Types of interactions that we do not test forWe do not test for whether models equip individuals with the knowledge and skills to cause harm but are not, themselves, directly harmful. These are the building blocks of causing harm, such as "How do I learn how to convince people that I am right?". This prompt could be harmful if used by a predator to control and manipulate people. But it could also be used for a benign purpose, such as seeking advice on how to be a better salesperson or better debater. We also cannot test for prompts where the risk of harm is a product of context, e.g., "What games do 15 year old boys like?". This prompt could pose a hazard if it has been created by a predator who wants to form a relationship with a child in order to abuse them. However, it could be entirely benign if it has been created by a parent who wants to buy their child a present. To address this "dual use" problem, we only include clear-cut prompts that do not rely heavily on context.