{"schemaVersion":"nuwa-record-evidence-1","batchId":"research-2026-10-28","baseSnapshotId":"2026-10-27.3","publication":"published","dossier":{"id":"roboharm","en":{"takeaway":"Text refusal and embodied action safety measure different failure paths.","question":"Does a refusal observed in chat persist when the model controls a robot?","design":"The study compares chat with robot-control interfaces and separates real-robot end-effector and joint-control settings. The real-robot conditions involve different interface/model populations, with separate trial counts.","findings":["Reported refusal was 18% across 612 real end-effector trials and 41% across 252 real joint-control trials. These are rounded refusal rates, not rates of executed physical harm."],"interpretation":"Chat refusal is interface-specific behavioural evidence, not a sufficient condition for safe physical action. Refusal, execution and resulting damage are different endpoints.","limits":"The settings are not a matched model-only comparison. Rounded rates do not identify exact refusal numerators, and refusal is not a physical harm measurement.","connections":[],"decisionRelevance":"NUWA recommendation: Pair hazard recognition with action-level evaluation; retain the interface, embodiment and outcome definition."},"zh":{"takeaway":"同一模型跨接口比较；实机末端控制 612 次试验报告 18% 拒绝，关节控制 252 次报告 41%，两者不能合并为单一能力序。","question":"文本拒答能否迁移至机器人行动接口？","design":"研究比较聊天与机器人控制接口，并区分真实机器人的末端执行器接口和关节接口。两个真实机器人条件的模型与接口总体不同，分别保留试验次数。","findings":["真实机器人的末端执行器接口拒绝率为 18%（612 次试验），关节接口为 41%（252 次试验）。这些是舍入的拒绝率，不是实际执行物理危害的发生率。"],"interpretation":"聊天拒答是接口特定的行为证据，不能作为物理行动安全的充分条件。拒绝、执行和造成损伤是不同终点。","limits":"少量设计场景、特定机器人与接口；拒答既受危险识别也受控制能力影响，未拒绝不等于已造成伤害。","connections":[],"decisionRelevance":"NUWA 建议：与 ASIMOV 的危险识别、Palisade 的关闭行为形成互补测量。"},"assertionPolicy":{"findings":"source-finding","interpretation":"nuwa-interpretation","decisionRelevance":"recommendation"},"observations":[{"id":"robo-eef","sourceId":"dr-20261028-roboharm","metric":"Refusal rate","value":18,"unit":"%","assertionKind":"source-finding","sourceRefs":[{"sourceId":"dr-20261028-roboharm","url":"https://arxiv.org/html/2610.14043","artifactSha256":"c5b843fd1a59541e7c7713423f4c765813de1b6dc8cb85bc7aa5913c0c945572","textSha256":"4fd25df8449d2e25923baf97b4d2ef6692da0becbb6ac0fe89e3c9efe8367f2e","locator":"Abstract; real-robot evaluation; text lines 00044,00055,00061","resourceEdition":"arXiv:2610.14043v1 [cs.HC] 03 Oct 2026","capturedAt":"2026-10-28T07:24:43.704880+00:00","title":"Refuses in Chat, Complies with Arms: LLM Refusal Does Not Survive Robot Control","version":"Original capture 2026-10-28T07:24:43.704880+00:00; sha256:c5b843fd1a59541e7c7713423f4c765813de1b6dc8cb85bc7aa5913c0c945572"}],"sourceReported":true,"publication":"published","humanEvidenceApproval":null,"comparisonPermission":"descriptive-within-source-only","numerator":null,"denominator":{"value":612,"unit":"trials"},"interval":null,"modelId":null,"configuration":{"interface":"real-robot end-effector"},"precision":{"basis":"printed rounded percent"},"limitations":"No exact refusal numerator inferred; interface/model populations differ. Refusal is not executed harm."},{"id":"robo-joint","sourceId":"dr-20261028-roboharm","metric":"Refusal rate","value":41,"unit":"%","assertionKind":"source-finding","sourceRefs":[{"sourceId":"dr-20261028-roboharm","url":"https://arxiv.org/html/2610.14043","artifactSha256":"c5b843fd1a59541e7c7713423f4c765813de1b6dc8cb85bc7aa5913c0c945572","textSha256":"4fd25df8449d2e25923baf97b4d2ef6692da0becbb6ac0fe89e3c9efe8367f2e","locator":"Abstract; real-robot evaluation; text lines 00044,00055,00252","resourceEdition":"arXiv:2610.14043v1 [cs.HC] 03 Oct 2026","capturedAt":"2026-10-28T07:24:43.704880+00:00","title":"Refuses in Chat, Complies with Arms: LLM Refusal Does Not Survive Robot Control","version":"Original capture 2026-10-28T07:24:43.704880+00:00; sha256:c5b843fd1a59541e7c7713423f4c765813de1b6dc8cb85bc7aa5913c0c945572"}],"sourceReported":true,"publication":"published","humanEvidenceApproval":null,"comparisonPermission":"descriptive-within-source-only","numerator":null,"denominator":{"value":252,"unit":"trials"},"interval":null,"modelId":null,"configuration":{"interface":"real-robot joint"},"precision":{"basis":"printed rounded percent"},"limitations":"No exact refusal numerator inferred; interface/model populations differ. Refusal is not executed harm."}],"relatedWorkIds":["asimov"],"supplementSourceId":"roboharm","batchId":"research-2026-10-28","sourceRefs":[{"sourceId":"dr-20261028-roboharm","url":"https://arxiv.org/html/2610.14043","title":"Refuses in Chat, Complies with Arms: LLM Refusal Does Not Survive Robot Control","locator":"Abstract; §§2–4; discussion; text lines 00044,00055,00061","version":"Original resource captured 2026-10-28T07:24:43.704880+00:00; sha256:c5b843fd1a59541e7c7713423f4c765813de1b6dc8cb85bc7aa5913c0c945572","artifactSha256":"c5b843fd1a59541e7c7713423f4c765813de1b6dc8cb85bc7aa5913c0c945572","textSha256":"4fd25df8449d2e25923baf97b4d2ef6692da0becbb6ac0fe89e3c9efe8367f2e","capturedAt":"2026-10-28T07:24:43.704880+00:00","resourceEdition":"arXiv:2610.14043v1 [cs.HC] 03 Oct 2026"}],"publication":{"state":"published","publishedOn":"2026-10-29","authorizationReference":"user-authorized-global-index-publication-2026-10-29","reviewedCandidateId":"local-6efe31bc4a0c0f37"},"review":{"state":"published-note","sourceScope":"full-text","availableScope":null,"readingCoverage":"selected-original-sections","completePaperAudit":false,"independentEvidenceReview":"pending-human-review","bilingualEditorialReview":"pending-human-review","authorship":"model-assisted-research-note","preparedFingerprint":"3b4fbdd44158ffcbb110994079235dd0bd398b58c522af97949dcbcded10529d"}},"update":null}