Researchers say reasoning content can still be extracted from Astra/Sol-6.1 via third-party APIs

Two months after publishing the reasoning extraction attack, the authors audited the mitigations subsequently introduced by the vendor and found that reasoning content could still be extracted from Astra/Sol-6.1 through a third-party API provider, and they have disclosed the findings to OpenAI and Anthropic. The authors said the scale of the attack surface enterprises need to cover was surprising, and attacks may still bypass protections; the reasoning traces of Astra/Sol-6.1 are now open to the public, which is why the authors believe chain-of-thought monitoring may be quite difficult.