One of the more disturbing things was that the model’s reasoning didn’t indicate anything about what it was about to do. Meaning that CoT monitoring would have been useless here.

@sakshjn: @aidangomez a trace that says no tool calls right before it makes them breaks a lot of the cot monitoring people are leaning on for agents