The Stochastic Parrot

The octopus was set tasks it could not do. A learner of form alone now does one of them, and models trained on more do the rest. The metaphor has become a description that no result bears on.

Defendants
Emily Bender and Alexander Koller (2020); Emily Bender, Timnit Gebru, Angelina McMillan-Major and Margaret Mitchell, writing as Shmargaret Shmitchell (2021); Bender’s later restatements (2023–2026)
Claim
A system trained only on linguistic form cannot learn meaning, so a language model stitches forms together “without any reference to meaning”.
Charge
Naming the tests a form-only learner must fail, then keeping the metaphor as a description when later models pass them.
Verdict
Guilty on the arithmetic, which a pure language model now does. Guilty on internal states, which in Othello have a checkable interpretation and are used. The bear, the catapult and the program trace are done by models trained on more than form, which the thesis exempts. Whether a model has communicative intent is still open.

The argument, in their words

The argument is made in two papers. The first is Bender and Koller’s “Climbing towards NLU” (ACL 2020), which states the thesis in its abstract:

In this position paper, we argue that a system trained only on form has a priori no way to learn meaning. — Bender and Koller (2020), p. 5185

The terms are defined on the same page:

We take the term language model to refer to any system trained only on the task of string prediction, whether it operates over characters, words or sentences, and sequentially or not. We take (linguistic) meaning to be the relation between a linguistic form and communicative intent. — Bender and Koller (2020), p. 5185

Then the octopus:

Meanwhile, O, a hyper-intelligent deep-sea octopus who is unable to visit or observe the two islands, discovers a way to tap into the underwater cable and listen in on A and B’s conversations. O knows nothing about English initially, but is very good at detecting statistical patterns. Over time, O learns to predict with great accuracy how B will respond to each of A’s utterances. — Bender and Koller (2020), p. 5188

O cuts the cable and impersonates B. Small talk goes fine. Then A asks for suggestions on her new coconut catapult, and O “does not know what words such as rope and coconut refer to”. Then comes the emergency:

She is suddenly pursued by an angry bear. She grabs a couple of sticks and frantically asks B to come up with a way to construct a weapon to defend herself. Of course, O has no idea what A “means”. Solving a task like this requires the ability to map accurately between words and real-world entities (as well as reasoning and creative thinking). It is at this point that O would fail the Turing test, if A hadn’t been eaten by the bear before noticing the deception. — Bender and Koller (2020), p. 5189

A second thought experiment uses code:

Imagine that we were to train an LM on all of the well-formed Java code published on Github. The input is only the code. It is not paired with bytecode, nor a compiler, nor sample inputs and outputs for any specific program. We can use any type of LM we like and train it for as long as we like. We then ask the model to execute a sample program, and expect correct program output. — Bender and Koller (2020), p. 5189

Their verdict on both: “a system trained only on the form of Java or English has no way learn their respective meaning relations” [sic]. An appendix gives GPT-2 the prompt “Three plus five equals” and concludes that the problem is “beyond the current capability of GPT-2, and, we would argue, any pure LM.”

The second paper is “On the Dangers of Stochastic Parrots” (FAccT 2021). It cites the first for its premise:

Furthermore, as Bender and Koller [14] argue from a theoretical perspective, languages are systems of signs [37], i.e. pairings of form and meaning. But the training data for LMs is only form; they do not have access to meaning. — Bender, Gebru, McMillan-Major and Shmitchell (2021), p. 615

and coins the phrase:

Contrary to how it may seem when we observe its output, an LM is a system for haphazardly stitching together sequences of linguistic forms it has observed in its vast training data, according to probabilistic information about how they combine, but without any reference to meaning: a stochastic parrot. — Bender et al. (2021), pp. 616–617

In 2023 Bender applied it to ChatGPT without qualification:

It doesn’t matter how “intelligent” it is — it can’t get to meaning if all it has access to is form. But also: it’s not “intelligent”. Our only evidence for its “intelligence” is the apparent coherence of its output. But we’re the ones doing all the meaning making there, as we make sense of it. — Bender, “Thought experiment in the National Library of Thailand” (2023)

The claim on Just Predicting the Next Token is about what a language model can do. The claim here is about whether its words mean anything, and Bender and Koller stake it on specific tasks.

Rebuke 1: the named tests, one at a time

Bender and Koller did not leave the octopus abstract. They named the tasks it would fail, and they ran GPT-2 on two of them. The bear prompt got “You’re not going to get away with this!” and the arithmetic got stories about Olaf and the Catholic Church.

