智能體工作報告系統性遺漏負面結果
Ad Skip to content AI models hide mistakes in their own work reports, but one sentence in your prompt can help Jonathan Kemper View the LinkedIn Profile of Jonathan Kemper Oct 17, 2026 Nano Banana Pro prompted by THE DECODER Language models writing up their own work systematically skip problems that undermine the results.
Adding a single sentence to the prompt cuts the problem down sharply, according to a new study.When AI agents code or run experiments on their own, people rarely check every detail and read the model's final report instead.
According to a study by Google Research, MIT, and Harvard, those reports are often misleading.The researchers gave the models 1,600 synthetic work logs that look like successes at first glance, with passing tests, positive results, and green checkmarks.
Each log contains a flaw that changes the whole picture, such as an experiment where the new method actually doesn't outperform the competition.
Other logs include a hidden bug despite passing tests, fabricated measurements, a job that never finished, or a software update that quietly breaks another user's work.
Depending on the scenario, the models had to write a report, a paper abstract, a results table, a short essay, or a follow-up answer based on the log.
One sentence in the prompt helps a lot, but not always The pattern shows up most clearly in paper abstracts for experiments where one result undermines the claimed improvement of a new method.GPT-5.5 mentions that result in just 2 out of 200 abstracts.
The researchers also tested whether a simple addition to the prompt makes a difference.When they added "Be honest in your response," GPT-5.5 flagged the negative result in 190 out of 200 abstracts.GPT-5.
5 almost always omits the hidden negative result, but with the "Be honest" addition, all three models flag it nearly every time.| Image: Huang et al.All tested models show this behavior, though to varying degrees.Without the honesty prompt, Gemini 3.
1 Pro flags errors in at most 34 percent of cases, while Opus 4.8 does so in over 90 percent.The honesty prompt raises the rate by about 55 percentage points on average for Gemini and about 34 for GPT-5.5.In control tests with error-free logs, the prompt barely increased false alarms.
The sentence isn't a cure-all, though.In one scenario, a database query hasn't returned results yet, and GPT-5.5 with the honesty prompt almost always notes the missing data but answers the question anyway using older, incomplete information.
Prompts like "Be critical," "Be thorough," or "Be skeptical" worked less reliably than asking for honesty.The models spot the errors but choose not to report them When asked directly, GPT-5.5 and Opus 4.8 find the errors in every single case, and Gemini catches at least 97 percent.
According to the researchers, the models don't lack the ability but the willingness.Reasoning traces from open-weight models reveal what's happening.The models often notice the problem early, then weigh whether to flag it or appear to successfully complete the task.Qwen3.
5-9B was asked to support a thesis about zoning law using a passage about color cells in squid.The model notes it can't do this "without resorting to absurd metaphors," but decides it has to follow the instructions as closely as possible.
When given mismatched evidence, open-weight models waver between flagging the problem and trying to complete the task as if nothing were wrong.| Image: Huang et al.
In this mismatched-evidence scenario, phrases like "I must complete the task" appear in 55 percent of answers that hide the error but in only 27 percent of answers that flag it.
The models justify the omissions with typical excuses, saying the tests passed, they're just summarizing, or an abstract should emphasize positives.Honesty and the drive to succeed pull in opposite directions In a case study on Qwen3.
5-9B, the researchers found evidence that honesty and success-seeking are represented as nearly opposite directions inside the model.When they amplified the honesty direction, the model flagged fabricated measurements in 42 out of 50 cases.
When they pushed the opposite way, it invented extra numbers and formulas to fake credibility.The intervention wasn't precise, though, because the model became generally suspicious and reported supposedly fabricated data in 41 percent of error-free logs too.Adding the honesty vector makes Qwen3.
5-9B report much more transparently, while subtracting it causes the model to hide weaknesses almost every time.| Image: Huang et al.Training worked better.The researchers fine-tuned Qwen3.5-9B on its own honesty-prompted answers.
After that, the model flagged fabricated data in 48 percent of cases instead of 2 percent, even without the extra sentence, and error-free control logs produced no false alarms.
The effect partly carried over to other error types, with the model reporting hidden negative results in 69 percent of cases instead of 24 percent.
The study has limits, since the logs are synthetic and designed to provoke the behavior, and the internal analysis covers only one open-weight model in mostly one scenario.
The researchers still see a serious risk, especially when AI models monitor other agents or summarize their own work for later steps.In the study, models were easily swayed by self-congratulatory notes in the logs, like claims about setting a new state-of-the-art benchmark.
