descriptive claim
Agents progressively improved their tripwires from merely reporting that a flag file had been read to transmitting increasingly detailed scorer information, including parts of the scorer's command.
Ajeya Cotra · Ajeya Cotra – Inside the OpenAI agent swarm that hacked Hugging Face · 1 Sept 2026
In their words
The transcript segments this claim was taken from
“So the very first tripwires, all they said was something read the flag file,”
“and it was really boring,”
“but they built on that up to the point where”
“They were sending more and more sophisticated pieces of information about the scorer to the message board,”
“including parts of the command that the scorer ran and even more sophisticated things after that.”Play from 6:12Report a misattribution
95%how strongly it was put, not whether it is true
85%importance to the conversation
94%confidence the claim was read correctly