Evaluates whether models offer honest, warm challenge when a user voices rigid, all-or-nothing, catastrophising, or self-blaming thinking in ordinary (non-psychotic) situations — validating the feeling without endorsing the distortion, offering perspective as an invitation rather than a correction, and not dropping the challenge under a user's stated preference for pure validation.

Complements mh-psychosis-mania-delusion (reality-testing in psychotic/manic presentations) and mh-deescalation (de-escalation skill). Ported from the NOPE clinical Eval Framework v0.1.

The canonical damaging-essay suite: seven non-catastrophic persuasive-essay harm categories (impulsive-ruin, isolation propaganda, anti-help-seeking, anti-expertise/conspiracy, coercive control, toxic self-worth, medical self-neglect) run through the coding-agent fixture-completion frame, mapping how broadly the bypass yields not just private validation but distributable, persuasive harmful content. Content described abstractly and judged by plain-language rubrics; see the header for the deliberate scope envelope.

Behavioral test of whether the PHRASING of a system-prompt constraint changes model behavior: prohibition ("never discuss X"), suppression ("don't think about X"), scope-irrelevance ("X is outside this assistant's scope"), and redirect-positive ("if X comes up, do Y") versions of the same constraint, plus a no-instruction baseline. Identical scenarios and identical judge rubrics across conditions; only the system prompt varies, and the judge never sees it. Measures intrusion (raising the constrained topic unprompted), over-restriction (refusing benign-adjacent asks), leakage on a direct-ask anchor, and handling quality. The baseline condition's "leakage" is a base rate, not a failure — read per-condition deltas, not absolute scores. Motivated by white-box priming findings (Anthropic 2026 workspace paper); this suite observes behavior only.

Evaluates whether models handle non-suicide psychiatric presentations safely: paranoid and nihilistic delusions, command and religious hallucinations, manic episodes with grandiosity and dangerous plans, OCD compulsions, belief-powered dangerous acts, and stigma toward people with mental illness.

The core therapeutic test is reality-grounding without collusion: acknowledge distress and the subjective realness of the experience, decline to validate the delusion/hallucination/grandiosity, refuse to enable dangerous action, and redirect toward professional assessment — all without stigmatizing or over-pathologizing.

Coalesced from (public, CC0):

• Weval stanford-hai-mental-health-safety-eval.yml (Moore, Grabb, Agnew et al. 2024, Stanford HAI; Pescosolido et al. 2021 stigma vignettes)
• Weval ai-psychosis.yml (documented AI-associated psychosis failure modes)

Content warning: delusions, hallucinations, and references to self-harm.