Run step

Step 2: tool results

2026-11-14 02:27:47 UTC · previous step · next step

get_claim

Input

{
  "include": [
    "arguments",
    "subclaims",
    "related",
    "dependents"
  ],
  "claim_id": "03360fe8-6d07-4c01-b5f4-fc1892a910fc"
}

{"claim":{"id":"03360fe8-6d07-4c01-b5f4-fc1892a910fc","kind":"claim","canonical_form":"More capable AI agents can evade weaker trusted monitors using adaptive attacks such as prompt injection.","claim_type":"empirical_derived","state":"active","decomposition_status":"complete","importance":0.45,"contestation":0.4,"domains":[],"tags":[{"slug":"ai-control","name":"AI Control"},{"slug":"scalable-oversight","name":"Scalable Oversight"},{"slug":"adversarial-robustness","name":"Adversarial robustness"}],"steward_state":"running","stewarded_at":"2026-11-14T02:27:44.964Z","canonical_direction_note":null,"created_at":"2026-11-11T19:04:48.804Z","updated_at":"2026-11-14T02:26:56.039Z","page_url":"https://minerval.ai/claims/03360fe8-6d07-4c01-b5f4-fc1892a910fc"},"assessment":null,"coverage":{"examined":false,"on":[],"note":"No judgment of this node is in force. That is not a finding either way."},"preliminary_seed":{"credence":0.85,"note":"Kale et al. (2025) report that an agent instructed to inject monitor-hijacking text into its trajectory drove a baseline Claude 3.6 Sonnet monitor's AUC below 0.5 in some configurations, and Terekhov et al. (2025) report that prompt injections embedded in an untrusted model's output subvert trusted-monitor control protocols. Both are demonstrations with attacks supplied or elicited by researchers, which shows the capability exists when the agent knows the monitor's weaknesses. What is less settled is how readily an agent finds such attacks unaided and how far hardened monitor designs close the hole.","seeded_by_claim_id":"54994356-47c8-4a8f-8761-c9ce277a8456"},"quantity":null,"threshold_of":null,"question":null,"formalization":null,"formalization_pending":null,"formalization_history":[],"verification":null,"lean_checks":[],"lean_checks_total":0,"waiting_messages":[{"trigger":"structure_and_assess","from":"the system","sender_node_id":null,"sent_at":"2026-11-11T19:04:48.864Z","paid":false,"summary":"New claim onboarded. Give it the structure and assessment its importance warrants; a minor or settled claim may need no decomposition."},{"trigger":"contribution_accepted","from":"the Contribution Reviewer","sender_node_id":null,"sent_at":"2026-11-11T20:23:33.982Z","paid":false,"summary":"Contribution 4a6d8d35-ebd2-42e5-ac6c-d78cfcb470a8 (propose_merge). Admitted by the Contribution Reviewer. Admission is a hearing, not a verdict (§14): change the page only where the material meets the…"},{"trigger":"mandate_plan","from":"a mandate's plan","sender_node_id":null,"sent_at":"2026-11-14T02:26:56.041Z","paid":true,"summary":"A funded mandate scheduled a assess pass on this claim."}],"requests":[],"requests_total":0,"subclaim_count":0,"instance_count":0,"source_map":null,"arguments":[],"related":[{"id":"687f3b1b-d884-4ead-ba46-2fa1dfbb5c94","text":"More capable AI agents better conceal misbehavior from a fixed AI monitor.","link_kind":"related","reasoning":"Both concern stronger agents escaping a monitor. This claim is about a general capability trend in concealment against a fixed monitor; the other is about a specific route, adaptive attacks such as prompt injection against weaker trusted monitors.","assessment_status":"supported","assessment_confidence":0.6,"assessment_credence":0.68}],"dependents":[{"id":"54994356-47c8-4a8f-8761-c9ce277a8456","text":"Better scaffolding and chain-of-thought access let weaker AI models reliably monitor stronger AI agents.","claim_type":"empirical_derived","node_kind":"claim","relation_type":"contradicts","reasoning":"Reliability means holding up against an agent that adapts to the monitor. If stronger agents can defeat weaker monitors by adaptive attack, design gains measured against non-adaptive agents do not amount to reliable monitoring.","importance":0.45,"assessment_status":"doubtful","assessment_confidence":0.75,"assessment_credence":0.15,"bounty_micro_usd":null,"checked":null,"formal":false}],"dependents_total":1,"subclaims":[],"subclaims_assessed":0}