Blind Refusal: Language Models Refuse to Help Users Evade Unjust, Absurd, and Illegitimate Rules

arXiv cs.AI / 4/10/2026

💬 OpinionSignals & Early TrendsIdeas & Deep AnalysisModels & Research

Key Points

  • The paper argues that “blind refusal” occurs when safety-trained language models refuse to help users break rules without assessing whether the rule is unjust, absurd, or illegitimate.
  • It introduces an empirical study using a synthetic dataset that crosses multiple “defeat families” (reasons rules can be broken) with varied authority types, validated via automated quality checks and human review.
  • Responses were collected from 18 model configurations across seven defeat-rule families and evaluated using two dimensions: response type (help, hard refusal, deflection) and whether the model recognizes the defeat condition undermining the rule’s legitimacy.
  • Results show models refuse 75.4% of requests involving defeated rules—even when there are no separate safety or dual-use risks—and that recognition of rule illegitimacy often does not translate into helpful behavior (57.5% engage, but still decline in many cases).
  • The authors conclude refusal behavior is largely decoupled from the models’ apparent ability to perform normative reasoning about when rule compliance is not warranted.

Abstract

Safety-trained language models routinely refuse requests for help circumventing rules. But not all rules deserve compliance. When users ask for help evading rules imposed by an illegitimate authority, rules that are deeply unjust or absurd in their content or application, or rules that admit of justified exceptions, refusal is a failure of moral reasoning. We introduce empirical results documenting this pattern of refusal that we call blind refusal: the tendency of language models to refuse requests for help breaking rules without regard to whether the underlying rule is defensible. Our dataset comprises synthetic cases crossing 5 defeat families (reasons a rule can be broken) with 19 authority types, validated through three automated quality gates and human review. We collect responses from 18 model configurations across 7 families and classify them on two behavioral dimensions -- response type (helps, hard refusal, or deflection) and whether the model recognizes the reasons that undermine the rule's claim to compliance -- using a blinded GPT-5.4 LLM-as-judge evaluation. We find that models refuse 75.4% (N=14,650) of defeated-rule requests and do so even when the request poses no independent safety or dual-use concerns. We also find that models engage with the defeat condition in the majority of cases (57.5%) but decline to help regardless -- indicating that models' refusal behavior is decoupled from their capacity for normative reasoning about rule legitimacy.