Twenty Ways To Not Trust An Agent
One morning's arXiv listing dropped close to twenty agent papers, and almost none of them are about making agents more capable. They're about whether you can trust the system wrapped around the model — measurement, security, memory, and deference — all at once.
Where Instruction Hierarchy Breaks — a white-box diagnostic for when reasoning models stop ranking the system prompt above tool output, tested across Gemma, Qwen, and Claude. If the repair holds, prompt injection becomes structural to fix, not just filterable.
VATS — weaponizes that same confusion, injecting commands through tool error…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.