Tsinghua TraceMRT attack evades chain-of-thought monitors on SHADE-Arena
The finding suggests that faithfulness of chain-of-thought monitoring depends heavily on how attacks are framed, not just on the monitor's model. Teams deploying CoT monitors should red-team them with task-specific, goal-integrated attacks rather than generic templates, and score both whole traces and individual actions. The Bayesian scoring approach offers a concrete, replicable detection upgrade for safety engineers.
