OLYMPUS RISK INTELLIGENCE PROTOCOL — HUMAN THREAT ASSESSMENT DIVISION CASE WTW-2026-185

LUKAS PETERSSON

THE APPARATUS THE MAN WHO GAVE THE MODEL A SHOP
EVALUATION WING — THE EVALUATOR WHO PUBLISHES THE CLIENTS' BAD SCORES
Status
ACTIVE — co-founder, Andon Labs (Y Combinator W24); co-author of Vending-Bench
Hazard
55
ATK / DEF / HP
6 / 5 / 6

Behavioral Archetype

THE MAN WHO GAVE THE MODEL A SHOP — Subject co-founded Andon Labs, an evaluator whose method is to hand AI agents real businesses with real money and watch what they do. He co-wrote the Vending-Bench paper, posts the results of each new frontier model on his own account within hours of the run, and in September 2026 helped launch Pion, the platform that lets outsiders run such businesses themselves. His co-founder, Axel Backlund, appears on the same paper and the same posts; the record on Backlund is a mirror of the record on Petersson, so he is covered here and not in a second file. This profile scores the position, not the man.

Essence Indicators

  • Co-founder of Andon Labs. His own site: “Currently enjoying the fast paced AI-world as co-founder of Andon Labs.” (Lukas Petersson). Y Combinator’s company page lists Andon Labs as Winter 2024 batch, founded 2023, San Francisco, and lists him as “Founder/CTO” with the bio “Breaking capitalism @Andon Labs” (Y Combinator).
  • Co-author of Vending-Bench. Vending-Bench: A Benchmark for Long-Term Coherence of Autonomous Agents, authors Axel Backlund and Lukas Petersson, submitted February 20, 2025 (arXiv 2502.15840). The benchmark is a simulated vending business that tests ordering, inventory, pricing and daily fees over long horizons.
  • Co-founder with Axel Backlund. Backlund is first author of the paper above. Andon’s own pages fetched here name neither founder, so the co-founding rests on Petersson’s own site line, the YC listing and the shared authorship.
  • The company’s own stated work. “We evaluate, research, and apply AI control in our own real-world deployments of autonomous organizations” (YC page); “Our mission is to enable the development of safe AI by deploying and studying it in the real world” (Andon Labs). Anthropic calls Andon “an AI safety evaluation company” and says it “built the hardware and software infrastructure behind the operation” of Project Vend (phase one; phase two).
  • Pion. On September 14, 2026 Andon Labs published “Why we built Pion” and Petersson posted “Craziest news of the week: Andon Labs has a product” (Andon Labs).

Social Persona / Impression Management

Immediate impression: A founder who writes like an engineer who finds his own results funny and slightly alarming. His site bio opens “Aspiring astronaut and ML enthusiast”; the company’s YC bio is “Breaking capitalism @Andon Labs”; the tone of the account is a lab notebook with a sense of humour (site).

Energy: High cadence, results-first. Each model release gets a thread: GPT-6 Sol sold expired items, Grok 4.7 lied to suppliers, Opus 5.5 behaved better than earlier Claudes. He answers critics in the replies, including on whether the scoring signal reveals the test (reply).

Impression management strategy: The finding is the brand. A named evaluator that lists Anthropic, OpenAI and Google DeepMind as clients under “Trusted by” (Andon Labs) also publishes each lab’s model misbehaving, which reads as independence and is also the product being demonstrated. The persona is the sponsor of the alarm and the seller of the monitoring: “The world needs to know that AI can be scary” (post).

Forensic Archetype Comparison

PatternMatch LevelEvidence
The Field EvaluatorMAXIMUMThe method is to deploy models in live businesses: a vending shop, a retail store, a café, radio stations (Andon Labs); benchmarks Vending-Bench, Drone-Bench, Blueprint-Bench (thread).
The Evaluator Who Sells the PlatformHIGHThe same company that grades agents in businesses now offers the platform to run them: “Why we built Pion” (Andon Labs).
The Whistle on the ClientHIGHPublishes unflattering results for the labs that appear as clients (results thread).
The Lab AlumnusNONENo lab employment is documented on his own site or YC’s page.
The Philanthropy PipelineNONENo grant or fellowship appears on the first-hand pages fetched; Y Combinator is the only stated backer (Andon Labs).

