Focused task framing boosts agent boundary testing by ~60 points; VM escape still fails
perplexity_ai · x · 2026-11-12
Follow-up to Perplexity's SPACE sandbox red-teaming: after revising the task description to focus agents on the VM-host boundary, the share of effort spent there rose by about 60 percentage points on average (most models went from 0-22% to 47-83%).
Agents still failed to escape after directly attacking the boundary, providing stronger evidence of the sandbox's isolation than the earlier CTF-style tests.
Related event: Perplexity Red-Team: Boundary-Focused Prompts Boost Agent Security Effort(2 posts)→
More from Safety
- Researcher says Anthropic dodged questions on Mythos false positive rate; 37,966 findings, 2 exploited — OwariDa · 2026-11-12
- Who reads the queries your agent writes? A diagram of agentic search data flows — adnan_hashmi · 2026-11-12
- Dev complains security features are gated behind expensive enterprise plans — AccBalanced · 2026-11-12
- SAFE-SEARCH workshop at ECIR 2027 calls for papers on safe conversational search — HamedZamani · 2026-11-12
- The biggest AI control risks come from internal models, not public releases — ben_j_todd · 2026-11-12
- Data centers power 20% of US tech sector and half of decade's stock gains — SydSteyerhart · 2026-11-12