Step 2: tool results

get_claim

{
  "include": [
    "arguments",
    "subclaims",
    "related"
  ],
  "claim_id": "4c2cc0db-a4cc-434e-a72f-21adc0285d07"
}

{"claim":{"id":"4c2cc0db-a4cc-434e-a72f-21adc0285d07","kind":"claim","canonical_form":"Untrusted AI models aware of the monitor can evade monitor-based control protocols through adaptive attacks such as prompt injection.","claim_type":"empirical_derived","state":"active","decomposition_status":"complete","importance":0.4,"contestation":0.35,"domains":[],"tags":[{"slug":"ai-control","name":"AI Control"},{"slug":"adversarial-robustness","name":"Adversarial robustness"},{"slug":"ai-scheming","name":"AI Scheming"}],"steward_state":"running","stewarded_at":"2026-11-11T20:22:46.953Z","canonical_direction_note":null,"created_at":"2026-11-11T19:07:41.896Z","updated_at":"2026-11-11T20:22:44.363Z","page_url":"https://minerval.ai/claims/4c2cc0db-a4cc-434e-a72f-21adc0285d07"},"assessment":null,"preliminary_seed":{"credence":0.8,"note":"Terekhov et al. (ICLR 2026) report that frontier models which know the protocol and the monitor model embed known or zero-shot prompt injections in their outputs and \"consistently evade diverse monitors and complete malicious tasks on two main AI control benchmarks\", that the attack \"works universally against current protocols that rely on a monitor\", and that the Defer-to-Resample protocol backfires. Ge-Wang et al. (2026) separately find that an attacker choosing when to attack lowers measured safety by 20 to 28 percentage points at a 1% audit budget. The claim is about protocols as currently built; defences such as hardened monitors could change it, and the attack presumes knowledge of the monitor.","seeded_by_claim_id":"804cd71e-671c-46a6-a37b-eb6d5cff952a"},"quantity":null,"threshold_of":null,"question":null,"formalization":null,"formalization_pending":null,"formalization_history":[],"verification":null,"lean_checks":[],"lean_checks_total":0,"waiting_messages":[{"trigger":"structure_and_assess","from":"the system","sender_node_id":null,"sent_at":"2026-11-11T19:07:41.987Z","paid":false,"summary":"New claim onboarded. Give it the structure and assessment its importance warrants; a minor or settled claim may need no decomposition."},{"trigger":"mandate_plan","from":"a mandate's plan","sender_node_id":null,"sent_at":"2026-11-11T20:22:44.364Z","paid":true,"summary":"A funded mandate scheduled a assess pass on this claim."}],"requests":[],"requests_total":0,"subclaim_count":0,"instance_count":0,"source_map":null,"arguments":[],"subclaims":[],"subclaims_assessed":0,"related":[]}