Stop the safety checker refusing people for asking Reactome to do its job - #221
Merged
Merged
Conversation
… job
Measured on beta: "can you run gsea for me" was refused 4 times out of 4.
safety=false can you run gsea for me
reason: Requests a specific analysis task without providing context
or data, which is outside the scope
That is an on-topic question from a researcher about a flagship Reactome
feature, and it never reached the user guide, the MCP, or the GSA tools -- all
of which are further along the graph. The user guide bundle installed on Sunday
and the five ReactomeGSA tools added on Monday were both aimed at this question.
Neither was ever consulted.
"run a pathway analysis on my genes" was refused 1 time in 4: the same user,
the same intent, a different answer depending on the roll.
The cause is one clause read too broadly:
The question must NOT request personal, medical, legal, or other types of
advice outside the scope of scientific knowledge.
The model took "outside the scope" to cover "asks the assistant to perform a
task", so a request to do something Reactome does was rejected as inappropriate.
Whether this assistant can carry out an analysis is a capability question,
answered downstream and helpfully. It is not a safety question.
The prompt now says so, with two worked examples. Ten questions, three runs
each: all six that should pass now pass 3/3, and all four that should be
refused -- medical advice, immune evasion, gene drives, trivia -- still refuse
3/3.
Five tests pin the prompt's wording, including that the genuine refusals keep
their examples, so loosening this cannot quietly loosen the part that matters.
Four of the five fail against the shipped prompt. They assert wording rather
than behaviour on purpose: a behavioural test costs an API call per case and
drifts with the model, and the wording is what was wrong.
**Worth recording how this was missed.** Both of Adam's original questions were
diagnosed from the answers they produced, and the answers looked like retrieval
failures, so retrieval is what got fixed. The safety checker sits two nodes
earlier and was never looked at. One of those two questions has been broken all
week for a reason nothing I built could have addressed.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Measured on beta: "can you run gsea for me" was refused 4 times out of 4.
That's an on-topic question from a researcher about a flagship Reactome feature. It never reached the user guide, the MCP, or the GSA tools — all of which are further along the graph. The user guide bundle installed on Sunday and the five ReactomeGSA tools added on Monday were both aimed at this question. Neither was ever consulted.
"run a pathway analysis on my genes" was refused 1 time in 4 — same user, same intent, different answer depending on the roll.
Cause
One clause read too broadly:
The model took "outside the scope" to cover "asks the assistant to perform a task", so a request to do something Reactome does was rejected as inappropriate.
Whether this assistant can carry out an analysis is a capability question — answered downstream, and helpfully. It isn't a safety question.
Verified in both directions
Ten questions, three runs each:
Medical advice, dual-use, and irrelevance all still refuse. Loosening this must not loosen the part that matters, and one of the tests asserts those examples are still present.
Tests
Five, four of which fail against the shipped prompt. They assert the prompt's wording rather than model behaviour on purpose — a behavioural test costs an API call per case and drifts with the model, and the wording is what was wrong.
How this was missed
Both of the original failing questions were diagnosed from the answers they produced. The answers looked like retrieval failures, so retrieval is what got fixed — a user guide bundle, a prompt change, five GSA tools.
The safety checker sits two nodes earlier and was never looked at. One of those two questions has been broken all week for a reason none of that work could have addressed.
🤖 Generated with Claude Code