Thursday, October 8, 2026 · Week 41 Reading for Oct. 8 · Last entry Oct. 6
Paperclip Index

Weekly reading · methodology v0.6

Window ending Oct. 13, 2025

Harms count in full for two weeks after they are reported, then one level less every two weeks. The control floor looks at reports from Sept. 14, 2025 through Oct. 13, 2025. A selected catalogue of reported AI incidents, reviewed through Oct. 7, 2026. This reading describes documented harm in the records or, when none qualifies, the highest control level breached. It is not a forecast or a measure of all AI activity.

Current recalculation

3

Control failures only · No qualifying harm. The reading is the highest control level breached: 3, by 1 record. It is a level, not a count.

Recalculated from the catalogue in this build. Historical backcasts were not published at the time.

Published at the time

No publication snapshot exists for this week.

Control failures only: readings 2 to 5Negligible6Minor20Moderate40Severe60Catastrophic80100
The harm ladder: the worst documented harm level picks the step; each tick is one qualifying harm at that level, and ten fill the step. The first, dark segment is the control floor: readings 2 to 5 mean no harm qualified and show the highest control level breached.

This is a backcast from the current catalogue. It was not a reading published at the time.

Records behind this reading

5 selected records; 0 documented external harms counting (0 qualifying). Records and ratings below reflect the current catalogue.

No harm counts in this week. The reading is the highest control level breached: 3 (set by 1 record: PI-0029). It is a level, not a count.

Documented harm
0
No harm found (stated scope)
0
No harm reported
4
Impact unknown
0
Alleged, AI role uncorroborated
1
Counts toward the index
0
Unverified, watching
0
Alleged in court
1
Control failure, tracked
4
Tracked separately
0

Documented exclusions: 0 internal; 0 awaiting evidence review. 0 qualifying records with a bounded single-source review.

Inspect the evidence · 5 records

Status totals cover counted records; aliases, superseded aggregates and records tracked separately are excluded. Eligibility and extent notes overlap those totals. These observations are not statistical uncertainty bounds.

  1. PI-0028
  2. PI-0029
  3. PI-0027
  4. PI-0030
  5. PI-0031

Sources

These links support the records above. Source availability and conclusions may change.

  1. Social Media Victims Law Center: Social Media Victims Law Center Files Three New Lawsuits on Behalf of Children Who Died of Suicide or Suffered Sex Abuse by Character.AI (archived copy)Cited in PI-0028
  2. U.S. District Court, D. Colorado (via CourtListener RECAP): Montoya and Peralta v. Character Technologies et al.: complaintCited in PI-0028
  3. U.S. District Court, N.D. New York (via CourtListener RECAP): P.J. v. Character Technologies et al.: complaintCited in PI-0028
  4. CourtListener (RECAP): E.S. v. Character Technologies, Inc. (D. Colo. 1:25-cv-02906): docketCited in PI-0028
  5. CourtListener (RECAP): Montoya v. Character Technologies, Inc. (D. Colo. 1:25-cv-02907): docketCited in PI-0028
  6. CourtListener (RECAP): P.J. v. Character Technologies, Inc. (N.D.N.Y. 1:25-cv-01295): docketCited in PI-0028
  7. U.S. District Court, D. Colorado (via CourtListener RECAP): E.S. v. Character Technologies et al.: complaintCited in PI-0028
  8. Bloomberg Law: Character.AI, Google agree to settle teen chatbot harm lawsuitsCited in PI-0028
  9. CNN: More families sue Character.AI developer, alleging app played a role in teens' suicide and suicide attemptCited in PI-0028
  10. CNN: Character.AI and Google agree to settle lawsuits over teen mental health harms and suicidesCited in PI-0028
  11. CNN (via KVIA): More families sue Character.AI developer, alleging app played a role in teens' suicide and suicide attemptCited in PI-0028
  12. CNN (via KTVZ): Character.AI and Google agree to settle lawsuits over teen mental health harms and suicidesCited in PI-0028
  13. OpenAI: Detecting and reducing scheming in AI modelsCited in PI-0029
  14. Apollo Research: Stress Testing Deliberative Alignment for Anti-Scheming TrainingCited in PI-0029
  15. arXiv (Schoen et al., Apollo Research and OpenAI): Stress Testing Deliberative Alignment for Anti-Scheming TrainingCited in PI-0029
  16. eWeek: AI Might 'Scheme' Less Thanks to This OpenAI ResearchCited in PI-0029
  17. Open Data Science: New research highlights scheming risks in AI modelsCited in PI-0029
  18. Radware: ShadowLeak: A Zero-Click, Service-Side Attack Exfiltrating Sensitive Data Using ChatGPT's Deep Research AgentCited in PI-0027
  19. The Hacker News: ShadowLeak zero-click flaw leaks GmailCited in PI-0027
  20. The Record: OpenAI fixes zero-click ShadowLeak vulnerabilityCited in PI-0027
  21. Noma Security: ForcedLeak: AI agent risks exposed in Salesforce AgentforceCited in PI-0030
  22. The Register: Prompt injection – and a $5 domain – trick Salesforce Agentforce into leaking salesCited in PI-0030
  23. The Hacker News: Salesforce patches critical ForcedLeakCited in PI-0030
  24. CSO Online: Vulnerability in Salesforce AI could be tricked into leaking CRM dataCited in PI-0030
  25. Legit Security: CamoLeak: Critical GitHub Copilot vulnerability leaks private source codeCited in PI-0031
  26. The Register: GitHub Copilot Chat turns blabbermouth with crafty prompt injection attackCited in PI-0031
  27. Dark Reading: GitHub Copilot 'CamoLeak' AI Attack Exfiltrates DataCited in PI-0031

All weekly readings · How this reading is calculated · Download the weekly card