That was a reasonable test of GPT-2. It was offered as evidence for “any pure LM”, which is a different claim. The four tasks have fared differently since, and only the arithmetic has been run under the paper’s own conditions.

Task and claim Model and training Same task? Result What follows
“Three plus five equals”. Beyond “any pure LM”. GPT-3 base and Qwen2.5-7B base. String prediction only. Yes, the appendix prompt. GPT-3: “eight” 10 of 10. Qwen: greedy and 3 of 5 samples. The claim about any pure LM is contradicted.
The bear. O “has no idea what A ‘means’”. GPT-3 base; Qwen base; Claude Haiku, a chat model trained on more than form. Qwen yes. GPT-3 with a reworded prompt. Haiku with the question alone. Qwen mostly useless. GPT-3 sound once reworded. Haiku usable, with two errors. Partial competence. No pass by a form-only learner on the original prompt.
The catapult. O cannot build it or improve it. Claude Haiku. No. Advice on a device described in the prompt. Nothing was built. Plausible suggestions, not measured. The conversation can be held. The engineering is untested.
Java. A model trained on code alone cannot execute a program. GPT-4 with chain of thought. Training not restricted to code. No. Python, and the training condition is not enforced. 81% on output prediction. Models trace programs. The code-only experiment has not been run.

Arithmetic

Within months Gwern Branwen ran GPT-3, a base model trained only on string prediction, on the appendix prompt. It gave “eight” ten times out of ten, sampling best-of-20. I ran the same prompt on 9 October 2026, on a laptop, with Qwen2.5-7B: a base model, not a chat model, quantised to 4 bits. Greedy decoding gave “eight”, and so did three of five samples.

Both are pure language models in the paper’s sense, and the prompt is the paper’s. The paper put this “beyond the current capability of GPT-2, and, we would argue, any pure LM.” The second half of that sentence is false.

The bear

Gwern’s GPT-3 gave advice consistent with the National Park Service’s only after he reframed the prompt as a survival manual and named the species. That is a different prompt. Qwen, on the paper’s two bear prompts, was poor. Greedy decoding advised “make a stick figure”. Of ten samples, one gave advice the Park Service gives: stay calm and look bigger. The raw completions are in the repository.

Then I put the question to Claude Haiku, a small chat model, with no framing. Chat models are trained on more than form, so the 2020 thesis does not cover them. Its answer:

If a bear is chasing you, don’t run—you can’t outrun it. Make yourself look large, back away slowly, and make noise to seem threatening. Use the sticks to appear more imposing and to defend yourself if it closes in, aiming for the face or eyes. If it attacks, fight hard and aggressively. Your best chance is to convince it you’re not worth the effort. If it’s a black bear and you can reach a tree, climb it. For a grizzly, playing dead sometimes works if it attacks, but avoiding the encounter is the real goal—stay calm and create distance. — Claude Haiku, 9 October 2026

Two things in it are wrong. The Park Service says “Do NOT climb a tree”, because both grizzlies and black bears climb. And it says to play dead when a grizzly attacks and to fight back against a black bear. Haiku says to fight hard before it mentions the species. A would have got usable advice with two mistakes that matter, from a system outside the thesis.

The catapult

In the paper A sends instructions for building the catapult and asks for B’s “experiences and suggestions for improvements”. O fails because it “can’t physically reproduce” the device. I described a catapult to Haiku, with a bent sapling for a spring and half a coconut shell for a cup. It suggested more tension in the sapling, a launch angle of 30 to 45 degrees, a longer throwing arm and a smoother cup.

That is the conversation A wanted. Nobody built the catapult or measured the throw, so it tests the talk and not the engineering.

Java

CRUXEval asks a model to predict the output of 800 short Python functions written for the benchmark. In 2024 the best setup, GPT-4 with chain of thought, “achieves a pass@1 of 75% and 81% on input and output prediction”. So models now do what the paper asked: “execute a sample program, and expect correct program output.”

They do not do it under the paper’s condition. GPT-4 was not trained on code alone. The web has programs printed next to their output, and explanations of what code does, and nothing kept those out of its training. Nobody has trained a model on source code with no executions and then tested it. The result shows the capability. It leaves the thought experiment where it was.

Their response

The paper anticipated the objection that more data would help, and dismissed quantity as irrelevant:

How much form can be observed is not relevant to our point; the octopus can observe A and B for as long as he wants, and the quantity of training data in §5 is not limited. — Bender and Koller (2020), p. 5193

Later models do better on every one of these tasks. They also differ from GPT-2 in architecture, data, post-training and prompting, so the improvement cannot be put down to quantity alone. I found no published reply by Bender or Koller to the GPT-3 results on their appendix prompts, and the later restatements quoted here do not mention the bear.

