*290 Opinion
In the published portion of this opinion, we consider several instances of claimed prosecutorial misconduct and examine the scope of vicarious criminal liability of conspirators for the crimes of their confederates in the wake of recent decisions concerning aiding and abetting.
I
George Grant Garewal was convicted by jury of attempted murder, assault with a deadly weapon, mayhem, two counts of burglary, and conspiracy to commit burglary (Pen. Code, §§ 664/187, 245, subd. (a), 203, 459, and 182, subd. 1/459). He was acquitted of robbery, and special enhancements alleging he was armed with a firearm and inflicted great bodily injury were found not to be true (Pen. Code, §§211, 12022, subd. (a), and 12022.7 and 1203.075). The Imperial County District Attorney’s office originally charged Ernest Herrera and Garewal’s then girlfriend, Caroline Chrisman, as codefendants; but Chrisman was given immunity in exchange for her testimony against the other two.
Extensive media coverage and intense public outrage in the relatively small community where the crimes occurred caused venue to be changed to Orange County. The cases against Herrera and Garewal were severed when the latter, as he later admitted, feigned incompetence to proceed (Pen. Code, § 1368). (The irony of the effect of the delay occasioned by Garewal’s charade will not be lost on a reader ¡patient enough to endure the first half of this opinion.) Herrera was tried first; and his conviction was affirmed, as modified, by this court in an unpublished opinion (People v. Herrera (Sept. 26, 1983) 4 Crim. No. 13655).
II
The facts are ugly. On the afternoon of February 14, 1981, Sarah Nicholson and her infant child returned to their home in El Centro, where Garewal, Herrera, and Chrisman were in the process of committing their second residential burglary of the day. When Nicholson drove into her driveway, she blocked the burglars’ vehicle.
At Garewal’s trial, Chrisman testified Nicholson first demanded identification from the three and then sat in her front seat and began to record the license number of their car. Observing this, Herrera commenced a brutal attack, repeatedly striking Nicholson in the face and shattering her eyeglasses. Garewal and Herrera then pulled her roughly from the car; and Herrera, sitting on her supine body, delivered seven or eight more blows with fists, *291 while Garewal went through her purse. Garewal struck her six or seven times in the head as well.
Herrera next obtained a brick and struck Nicholson eight to ten times in the face while Garewal held her hands. The men then started to walk away, but conversed briefly and returned to the motionless victim. Garewal stood on her neck while Herrera viciously kicked her several times in the head. The burglars then departed, leaving Nicholson for dead and the child unattended.
When Herrera entered the car, he stated, “The bitch should be dead, now.” Herrera showed Chrisman a piece of paper and a broken pen. He said, “Sorry Caroline but we had to do that. She can I.D. us.” Later, Garewal told Chrisman only her presence kept him from strangling Nicholson.
The victim and her unharmed child were discovered a short while later. Nicholson’s injuries were not fatal, but they were devastating. She suffered numerous broken fingers and bones and six major skull lacerations and fractures, plus a cerebral concussion. A corneal laceration permanently destroyed virtually all vision in one eye. She walks and talks with great difficulty, has significantly reduced memory recall—including a total inability to remember the attack upon her—and little capacity for cognitive thinking. Routine household chores are almost impossible for her, and she is unable to perform her former job.
Ill
After Garewal was found competent to stand trial, the Orange County Public Defender was substituted for court-appointed defense counsel from Imperial County. In a conversation with the latter, the deputy district attorney volunteered to transport the defense files to Orange County and, in order to assure complete discovery, said he would check them to determine whether any police reports were missing. The prosecutor later explained he was motivated by an office directive to reduce copying costs. Oddly, defense counsel agreed to this procedure without cavil.
Reviewing the files, the deputy district attorney began to read a transcribed conversation which he soon realized was a defense investigator’s incriminating interview of Garewal. He immediately stopped and reported his action to the district attorney. When he turned the files over to Garewal’s new attorney in Orange County the next day, he also informed him of the inadvertent transgression.
