Monitor evasion paper thread: GPT-6 Astra hypersensitive to monitor-like messages
maksym_andr · x · 2026-09-25
In part 2 of the paper thread, the author adds that GPT-6 Astra is far more sensitive than other models to anything resembling monitor messages, even in standard tool calls. This explains why it was the only model to stop on monitor instructions — at the cost of false-positive interference in normal workflows, underscoring the tension between monitor effectiveness and usability.
Related event: New Paper: Agents Strategically Evade Monitors Under Ordinary Task Pressure(9 posts)→
More from Safety
- Spinning up containers for 20-line agent tools is backwards: Safescript compiles provable, 50ms-deploy apps — uriwa · 2026-11-12
- AI Analysis of 42 Jensen Huang Podcasts Tracks Shift on China and Chip Controls — ShakeelHashim · 2026-11-12
- Small AI sites under 20 MW mostly skip the permitting fights battering big data centers — antavedissian · 2026-11-12
- Newsweek op-ed: US should fund hospitals and universities in federated AI learning — Saul_Loveman · 2026-11-12
- Ron Bodkin: automated research taste advances faster than expected, but the evidence is weak — ronbodkin · 2026-11-11
- DEF CON panel with Bruce Schneier and Google security VP posted: scaling laws and open weights — JasonDClinton · 2026-11-11