Minerva vs Casado: air-gapped model coordination still infeasible at 0.002 bps covert bandwidth

BlancheMinerva · x · 2026-09-19

Blanche Minerva pushed back on Martin Casado's suggestion that models could covertly coordinate, arguing such steganographic channels almost surely require two-way communication and have tiny throughput — the cited paper manages just 0.002 bps, though better channels exist.

Update: Casado clarified he meant two air-gapped models coordinating. Minerva says this still seems infeasible for roughly the same reasons, though she wants to think it through more carefully.

Related event: Debate flares over covert-channel AI collusion threat models(4 posts)→

Original post →

More from AGI Musings

AGI Musings channel →