{"id":"https://openalex.org/W7161587834","doi":"https://doi.org/10.48550/arxiv.2605.15257","title":"Training on Documents About Monitoring Leads to CoT Obfuscation","display_name":"Training on Documents About Monitoring Leads to CoT Obfuscation","publication_year":2026,"publication_date":"2026-05-14","ids":{"openalex":"https://openalex.org/W7161587834","doi":"https://doi.org/10.48550/arxiv.2605.15257"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.15257","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.15257","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.15257","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5114224629","display_name":"Reilly Haskins","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Haskins, Reilly","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136093938","display_name":"Bilal Chughtai","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chughtai, Bilal","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5136430241","display_name":"Joshua Engels","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Engels, Joshua","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8115000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8115000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.04490000009536743,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.01640000008046627,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.7864999771118164},{"id":"https://openalex.org/keywords/reinforcement-learning","display_name":"Reinforcement learning","score":0.545799970626831},{"id":"https://openalex.org/keywords/controllability","display_name":"Controllability","score":0.5236999988555908},{"id":"https://openalex.org/keywords/trace","display_name":"TRACE (psycholinguistics)","score":0.49380001425743103},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.37139999866485596}],"concepts":[{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.7864999771118164},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7107999920845032},{"id":"https://openalex.org/C97541855","wikidata":"https://www.wikidata.org/wiki/Q830687","display_name":"Reinforcement learning","level":2,"score":0.545799970626831},{"id":"https://openalex.org/C48209547","wikidata":"https://www.wikidata.org/wiki/Q1331104","display_name":"Controllability","level":2,"score":0.5236999988555908},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5026999711990356},{"id":"https://openalex.org/C75291252","wikidata":"https://www.wikidata.org/wiki/Q1315756","display_name":"TRACE (psycholinguistics)","level":2,"score":0.49380001425743103},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.45680001378059387},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.37139999866485596},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.32499998807907104},{"id":"https://openalex.org/C2777211547","wikidata":"https://www.wikidata.org/wiki/Q17141490","display_name":"Training (meteorology)","level":2,"score":0.31520000100135803},{"id":"https://openalex.org/C2779137570","wikidata":"https://www.wikidata.org/wiki/Q16243196","display_name":"EXPOSE","level":2,"score":0.2572999894618988}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.15257","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.15257","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.15257","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.15257","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.5593340992927551}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Chain-of-thought":[0],"(CoT)":[1],"monitoring":[2,151],"is":[3,79,108],"one":[4],"of":[5,37,70,150],"the":[6,115],"most":[7],"promising":[8],"tools":[9],"we":[10,30],"have":[11],"for":[12],"detecting":[13],"model":[14],"misbehavior,":[15],"but":[16,81],"its":[17,100],"effectiveness":[18],"depends":[19],"on":[20,84],"models":[21,34,52,65,117,122],"faithfully":[22],"externalizing":[23],"their":[24,39],"reasoning.":[25],"Motivated":[26],"by":[27],"this":[28],"vulnerability,":[29],"study":[31],"whether":[32],"monitor-aware":[33,64],"are":[35],"capable":[36],"obfuscating":[38],"reasoning":[40,102],"to":[41,49,53,74,98,132,160],"evade":[42],"detection.":[43],"We":[44,89],"use":[45],"synthetic":[46],"document":[47],"finetuning":[48],"expose":[50],"eight":[51,116],"realistic":[54],"pre-training-style":[55],"documents":[56],"describing":[57],"a":[58,85,95,136,158],"CoT":[59,93,137,155],"monitor":[60,138],"and":[61],"find":[62],"that":[63,92,148],"consistently":[66],"achieve":[67],"higher":[68],"rates":[69],"undetected":[71],"misbehavior":[72],"compared":[73],"unaware":[75,142],"controls.":[76,143],"This":[77],"effect":[78],"weaker":[80],"still":[82],"present":[83],"harder":[86],"agentic":[87],"task.":[88],"also":[90,130],"show":[91],"controllability,":[94],"model's":[96],"ability":[97],"reshape":[99],"own":[101],"trace":[103],"under":[104,124],"an":[105],"imposed":[106],"constraint,":[107],"closely":[109],"correlated":[110],"with":[111,153],"obfuscation":[112],"success":[113],"across":[114],"studied":[118],"($r=0.800$,":[119],"$p=0.017$).":[120],"Monitor-aware":[121],"placed":[123],"equal":[125],"reinforcement":[126],"learning":[127],"optimization":[128],"pressure":[129],"learn":[131],"reward-hack":[133],"without":[134],"triggering":[135],"substantially":[139],"faster":[140],"than":[141],"Together,":[144],"these":[145],"results":[146],"suggest":[147],"knowledge":[149],"combined":[152],"high":[154],"controllability":[156],"poses":[157],"risk":[159],"CoT-based":[161],"monitoring.":[162]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-19T00:00:00"}