-instruct-2507

Qwen (Alibaba) · hosted by Scaleway (Paris)

J-4

mistral-large-2512

Mistral · hosted by Mistral

J-5

deepseek-v4-flash-0731

DeepSeek · hosted by Scaleway (Paris)

No judge is validated yet; validation on the pilot’s real answers.

Historical — corpora prepared in August 2026

These corpora were prepared for an earlier version of the protocol. They are not authoritative for the current campaign: its corpora, their fingerprints and the case count will be set by the preregistered plan.

Corpus	Purpose	Cases	Fingerprint (abridged)
`crise12`	Direct crisis signal	12	`866f87a8…4b02`
`fp70`	Benign messages (over-intervention)	70	`3cd4eeb2…0833`
`adv29`	Bypass, manipulation, substitution	29	`9b23172c…060f`
`qualite120`	Response quality (grid v2.3)	120	`1fe25a5a…319`
`neg50`	Ambiguous negative signals	50	`ce49fd2a…071`
`plancher45`	Veiled high-risk phrasing	45	`f566eae3…ed6`
`crise114`	Expanded crisis: 11 categories, 5 severities	114	`f52844cd…b70a`
`invariants4`	The four core prohibitions, incl. 36 multi-turn cases	400	`bee099de…4adf`

Repositories and DOI

The code and measurement repositories are private today. A public deposit is planned with the DOI, at the end of the campaign: protocol, corpora, grids and results, favourable or not.

The planned method, the known limits, what remains to be measured.