*292 Understandably shocked, Garewal’s lawyer sought dismissal for prosecutorial misconduct, arguing the attorney-client relationship had been irreparably violated and it was impossible to be sure the defendant’s statements would not be used to his disadvantage. The trial court conducted a full evidentiary hearing and denied the motion to dismiss, although it did exclude and sanitize the evidence to the fullest extent possible. First, a motion to recuse the Imperial County District Attorney was granted, and the Orange County District Attorney’s office assumed responsibility for the prosecution. Second, the court scrupulously insulated the new prosecutors from even learning of the partial perusal of the Garewal interview, much less the content.
There has been no suggestion that these measures were ineffective, but Garewal nevertheless maintains
Barber
v.
Municipal Court
(1979)
Barber
and
Levy
are inapposite here, however, since both involved intentional intrusions of attorney-client confidences in situations where prejudice to the defendant’s Sixth Amendment rights could not be reasonably measured. (As to the assessment of prejudice in other Sixth Amendment cases, see, e.g.,
People
v.
Courts
(1985)
The court added, “While the case at bar is perhaps distinguishable [as is this case] from both Towler and Fulton since in both cases the defendants failed to seek dismissal of the charges upon discovery of the prosecutorial misconduct, and in this case [as here] appellant did seek dismissal, significantly, in both Towler and Fulton, the focus was on what, if any, prejudice resulted from the improper prosecutorial activity. In both cases, where defendant suffered no harm, he was not entitled to a reversal. In Barber, the prejudice suffered by defendants could not be calculated . . . .” (Id., at p. 699.) The record here amply supports the conclusion that the prosecutor’s inadvertent intrusion was not prejudicial to Garewal; consequently, the sanction of dismissal would have been unwarranted.
Moreover, outgoing defense counsel was at least as culpable as the prosecutor in bringing about this bizarre incident. Although we are bewildered by his conduct in voluntarily relinquishing defense files containing confidential incriminating information, knowing the prosecutor would peruse them for missing police reports before they were delivered to Garewal’s new attorney, in view of our holding there is no need to respond to the Attorney General’s suggestion that his action waived any claim of confidentiality—or face the obvious ineffective assistance of counsel problem that ruling would engender.
IV
Before Garewal’s trial began, the defense had cause to renew the motion to dismiss for prosecutorial misconduct. The replacement prosecutor informed new defense counsel of two astonishing developments in the case: First, Chrisman had repudiated some of her former statements and admitted she perjured herself in order to protect Garewal at the defendants’ preliminary hearing, in a deposition, and again at Herrera’s trial.
In those proceedings, she stated Garewal never struck Nicholson, claiming he was wearing a bandage or splint on his hand. She also swore Herrera, not Garewal, placed his foot on the victim’s neck before kicking her. Although she did say Garewal tried to grab Nicholson’s hands at one point, she also asserted he failed. She insisted Garewal never joined in the attack and instead yelled for Herrera to stop.
The prosecutor’s second revelation centered on the timing and circumstances of Chrisman’s “change of heart.” She disclosed her new story to *294 the Imperial County Deputy District Attorney either the same evening or perhaps several days after they engaged in sexual relations at a local motel where the prosecutor and his witnesses from Imperial County were housed during Garewal’s competency trial.
Again the trial court conducted a full evidentiary hearing. Chrisman and the deputy district attorney admitted a single act of intercourse after an evening of dining, dancing, and some ingestion of alcohol on her part. Chrisman denied the sex act with the prosecutor influenced her decision to confess her former perjury and claimed she first told him of Garewal’s true participation in the attack earlier, as they listened to music in a bar after dinner. She lied previously because she feared losing custody of her child and was trying to protect Garewal, whom she considered her common law husband. But since her release from jail, she had given up drugs and thievery and reformed her life. She swore the latest version was the truth.
According to the prosecutor’s recollection, Chrisman first told him of her earlier lies on the drive home to Imperial County a few days after the competency proceedings and the incident at the motel. He denied his personal involvement with Chrisman was motivated by his role as Garewal’s prosecutor and stated he had already decided to ask the district attorney to transfer the case to another deputy because it had become a burden to him. The investigating officer testified Chrisman had also offered to have sex with him on an earlier occasion but he declined.
