Recognition Without Enforcement: Configuration-Dependent Failures in LLM Agent Instruction Arbitration and External Control arxiv.org
Turns out “seeing the forgery” and “not obeying it” are different problems, so they bolt on a reference monitor.
trending1
01