arXiv AI By Shubhrangshu Debsarkar, Valmik Nahata

Simple Features Beat Most AI Control Monitors

Read the original on arXiv AI →

The paper demonstrates that simple feature-based methods outperform most AI control monitors on a standard evaluation dataset, without executing the code. These features exploit style differences between honest solutions written by humans and backdoored code produced by older language models, as well as distinct problem characteristics. The study also reveals that a significant portion of backdoors fail validity checks, and that a Sonnet 5 monitor detects fewer backdoors from its own model compared to older models, highlighting potential biases in current evaluation practices.

Machine-generated by The Flow from the publisher's headline and feed description — not written or checked by a human. The full article lives at arXiv AI.

arXiv Machine Learning
Jul 30

ToxScreen: Detecting Whether an LLM Has Been Poisoned

arXiv:2607. 26849v1 Announce Type: cross Abstract: As large language models (LLMs) are deployed in high-stakes domains, adversaries may poison training data to implant backdoors: hidden triggers that covertly manipulate model behavior at inference time.

By Anthony Hughes, Nicole Xing, Collin Francel, Andy Kim, Andrew Draganov
arXiv AI
Oct 16

Screwtape: Adversarial Transcript Editing for Monitor Red-Teaming

Screwtape is a pipeline that transforms real agent transcripts into adversarial edits designed to bypass action‑only monitors. Using an LLM attacker to modify transcripts and an LLM verifier to ensure consistency, the system generated 35 successful attacks on 94 Claude Code and Codex transcripts, with six confirmed by humans to also evade an external monitor. The study shows that a red‑teamer can discover monitor failures without direct access to a developer’s infrastructure, suggesting a method for improving safety oversight.

By Gosha Kozhevnikov, Tyler Tracy
Hugging Face Trending Papers
Jul 29

ToxScreen: Detecting Whether an LLM Has Been Poisoned

As large language models (LLMs) are deployed in high-stakes domains, adversaries may poison training data to implant backdoors: hidden triggers that covertly manipulate model behavior at inference time. We ask whether a defender can recover such a trigger under realistic affordances, namely white-box access to the weights and knowledge of the behavior of concern, but no training data, no trusted reference model, no knowledge of the trigger, and no certainty that the model is poisoned.

arXiv Machine Learning
Oct 8

Restricting the Model, Missing the System: Measurement and Accountability in Offensive AI Governance

arXiv:2605.09504v3 Announce Type: replace-cross Abstract: We show that the instruments used to measure AI offensive capability fail in two ways: (i) they overstate harm, and (ii) they credit the mode...

By Michael Alexander Riegler, Finn Schwall, Annika Willoch Olstad, Birk Sebastian Frostelid Torpmann-Hagen, Sushant Gautam, Klas H. Pettersen, Inga Str\"umke