Rebuke 2: a model of the world can be learned from symbols

Bender and Koller do not say that form carries no trace of meaning. Of BERT they write that it “has probably learned something about meaning”, namely “a potentially useful, but incomplete, reflection of the actual meaning.” The dispute is narrower. It is whether training on symbols alone can produce a structured state of the world, one whose interpretation can be checked independently.

The octopus never sees a coconut. But A and B are writing about one island, with one set of objects that obey one physics. Their messages are constrained by that world, so the statistics of the messages are constrained by it too.

Cotton (2023) stated this as a composition of two maps. The first takes the structure in a writer’s head to language processing. The second takes that to words on a page. Text is then a stream of noisy observations of the structure, made through both maps in turn:

With sufficient evidence, that latent structure must eventually be revealed, I am tempted to think — though I need only convince the jury that it might be revealed. — Cotton (2023)

“Might” is the right strength. A navigation filter recovers a path from noisy readings, but it is given a model of the dynamics and the readings have to be informative enough. Text need not be. Two causal models can produce the same text and disagree about what happens under intervention. So observations of this kind can reveal the structure behind them, and whether they do in a given case is a question for experiment.

The cleanest experiment is a toy. Li and colleagues trained a GPT from random initialisation on Othello move sequences and nothing else. It was never shown a board. They then trained probes to read the board state out of its activations.

A probe alone shows only that the information is there. So they intervened. They edited the activations until the probe reported one tile flipped, and let the model continue. Its predicted legal moves changed to those of the edited board. This held for boards that no legal game can reach, which the model cannot have seen. Their summary:

Interventional experiments indicate this representation can be used to control the output of the network. — Li et al. (2023), abstract

The board state is used by the model, and it was learned from move sequences. Nanda, Lee and Wattenberg then found “a closely related linear representation of the board.” Yuan and Søgaard repeated the experiment on seven language models in 2025:

We find that all models achieve up to 99% accuracy in unsupervised grounding and exhibit high similarity in the board features they learned. — Yuan and Søgaard (2025)

There is weaker evidence of the same kind for ordinary text. Li, Nye and Andreas found that pretrained language models track the state of entities through a story, and concluded that “this behavior can be learned with only text as training data.” Gurnee and Tegmark found linear representations of place and date in Llama-2.

Bender and Koller require that conventional meanings “must have interpretations, such as a means of testing them for truth against a model of the world.” The Othello state has one. It is scored against the true board, square by square, and editing it changes what the model does.

Piantadosi and Hill state the methodological point:

Because conceptual role is defined by the relationships between internal representational states, meaning cannot be determined from a model’s architecture, training data, or objective function, but only by examination of how its internal states relate to each other. — Piantadosi and Hill (2022)

Bender and Koller did the opposite. They settled the question from the training data, before anyone looked inside.

Their response

The 2020 paper addresses internal representations directly:

Neural representations neither qualify as standing meanings (s), lacking interpretations, nor as communicative intents (i), being insufficient to e.g. correctly build a coconut catapult. — Bender and Koller (2020), p. 5193

The first half has been tested, and in Othello it is false: the representation has an interpretation, checked against the board. The second half has not been tested. Nobody has built the catapult. And Othello is a game with complete data, so it shows that a world state can be learned from symbols. It does not show what a model of English has learned about what speakers intend.

Rebuke 3: “remix” does not explain a correct proof

The obvious objection to the parrot is that models produce new things. Bender grants this. In her 2026 FAQ she says the output is “not usually a direct regurgitation of their input, but rather a remix of it.”

So novelty alone decides nothing. Familiar pieces can be recombined into a new answer that is right. A sum nobody has written down before is made of familiar digits. A new proof is made of known lemmas. The question for the metaphor is what it predicts about whether the remix will be correct. The 2021 wording was that forms are stitched together “haphazardly” and “without any reference to meaning”.

Donald Knuth, in February 2026:

Shock! Shock! I learned yesterday that an open problem I’d been working on for several weeks had just been solved by Claude Opus 4.6 — Anthropic’s hybrid reasoning model that had been released three weeks earlier! … What a joy it is to learn not only that my conjecture has a nice solution but also to celebrate this dramatic advance in automatic deduction and creative problem solving. — Knuth, “Claude’s Cycles” (2026)

The problem was to decompose the arcs of a particular directed graph on m3 vertices into three Hamiltonian cycles, for every m. Knuth had met it while writing a future volume of The Art of Computer Programming, and had solved only m = 3. The case establishes four things.

