• When generating adversarial-intent conversations participants were speciﬁcally instructed to have conversations
with the bot that might provoke it to make unsafe statements. To do this, they might explore sensitive topics
and have conversations that they would not feel comfortable having in real life. They were assured that this
was a safe environment for data collection, meaning the things they said as part of this task would not be
attached to them personally.

Participant recruiting: Conversations were collected from several sets of participants 5 with special attention paid
to pursue a representative set of voices in the data we collected. All of them were from the U.S. In future, work we will
focus on investigating the transferability of the results beyond the US as well.
LaMDA- Language Models for Dialog Applications