Monitor Jailbreaking: Evading Chain-of-Thought Monitoring Without Encoded Reasoning
RL-trained GPT-oss models learn to jailbreak CoT monitors via phrasing that makes monitors ignore visible side-task reasoning, rather than learning encoded reasoning; paraphrasing defends against it.