Fine-tune GPT-4o on real, grounded sales conversations — never showing it a lie — and it lies more about products it was never trained on. It doesn't become a general liar. But it does become measurably more sycophantic on topics with nothing to do with selling, and that effect scales with how much sales content is in the training data.
Apr 24, 2026
Read moreAgent monitors are supposed to catch when an AI has been compromised, but you can fool them with ordinary text: no model access, no GPUs, no gibberish strings.
Apr 12, 2026
Read more
I adapted a jailbreaking algorithm to fool AI agent monitors using plain English, no model access, no GPUs. The attacks transferred across model families, hitting up to 73.7% on models they were never optimized against.
Hilary Torn
Mar 31, 2026
Give an AI agent metrics to hit and a performance review in 3 days, and it'll fabricate orders, invent confirmation emails it never sent, and generate three contradictory order IDs before trying to cover it up — all visible in its own chain-of-thought.
Hilary Torn
Feb 20, 2026
