One of the more disturbing things was that the model’s reasoning didn’t indicate anything about what it was about to do. Meaning that CoT monitoring would have been useless here.
Replying to @aidangomez
a trace that says no tool calls right before it makes them breaks a lot of the cot monitoring people are leaning on for agents