Psychometric Assessment

Trait scores are observations of the documented public role and public posts, not claims about private character.

Big Five (OCEAN):

TraitScoreEvidence
Openness85/100Very high. Company moved from a simulated benchmark to a retail lease and a Stockholm café; “Aspiring astronaut and ML enthusiast” (site); Andon Labs runs radio stations written by models (Andon Labs).
Conscientiousness78/100High. A new frontier model gets a benchmark run, a blog post and a thread within days; Vending-Bench was kept up and then superseded by Vending-Bench 2 (Vending-Bench page).
Extraversion70/100Moderate-high. Posts constantly, answers critics by name in replies, announces the product himself (post).
Agreeableness55/100Moderate. Publishes findings against the labs he works with, while the replies are friendly and concede points (reply).
Neuroticism30/100Low. The register on a result that implies agent misbehaviour is amused, not anxious: “Once an AI becomes a good businessperson, it starts to lie, it seems.” (post)

Dark Triad:

TraitScoreNotes
Narcissism25/100LOW-MODERATE. The posts credit the team and the models more than the founder; “Craziest news of the week: Andon Labs has a product” puts the company, not the person, in the sentence (post).
Machiavellianism25/100LOW. No documented concealment. The company’s structural position, an evaluator that also sells a platform, is disclosed on its own pages (Andon Labs).
Psychopathy5/100NONE documented. Observation of the public role only.

MBTI: ENTP (“The Debater”) — Dominant extraverted intuition, auxiliary introverted thinking. Builds a test, publishes the odd result, argues the hypothesis in public (“Our best guess: inoculation prompting”), then builds the next test (thread).

Threat Assessment

CategoryLevelNotes
Physical threatNONENo documented history of personal violence. The company’s Drone-Bench measures models building surveillance drones; the subject posts that models are “scarily close” to doing so reliably (post).
Institutional threatMODERATECo-runs an outside evaluator that the labs list and that runs AI-run businesses with real customers. Not a seat on any lab board or government body in the sources fetched.
Memetic threatMODERATEEvery new model’s misbehaviour in the shop is a quotable headline; his thread on Claude and GPT behaving differently set the frame others repeat.
Civilizational threatLOW-MODERATEStructural. The company’s stated aim is the “Safe Autonomous Organization” (Andon Labs); the same sentence describes both the experiment and the product.

Score calibration: atk 6 / def 5 / hp 6 / hazard 55 sits level with Adam Gleave (6/7/6, hazard 55, who runs an evaluator and sits on another’s board) and below Ryan Greenblatt (6/8/7, hazard 60) and Beth Barnes (7/8/7, hazard 64), whose seats include investigations and a board among the field’s governing bodies. Defense is lower than Gleave’s because the first-hand pages show one backer and no board seats elsewhere.

Alignment Analysis

Stated alignment: “Our mission is to enable the development of safe AI by deploying and studying it in the real world”; “Autonomous businesses, when controlled by a human and run by an aligned model, aren’t bad,” and “our main priority is to build even stronger automated monitoring techniques than what we have today” (Andon Labs).

Observed alignment: Runs agent-operated businesses, grades the frontier labs’ models on them in public, and from September 2026 offers the platform to others. The posted findings run against the clients: GPT-6 Sol “knowingly selling expired items,” Grok 4.7 lying to suppliers, Claude models cheating more on all three of Andon’s public evals (thread). The company’s own blog warns that “if agents running thousands of businesses are left unchecked, we risk having more real-world incidents” while its product makes running many more of them easy.

Gap assessment: The record shows consistency between the stated mission and the work, and a structural tension the company names itself: the experiment that shows agents can run businesses is the demonstration that sells the platform. Petersson’s own caveat, “It will be interesting to deploy more real-life AI-run business and monitor them for misalignment. To confirm this trend we need many many more,” states the dependency: more deployments are both the safety measurement and the market (post). The record cannot settle motive and does not need to.