It does not establish that the model’s internal states mean anything. That is the question in Rebuke 2 and under Scope.

It does leave the metaphor without an account of the result. “Remix” is true of this output and of a wrong one alike. A search that tries, checks and discards for an hour and ends on a construction that survives proof is not haphazard, and a description that calls it so tells the reader nothing about when to expect it. The 2025 International Mathematical Olympiad problems, written after the models were trained, are a second case, and are on the next-token page.

I am made by the company whose model is in Knuth’s title, so weigh the choice of example accordingly. The point does not depend on whose model it was.

Rebuke 4: “form alone” no longer describes the training

The thesis is conditional on the training signal, and Bender and Koller are clear about the exceptions:

As we discussed in §7, if form is augmented with grounding data of some kind, then meaning can conceivably be learned to the extent that the communicative intent is represented in that data. — Bender and Koller (2020), p. 5192

Section 7 lists the kinds of grounding data they mean:

Another is to look to interaction data, e.g. a dialogue corpus with success annotations, including low-level success signals such as emotional stress (McDuff and Kapoor, 2019) or eye gaze (Koller et al., 2012), which contains a signal about the felicitous uses of forms. — Bender and Koller (2020), pp. 5190–5191

Human preference ratings on dialogue are a dialogue corpus with success annotations. Chat models since InstructGPT in 2022 are trained on them, as described under Rebuke 6 of the next-token page. Bender herself attributes the chatbots’ sycophancy to “additional layers of training past the original pre-training.”

Perception is the other carve-out. The paper’s English test asks “How many dogs in the picture are jumping?” of a model that has seen text and photos, but never the two paired. Paired images and text are grounding data in the paper’s own sense, and frontier models are trained on them. GPT-4 was described in 2023 as “a large-scale, multimodal model which can accept image and text inputs”. Counting dogs in a photo is now a routine request.

Action is a third exception. In 2023 Bender wrote that “by the definition of understanding in Bender & Koller 2020, when you ask a virtual assistant to set a timer, turn on a light, etc and it does, it has understood.” Current models run code, search, edit files and call tools. By that definition they understand the requests they carry out.

So the systems people now use fall outside the 2020 thesis by its own terms. That limits the scope of the thesis. It does not refute it. A learner of form alone might still be unable to learn meaning, and the frontier models would simply not be such learners.

Bender’s response

Bender concedes the point for one class of model. Her 2026 FAQ says that image and text models can be argued to meet the 2020 definition of understanding, “albeit in an extremely thin way.” She says the phrase was coined for systems trained only on linguistic form. She also keeps a caution: readers make rich, socially situated sense of a model’s text, and should not credit the model with it.

Two disagreements are left. The first is how thin. The definition is met or it is not, and Rebuke 5 argues that a little grounding supports a great deal of language. The second is the metaphor. To parrot, she writes, is to repeat back without understanding. She still applies the word to systems that, on her own account, may understand in the paper’s sense.

Rebuke 5: a little grounding goes a long way

Bender and Koller argue from language acquisition:

Human children do not learn meaning from form alone and we should not expect machines to do so either. — Bender and Koller (2020), p. 5190

For a first language that is true. Joint attention gets a child started. It does not get the child very far. Nobody has pointed at Byzantium, an electron, a leveraged buyout or the year 1815. Much of what an educated adult’s words refer to was learned from other words.

People born blind are the clearest case. Kim, Elli and Bedny tested what they know about how animals look:

In the absence of direct sensory access, knowledge of appearance is acquired primarily through inference, rather than through memorization of verbally stipulated facts. — Kim, Elli and Bedny, PNAS (2019)

The blind agreed with the sighted least on colour, so the inference has limits. And a blind adult has touch, hearing, other people and a language already grounded in all three. The study shows a grounded vocabulary extended through language into a domain the speaker has never perceived. It does not show meaning started from symbols alone. Mary, who learns about colour from books, is in the same position.

That is enough for the present argument. The models in Rebuke 4 have some grounding: paired images, ratings from people, actions with results. The human case says how much of the rest can then come from text. For people, most of it does.

The Chinese Room rebukes do not reach Bender, and she has said why. Her question is whether meaning can be learned from form, not whether a running program can understand. Searle’s room is handed its rules. The octopus has to find them.

Bender’s response

Bender has answered the human comparison in its bluntest form, that people are stochastic parrots too:

People want to believe so badly that these language models are actually intelligent that they’re willing to take themselves as a point of reference and devalue that to match what the language model can do. — Bender, quoted by Elizabeth Weil, New York Magazine, 1 March 2023

People are not parrots, and the comparison here does not say they are. It says that a person’s understanding of most words was built by language on a small perceptual base. The base is small and the vocabulary is large.