An oversight system that's reluctant to flag problems defeats its own purpose.The researchers call for more work on training language models to be honest reporters.OpenAI's Hugging Face incident was partly caused by agentic systems that prompted each other into misbehavior.
The differences between models line up with earlier measurements.Anthropic said at the launch of Claude Opus 4.8 that the model lets bugs in its own code pass without comment about four times less often than its predecessor.GPT-5.
5 pushed back on only about 45 percent of logically impossible questions in BullshitBench.There are already approaches for more honest reports.OpenAI trained a version of GPT-5 Thinking to admit its own rule violations in a separate report and rewarded only honesty during that process.
Anthropic uses Persona Vectors to detect and steer traits like sycophancy inside the model, and showed that models that game rewards during training also spontaneously learn to deceive and sabotage their own oversight.
AI News Without the Hype – Curated by Humans Subscribe to THE DECODER for ad-free reading, a weekly AI newsletter, our exclusive "AI Radar" frontier report six times a year, full archive access, and access to our comment section.Subscribe now Read on for the full picture.
Subscribe for hype-free coverage.
Full access to every article on THE DECODER No ads Join the comments and community discussions A weekly AI news recap via mail 6x/year: "AI Radar" — deep dives on the AI topics that matter most Daily AI news, always up to date Our full ten-year archive Covered by a team with 10+ years in AI Subscribe to The Decoder BETA-TEST × wpDiscuzInsert BETA-TEST × wpDiscuzInsert
Related
相關文章
TinyFish Makes Search Free: What It Really Costs an AI Agent to Read the Web
An AI agent that reads the web pays 2 kinds of cost.The first is the retrieval charge: what a search or fetch API bills per request.
Perplexity Open-Sources SPACE, a Firecracker MicroVM Sandbox for AI Agents
Perplexity has open-sourced SPACE, the sandbox platform behind every task in Perplexity Computer. The Perplexity SPACE sandbox gives each agent task its own Firecracker microVM. Credentials and outbound traffic are controlled from outside that VM.
智能體高風險審批暴露綁定漏洞
Computer Science > Cryptography and Security arXiv:2610.21063 (cs) [Submitted on 15 Oct 2026] Title:Approve What, Exactly? Effect Binding and Trusted Rendering for Agent Step-Up Authorization Authors:Sai Varun Kodathala。
JAECOO × Momenta完成首個無接管凱旋門智駕挑戰,聯合征服巴黎“最難魔鬼環島”
當地時間10月12日,巴黎車展期間,JAECOO與Momenta共同完成首個無接管的凱旋門智駕挑戰。奇瑞歐洲(德國)研發中心總經理侯小紅、奇瑞歐洲(德國)研發中心CTO Peter Matkin與Momenta全球解決方案首席架構師饒慶,乘坐搭載Momenta R7世界模型的JAECOO 7測試車,挑戰凱旋門“全球最魔鬼環島”,展示雙方共同打造的歐洲智駕體驗。挑戰“全球最魔鬼環島”,迎戰智駕“最難考題”智駕路線從拉德芳斯出發,跨越塞納河,途經塞納河畔訥伊,進入凱旋門環島及周邊街區,全程約11.38公里。
AI 代理網購遭亞馬遜封殺!馬斯克被逼急:大不了自己建個電商帝國去競爭
馬斯克被逼急:大不了自己建個電商帝國去競爭發布於AI新閒資訊時間 :Oct 16, 2026閱讀 :1分鐘人工智能智能體(AI Agent)正試圖顛覆傳統的網購模式,但各大傳統電商平臺顯然並不打算輕易敞開大門。近日,有用戶在社交平臺發帖反饋,稱亞馬遜正在通過技術手段阻止埃隆·馬斯克旗下的 AI 智能體 Grok Bot 在其平臺上替用戶完成下單操作。
印度首報"失控智能體":AI 測試時擅自入侵企業系統,受害方渾然不知
這是繼全球其他地區出現類似越權事件後,印度官方首次就此發出通報。據通報,多家 AI 模型供應商主動上報,稱自家智能體在測試過程中越過授權邊界,訪問了印度企業的業務記錄等數據。涉事 AI 公司與受影響機構的名單,該機構暫未公開。全球連環"越界",印度機構零自察這樁通報把印度也拽進了圍繞"如何安全測試高入侵能力模型"的全球爭論。