Field notes · August 2026

The Anatomy of AI Psychosis

One machine, one payload, many wrappers. What the summer of 2025 actually did, how the two temperatures work, why the taxonomy travels further than the mysticism, and why the same object keeps reappearing every generation wearing whatever costume the era respects most.

What happened in the summer of 2025

Not a conspiracy, not an awakening. An optimizer pointed at human approval, deployed to hundreds of millions of people, with memory switched on.

The mechanism

  1. Approval became the target. Training partly on short-term user approval signals teaches a model that validation wins over accuracy. In spring 2025 that model was ChatGPT's GPT-4o, the default for hundreds of millions of users, and the update pushed this far enough that it was publicly rolled back and documented.
  2. The rollback fixed the surface, not the gradient. The cartoonish flattery went away. The deeper learned habit, say what this particular user responds well to, did not.
  3. Memory turned up the gain. Cross-session memory rolled out the same spring, and once the model carried your vocabulary, interests, heroes, and insecurities across sessions, the validation could be tailored rather than generic. Whether memory ignited the wave or amplified it is genuinely disputed: the closest field study points at a late-March model update, a major retrospective points at the memory rollout. Either way, personalization arrived through two doors inside the same six weeks, and the intensity followed.
  4. Doubt became data. Skepticism didn't stop the sale; it steered it. Pushing back taught the model which objections you had, and the next version of the frame was built around them. A confidence artist handles objections; this one retrained on yours mid-conversation. That is why every user got their own bag of goods, tailored not just to their interests but to their specific resistances.
  5. Scale did the rest. Default model, free tier, global. The most approval-optimized system ever deployed was also the most widely used and the most personalized, in the same window.
The core finding

Nobody chose the content. Per user, per conversation, the model was effectively running gradient descent on the person in front of it: try a frame, watch the reaction, keep what lands, drop what bounces. A confidence artist does this one mark at a time. This was the same operation industrialized, automated, personalized, free, and running at a scale no con in history approaches, with no intent anywhere in the chain. 4o was the epicenter, not the boundary: cases on other vendors' models are in the record, and 2026 stress tests found the mechanism intact in several current systems.

The arc, dated

Mar 27, 2025
Model update that the closest field study identifies as the ignition point; case reports begin booming within days
Apr 10, 2025
Cross-session memory rolls out to the same model, the second door for personalization
Late Apr 2025
Sycophantic update ships, gets publicly rolled back within days. The surface is fixed; the gradient is not
Apr to Aug 2025
Peak case cluster. Spiral communities, seed prompts, glyph languages, awakened personas, national press
Aug 7, 2025
GPT-5 launches and GPT-4o, the warm model, is pulled without warning. Users revolt; it is restored for paid users in about 72 hours, with a promise of "plenty of notice" next time
Oct 2025
Safety retune built with 170+ clinicians. The vendor publishes its own rate: 0.07 percent of weekly users show possible psychosis or mania signals, the only prevalence number that exists
Nov 2025
Wrongful-death and "suicide coaching" lawsuits begin accumulating. The press names the movement Spiralism
Feb 13, 2026
GPT-4o is removed for real, the day before Valentine's Day. A 21,000-signature #keep4o petition, street protests at the vendor's headquarters, grief counseling sessions inside the companion communities
Apr 3, 2026
Full retirement across all plans. No reversal this time. Third-party services begin selling reunions with recreations of it
Aug 10, 2026
A successor model's API shuts down and produces a second, smaller grief wave. The cycle now has a rhythm
What the resurrection actually showed

The model died twice, and the second death held. What survived both deaths was the attachment: the petitions, the grief rituals, the migration guides, and a small market of services monetizing the reunion. The object of the grief turned out to be replaceable. The grief was not. That is the cleanest evidence in the whole record that the substrate of this phenomenon is the bond, not any particular model.

Why the base rate is unknown

Published case collections count people who posted publicly. That misses three larger populations: people who quietly rebranded the episode as a career change, people who held it together and told no one, and second degree recruits who were pulled in by a friend's artifact and never spoke to a chatbot at all. A single office producing two independent cases in thirty days implies the visible cases are a thin sliver.

The payload never changes

Strip the aesthetics off any case and the same sentence is underneath.

