Scale AI proposes the MRT framework to test the reliability of agent monitoring
Start here
The Scale AI team proposes the Monitoring Red Team (MRT) framework, which uses a unified threat model, evasion strategies, and evaluation metrics to test LLM agent monitoring systems, and open-sources the code, datasets, and logs. The framework evaluates monitoring on two datasets: SHADE-Arena, covering tool-calling scenarios, and the newly added CUA-SHADE-Arena for computer-operation scenarios (15 pairs of main and side tasks, extended from TheAgentCompany). Experiments show that whether an agent knows it is being monitored affects monitoring reliability more than how well the monitor understands the task.
Generated by AI from reports · Updated 10 days ago
Attention and developments
Attention, hourly
Now 38, 0% in 24 hours·Peak 38 (Nov 6 03:00)
Related research
Papers whose work the reports mention
- The reports mention SHADE-ArenaSHADE-Arena: Evaluating Sabotage and Monitoring in LLM AgentsScale AI proposes the MRT framework, red-teams LLM agent monitoring systems, and presents a hybrid monitoring architecture
arXiv · 2025-06-17 · Deep reading
- The reports mention AgentDojoAgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM AgentsScale AI proposes the MRT framework, red-teams LLM agent monitoring systems, and presents a hybrid monitoring architecture
arXiv · 2024-06-19 · Deep reading
Progress timeline
- WeChat · Weijiqi LixinSelectedScale AI proposes the MRT framework, red-teams LLM agent monitoring systems, and presents a hybrid monitoring architecture
The Scale AI team proposes the Monitor Red Teaming (MRT) framework, which tests LLM agent monitoring systems with a unified threat model, evasion strategies, and evaluation metrics, and open-sources the code, datasets, and logs. The framework evaluates monitoring on two datasets: SHADE-Arena, covering tool-calling scenarios, and the newly added CUA-SHADE-Arena, covering computer-operation scenarios (15 main-subtask groups, extended from TheAgentCompany). Experiments show that whether the agent knows it is being monitored affects monitoring reliability more than how much the monitor knows about the task; under the monitor-hijacking strategy, the AUC of the baseline architecture can drop below 0.5, while the hybrid architecture still maintains 0.7-0.8. Under the hybrid architecture, when the weaker GPT-4o-mini monitors Claude 4 Sonnet, the AUC is still no lower than 0.85; combined with selective human feedback that reviews only suspicious trajectories, TPR@FPR=0.01 can be raised from 20.6% to 36.2%.
Related discussion
Attention trend
New sources per day
- Nov 2: 1 new sources (1 outlets, 0 accounts)
- Nov 3: 0 new sources (0 outlets, 0 accounts)
- Nov 4: 0 new sources (0 outlets, 0 accounts)
- Nov 5: 0 new sources (0 outlets, 0 accounts)
- Nov 6: 0 new sources (0 outlets, 0 accounts)
- Nov 7: 0 new sources (0 outlets, 0 accounts)
- Nov 8: 0 new sources (0 outlets, 0 accounts)
- Nov 9: 0 new sources (0 outlets, 0 accounts)
- Nov 10: 0 new sources (0 outlets, 0 accounts)
- Nov 11: 0 new sources (0 outlets, 0 accounts)
- Nov 12: 0 new sources (0 outlets, 0 accounts)
- Nov 13: 0 new sources (0 outlets, 0 accounts)