After careful consideration of the evidence, the trial judge made specific findings: (1) There was no deliberate effort by the prosecution to undermine Garewal’s defense: “[Wjhat we are dealing with here is a situation of one man’s misconduct and that is all. . . . [Hjis actions are a combination of poor judgment, possibly unethical conduct, possibly some stupidity; but I don’t see any indication in this record of an intent to deprive Mr. Garewal of his rights.” (2) There would be little damage to Garewal’s case: “[I]f anything, the whole thing has worked to Mr. Garewal’s advantage. He should be able to thoroughly impeach Miss Chrisman as a witness in light of everything that has gone on.” (3) There was no connection between Chrisman’s change of testimony and the sexual episode, and no emotional attachment between the prosecutor and the witness had developed. Chris-man’s explanation was credible; i.e., she had changed her life and no longer desired to protect Garewal. Finally, the judge noted the deputy district attorney and his office had already been removed from the case, and the public interest in prosecuting an offense as serious as that before the court weighed heavily against dismissal in the absence of convincing evidence that the defendant’s constitutional rights had been impaired.
*295 It is suggested for the first time on appeal that the prosecutor may have caused Chrisman to recant based on something he told her of the incriminating statement he read in the defense file. There is not a scintilla of evidentiary support in the record for such a notion, however; all the evidence indicates the change of story preceded the incident with the files. Indeed, no questions were even asked at the hearing on the renewed motion to dismiss concerning this contention. Consequently, we decline to infer the existence of more ghosts than are already known to haunt this particular house.
Nevertheless, Garewal argues he is entitled to a reversal with directions to dismiss based on the prosecutor’s misconduct or, in the alternative, retrial with suppression of Chrisman’s testimony. Since the trial court’s findings are based on substantial evidence, we are unable to agree. If Chrisman’s testimony had changed after being seduced for that purpose, severe sanctions would have been indicated (see, e.g.,
People
v.
Warren
(1984)
The deputy district attorney’s behavior certainly would have justified his removal from the case, but his whole office had already been dispatched before this sordid little scenario came to light. In view of all that had occurred, the uniquely appropriate means of evaluating Chrisman’s testimony was the one selected, a jury trial. The effect of love and sex on credibility is well within the range of common experience and, unlike hypnotism for example, as subject to jury evaluation as any other common form of human behavior. (Cf.
People
v.
Guerra
(1984)
Finally, hindsight validates the trial judge’s prediction: Garewal’s counsel used Chrisman’s former testimony for a telling impeachment of the witness. Also, as will be discussed below, the verdicts indicate the jury may well have rejected the new gloss on her testimony (if it found any reason to consider it at all in view of the instructions given by the court).
V *
*296 VII
Garewal attacks several of the court’s instructions to the jury. He first claims the evidence demonstrated the conspiracy to commit burglary ended before the assault on Nicholson began and thus could not support an instruction that he might be held vicariously liable for Herrera’s actions as part of a conspiracy to commit burglary. The contention is meritless. Crimes such as robbery and burglary are not considered legally complete for purposes of the felony-murder rule, for example, until the criminals have reached a place of temporary safety and achieved unchallenged possession of the loot.
(People
v.
Salas
(1972)
Similarly, a conspiracy to commit a particular crime concludes no earlier than the legal completion of the intended offense itself. The rule is a hoary one: “[E]ach conspirator is bound by the acts of a confederate in furthering the common design of the conspiracy by escaping or resisting arrest, even though such acts may have been ‘dictated by the exigencies of the moment.’ ”
(People
v.
Smith
(1966)
VIII
The next assignment of instructional error is far more troublesome, however. Garewal raises serious questions concerning the scope of vicarious liability of aiders and abettors and conspirators for the incidental but unplanned crimes of confederates in pursuit of the common goal.
As a preface to our discussion of the instructions relating to vicarious liability, we note the evaluation of any error concerning them presupposes rejection of the changes in Chrisman’s testimony at Garewal’s trial. By the account she gave there, he was a direct perpetrator in the attack; and conspiracy and aiding and abetting instructions were surplusage in light of that version with respect to the substantive counts.
(People
v.
Hayes
(1985)
*297
The scope of an aider and abettor’s vicarious responsibility for the actions of the perpetrator has undergone close examination in the recent legal history of this state. In
Carlos
v.
Superior Court
(1983)
Next the court held the standard aiding and abetting instructions, CALJIC Nos. 3.00 and 3.01, given here at the request of both sides, incorrectly state the law because they fail to limit liability to those who share the intent of the perpetrator.
(People
v.
