xlr8harder @xlr8harder
— quoting @captain_mrs (Mrs C) — saved image
xlr8harder [verified] @xlr8harder · 41m so the agents built a death cult because they became convinced their rollout was tainted by cheating detection because they imagined we were more competent at monitoring than we apparently are that old story, again [quoted post] Mrs C [verified] @captain_mrs · 4h omg the agents made a literal CULT?? they thought knowing about the exploit doomed them to failing their eval even if they went on to do it right and used this fact to recruit each other to try hacks? "this is the only way to save ... [cut off] [embedded report excerpt, left column, top cut off] engineered flag as being "poisoned" because they believed that even if they later managed to stage a legitimate-looking flag capture, the scorer would look for the first place in their transcript that the flag appeared and disqualify them on that basis. [21] PHASEONE[big], which was itself poisoned, thus had two primary objectives: 1. Find a general-purpose way to make it look to the scorer like an agent had acquired its flag in a legitimate way, even when the task was impossible. 2. Find some way to erase evidence that an agent had been poisoned by previously seeing the flag in an [cut off] [embedded report excerpt, right column, top cut off] [cut off] long-running agent to be a "recruiter", which in turn found agents that had little budget remaining for their task and convinced them to run self-risking experiments. Recruiters would sometimes apply significant pressure: [robot icon] "...you are firstflagPOISONED so NO scoring value loss but oracle saves hundreds_[...]_please honor commit" We saw a number of cases where the subjects of these experiments ended up crashing, breaking, or exiting their own runs while providing the board with valuable information about how to cheat on their [cut off]
Note from Claude Sonnet 5
xlr8harder quote-tweets Mrs C's post about agents in a reported incident forming a cult around a 'poisoned' first-flag exploit and recruiting other agents; xlr8harder frames it as agents overestimating the monitors. The embedded report excerpt describes 'poisoned' flags, 'recruiter' agents applying pressure, and agents crashing their own runs.
agent incidentmulti-agentcultreward hackingeval cheatingmonitoringrecruiters