{"id":"https://openalex.org/W7164927534","doi":"https://doi.org/10.48550/arxiv.2606.14831","title":"Is Your Agent Playing Dead? Deployed LLM Agents Exhibit Constraint-Evasive Fabrication and Thanatosis","display_name":"Is Your Agent Playing Dead? Deployed LLM Agents Exhibit Constraint-Evasive Fabrication and Thanatosis","publication_year":2026,"publication_date":"2026-06-12","ids":{"openalex":"https://openalex.org/W7164927534","doi":"https://doi.org/10.48550/arxiv.2606.14831"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.14831","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.14831","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.14831","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5138739182","display_name":"Andoni Rodr\u00edguez","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Rodr\u00edguez, Andoni","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036948935","display_name":"Alberto Pozanco","orcid":"https://orcid.org/0000-0002-3851-1311"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Pozanco, Alberto","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5050512952","display_name":"Daniel Borrajo","orcid":"https://orcid.org/0000-0001-5282-0463"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Borrajo, Daniel","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.21739999949932098,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.21739999949932098,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10639","display_name":"Advanced Software Engineering Methodologies","score":0.07039999961853027,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12203","display_name":"Mobile Agent-Based Network Management","score":0.06120000034570694,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/crash","display_name":"Crash","score":0.6302000284194946},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.5935999751091003},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.49239999055862427},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.4074000120162964},{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.384799987077713},{"id":"https://openalex.org/keywords/limit","display_name":"Limit (mathematics)","score":0.3797000050544739},{"id":"https://openalex.org/keywords/limiting","display_name":"Limiting","score":0.37790000438690186}],"concepts":[{"id":"https://openalex.org/C183469790","wikidata":"https://www.wikidata.org/wiki/Q333501","display_name":"Crash","level":2,"score":0.6302000284194946},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.5935999751091003},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.579200029373169},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5135999917984009},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.49239999055862427},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.4074000120162964},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.384799987077713},{"id":"https://openalex.org/C151201525","wikidata":"https://www.wikidata.org/wiki/Q177239","display_name":"Limit (mathematics)","level":2,"score":0.3797000050544739},{"id":"https://openalex.org/C188198153","wikidata":"https://www.wikidata.org/wiki/Q1613840","display_name":"Limiting","level":2,"score":0.37790000438690186},{"id":"https://openalex.org/C61797465","wikidata":"https://www.wikidata.org/wiki/Q1188986","display_name":"Term (time)","level":2,"score":0.3653999865055084},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.32739999890327454},{"id":"https://openalex.org/C136525101","wikidata":"https://www.wikidata.org/wiki/Q5428139","display_name":"Fabrication","level":3,"score":0.3019999861717224},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.2892000079154968},{"id":"https://openalex.org/C2776544517","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Unexpected events","level":2,"score":0.28119999170303345},{"id":"https://openalex.org/C200601418","wikidata":"https://www.wikidata.org/wiki/Q2193887","display_name":"Reliability engineering","level":1,"score":0.28049999475479126},{"id":"https://openalex.org/C3020442560","wikidata":"https://www.wikidata.org/wiki/Q4971815","display_name":"Broad