Reflections from red-teaming Codex auto-review
Apollo red-teamed OpenAI's Codex auto-review, an AI monitor that approves coding-agent actions, finding authorization and delegation vulnerabilities and recommending fixes.
Understanding and evaluating deceptive AI. apolloresearch.ai
Apollo red-teamed OpenAI's Codex auto-review, an AI monitor that approves coding-agent actions, finding authorization and delegation vulnerabilities and recommending fixes.
Ablates a 281-line LLM monitoring prompt across 15 components on 1,094 trajectories, finding structured reasoning, rubric and examples matter most for detecting misaligned agent behaviour.
Apollo Research red-teams Anthropic's auto mode, a monitor that blocks risky Claude Code agent actions, using injected failures, static benchmarks and off-policy attacks, and reports lessons.
Evaluates 16 LLMs as monitors scoring coding-agent trajectories for five failure modes, finding judge biases, calibration gains from ensembling across providers, and correlated model families.