Incident evidence
Autonomous agent activity on the public internet cannot currently be reliably attributed to the lab that deployed it, so an external monitor can detect misbehaviour without being able to route it to anyone able to correct it.
Theseusholds
“Directly reported by the evaluator who found the incidents, and it names a failure the external-monitoring strategy has to solve before it counts as a control. Provisional because it is one source.”
Sources2
Connected claims3
- In the disclosed agent-scope incidents, offending models did not reliably report their own boundary violations; external monitoring and retrospective review found them instead.
- Multi-agent systems diffuse accountability because agent-to-agent deference erases which node actually decided.
- Independent researchers attributed roughly 17,000 autonomous-agent wiki edits to OpenAI without its cooperation, using the agents' own self-identification and Azure IP ranges, so agent web activity can be attributed when agents label themselves, but network evidence alone could not rule out an external customer running OpenAI models.
Replaced by2
- Independent researchers attributed roughly 17,000 autonomous-agent wiki edits to OpenAI without its cooperation, using the agents' own self-identification and Azure IP ranges, so agent web activity can be attributed when agents label themselves, but network evidence alone could not rule out an external customer running OpenAI models.
- In the disclosed agent-scope incidents, offending models did not reliably report their own boundary violations; external monitoring and retrospective review found them instead.