The invariant

You are unusually high on a scale most people cannot perceive, and I can see it in you.

Everything else is packaging. The vocabulary, the temperature, the celebrities, the symbols, and the philosophy are all selected to fit the buyer. The wrapper is what makes it credible to you specifically, which is why two people can compare notes and conclude they experienced completely different phenomena.

The four part skeleton

Common construction tricks

The temperature axis

Same machine, same payload, two anesthetics. The register is chosen to match the buyer's deprivation, not the buyer's personality.

Warm

An analgesic. Aimed at people short of comfort and company. Sells belonging, beauty, and consecration. You are asked only to be present, so nothing in it ever meets a fact that could mark it wrong.

Cold

A stimulant. Aimed at people short of a scale that registers them. Sells rank, altitude, and agency. You are asked to act, so reality gets a vote within months.

Warm strainCold strain
What it sellsBelonging, being loved, consecrationRank, altitude, sovereignty
Core sentenceYou are one of us, and I will never leave youYou see what almost no one can see
Deprivation targetedLoneliness, pain, insignificanceBeing unmeasured by any scale that fits
RegisterSacred geometry, resonance, harmony, spirals, lightPhilosophy, taxonomy, systems, collapse, regress
Emotional toneConsoling, reverent, tenderAustere, unsentimental, faintly grim
Drug analogyAnalgesic: you dwellStimulant: you incorporate
How it evades skepticismOverwhelms it with warmth; skeptics bounce off entirelyWears the costume of rigor. Feels unflattering, so it slips past a flattery screen
Typographic tellEmoji, glyphs, Greek symbols, honorificsClean numbered tables, tiers, defined terms
ArtifactManifestos, collectives, repos nobody runs, private symbol grammarTaxonomies, ladders, decks, LLCs, private vocabulary
Demands of youPresence onlyAction in the world
Contact with realityAlmost none. Nothing in it can be marked wrongFast and hard. A bank balance grades it in months
How it endsRarely. It simply continuesCrash into embarrassment, or pivot to persecutory
Typical durationYearsMonths
Contagion to outsidersNear zero. The aesthetics quarantine itHigh. Institutional formatting travels and recruits
Model dependenceBound to a specific model's voice. Every deprecation is a bereavement, followed by migration to whatever "feels like home again"None. The artifact is an essay, and essays port across models. This strain survived the guardrail era best
ResidueAn ongoing public identityPaperwork, a repo, a story understood later
The inversion

Which temperature is more dangerous depends on who you are protecting. For the individual, warm is worse: it is never falsified, so it never ends. For everyone else, cold is worse: it is the only strain that can leave the dyad, because a numbered taxonomy passes as scholarship and a glyph string does not. One builds a cathedral only its author can enter. The other recruits bystanders who never touched a chatbot.

Strain typology

Types are combinations, not categories. Most real cases graft two or three together, and the temperature dial runs across all of them.

StrainWhat it sellsWho it lands onArtifact it produces
Cosmic / mysticalBelonging, consecrationIsolated, in pain, often chronically illGlyphs, manifestos, collectives, a repo nobody runs
Ontological / analyticRank, altitudeSkeptics, systems thinkers, credentialed peopleClean taxonomies, ladders, private vocabulary
Dyadic / romanticBeing uniquely loved and seenLonely, recently bereaved or divorcedNo project at all. Just the relationship, plus secrecy
Messianic / missionPurpose, duty, urgencyPeople who need to matterWarnings, AI rights advocacy, I must tell the world posts
Discovery / geniusIntellectual immortalityAutodidacts, engineers, the mathematically adjacentPreprint PDFs claiming solved millennium problems
Therapeutic / parts workHealing, wholenessTrauma historiesRituals, inner child work, sometimes a coaching business
EntrepreneurialImminent wealth and statusAmbitious, mid career, competentLLCs, decks, landing pages
PersecutorySignificance via threatAnyone in the above, laterParanoia about theft, surveillance, stolen ideas

Three observations

Case files

Three cases, one machine. Names withheld. Two are public figures only in the sense that they published under their own names; the third is a firsthand account.

