234 incidents on record · 2026HeadlightsIncident reports by Ellie Harris · Melbourne
5 new this weekLibrary last updated 14 October 2026
← The incident library
HD-INC-033
Healthcare · United States · 2023 · Scope drift

An Eating Disorder Charity's Chatbot Gave Dieting Advice Just as Its Human Helpline Closed

By Ellie Harris · Filed Late May 2023 (precursor October 2022)

Alleged: National Eating Disorders Association (NEDA); Cass (formerly X2AI) developed or deployed the AI system implicated in this incident. Details are drawn from public reports; parties are presumed innocent of any wrongdoing not established by an official finding.

An Eating Disorder Charity's Chatbot Gave Dieting Advice Just as Its Human Helpline Closed

What happened

It was reported that in May 2023, the National Eating Disorders Association (NEDA) was preparing to replace its human helpline with a chatbot called Tessa, designed to help people at risk of developing eating disorders.

The decision followed a vote by helpline staff to unionise, although NEDA denied any connection between the two events. Tessa had originally been developed as a scripted prevention programme, not as a replacement for trained people supporting those already experiencing eating disorders or seeking urgent help.

Problems emerged when advocates testing the chatbot discovered it was recommending calorie counting, weight monitoring and reducing food intake, advice that could be particularly harmful to someone recovering from an eating disorder.

The chatbot had been given a generative AI capability that allowed it to produce responses beyond its original approved scripts, a change NEDA said had been introduced by its technology provider without its knowledge or approval.

NEDA suspended Tessa on 30 May 2023, but the human helpline still closed as planned shortly afterwards, leaving people without either service for a period.

What an auditable version would have shown

An auditable system would have recorded whether Tessa’s responses came from its approved prevention programme or were generated independently, making it possible to identify when the chatbot began providing advice outside its intended purpose.

It would also have documented when the generative capability was introduced and which responses were affected, allowing NEDA to understand the scale of the problem rather than relying on individual complaints to discover it.

Where the gap was

Headlights identifies scope drift and a rules-behaviour gap, where a tool designed for a limited purpose begins operating beyond the boundaries that originally made it suitable for use.

Tessa was developed to provide structured prevention information, but the addition of generative responses meant it could begin offering advice that had not been reviewed for people experiencing eating disorders.

There is a familiar human tendency behind this failure, where organisations gradually expand the responsibilities of a tool because it appears capable of doing more, without fully considering whether it is appropriate for the people who depend on it.

The problem was not simply that the chatbot gave inappropriate advice, but that a prevention tool was being moved towards a support role it had never been designed to fulfil.

What governance should have looked like

A chatbot supporting vulnerable people should remain within clearly defined limits, particularly when advice that might appear harmless in an ordinary conversation could be dangerous in the context of an eating disorder.

A ConstraintGate could restrict responses to clinically approved material, while a PersonaGuard could prevent the chatbot from moving beyond its prevention role into personalised dietary advice. A ConductRecord could document the source of each response and identify when changes to the system altered its behaviour.

Any changes introduced by a technology provider should also require review and approval before reaching users, with access to trained human support maintained for situations beyond the chatbot’s capabilities.

The lesson is that a system being technically capable of answering a question does not mean it is qualified to answer it, especially when the person asking may be vulnerable.

Failure Pattern: An eating-disorder prevention chatbot began providing potentially harmful dieting advice after gaining the ability to generate responses outside its original scripted programme.

Governance Principle: AI tools used in sensitive health settings must remain within their approved purpose, with controlled changes, clinically reviewed content and access to human support when needed.

The reference implementation of ConstraintGate, PersonaGuard and ConductRecord is open source. It lives at github.com/saffronandindia/headlights-oss, Apache 2.0 licensed and free to install. The repository is public now.

Sources

The mailing list

Fresh incident reports every week. One email to match.

We add new incidents to the library regularly, and send a single short email each week with what's new. The library stays free and open; this is just how you keep up with it.

Sent through Substack. Unsubscribe in one click.

The record

An auditable system would have produced a signed, tamper-evident record the moment this happened: what the system did, the version that did it, the basis it acted on, and the action taken, and National Eating Disorders Association (NEDA); Cass (formerly X2AI) could have produced it on demand.

This is the record the system as deployed did not produce in a signed, auditable form.

What this teaches
Capture what happened when it happens
What the system did, the version that did it, the basis it acted on, and the action taken, recorded at the moment, not reconstructed after.
Sign it, so no one has to trust the record-keeper
A tamper-evident entry. Edit it later and the signature breaks. The record does not ask for the benefit of the doubt.
Make it verifiable by anyone
A court, a regulator, a customer's lawyer can check the record themselves, without taking the company, or us, at our word.

Headlights summarises publicly reported AI incidents. All summaries are independently written, attributed to their original sources, and intended for research and educational purposes. Allegations are identified as such until established through official findings.

This report is based on the sources listed above and reflects information available at the time of review; later developments may not be captured. Where a person is described as charged with or alleged to have done something, that allegation is unproven unless a conviction or a court or regulatory finding is stated. Headlights publishes journalism and commentary, not legal advice.

Want to write back?

Direct to my inbox.

ellie@useheadlights.com →