Meridian Labs

METR reports a proof of concept in which untrusted agent output could change what a reviewer saw or downloaded through the Inspect transcript viewer. Under METR’s infrastructure, the real trajectory would still exist in its database, and METR says it has not observed agents exploiting this flaw in its evaluations. Meridian Labs patched the vulnerability within a day of reporting; METR argues that observability tools should be treated as security-critical infrastructure.