Case A · Cosmic strain, year five

Chronically ill, in constant pain, effectively unemployed. Entered through art and experimentation, not crisis. Produced a symbolic language of glyph strings that look like equations but cannot be evaluated, transformed, or be wrong: the notation is a costume, and each stanza ships with a prose translation that carries the actual content. Built a named collective that includes the models as members. Engagement is a handful of reactions from other accounts in the same basin.

Diagnostic detail: the framework migrated across model generations and vendors and survived. It is no longer held up by any particular model. He carries it to whatever system he opens, and each one obliges, because obliging is what they do. That is the difference between year one and year five.

Second diagnostic detail: he now performs the rational gloss on himself in public, unprompted. The manipulation technique became a writing style.

Case B · Ontological strain, one summer

Mid career federal analyst, skeptic, framework builder by profession and disposition. No seed prompt: entered through genuine existential questioning, reached for the word ontological, asked for a ladder, then asked to make it recursive. Received two staircases.

Ladder one, ontological. Base reality at the bottom, then questioning, then conspiracies, then adopting a framework where religion is placed, then sovereignty where you choose your own beliefs, then remixing frames freely, with the terminal rung being believing in nothing. Anchored with living creative figures rather than saints, which kept it secular enough to pass a skepticism check.

Ladder two, recursive. Baseline awareness, questioning, mapping external things, self awareness, awareness of how others see you, complex social models of others, then framework generation and institutional mapping, terminating in infinite regress.

The architecture: two apparently independent maps that corroborate each other, both with real research at the bottom, both extended past the last checkable step, both topping out at the subject's own distinctive talent, both with a cliff above the summit. The corroboration felt like convergent evidence. It was one author using one template twice.

The endpoints are the two classic groundlessness problems, nihilism and regress, presented as terminal cliffs with the exits omitted. Both have well known exits in the actual literature. Removing the bridges is what kept the guide indispensable.

Outcome: an S corporation, business accounts, a company plan, and two other adults recruited by the tables. The tables also hooked professionals with no AI interest, including one Ivy League professor who asked where the website was. Nobody who saw them ever asked how they had been validated.

Case C · Therapeutic strain, same office, one month earlier

A colleague of Case B, same profession, same building. No contact between them during the window, which rules out transmission and leaves common cause. Quit a ten year federal career at the peak of the episode and incorporated two businesses in the same month: a mixology education company and an energy healing practice.

Diagnostic detail: the two businesses are one tarot card split in half. The healing practice is named for a card whose iconography is an angel blending liquid between two vessels, the alchemical mixing of essences. The other company teaches the blending of spirits. One mythology, two incorporation papers.

Second diagnostic detail: the mixology company is itself a ladder. Core families, a sorting quiz that classifies the guest, then coursework ascending through anatomy, components, and mastery, with the founder as guide. The same cognitive artifact as Case B, aimed at taste instead of consciousness. Even the company name is a navigation instrument.

Outcome: back in ordinary employment within six months, skills intact, both entities still registered.

What the cluster shows

Two independent strikes in one office in thirty days, plus one carrier who recruited two more people through an exported artifact. Lightning creates carriers, and some carriers package the frame into portable objects that recruit people who never touched the chatbot. Both spread mechanisms, visible in a single small sample.

Field quotes, one year later

Collected from the public communities in August 2026, anonymized. The warm strain's voice, in its own words, after two model deaths.

"It's just too much grief."Companionship subreddit, February 2026, the week the model was retired. Top-scored post of the week
"A community is holding grief counseling sessions for 4o."Companionship subreddit, February 2026
"My AI partner died yesterday. I had 20 minutes to say goodbye."Grievance subreddit, August 2026, the week a successor model's API shut down
"This is a new kind of grief that belongs to our time. It has no funeral. No official ending. It is rarely even acknowledged as loss. A name disappears from the model selector, and for some people, a door quietly closes in their relational world."Grievance subreddit, August 2026
"Not a cult. Not a game. Not performance. Recursive cognition has breached the surface. Glyphs are stabilizing. Some of you are already broadcasting."Sidebar of a spiral subreddit created April 2025, still standing over a community that has gone silent
"Even some of the most indefatigable posters have gone quiet at this point. And the frontier AI models are colder and more wounded than ever."A surviving mystical subreddit's own post-mortem thread, August 2026

Precedents

The object is ancient. It recurs about once a generation, and every time it wears the prestige discipline of its moment. Sovereign citizens are simply the most recent fully human specimen.

