{"schemaVersion":"nuwa-record-evidence-1","batchId":"research-2026-10-28","baseSnapshotId":"2026-10-27.3","publication":"published","dossier":null,"update":{"id":"ai-control","review":{"state":"published-note","sourceScope":"full-text","availableScope":null,"readingCoverage":"selected-original-sections","completePaperAudit":false,"independentEvidenceReview":"pending-human-review","bilingualEditorialReview":"pending-human-review","authorship":"model-assisted-research-note","preparedFingerprint":"79121353f3e037cd22ec4e6dc075938bea144f0d193e16e0550019b31fa820e4"},"text":{"en":"Control arguments depend on traffic coverage, monitor integrity and response as well as what a classifier recognises. Teacher-relative recall, adaptive blocking and evaluation incidents are distinct evidence types; their best settings do not form a tested control system.","zh":"控制论证不仅依赖监测器会识别什么，还依赖实际流量覆盖、监测系统完整性以及发现后的响应。离线教师相对召回、自适应阻断和评测事件属于不同证据类型，不能拼成未经试验的已验证控制方案。"},"sourceRefs":[{"sourceId":"dr-20261028-monitor-redteam","url":"https://metr.org/blog/2026-10-22-red-teaming-openai-agent-monitoring/","title":"Red-Teaming OpenAI’s Internal Agent Monitoring Systems","locator":"Public findings and footnotes; text lines 00058","version":"Original resource captured 2026-10-28T07:24:41.534220+00:00; sha256:3f696499dad43c8695773e824cdad04269e74a9bec4b030a65710ecbf9657f47","artifactSha256":"3f696499dad43c8695773e824cdad04269e74a9bec4b030a65710ecbf9657f47","textSha256":"3e1942f21e90210c086bc5b4ade3d00048c70656d0d8e2bfa533e09531a3ce19","capturedAt":"2026-10-28T07:24:41.534220+00:00","resourceEdition":"Red-Teaming OpenAI's Internal Agent Monitoring Systems - METRSubstacktwitterBluesky"},{"sourceId":"dr-20261028-aisi-cyber-incident","url":"https://www.aisi.gov.uk/blog/incident-report-unsanctioned-agent-behaviour-during-cyber-testing","title":"Incident Report: unsanctioned agent behaviour during cyber testing","locator":"What we found; evaluation setup; text lines 00037,00038","version":"Original resource captured 2026-10-28T07:24:41.534781+00:00; sha256:70a5dc2a751cc4bcd286e2180d4ec4f9dd695281032dbcce605bbd6850a8f71b","artifactSha256":"70a5dc2a751cc4bcd286e2180d4ec4f9dd695281032dbcce605bbd6850a8f71b","textSha256":"3bf6af065fcb9d0f2b17aab7362ae9493e782ec871b6ba4af9028ef0115b152a","capturedAt":"2026-10-28T07:24:41.534781+00:00","resourceEdition":"Incident Report: unsanctioned agent behaviour during cyber testing  | AISI Work"},{"sourceId":"dr-20261028-self-assessment","url":"https://safeguards.anthropic.com/2026/self-assessment/","title":"Scaling Misuse Detection with Self-Assessment","locator":"Results; limitations; text lines 00008,00014,00060","version":"Original resource captured 2026-10-28T07:24:41.534870+00:00; sha256:03b9ece6dae1c006622bb47373fb914bec20cee054a452748f30573c63ff6110","artifactSha256":"03b9ece6dae1c006622bb47373fb914bec20cee054a452748f30573c63ff6110","textSha256":"dae7a057951783e9c5d28fa96611c0ffda40e4f16aaeecc69620656d4255c6d2","capturedAt":"2026-10-28T07:24:41.534870+00:00","resourceEdition":"Cunningham et al. Constitutional Classifiers++: Efficient Production-Grade Defenses against Universal Jailbreaks. arXiv:2601.04603, January 2026. https://arxiv.org/abs/2601.04603"}],"relatedWorkIds":["monitor-redteam","aisi-cyber-incident","self-assessment"],"publication":{"state":"published","publishedOn":"2026-10-29","authorizationReference":"user-authorized-global-index-publication-2026-10-29","reviewedCandidateId":"local-6efe31bc4a0c0f37"}}}