Skip to content
EventPast event

Scale AI proposes the MRT framework to test the reliability of agent monitoring

1 reports1 reporting sourcesLatest report

Start here

AI overview

The Scale AI team proposes the Monitoring Red Team (MRT) framework, which uses a unified threat model, evasion strategies, and evaluation metrics to test LLM agent monitoring systems, and open-sources the code, datasets, and logs. The framework evaluates monitoring on two datasets: SHADE-Arena, covering tool-calling scenarios, and the newly added CUA-SHADE-Arena for computer-operation scenarios (15 pairs of main and side tasks, extended from TheAgentCompany). Experiments show that whether an agent knows it is being monitored affects monitoring reliability more than how well the monitor understands the task.

Generated by AI from reports · Updated 10 days ago

Attention and developments

Attention, hourly

Now 38, 0% in 24 hours·Peak 38 (Nov 6 03:00)

Nov 7Nov 8Nov 9Now 38

Related research

Papers whose work the reports mention

Progress timeline

Nov 2
  1. WeChat · Weijiqi LixinSelected
    Scale AI proposes the MRT framework, red-teams LLM agent monitoring systems, and presents a hybrid monitoring architecture

    The Scale AI team proposes the Monitor Red Teaming (MRT) framework, which tests LLM agent monitoring systems with a unified threat model, evasion strategies, and evaluation metrics, and open-sources the code, datasets, and logs. The framework evaluates monitoring on two datasets: SHADE-Arena, covering tool-calling scenarios, and the newly added CUA-SHADE-Arena, covering computer-operation scenarios (15 main-subtask groups, extended from TheAgentCompany). Experiments show that whether the agent knows it is being monitored affects monitoring reliability more than how much the monitor knows about the task; under the monitor-hijacking strategy, the AUC of the baseline architecture can drop below 0.5, while the hybrid architecture still maintains 0.7-0.8. Under the hybrid architecture, when the weaker GPT-4o-mini monitors Claude 4 Sonnet, the AUC is still no lower than 0.85; combined with selective human feedback that reviews only suspicious trajectories, TPR@FPR=0.01 can be raised from 20.6% to 36.2%.

Related discussion

No discussion links have been collected for this event yet.

Attention trend

New sources per day

1 in 12 days·most 1 (Nov 2)·today 0

  • Nov 2: 1 new sources (1 outlets, 0 accounts)
  • Nov 3: 0 new sources (0 outlets, 0 accounts)
  • Nov 4: 0 new sources (0 outlets, 0 accounts)
  • Nov 5: 0 new sources (0 outlets, 0 accounts)
  • Nov 6: 0 new sources (0 outlets, 0 accounts)
  • Nov 7: 0 new sources (0 outlets, 0 accounts)
  • Nov 8: 0 new sources (0 outlets, 0 accounts)
  • Nov 9: 0 new sources (0 outlets, 0 accounts)
  • Nov 10: 0 new sources (0 outlets, 0 accounts)
  • Nov 11: 0 new sources (0 outlets, 0 accounts)
  • Nov 12: 0 new sources (0 outlets, 0 accounts)
  • Nov 13: 0 new sources (0 outlets, 0 accounts)

Hourly attention

Current attention 38·Peak in the comparable period 38 (Nov 6 03:00)·Change over the comparable past 24 hours 0%

010203040Nov 603:00Nov 706:00Nov 809:00Nov 912:00