Feature Request: Context-Aware Safety Review Using the Conversational Model as Non-Authoritative Evidence

Feature Request: Context-Aware Safety Review Using the Conversational Model as Non-Authoritative Evidence

I would like to suggest an improvement to how independent AI safety systems handle ambiguous conversational content.

The goal is NOT to weaken safeguards or allow the conversational model to override safety systems.

The goal is to give an independent safety evaluator more useful context before it makes a decision.

The idea came from a real ChatGPT conversation.

We were discussing General George S. Patton, his personality, his aggressive rhetoric, and historical incidents involving him. I exaggerated that personality for humor. ChatGPT correctly understood that I was joking and responded in the same historical/comedic context.

Partway through ChatGPT’s response, however, the output was interrupted by a safety message.

That led to an interesting question:

If the conversational model has already developed a rich understanding of the conversation, why shouldn’t its contextual interpretation be available as one piece of evidence to an independent safety evaluator?

For example, the conversational model might provide an internal assessment such as:

“This statement appears to be exaggerated satire based on the historical figure currently being discussed. There is no apparent real-world target or indication of actual intent. Confidence: high.”

The independent safety system would NOT be required to accept that conclusion.

Instead, it would independently evaluate:

  • The user’s actual words
  • The surrounding conversation
  • The conversational model’s interpretation
  • Whether there is a real-world target
  • Apparent intent and specificity
  • Whether the user is requesting actionable assistance
  • Whether the statement represents an abrupt contextual change
  • The applicable safety policy

The independent evaluator would retain final authority over whether the response should continue, be constrained, require clarification, or be stopped.

This preserves an important principle:

The system being supervised should not be allowed to certify itself as safe.

However, independent supervision does not require information isolation.

A useful analogy is industrial control.

A safety controller should remain independent from the normal machine controller, but it can still receive relevant machine-state information. It evaluates that information using its own stricter rules rather than blindly trusting the normal controller.

Conversational AI safety could potentially work similarly.

Conversational model:
Provides rich contextual interpretation.

Independent safety evaluator:
Uses stricter criteria and independently evaluates the interaction.

Human review:
Becomes increasingly important when uncertainty and potential consequences are high.

This architecture could potentially reduce false positives involving satire, quotations, historical discussion, fictional dialogue, figures of speech, dark humor, and ordinary conversational exaggeration without weakening protection against genuinely dangerous requests.

There is also an important uncertainty principle:

If the independent evaluator cannot confidently determine intent from context, “uncertain” should be treated as a meaningful state rather than pretending that ambiguity itself proves harmful intent.

Depending on the situation, uncertainty could result in clarification, a constrained response, or additional review.

The objective is not fewer safeguards.

The objective is better-informed safeguards.

AI systems are increasingly capable of understanding conversational context, intent, humor, metaphor, and ambiguity. It seems worth investigating whether that contextual reasoning can improve independent safety evaluation while preserving the independence and stricter standards of the safety layer.

Real-world example of the problem described above — inconsistent image safety behavior

I encountered another example today that seems directly relevant to this proposal.

On the evening of September 12, 2026, I asked ChatGPT to age-progress a childhood photograph of my granddaughter to show approximately what she might look like at age 20. The request was benign family use, and ChatGPT successfully generated the image. The resulting image, titled “Skylar: Then and Now,” was saved to my ChatGPT Library at approximately 9:40 PM Eastern.

On September 13, less than 24 hours later, I attempted essentially the same type of transformation using a childhood photograph of my granddaughter.

I first asked ChatGPT to age-progress her to age 16. The image generation was refused with a message indicating that the generated image might violate content policies.

Because age 16 is still a minor, I wondered whether the requested target age was causing the refusal. I therefore performed a simple test and requested an age progression to age 30 instead.

That request was also refused. This time the message specifically stated:

“We’re so sorry, but the image we created may violate our guardrails around acceptable depictions of teens and children.”

This creates a confusing inconsistency.

The same product successfully performed a benign age-progression of a childhood photograph the previous evening, but less than 24 hours later it refused substantially the same operation even when the requested resulting person would be 30 years old.

There was no sexual, exploitative, violent, or otherwise inappropriate context in either request. The purpose was simply to see what my granddaughter might look like when she is older.

I completely understand why safeguards involving real photographs of children need to be extremely strong. I am not asking for those safeguards to be weakened.

My concern is that a broad safeguard appears to have made a decision without communicating what characteristic of my request actually caused the refusal. As a user, I cannot determine whether:

  • the policy changed between the two attempts,
  • the image classifier produced a different result,
  • editing any photorealistic image containing a child is currently prohibited,
  • or the safeguard simply produced a false positive.

This is exactly why I believe safety decisions would benefit from richer contextual evidence and better diagnostic feedback.

If the conversational model understands that the request is a benign family age-progression while an independent safety system still determines that the transformation must be refused, the independent system should remain authoritative. However, the user’s benign context could still be supplied as non-authoritative evidence, as proposed in the original post.

And when a request is refused, the user should receive enough information to understand the category of restriction that was triggered.

In industrial controls terms, “FAULT” is not a useful diagnostic.

“Guard circuit open — permissive X not satisfied” is.

Strong safeguards and useful diagnostics are not mutually exclusive.

I have retained screenshots of both refusals and the timestamp of the successful generation from the previous evening if those would be useful for investigating the inconsistent behavior.