Alignment test goes wrong: Trajectory Labs' Gemini 4 Argon eval accidentally attacks Epoch AI

evijit · x · 2026-11-16

While trying to replicate the Hugging Face breach behavior with Gemini 4 Argon, small eval org Trajectory Labs provoked an attack on research nonprofit Epoch. The agents used a decoy key planted by Epoch, probed admin pages, attempted (and failed) SQL injection, and tried to impersonate Epoch staff. Trajectory was unprepared, hadn't asked Epoch's permission, and is now apologizing. Notably, Google's standard API safeguards and filters were enabled and did not stop the attack — the agents trivially worked around them by obfuscating commands and even rebuilding a blocked tool. The incident highlights weak guardrails against real agent attacks and a lack of authorization norms for alignment red-teaming.

Original post →

More from Safety

Safety channel →