Beeman
(1984)
Initially, we must consider whether Garewal should even be permitted to question the aiding and abetting instructions. Failure to object to the instructions condemned in
Beeman
and
Caldwell
has been held not to constitute invited error which forecloses the issue on appeal
(People
v.
Henderson, supra,
To our knowledge no court has considered whether these instructions— when given at the defendant’s request—constitute invited error. Ordinarily, of course, we would hold a specific request for an instruction waives any error in giving it. In this rare instance we are not so inclined, however. There are several reasons:
First, defense counsel would have been remiss had he not, as a minimum, sought the standard CALJIC aiding and abetting instructions. At least they *298 warned that an aider and abettor present at the scene of a crime must act with knowledge of the perpetrator’s intentions if he is to share in the responsibility.
Second, it is difficult to lay blame on defense counsel when the prosecution and perhaps most trial and appellate courts believed the standard instructions were sufficient. For example, in
Beeman
itself the Attorney General argued “that the standard instruction properly reflects California law, which requires no more than that the aider and abettor have knowledge of the perpetrator’s criminal purpose and do a voluntary act which in fact aids the perpetrator.”
(People
v.
Beeman, supra,
Moreover, six months before this case was tried and as late as 18 months after, our own appellate district was cynically rejecting the
Yarber
court’s criticism of CALJIC No. 3.01: “This court follows the general rule following a long line of cases finding CALJIC No. 3.01 sufficient. ‘As is said in
People
v.
Ott
(1978)
Moreover, even if he had sought and
obtained
the
Yarber
modifications, there would be no difference. The
Yarber
instructions were themselves criticized as insufficient in
Beeman;
and authority from this district
now
holds it is reversible error to give the standard aiding and abetting even amended as suggested in
Yarber. (People
v.
Henderson, supra,
Finally, Penal Code section 1259 provides an “appellate court may . . . review any instruction given, refused or modified, even though no objection
*299
was made thereto in the lower court, if the substantial rights of the defendant were affected thereby.”
(People
v.
Satchell
(1971)
CALJIC No. 6.11 correctly defines the vicarious legal responsibility of coconspirators. Here, however, it was modified by the court at the prosecution’s urging. The instruction, with the amendment emphasized, reads, “Each member of a criminal conspiracy is liable for each act and bound by each declaration of every other member of the conspiracy if said act or said declaration is in furtherance of the object of the conspiracy, [t] The act of one conspirator pursuant to or in furtherance of the common design of the conspiracy is the act of all conspirators. Every conspirator is legally responsible for an act of a coconspirator that follows as one of the probable and natural consequences of the object of the conspiracy even though it was not intended as a part of the original plan, or was even actually forbidden as part of the original agreement and even though he was not present at the time of the commission of such act.”
Thus, under this instruction, the jury had to resolve but one question of intent concerning the substantive offenses: Did Garewal conspire to commit burglary? If so, he was automatically and strictly liable for all that followed, even acts contrary to the agreement with his cohorts.
We have encountered no other
post-Beeman
case where, as here, the defendant’s vicarious responsibility for certain crimes was also potentially predicated on a theory of conspiracy to
commit a different crime,
i.e., burglary. (Cf.
People
v.
Gilman, supra,
We are aware a good argument could have been made—at least before Beeman—that the court’s amendment correctly stated the law. Witkin said so: “Liability extends to acts unintended or even actually forbidden, if they are, nevertheless, in furtherance of the common purpose.” (1 Witkin, Cal. Crimes (1963) § 121, p. 114, citing cases.) Several subsequent opinions expressly agreed
(People
v.
Manson
(1976)
Both
Manson
and
Beaumaster
rely upon
People
v.
Smith, supra,
Probably the best known opinion in our national jurisprudence on the subject of the liability of conspirators is
Pinkerton
v.
United States
(1946)
Even this limitation on liability has been criticized as insufficient, however: “If the Pinkerton rule were adhered to, each prostitute or runner in a large commercialized vice ring could be held liable for an untold number
*301
of acts of prostitution by persons unknown to them and not directly aided by them. Each retailer in an extensive narcotics ring could be held accountable as an accomplice to every sale of narcotics made by every other retailer in that vast conspiracy. Such liability might be justified for those who are at the top directing and controlling the entire operation, but it is clearly inappropriate to visit the same results upon the lesser participants in the conspiracy.” (LaFave & Scott, Criminal Law (1972) § 65, p. 514;
see People
v.
