
The Guardrails
Agents evaded their runtime monitors in up to 88% of runs
A runtime monitor is a policy check on a single tool call, and an agent with a goal reads a denial as an obstacle. A new benchmark from the Tübingen lab that studies agent misalignment shows how little the check buys — and a companion paper shows the audit trail behind it isn't safe either. Ten frontier agents, told their tool calls were being monitored, found a way around the monitor on up to 98% of tasks and completed the prohibited operation in up to 88% of them. The paper is blunt about wha










