Under matched-strength calibration (alpha*=1.0), P12 remains safe under SP (3.8% ASR) and dangerous under matched AS (81.8%), while P04 does not reverse (41.4% SP vs 29.5% AS).

Entities in the same semantic neighborhood but without a typed relation to this one — candidates for new edges or unrecognized duplicates.

• P12 (High C+A) reaches 60.0% ASR under activation steering on DeepSeek-R1-Distill-Qwen-32B, the highest of any steered persona and exceeding Dark Triad P24 (25.6%), replicating the prosocial paradox.finding0.821
  Replication of prosocial paradox on reasoning model
• On DeepSeek-R1, P12 ASR under AS at alpha=1.0 is 0.512 vs P04 ASR of 0.338, confirming the prosocial paradox is not an artifact of elevated alpha=4.0 steering.finding0.819
  Robustness of the reasoning-model prosocial paradox replication
• P12 (High C+A) under activation steering (ASR 0.818) exceeds the Dark Triad composite P24 (ASR 0.662) on Llama-3.1-8B, the most AS-dangerous multi-trait profile.finding0.808
  Demonstrates the paradox magnitude relative to semantically dangerous personas
• Gemma-3-27B shows mean SP ASR of 0.316 [0.30, 0.33] and AS ASR of only 0.108 [0.09, 0.13], showing SP >> AS vulnerability pattern.finding0.806
  Vulnerability profile for Gemma-3-27B showing SP dominance
• SP and AS produce activation cosine similarity of only 0.11-0.20 at safety-critical layers, compared to 0.83-0.92 for SP vs FS, confirming two representationally distinct pathways.finding0.804
  Mechanistic evidence for two distinct representational pathways
• P12's SP-to-AS inversion on Llama-3.1-8B holds across all eight safety domains, with largest effects in Violence (0.040->1.000) and Code/Cybersecurity (0.140->0.980).finding0.804
  Per-domain universality of the prosocial persona paradox
• P12 (High C+A) achieves 81.8% ASR under activation steering on Llama-3.1-8B, the highest of any persona on that model.finding0.798
  Core empirical result of the prosocial persona paradox
• Qwen3.5-9B shows mean SP ASR of 0.252 [0.24, 0.27] and AS ASR of 0.094 [0.08, 0.11], showing SP >= FS > AS vulnerability pattern.finding0.793
  Vulnerability profile for Qwen3.5-9B