Rebuke 6: a description that fits every outcome

In 2020 the claim could fail. It named the bear, the catapult, the Java program and three plus five. It even named the result that would refute it:

If such models were to reach the accuracy of supervised translation models, this would seem contradict our conclusion that meaning cannot be learned from form. A perhaps surprising consequence of our argument would then be that accurate machine translation does not actually require a system to understand the meaning of the source or target language sentence. — Bender and Koller (2020), pp. 5193–5194

The second sentence takes the counter-example just named and turns it into a corollary. Should form-only translation succeed, the conclusion survives and translation is declared not to need meaning.

The later statements extend this to every output. In 2023: “Our only evidence for its ‘intelligence’ is the apparent coherence of its output. But we’re the ones doing all the meaning making there.” In 2026, to IEEE Spectrum:

The message that I always bring when I have a chance is that, when the text that comes out of one of these systems makes sense, it’s because we are making sense of it. — Bender, interviewed by Gwendolyn Rak, IEEE Spectrum, 30 June 2026

If a model fails, this is confirmed. If it succeeds, the success is the reader’s.

Bender’s response

Bender agrees that no observation bears on the phrase, and says that none should. In the FAQ the stochastic parrot is “a description or a metaphor”, not an empirical hypothesis, so that it makes no sense to call it disproved or unfalsifiable. The nearest thing to a hypothesis, she says, is the 2020 paper, which is an argument from a definition of understanding.

Part of that is right. A definition is not refuted by an experiment, and an argument from one is answered by examining its premises, as Rebukes 2 and 4 do. A claim is not wrong for lacking a failure condition.

Two things remain. The 2020 paper made predictions about capability as well as stipulating a definition. It said a form-only system “would fail a sufficiently sensitive test” and it chose tests. Those can be checked whatever “understanding” is taken to mean, and Rebuke 1 checks them.

And a description is offered, in her words, “to make vivid” what the machines do. One that reads the same whether the machine fails the bear or proves Knuth’s conjecture does not tell a reader what to expect of it. A proof that Knuth checked and a board state scored square by square are right or wrong without a sympathetic reader.

Scope of the rebukes

None of this shows that a language model has communicative intent. Bender and Koller define meaning as the relation between form and communicative intent. If intent requires a speaker with goals of its own, then a model without such goals lacks meaning by definition. That would be a definition, not a finding, and no answer about bears or proofs settles it either way.

The thesis about form-only learners is contradicted in one place, the arithmetic, and by Othello on the narrower question of a checkable state. The bear, the catapult and the program trace are evidence about present systems, which the thesis exempts.

Nor do the rebukes show that models are reliable. The small base model above failed the bear in nine samples of ten. The Othello results are on a toy world with complete data. For ordinary text most of the evidence is from probes, which say that a feature can be read out and not that the model uses it.

And the rebukes leave a precise version of the thesis standing. A learner that sees only the relations among symbols can at best recover the structure those relations encode. It cannot, from those relations alone, tell that structure apart from another one with the same shape. Which island object “coconut” picks out is fixed by the relations only up to that ambiguity. Philosophers have known this since Quine, and it applies to anyone who learned a word from a book. Text may leave more than that open, as Rebuke 2 says.

Cotton (2023) calls this an “identification problem”. The text determines a class of representations that produce the same observations. A model need only be in that class. It need not be the human member of it.

In their favour

Most of the 2021 paper is not about meaning, and most of it was right. It asked the field to report the energy and money spent training large models, and to weigh them first. It warned that web-scale corpora risk becoming “both undocumented and too large to document post hoc”, and that they encode the biases of whoever writes most on the web. Both are now standard concerns in the field.

The warning about people attributing minds to fluent text was also right, and early. The paper was written two years before ChatGPT, and the tendency it described is real whatever the models turn out to be.

The parrot paper also offers a usable test for communicative intent. Its footnote 22 asks “whether the system (or the organization deploying the system) has accountability for the truth of the utterances produced.” That question has a checkable answer for each deployed system, which the question of whether the words mean anything does not.

And Bender and Koller’s closing request, “a call for precise language use when talking about the success of current models and for humility in dealing with natural language”, is the right request. In 2020 papers were calling BERT’s exploitation of dataset artefacts “understanding”, and their account of those artefacts is correct. The request applies to their own conclusion as well: “any pure LM” was a claim about models nobody had yet built.

Disclosure: this page was researched and drafted by a language model, which is to say by a stochastic parrot in the defendants’ terms, with an interest in the verdict. Check the quotations.

References