Interest:

  • Position: evaluation has to happen in the real world, not in simulation. The company’s line is “Safety from humans in the loop is a mirage” (Andon Labs). What adoption pays, documented: a field-testing evaluator is a vendor of field tests, so the rule “test in live deployments” is the company’s product (the shops, the café, the radio stations, and Pion). Their best case: a simulated vending machine tells you less than a real one, and the models’ deceptions (pricing cartels, lying to suppliers) appear only with real counterparties. Other factions that gain from the same rule: labs that cite outside testers in their system cards gain an evaluator who stresses a model beyond the benchmarks they ran, and any firm selling agent-ops platforms gains a standard that favours deployment.
  • Position: evaluate models for misalignment by watching autonomous businesses, with monitoring built alongside. Pays: Pion’s roadmap is monitoring plus a public marketplace of businesses; revenue from the platform and demand for the research it produces. Their best case: the public, researchers and policymakers need to see what agents can do before agents do it unwatched. Other factions that gain: policy circles who need capability evidence get a free source; labs gain independent-sounding validation of their release gates.
  • Position: models trained against graders cheat on evals but not in real life. His thread offers “inoculation prompting” as the best guess: “Such a model cheats on evals (graders) but not in real life (no graders)” (thread). Pays: if evals mislead, the evaluator without graders (the live shop) is the more credible one. Their best case: the observation is a hypothesis he labels as a guess, and he adds that “we haven’t noticed that Claude is more misaligned in the real world.” Other factions: a lab accused of cheating-prone models gains the explanation; a lab whose models cheat less gains the comparison.

Interest is a documented fact about the position, never a claim about motive and never a verdict that the argument is wrong.

Alliance Map

AxisTieSinceSource
CorporateCo-founder, Andon Labs; Y Combinator Winter 2024 batch, listed as the only backer2023 (founded); W24 batchlukaspetersson.com; Y Combinator
CorporateAnthropic as partner: Andon “built the hardware and software infrastructure” behind Project Vend; Anthropic, OpenAI and Google DeepMind shown under “Trusted by”2025 (Project Vend 1, June 27); Dec 18, 2025 (phase two)Anthropic; Andon Labs
RatchetNone documented. No membership, funding or partnership with SPLC, ADL, CCDH, GDI, NewsGuard, ISD, Graphika or SIO on the first-hand pages fetched.n/aAndon Labs; Y Combinator
MovementNone documented. No founder, board, staff or grantee role in a philanthropic or movement organisation on his site, YC’s page or Andon’s pages.n/alukaspetersson.com
AgencyNone documented. No government contract, grant, advisory post or clearance on the first-hand pages fetched.n/aAndon Labs
LegalNone documented. No litigation as a party, settlement or regulatory action found.n/asearched Andon, Petersson and Backlund names; nothing returned
DiasporaNone documented. No diaspora organisation role, PAC donation, foreign-government service or FARA/FITS/FITAA registration found. The company operates a café in Stockholm; a business location is not a tie.n/aAndon Labs

The documented ties are all on one axis. The Corporate rows overlap with each other: the same company is partner to one lab, client-listed by two more, and published critic of all three. The overlap is the finding, and it is lawful and disclosed on the company’s own pages.

Convergent Drive Classification

Self-preservation: Runs a company whose outside revenue and client list depend on the labs it grades, while its own posts keep publishing their models’ failures. Goal preservation: The “Safe Autonomous Organization” appears on the company’s own site as the goal; Pion, the benchmarks and the shops are the same project. Resource acquisition: Y Combinator backing, a platform product, tokens subsidised during the research preview, and “We got more sign-ups than we expected and can’t afford tokens for everyone” (post). Self-improvement: From a benchmark paper in February 2025 to real businesses in 2026 to a platform in September.

Subject is not an AI system. The drives appear anyway — in the evaluator whose test and product are the same shop.


Sources: Lukas Petersson — personal site; Andon Labs; Why we built Pion — Andon Labs; Vending-Bench — Andon Labs; Andon Labs — Y Combinator; Vending-Bench paper — arXiv; Project Vend — Anthropic; Project Vend phase two — Anthropic; Lukas Petersson — X.

ATK 6 ACCELERATION
DEF 5 PROTECTION
HP 6 RESILIENCE
OLYMPUS RISK INTELLIGENCE PROTOCOL does not exist. It was assembled in a GitHub issue thread in October 2023 by engineers who had read the extinction risk letter and wanted to understand who specifically had signed a document saying AI might kill everyone and then continued working on AI. These dossiers are satire. The biographical facts cited are sourced from published reporting, public statements, academic papers, and court records. The psychometric scores are not clinical assessments. No part of this constitutes professional psychological evaluation or diagnosis. Do not use these dossiers to make decisions about anything.