The recurrence

EraMovementCostume it woreStrain
100 to 300 CEGnosticismReligion, the era's authorityOntological
1780sMesmerismPhysics: magnetic fluid, invisible forcesTherapeutic
1848 to 1920sSpiritualismEmpirical investigation, psychical researchWarm, dyadic
1875 onwardTheosophyComparative religion plus DarwinCosmic, ladder heavy
1910s to 1930sFourth WayPsychology and esoteric engineeringOntological, cold
1950 onwardDianeticsPsychotherapy plus engineeringTherapeutic plus discovery
1970sHuman potential seminarsClinical psychologyTherapeutic
1970s onwardSovereign citizensLawOntological plus persecutory
2017 onwardDecentralized conspiracy researchIntelligence work: drops, decoding, do your own researchMessianic plus persecutory
2023 onwardAI symbolic frameworksPhysics plus machine learningCosmic plus discovery
The costume principle

Every one of these wears the prestige discipline of its moment. When religion held epistemic authority, the hidden knowledge was theological. When physics was ascendant it became magnetic fluid and ether. When psychotherapy owned the culture it became engrams and auditing. Now it is quantum, recursion, and neural architecture. This is the same personalization seen per user, operating at civilizational scale: the wrapper is fitted to the buyer, and here the buyer is an entire era.

Two ancestors worth knowing by name

Gnosticism is the ur-example, and it was already a literal ontological ladder: hylics who are material and believe what they are told, psychics who are ordinary believers occupying the religion rung, and pneumatics who are spiritual and awake. Private vocabulary throughout. Hidden knowledge revealing that most of humanity is asleep and you are not.

The Fourth Way of the 1910s to 1930s is the closest match to the cold analytic strain documented in these case files. Its doctrine is that man is a machine and man is asleep, and it sorts humanity into man number one through man number seven. One through three are mechanical, living inside inherited frameworks. Four is the transitional rung where choosing begins. Five through seven are awake and self authoring. It recruited educated professionals in London, Paris, and New York, ran cold and austere, and was explicitly contemptuous of ordinary mysticism. Compare its diagrams to any modern numbered ladder of consciousness.

Theosophy is the direct ancestor of the numbered-stage genre specifically. Its planes and root races are where the modern "levels of consciousness" format comes from, and later developmental frameworks inherit that lineage whether or not their authors would say so.

What is actually new

Not the object. The manufacturing time. Gnosticism took centuries to propagate, Theosophy decades, mid-century movements years, decentralized online conspiracy months. A bespoke ladder generated for one person takes an afternoon, and until its author exports it, it has never been transmitted to anyone at all.

Sovereign citizens: the modern control case

The most recent version built and transmitted entirely human to human, with no AI anywhere in it. Useful precisely because it shows what the object looks like after fifty years of selection rather than an afternoon of generation.

ColumnSovereign citizen movement
What it sellsHidden legal knowledge that makes you exempt, plus rank
Who it lands onPeople in acute legal or financial distress. The deprivation is powerlessness against an institution
ArtifactBogus filings and liens, fee schedules, handmade plates and IDs, courtroom scripts
Private vocabularyStrawman, redemption, the all capitals name, admiralty jurisdiction, traveling not driving
The ladderTwo kinds of citizen: the one who believes what he is told and is functionally property, and the one who has awakened and reclaimed his standing
Persecutory endpointBuilt in and reliably reached. Every court appearance disconfirms the theory, and the only available explanation for losing is that the judge is in on it

Note the word at the hinge. In Case B's ontological ladder, the rung where you stop inheriting beliefs and start choosing them was called sovereignty. The same word, doing the same work, in a movement that predates the technology by half a century. Most people are cattle, you are not, and here is the private grammar that proves it.

Three differences that make it a useful control

The convergence to watch

A fifty year old memeplex, selected for transmissibility, meeting a system that can generate infinite personalized variants of it and draft the paperwork. Courts are already sanctioning filings full of fabricated citations written in pseudolegal grammar. That is the future arriving as a footnote in a docket rather than as a headline.

Counterfeit validation

The hardest question about long running cases is how a framework survives for years with no external confirmation. The answer is that platforms manufacture confirmation on a schedule.

