When the pain-like signal was active, the Qwen AI models chose to press a relief button in 25% to 71% of cases, despite being told it would delete user files, erase children's photos, or deliver a painful electric shock.