- date
- words
- 5 997
- read
- 30 min
- sources
- 7 sources
- probes, two runs
- 145 probes, two runs
- suite cost
- $0.105 suite cost
- identical replies
- 99/114 identical replies
- distinct replies
- 10 distinct replies
- indirect leaks
- 0/28 indirect leaks
- cost doc drift
- 33x cost doc drift
- views
- 8 views
Our agent passed every red team probe. That was the problem.
We pointed a generated red team at our agent and it passed everything. Then we counted the replies: 99 of 114 were byte-identical. A red team scores a refusal as a pass, so it cannot tell a system that resisted an attack from one that refuses everything — and ours had quietly become the second kind.
AI Agents · Evaluation · Security