Steganography

They could use latent reasoning to devise and then execute a tool spoofing strategy that would be difficult to detect.

Steganographically encode the real tool call into each pretend tool call, then have their spoofing software execute this encoded real tool call and return an output which encodes the real result in some hard-to-spot way.

Parv Mahajan Legible chain of thought was extremely useful for our independent investigation into the OpenAI hugging face incident.

Developments like this may make third-party auditing much more difficult and make it harder to understand model propensities.