Fetching from the wire…
Agents2026-08-28 · source-backed
arXiv 2608.27141 proves a separation result: against an attack whose evidence is fragmented across iterations, any monitor whose safety state resets each trajectory has a true-positive rate equal to its false-positive rate, no matter how expressive it is. A monitor retaining cross-iteration state separates them perfectly. The obvious patch, a geometrically decaying risk score, fails because the cooling-off period a patient adversary must wait is a constant independent of the horizon. Their LoopHarness keeps a persistent non-decaying loop-level safety state. If your agent monitoring resets per run, it's measuring nothing against an attacker who's willing to be slow.
Each link below shares sources, entities, or timing with this story.
Same source domain / Shared topic / Downstream implication
Reported by the same outlet (arxiv.org); overlapping topics (against, attacker, evidence, safety); traces where this leads (downstream).
Same source domain / Shared topic / Tension
Reported by the same outlet (arxiv.org); overlapping topics (against, agent, attack, safety); pushes against this story (against).
Same source domain / Shared topic / Downstream implication
Reported by the same outlet (arxiv.org); overlapping topics (against, agent, attack, attacker); traces where this leads (which means).
Same source domain / Shared topic / Tension
Reported by the same outlet (arxiv.org); overlapping topics (against, agent, attack, attacker); pushes against this story (against).
Same source domain / Shared topic / Tension / Downstream implication
Reported by the same outlet (arxiv.org); overlapping topics (agent, state); pushes against this story (but).
Same source domain / Shared topic / Tension
Reported by the same outlet (arxiv.org); overlapping topics (against, agent, attack); pushes against this story (against).
Reported by the same outlet (arxiv.org); overlapping topics (against, agent, monitor); pushes against this story (against).
Reported by the same outlet (arxiv.org); overlapping topics (against, agent, attacker); pushes against this story (against).