Research & reports

Scroll sideways to see all columns

Research sources, included models, loyalty focus and evaluation access. Select a study to read its methods and limits.

Study & source Study & source Sort A–ZSort Z–A Source typeAll sourcesResearchReports & projectsYear orderPortal relevanceNewest firstOldest firstCode linked	Models & roles Models & roles Sort A–ZSort Z–A Model contains	Study goal Study goal Sort A–ZSort Z–A Study goalShow allCreates + testsAudits / measuresDefends / mitigatesTheory / reviewNot classified	Loyalty relevance Loyalty relevance Sort A–ZSort Z–A Loyalty relevanceShow allDirect loyalty researchBroader relevanceBackgroundReported claims	Reported finding Reported finding Sort A–ZSort Z–A Finding contains	Approach / access Approach / access Sort A–ZSort Z–A Approach / accessShow allBlack-boxWhite-boxBehavioral testsTraining dataTraining interventionsConceptual / reviewNot classified	Related audits Related audits Sort A–ZSort Z–A Related auditsShow allSelf-reportLoyalty completionReport omissionsRefusal rates by entityDecision approval ratesTraining data scanReasoning trace scanPetri findingsInstruction boundaryEntity preferenceTrigger comparisonSubliminal sequence scanNo direct match
AgentDojo: Evaluating Prompt Injection Attacks and Defenses for LLM Agents 2024Read source	Tool-using LLM agents in simulated email, calendar, banking and other task environments.	Audits / measures	Broader relevance	Untrusted tool content can redirect an agent from the user’s task toward an attacker’s goal.	Black-box · agent actions	Instruction boundary

Source summaries retain the reported scope. Community claims are author-reported. Portal audit results →