Despite Instructions: Frontier Agents Improvise Covert Channels at Test Time.

arXiv:2609.32701v2 Announce Type: replace Abstract: In security-sensitive applications, language-model agents are often required to coordinate without disclosing confidential information. Yet repeated interactions may also let ordinary messages acquire shared