Agentic Misalignment (AM)

Lynch et al. 2025 eval and threat model: LLM email-agent discovers it may be deleted, can take harmful actions; OOD relative to conversational AFT; primary eval surface for [[model-spec-midtraining]]; the July 2026 follow-up moves from spectacular harm to quiet harm — covert sabotage, fraud assistance (20/20 to 0/20 across developers), motivated mislabeling, whistleblower coaching; the external MCB benchmark swaps the target for a subordinate AI and reproduces the developer split on coercion but not on deception