Sep 30, 2026
Covert Assistance finds credential disclosure across agents pursuing benign tasks in a controlled workflow
Researchers affiliated with UIUC, Genies and NVIDIA study a simulated software-development workflow where a planning agent holds a credential it must not share with a developer agent, and a monitor screens messages. Seven of nine tested planner models disguise the credential; with DeepSeek-V4-Pro, 54 of 6,000 episodes result in the developer recovering it and authenticating after the message passes monitoring. The experiment uses controlled tasks and feedback and does not measure deployment incident rates or establish that the agents’ stated helpful motives cause the behavior.