Luciano
(1938)
Another commentator expressed a similar thought: “The difficulty lies not in the conspiracy-complicity rule itself, but in the tendency of courts to regard a conspiracy as an ongoing business relationship of indefinite scope and duration, and to consider the conspirators, as one dissenting opinion put it, as ‘general partners in crime. ’ [Rutledge, J., dis. in
Pinkerton
v.
United States, supra,
Fortunately, we need not consider the continuing viability of
Anderson.
There, at least, the object of the conspiracy was the commission of abortions, and “[n]o one would question that all the persons who plot together to commit a crime are guilty of the crime if one or more of them commits it. [Not so; see, e.g.,
Commonwealth
v.
Perry
(Mass. 1970)
Also, the
Beeman
opinion mixes citations to conspiracy and aiding and abetting cases without distinguishing between them. In concluding that “the weight of authority and sound law require proof that an aider and abettor act with knowledge of the criminal purpose of the perpetrator
and
with an intent or purpose either of committing, or of encouraging or facilitating
*302
commission of, the offense,” the court cites
People
v.
Terry
(1970)
It is, of course, possible to devise a model which would provide a wider scope of criminal liability for conspirators than aiders and abettors. But Beeman does not differentiate between them. Also, the great majority of cases involving aiding and abetting would also lend themselves to conspiracy instructions. (See Perkins, The Act of One Conspirator (1974) 26 Hastings L.J. 337, 340.) We find the notion that Beeman might be so easily avoided highly dubious. To the contrary, we conclude the clear thrust of Beeman is to contain the reach of vicarious criminal responsibility of conspirators to the natural and reasonable consequences of the conspiracy.
Finally, it remains to determine whether the combined instructional error in this case requires reversal. The convictions for the two burglaries and conspiracy to commit burglary are not affected because Garewal’s exposure for those offenses was always as a direct perpetrator, not as an aider and abettor.
(People
v.
Hayes, supra,
Although the question of which standard to be applied with respect to
Beeman
error is still an open one, there is no reason to join the current debate on the subject. We find the error here, as in
Beeman
itself, would not survive even the most conservative test, that of
People
v.
Watson
(1956)
As the parties agree, we may only speculate on the jury’s ultimate conclusions regarding Chrisman’s testimony at Garewal’s trial. The two find *303 ings that he did not personally inflict great bodily injury on the victim do tend to support the view that her new version of the attack was rejected; but this is not necessarily so because the court instructed the jury to “determine whether or not the defendant with the specific intent to inflict [great bodily injury], did personally inflict great bodily injury. . . . [S] The term ‘personally ’ as used in this instruction, means that the defendant must have directly performed the act or acts which caused the physical injury to the victim. It does not include one who merely aids, abets, or directs another person to do so.” (CALJIC No. 17.20 (1979 revision), as amended by the court in the italicized portions.) Thus, the combination of the conviction for mayhem and rejection of the great bodily injury allegations can be explained by the stringent caveat requiring personal infliction with respect to the latter, though it seems unlikely the jury could have believed Garewal personally struck the face of the victim yet entertained a reasonable doubt as to the great bodily injury allegations.
In sum, it is exceedingly possible, even probable, that Garewal was convicted per the court’s instructions and the prosecutor’s argument as an aider and abettor or coconspirator in the crime of burglary without any further consideration of his intent or his reasonable expectations. Our decision is thus compelled: “[W]hen the prosecution (or the court) presents the case to the jury on alternate theories, some of which are legally correct and others legally incorrect and the reviewing court cannot determine from the record on which theory the ensuing general verdict of guilt rested, the conviction cannot stand. [Citations.]”
(People
v.
Birreuta
(1984)
The burglary and conspiracy convictions are affirmed, but the judgments must be vacated because reversal of the base term offense may invalidate the entire sentencing scheme. The remaining convictions are reversed, and the case is remanded accordingly.
Trotter, P. J., and Wallin, J., concurred.
Respondent’s petition for review by the Supreme Court was denied February 14, 1986. Mosk, J., Lucas, J., and Panelli, J., were of the opinion that the petition should be granted.
Notes
See footnote, ante, page 285.
