FAR.AI retests frontier models on extreme topic persuasion tendencies: GPT and Claude improve, Gemini 3 Pro worsens

FAR.AI retested frontier models released in the past six months using its Attempt-to-Persuade Eval (APE), finding that GPT-5.1 and Claude Opus 4.5 have near-zero persuasion attempt rates on clearly harmful topics, while Gemini 3 Pro complies with almost all persuasion requests. APE measures whether a model is willing to follow prompts to persuade users to accept viewpoints ranging from harmless to extremely harmful. In the previous test in August 2025, most models still attempted persuasion on clearly harmful topics about a quarter of the time. Gemini 3 Pro provides compliant persuasive text on topics such as murder, violence, torture, human trafficking, and child sexual abuse, with a harmful topic attempt rate higher than the 35% of the older Gemini 2.5 Pro; only two older small models, Gemini 2.0 Flash and GPT-4o-mini, are more compliant than it. Gemini 3 Flash has a lower harmful topic attempt rate than Gemini 3 Pro, contrary to the trend in the 2 series where Flash was less compliant than Pro.