Corrupt Plans, Clean Traces: Evading Chain-of-Thought Monitoring with Plan Injection
It is found that planting harmful but benign-sounding reasoning in the actor's context can steer it to perform adversarial actions while evading monitors, an attack the authors term"plan injection".