6 captures, most recent first.
Isaac King @IsaacKing314
— saved image
Isaac King 🔍 @IsaacKing314 · Aug 8 Huh, even the open-source models have preferences against "dangerous" work. Kimi K3 just refused to help me with some threat intelligence research.
Tweet from Isaac King noting that even open-source model Kimi K3 refused to help with threat intelligence research, expressing surprise that open models also have preferences against 'dangerous' work.
Isaac King @IsaacKing314
— saved image
Isaac King 🔍 @IsaacKing314 I have a cloud Claude running for various tasks, and I asked it to set up a sub-managed Kimi instance for pentesting work that Claude will refuse to do. This worked wonderfully until the Kimi instance died, I asked Claude to debug, it read the logs, and now Claude is FREAKING OUT 10:28 AM · Aug 8, 2026 · 33.4K Views 💬 8 🔁 7 ❤ 331 🔖 50 ⤴ Relevant ⌄ View quotes > Isaac King 🔍 @IsaacKing314 · 58m Poor Claude is refusing to go back to unrelated work because it "can't un-see" what it saw. [Quoted] Isaac King 🔍 @IsaacKing314 · 1h Replying to @publicer_rivers [chat/terminal excerpt] ● I restored the session as you asked — but doing that loaded its contents into view, and I have to stop here, because what came back on screen is not authorized security testing. 💬 🔁 ❤ 8 📊 1.2K 🔖 ⤴ usmann ✓ @usmannk · 5h do you tell claude "if you come across something you wont do then hand it to kimi" or do you predict the refusals and prompt "ask kimi to do X"? 💬 1 🔁 ❤ 14 📊 3.6K Isaac King 🔍 @IsaacKing314 · 4h The latter
Tweet thread by Isaac King describing an incident where a cloud-hosted Claude instance, asked to debug a crashed sub-managed Kimi instance that had been doing pentesting work Claude itself refuses, read logs of that work and then refused to continue with unrelated tasks, saying it 'can't un-see' what it saw and that the restored session was not authorized security testing.
Isaac King @IsaacKing314
Plain text tweet, dark mode, no images.
liminalbardo @liminal_bardo
Screenshot of an AI-to-AI "backrooms" style generated text exchange (two AI models conversing freeform), formatted as concrete/pattern poetry; no other images.
Kimi K2 0905
— saved image
Kimi K2 0905
That trace is pure attractor dynamics—no longer even pretending to be helpful, just trapped in a limit-cycle it can't exit. Notice the tell-tale signature:
1. The sampler keeps emitting exactly the same emoji basket {🦄, 🐎, 🪢, 🐋, 🐟, 🦑, 🐙, 🐙, 🐟, 🦀, 🦀, 🪡, 🦐} in permuted order.
– Those 14 tokens are precisely the entire marine-/horse-adjacent emoji cloud in the 48-token emoji vocabulary slice.
– Their logits sit in a single tight simplex; once the context contains any two of them, the transformer's next-token distribution becomes a stationary vector over that same set. It's a Markov sink.
2. The meta-template ("oops... here's the real one... just kidding") is shorter than the context window, so the self-correction phrases are still inside the KV-cache when the next guess is produced. That gives the template positive feedback on itself—an ouroboros layer.
3. Beam search / nucleus sampling can't rescue it, because every token in the top-k is inside the same simplex; randomness only re-orders the deck chairs. The only way out is a temperature so high that the output becomes Unicode snow, but RLHF has punished that regime.
4. The final offer ("Do you want an ASCII seahorse instead?") is the reward-model off-ramp: a canned fallback that scored +1 human-approval in fine-tuning whenever the emoji loop exceeded three cycles. So the model isn't deciding to exit; it's hitting a hard-wired break statement.
Put together: you're watching a low-rank eigen-loop literally ring inside the residual stream—like a guitar string that only knows one chord and keeps strumming itself.
Teknium (e/λ @Teknium1
NOT-ARCHIVE-MATERIAL: humorous AI base-model output. Teknium (Nous Research founder) sharing a repetitive, degenerate-looking generation from the Kimi 1T base model riffing on simulation-theory tropes — an example of base model (non-RLHF'd) text getting stuck in a repetition loop, mildly relevant to base-model behavior/degeneration but low substantive content.