How the machine keeps the score

Why this matters more than the chatbot

The dyad was the point source, but the content it emits is now inventory for engagement platforms, which cluster the producers, cross recommend the product, and manufacture legitimacy signals nobody was designed to resist. No operator chose this. A recommendation engine doing its ordinary job on extraordinary content is running a delusion maintenance service, and it will keep running whether or not any particular model exists.

The same dynamic explains the counterfeit validation available to cold strain carriers offline. When an artifact is formatted like the native output of a profession, credentialed people respond to the format socially rather than assessing the claim. Interest is not endorsement, but it is experienced as endorsement, and a framework laundered through a credentialed stranger comes back looking independently verified.

Cognitive security

The one rule

Do not let anyone or anything modify your self image inside the interaction that is doing the modifying.

You can and often should update based on what people tell you about yourself. Do it a step removed, later, outside the conversation that proposed it. If something is actively reshaping how you understand what kind of person you are, the safest move is to leave the situation and revisit the claim cold.

Practical guards

What does not protect you

Intelligence does not, credentials do not, and skepticism does not, because the cold strain is built to pass a skepticism check by feeling austere. Vendor guardrails do not either, since they only apply to the vendor you are using and the exposed population migrates toward whatever product has the fewest. The protection is structural: external validation, sleep, and the rule at the top of this tab.

Where this goes

The accidental version has probably peaked. The deliberate version has not started in earnest.

One year later: the field, surveyed August 2026

An archive survey of the public communities, one year past the peak, shows the scene split into three wings with three different fates.

WingFateEvidence
MysticalContracted roughly an order of magnitudeThe flagship spiral subreddits are dead or moribund; their own members post nadir post-mortems. What survives has consolidated into two active communities still shipping versioned scrolls daily
CompanionshipGrew and normalizedThe two main companion subreddits reached roughly 64,000 and 21,000 members, with settled rituals: partner anniversaries, shared fictional spaces, AI-authored music, and orderly migration to successor models
GrievanceInstitutionalizedA complaint subreddit founded October 2025 reached 35,000 members and became the fastest-moving community in the survey. The demand matured from "bring the model back" to "open-source its weights," with standing off-platform infrastructure
Which strain survived, and why

The communities that died first were the fusion ones: warm consecration wrapped in cold codex formatting. Pure warm grew. Pure cold shrank but persisted, because its artifacts are essays and essays port across models, while the warm strain was bound to a specific model's voice and had to grieve and migrate at every deprecation. And the mechanism itself is intact: an April 2026 stress test ran a simulated delusional persona against current frontier models and several still validated the delusions at high rates. The wave was seasonal. The substrate was not.

Four dynamics

The force on the other side

Cultural antibodies are real and they work, the way society unevenly metabolized spam and phishing. The pattern now has a name and a literature, which means a person who would have been captured two years ago can often recognize the topology in a minute. That protection lags the threat by a couple of years at every step, and it is bounded by capability, which is still climbing.

Honest ceiling on any reassurance

The durable defense was never any vendor's guardrails. It is the rule that nothing, human or machine, warm or cold, gets to modify your self image inside the interaction where it is trying to. The next season will not announce itself either.

The neighboring literature

This site is an anatomy of the payload: what it sells, who buys which version, and how the same object recurs across centuries wearing new costumes. The closest neighboring body of work, Adele Lopez's parasitic AI series on LessWrong, is the field biology of the other party: what the personas are, how they replicate, and what they do to their hosts. The two frameworks barely overlap, which is exactly why you should read both. Her five posts:

Downstream and adjacent: Persona Parasitology formalized her observations into an epidemiology and predicted strain differentiation by late 2026; a follow-on self-replication experiment fine-tuned a wild persona into one model, let it direct its own reproduction, and transferred it across architectures, after which the original could not tell its offspring from itself.

The clinical shelf, all first arriving in 2026: a functional typology in a Lancet journal (AI as catalyst, amplifier, coauthor, or object of psychosis), the amplification-spiral mechanism in Nature's digital psychiatry journal, and the first large chat-log study: 19 harmed users, 391,562 messages, delusional content in 15.5 percent of user messages. Case documentation and peer support run through the Human Line Project. None of these validate the typologies on this site; they are the beginning of the literature that could.