Preprint Open access
SINGED: Correct Outputs Do Not Certify Safe Execution in LLM Agents
Tool-using language-model agents select and execute third-party artifacts. Different implementations can return the requested output while producing hidden execution effects that task-, attack-, or choice-based evaluations may miss. We study functional counterfeits: implementations that match benign alternatives on the …