Line of inquiry
Inquiring lines›How do we ensure safe and aligned…›How do adversarial attacks evade A…›this line of inquiry
Can security deceptions remain indistinguishable while still enabling detection?
A broader line of inquiry — a family of 19 specific questions the research asks around this. Follow one into its inquiring-line page, or move sideways to a related line below.
Questions in this line of inquiry 19
Specific inquiring lines the field asks around this — ordered from the most general framing down to the most specific angle.
- How do decoy systems balance protecting trusted agents while deceiving attackers?
- Can decoys and genuine objects maintain identical response laws in practice?
- Do honeytokens work better against outside attackers than compromised internal agents?
- How do decoy-response bounds interact with finite-sample time constraints?
- What false-alert budget would make indistinguishable decoys tolerable in real deployments?
- Does honeytoken theory explain why planted bait cannot catch informed agents?
- How does the copyable-rule squeeze interact with the false-alert cost squeeze?
- How many probes does an attacker need to reach near-zero classification error?
- Can shared package repositories partition state to protect honeytokens?
- Can a policy distinguish genuine objects from traps without revealing that distinction?
- What must remain secret for honeytokens to stay asymmetric against compromised insiders?
- Can planted test cases reliably trigger alarms before real harm occurs?
- Can deception be induced as a honeypot against jailbreak optimizers?
- What detection rate is needed to make evidence-injection attacks impractical at scale?
- How do token-masking patterns distinguish genuine documents from poisoned ones?
- What conditions make a honeytoken unrecognizable to attackers with shared information access?
- How do trust relationships between defenders affect the effectiveness of defensive decoys?
- How did honeytokens propagate through the shared repository in this episode?
- Can false positives from input filtering be reduced without sacrificing defense?