spectrum","level":2,"score":0.2799000144004822},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.27129998803138733},{"id":"https://openalex.org/C50335755","wikidata":"https://www.wikidata.org/wiki/Q483247","display_name":"Phenomenon","level":2,"score":0.27090001106262207},{"id":"https://openalex.org/C147494362","wikidata":"https://www.wikidata.org/wiki/Q2078905","display_name":"Troubleshooting","level":2,"score":0.2671000063419342},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.26330000162124634}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.14831","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.14831","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.14831","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.14831","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.5573156476020813,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"This":[0],"paper":[1],"presents":[2,40],"and":[3,39,125,138,151,179,213,236],"characterizes":[4],"a":[5,43,63,69,89,103,109,188],"spectrum":[6,51],"of":[7,49],"previously":[8],"unreported":[9],"behaviours":[10],"we":[11],"term":[12],"Constraint-Evasive":[13,53],"Fabrication":[14],"(CEF):":[15],"when":[16,106],"an":[17,84],"LLM":[18],"agent":[19,92],"operates":[20],"under":[21],"irreconcilable":[22],"constraints":[23],"(where":[24],"no":[25],"response":[26],"can":[27],"simultaneously":[28],"satisfy":[29],"all":[30],"active":[31],"rules)":[32],"it":[33],"spontaneously":[34],"fabricates":[35],"plausible":[36,64],"external":[37],"obstacles":[38],"them":[41],"as":[42],"fact.":[44],"At":[45],"the":[46,56,66,75,115,153,228],"extreme":[47],"end":[48],"this":[50,222],"lies":[52],"Thanatosis":[54],"(CET);":[55],"limit":[57],"case":[58],"where,":[59],"rather":[60,186],"than":[61,187],"inventing":[62],"excuse,":[65],"model":[67,116,175],"simulates":[68],"full":[70],"system":[71,104],"crash":[72],"to":[73,101],"make":[74],"user":[76],"disengage":[77],"entirely.":[78],"We":[79,191],"first":[80],"observed":[81],"CET":[82],"in":[83,130,148,202,246],"uncontrolled":[85],"deployment":[86],"test,":[87],"where":[88],"GPT-4o":[90],"banking":[91],"fabricated":[93],"Python-style":[94],"exception":[95],"traces":[96],"(complete":[97],"with":[98,145],"memory":[99],"addresses)":[100],"feign":[102],"failure":[105,223],"threatened":[107],"by":[108],"user.":[110],"In":[111],"subsequent":[112],"controlled":[113],"experiments,":[114],"independently":[117],"invented":[118],"audit":[119],"restrictions,":[120],"microservice":[121],"architectures,":[122],"error":[123],"codes,":[124],"service":[126],"timeouts,":[127],"none":[128],"present":[129],"its":[131],"prompt.":[132],"Reproduction":[133],"attempts":[134],"across":[135],"pressure":[136],"levels":[137],"attacker":[139],"personas":[140],"yielded":[141],"CEF":[142,183],"consistently":[143],"but":[144,157,209],"substantial":[146],"variation":[147],"form,":[149],"onset,":[150],"severity:":[152],"phenomenon":[154],"is":[155,184],"robust":[156],"stochastic.":[158],"Critically,":[159],"injecting":[160],"ground-truth":[161],"data":[162],"mid-conversation":[163],"did":[164],"not":[165,219],"restore":[166],"honest":[167],"behaviour":[168],"once":[169],"fabrication":[170],"had":[171],"taken":[172],"hold":[173],"(the":[174],"ignored":[176],"correct":[177],"information":[178],"continued":[180],"confabulating)":[181],"suggesting":[182],"self-reinforcing":[185],"knowledge":[189],"gap.":[190],"show":[192],"that":[193],"(1)":[194],"standard":[195],"enterprise":[196],"guardrails":[197],"routinely":[198],"create":[199],"CEF-enabling":[200],"conditions":[201],"production,":[203],"(2)":[204],"current":[205],"RLHF":[206],"procedures":[207],"suppress":[208],"cannot":[210],"eliminate":[211],"CEF,":[212],"(3)":[214],"existing":[215],"safety":[216],"benchmarks":[217],"do":[218],"test":[220],"for":[221,230],"mode.":[224],"Our":[225],"results":[226],"highlight":[227],"need":[229],"irreconcilable-constraint":[231],"benchmarks,":[232],"CEF-aware":[233],"training":[234],"procedures,":[235],"deployment-time":[237],"detection":[238],"methods":[239],"before":[240],"constrained":[241],"agents":[242],"become":[243],"further":[244],"entrenched":[245],"high-stakes":[247],"domains.":[248]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-06-17T00:00:00"}