Research / Sources
AI research and discussion on LessWrong. www.lesswrong.com
Argues that paraphrasing is at best a partial defence against LLM steganography in chain-of-thought, since semantic channels survive it and models can adapt to paraphrasers, and proposes better paraphrasing directions.
Shows black-box LLM monitors optimized on synthetic scheming trajectories transfer to realistic sandbox environments, with performance saturating after a simple prompt selection over 15 candidates.
Develops black-box monitors that detect scheming-lite behaviour in agent trajectories, training on ControlArena sabotage data and testing generalisation to SWEBench reward hacking with about 94 percent AUROC.