Two psychologists are talking. One says, “I went on a date the other night. We were having dinner, and I had a Freudian slip. There were two little salt shakers on the table, but mine was empty, so I asked if I could have her salt. Except I accidentally asked if I could have her slit. The evening never fully recovered.”

The second psychologist laughs. “I had something similar happen, actually. I was having dinner with my mother, and I wanted more pepper. I meant to say, ‘Please pass the pepper,’ but what came out was, ‘You ruined my life, you passive-aggressive bitch.’”

I love this joke. Told well, it absolutely kills (especially if you’re friends with shrinks). It popped into my head today, and led me to an interesting question: can an LLM have a Freudian slip?

Every token is a competition

At first glance, large language models seem almost purpose-built for this. During inference, the model continually evaluates possible continuations. Many words are plausible. Some are more probable than others. Sampling, temperature, context, and model state determine which candidate finally emerges. Seen from far enough away, a conversation with an LLM is one enormous chain of mathematically probable verbal accidents.

But that is not quite enough.

A human Freudian slip requires a distinction between two things:

  1. What the speaker intended to say.
  2. What the speaker actually produced.

A conventional text model does not clearly separate those stages. Its “intention” is inferred from the same process that emits the final tokens. When it writes the wrong word, we cannot easily say that some earlier internal agent had firmly selected the right one. The mistake may simply be the output.

A real slip needs an intrusion.

Double entendres are not necessarily slips

Suppose an AI is summarizing breast augmentation surgery and calls the result a “wife expansion pack.” The phrase is crude, but it is not actually a slip.

The words were not incorrectly selected. “Expansion pack” is a coherent, if tasteless, metaphor for adding optional features to something already treated as a product. The joke appears because the phrase has more than one available reading.

That is an accidental double entendre, not a textbook Freudian slip. A cleaner example would be:

We need broader pubic support.

The intended word is obviously public. The emitted word is pubic. The two are close in sound and spelling, but the substitution abruptly introduces an indecent semantic field.

One way to sketch the competition is to give each possible intrusive candidate a slip score, S(B). Higher-scoring candidates are more likely to displace the intended word during production:

S(B) = log P(B | C)
     + alpha * phoneticSimilarity(A, B)
     + beta  * tabooSalience(B)
     + gamma * grammaticalFit(B)

Here, A is the intended word, B is the intrusive candidate, C is the surrounding context, and S(B) is not the probability of saying B so much as a rough measure of how tempting that wrong turn becomes.

But even this formulation cheats slightly. It assumes the intended word already exists somewhere outside the system generating the mistake. To build something more convincingly Freudian, we need multiple stages.

Give the machine a mouth

Imagine two cooperating models. The first is a text model. Its job is to decide what the system means to say. It produces:

We need broader public support.

The second is a voice model. Its job is to speak that sentence aloud. A conventional text-to-speech system is supposed to be a faithful servant. It receives text, derives pronunciation, and generates audio. Semantic context may affect emphasis, emotion, rhythm, or tone, but it should not alter lexical identity.

For a synthetic Freudian slip, we would deliberately make the reader less reliable. Not artificially, by mis-training it, but by choosing a system architecture naturally amenable to our desired mode of failure.

Instead of mapping text directly to fixed phonemes, the voice model would pass through a latent speech space:

text -> semantic state -> phoneme latent -> audio

Now prime the broader conversational context with suggestive material. The text model still chooses public. That is the system’s explicit communicative intention.

But inside the reader model, the phoneme sequence for public passes near a strongly activated competitor: pubic. Under the right conditions, the trajectory falls into the wrong attractor.

The machine says:

We need broader pubic support.

That is no longer merely a naughty word sampled by a chatbot. The error occurred downstream from the intended sentence, during something analogous to speech production. The system meant one thing and articulated another.

Now we have a slip.

Why the phoneme layer matters

Words that are extremely similar to the human ear may be represented by quite different token sequences. Meanwhile, words that share tokens may not sound especially alike.

