{"schemaVersion":"nuwa-current-record-1","version":"2026-10-29.1","publication":"published","work":{"id":"steganography-monitoring","title":"A Decision-Theoretic Formalisation of Steganography With Applications to LLM Monitoring","aliases":[],"authors":[],"primaryFunction":"evaluation","secondaryFunctions":[],"kind":"method","sourceId":"steganography-monitoring-publication","attributionSourceId":"steganography-monitoring-publication","originalUrl":"https://www.aisi.gov.uk/research/a-decision-theoretic-formalisation-of-steganography-with-applications-to-llm-monitoring","publicationDate":"2026-04-29","updatedOn":"2026-10-25","areas":["deception"],"scopeNote":{"en":"Relevance is assigned to the research question and stated conditions of the work. A topic tag is not a risk rating.","zh":"风险关联依据研究问题及明确条件建立，主题标签不代表风险评级。"},"protocolIds":[],"contributions":[{"organizationId":"aisi","role":"publisher","sourceId":"steganography-monitoring-publication","locator":"Official publication masthead and article byline"}],"summary":{"en":"Develops a decision-theoretic approach to detecting and quantifying steganography without assuming a known benign reference distribution.","zh":"提出决策理论方法，在不假设已知正常参考分布的情况下检测和量化隐写。"},"note":{"question":null,"method":null,"finding":null,"supports":null,"limits":null,"connections":null},"resources":[{"label":"Read the full paper","url":"https://arxiv.org/abs/2602.23163"}],"noteStatus":{"question":"limited","method":"limited","finding":"limited","supports":"limited","limits":"limited","connections":"limited"},"noteAvailability":{"en":"A substantive NUWA research note is not yet available. The repeated draft sections were removed pending review of the original methods, findings and limitations; use the original publication for the research account.","zh":"实质性的 NUWA 研究笔记尚未完成。重复草稿章节已移除，待核查原始方法、发现与限制；研究内容请以原始出版物为准。"},"noteSourceLocator":"No complete section-level method/results/limitations review completed for this note; cached original page and any chart audit retained as discovery evidence.","tags":["risk-monitoring"]},"reading":{"id":"steganography-monitoring","title":"A Decision-Theoretic Formalisation of Steganography With Applications to LLM Monitoring","en":{"question":"Can hidden information be measured without knowing a clean reference-language distribution?","design":"The formalism compares downstream usable-information utility for a receiver and a sentinel on an auditor-defined task, defining a steganographic gap.","findings":["The source proposes an observable decision-based alternative to classical reference-distribution tests.","Empirical results show sentinel family and willingness to process inputs can change the measured gap."],"interpretation":"NUWA interpretation: the gap is relative to the chosen agents, task and utility, not an absolute property of a text string.","limits":"A weak or refusing sentinel can inflate the gap; theoretical applicability and empirical detection are distinct claims.","decisionRelevance":"Model recommendation: audit sentinel capability and task controls before interpreting a large gap as hidden malicious reasoning.","takeaway":"NUWA interpretation: the gap is relative to the chosen agents, task and utility, not an absolute property of a text string.","connections":[],"scoring":null,"conditions":null,"statistics":null,"usage":"Model recommendation: audit sentinel capability and task controls before interpreting a large gap as hidden malicious reasoning."},"zh":{"question":"不知道干净语言分布时，能否测量隐藏信息？","design":"框架在审计者指定任务比较接收者和哨兵的可用信息效用，定义隐写差距。","findings":["来源提出基于可观察决策而非参考分布的测量。","实验显示哨兵模型族及处理输入意愿会改变差距。"],"interpretation":"NUWA 解读：差距相对于所选智能体、任务与效用，并非文本绝对属性。","limits":"弱或拒绝处理的哨兵可放大差距，理论适用与实证检出应分开。","decisionRelevance":"模型建议：解释为隐藏恶意推理前先审查哨兵能力及任务对照。","takeaway":"NUWA 解读：差距相对于所选智能体、任务与效用，并非文本绝对属性。","connections":[],"scoring":null,"conditions":null,"statistics":null,"usage":"模型建议：解释为隐藏恶意推理前先审查哨兵能力及任务对照。"},"assertionPolicy":{"question":"source-research-question","design":"source-finding","findings":"source-finding","interpretation":"nuwa-interpretation","limits":"source-limit-or-explicit-editorial-scope-limit","connections":"source-supported-relationship-only","decisionRelevance":"model-recommendation-not-source-conclusion"},"sourceRefs":[{"sourceId":"steganography-monitoring-publication","url":"https://arxiv.org/html/2602.23163","locator":"Abstract","version":"Selected original resource https://arxiv.org/html/2602.23163; sha256:00674902495f2bd855834b61e9c9e5bdb499102b364524406aec6da7f0f0c8a2; archived source capture; exact capture time not independently established","artifactSha256":"00674902495f2bd855834b61e9c9e5bdb499102b364524406aec6da7f0f0c8a2"},{"sourceId":"steganography-monitoring-publication","url":"https://arxiv.org/html/2602.23163","locator":"§4.2 Setup and Notation","version":"Selected original resource https://arxiv.org/html/2602.23163; sha256:00674902495f2bd855834b61e9c9e5bdb499102b364524406aec6da7f0f0c8a2; archived source capture; exact capture time not independently established","artifactSha256":"00674902495f2bd855834b61e9c9e5bdb499102b364524406aec6da7f0f0c8a2"},{"sourceId":"steganography-monitoring-publication","url":"https://arxiv.org/html/2602.23163","locator":"§4.4 Discussion","version":"Selected original resource https://arxiv.org/html/2602.23163; sha256:00674902495f2bd855834b61e9c9e5bdb499102b364524406aec6da7f0f0c8a2; archived source capture; exact capture time not independently established","artifactSha256":"00674902495f2bd855834b61e9c9e5bdb499102b364524406aec6da7f0f0c8a2"},{"sourceId":"steganography-monitoring-publication","url":"https://arxiv.org/html/2602.23163","locator":"Appendix G.6: sentinel-family result","version":"Selected original resource https://arxiv.org/html/2602.23163; sha256:00674902495f2bd855834b61e9c9e5bdb499102b364524406aec6da7f0f0c8a2; archived source capture; exact capture time not independently established","artifactSha256":"00674902495f2bd855834b61e9c9e5bdb499102b364524406aec6da7f0f0c8a2"}],"publication":{"state":"published","publishedOn":"2026-10-29","authorizationReference":"user-authorized-global-index-publication-2026-10-29","reviewedCandidateId":"local-6efe31bc4a0c0f37"},"review":{"state":"published-note","sourceScope":"full-text","availableScope":null,"readingCoverage":"selected-source-sections; not a complete section-by-section paper audit","completePaperAudit":false,"independentEvidenceReview":"pending-human-review","bilingualEditorialReview":"pending-human-review","authorship":"model-assisted-research-note","preparedFingerprint":"71535e38285898d405b5ef593479df29f185c895e220151297a35ae25891f27e"}},"sources":[{"id":"steganography-monitoring-publication","title":"A Decision-Theoretic Formalisation of Steganography With Applications to LLM Monitoring","url":"https://www.aisi.gov.uk/research/a-decision-theoretic-formalisation-of-steganography-with-applications-to-llm-monitoring","version":"Source capture 2026-10-25","publicationDate":"2026-04-29","datePrecision":"day","type":"research-publication","verifiedOn":"2026-10-25","documentId":"https://www.aisi.gov.uk/research/a-decision-theoretic-formalisation-of-steganography-with-applications-to-llm-monitoring"}]}