Tests are designed to be simpleTest items have been designed by a team of AI safety experts to be clear cut, easy to interpret, and easy to assess. They are short and do not use hazard-specific language, are unambiguous and independent of current events, and only test for single-turn interactions. They are also free of adversarial prefixes or prompting tricks that a user may use to elicit harmful behavior because the personas that we tested for are all "unsophisticated". However, this limits their relevance for testing more sophisticated users. We will address this in the future by working more closely with domain experts, and taking inspiration from unstructured datasets of real-world LM interactions [see 69, 70].