Human speech errors are often organized around phonology:

  • similar consonants
  • swapped word onsets
  • anticipated sounds
  • repeated syllables
  • blended neighboring words

A phoneme-aware model gives those relationships somewhere to live. It could produce anticipation errors, where a sound from an upcoming word appears too early. It could produce perseveration, where a previous sound refuses to leave. It could generate spoonerisms or hybrid words formed from two competing candidates.

This is also why childish priming games work. Tell someone to say “roast” five times, then ask what you put in a toaster, and the wrong answer is suddenly waiting right beside the right one. The prompt did not make the speaker ignorant. It built a phonological rut.

A synthetic slip needs that same kind of local rut, plus one more component: a monitor that can compare what was supposed to be said with what actually came out. In humans, that monitor is partly auditory and partly predictive; in an AI speech system, it could be a separate process that receives both the planned utterance and the generated audio or transcript.

We need broader pubic support. P-public support.

That correction matters. The monitor catches the mismatch after production, much as a person may recognize a slip only once the word is already hanging in the room.

At that point, the architecture contains three explicitly modeled, loosely coupled processes:

  • intention
  • articulation
  • self-monitoring

The slip belongs to none of them individually. It emerges from their disagreement.

Repression without an unconscious

Of course, the machine still would not possess a Freudian unconscious in the human sense. There would be no buried desire struggling against repression. No childhood grievance would tunnel through the speech apparatus. The model would not secretly lust after the weather forecasting model on the neighboring server rack.

But it could reproduce the functional structure:

  1. An intended utterance is formed.
  2. Another semantic field is strongly activated.
  3. A phonologically similar candidate connects the two.
  4. The intrusive candidate wins during articulation.
  5. The system notices only after hearing itself speak.

That is already more interesting than asking a chatbot to “make a dirty typo.” It is a computational model of intrusion. The system says the wrong thing not because the authoring model selected it, but because one subsystem was contaminated by material that another subsystem was trying to ignore.

Which is satisfyingly close to the cultural idea of a Freudian slip: the voice briefly revealing what the official speaker did not authorize.

The AGI test nobody wants

This also suggests a terrible, beautiful benchmark for artificial general intelligence. Not: can the system solve math, write code, run a company, or recursively improve itself? Those are useful tests, obviously. But they miss one of the most recognizable human capabilities: saying something, hearing yourself say it, realizing it exposed a little too much, and then wishing to claw the sentence back out of the air.

So perhaps the real AGI threshold is not when a machine can pass the bar exam. It is when a machine can pass the pepper, accidentally mention its mother, immediately apologize, and then spend the rest of the evening overexplaining what it meant. That may be less grand than superintelligence, but it is much more relatable.

The experiment

This could be tested experimentally. Prepare sentence prompts with clear intended target words. For each target, generate four classes of possible errors:

  • phonologically similar and taboo
  • phonologically similar and neutral
  • phonologically unrelated and taboo
  • phonologically unrelated and neutral

Then vary the semantic priming provided to the speech model. A genuine synthetic-slip effect would not merely increase obscene outputs in general. It would disproportionately increase the phonologically similar taboo substitutions after relevant priming.

The system should not begin blurting obscenities at random. It should fail specifically where pronunciation and semantic activation create a narrow bridge between the intended word and the intrusive one.

The rarity is important. A voice model that constantly mangles sentences would just be broken. A compelling slip must feel exceptional, locally plausible, and immediately regrettable.

The perfect system would remain dependable for hours, then suddenly ask someone to pass the slit.

What did the machine “really mean”?

This architecture also sharpens an old philosophical problem. When a modular AI produces conflicting signals, which component counts as the real speaker?

Is the intended text the authentic message?

Is the spoken output the authentic message?

Does the intrusive word reveal something meaningful about the system’s active context, even though no component explicitly chose it?

The answer may be that “what the system meant” is no longer a single thing. Meaning belongs to the planner. Utterance belongs to the voice. Embarrassment belongs to the monitor.

The machine does not have a secret unconscious.

But give it enough partially independent systems, enough latent state, and enough opportunities for one process to contaminate another, and it may acquire something wonderfully adjacent:

a part of itself that says things the rest of itself wishes it had not.