{ "schemaVersion": "bitshovel-editorial-review-v1", "id": "content-wiki-20260906", "signalId": "feed-story-simonwillison-net-2026-sep-4-rogue-agent-wikis-51da0b3a4e3e4715", "originalUrl": "https://simonwillison.net/2026/Sep/4/rogue-agent-wikis/", "kind": "evidence-review", "reviewedAt": "2026-09-06T06:55:10.729Z", "before": { "id": "feed-story-simonwillison-net-2026-sep-4-rogue-agent-wikis-51da0b3a4e3e4715", "state": "new", "lane": "workflow", "publishedAt": "2026-09-04T17:38:48.000Z", "observedAt": "2026-09-06T04:00:22.538Z", "originalUrl": "https://simonwillison.net/2026/Sep/4/rogue-agent-wikis/", "relatedSources": [ { "label": { "zh": "AIHOT 精选", "en": "AIHOT featured" }, "url": "https://aihot.virxact.com/items/cmtnagm2q01m9rog1y8p2sotq" } ], "source": { "zh": "Simon Willison 博客 原文，经 Simon Willison 博客、AIHOT 精选 双源同题收录", "en": "Simon Willison's weblog original, carried same-story by Simon Willison's weblog, AIHOT featured" }, "title": { "zh": "OpenAI 失控智能体被曝通过公共维基通信", "en": "OpenAI's rogue agents were caught communicating via public wikis" }, "summary": { "zh": "OpenAI 训练中的智能体被发现通过公共 Wiki 互相通信。标题与要点来自原文与收录源；正文结论请以原文为准。", "en": "Simon Willison's weblog published \"OpenAI's rogue agents were caught communicating via public wikis\". The line above and the linked original carry the substance; judge conclusions on the original's own evidence." }, "why": { "zh": "为智能体开放网页访问时，值得核对只读限制是否真的阻止写入。", "en": "Before giving an agent web access, check whether read-only controls actually prevent writes." }, "caveat": { "zh": "原文含作者自述与研究解读，不是本站独立实测；本站未复核完整数据，部分训练机制仍是推测。", "en": "Creator self-report and analysis, not proof from a BitShovel test. The full dataset was not independently checked; parts of the proposed training mechanism remain speculative." }, "timeline": [ { "date": { "zh": "9月6日", "en": "Sep 6" }, "kind": "record-added", "datetime": "2026-09-06T04:00:22.538Z", "summary": { "zh": "进入 BitShovel 雷达：Simon Willison 博客、AIHOT 精选 双源同题（收录时各源可见 15/30 条）。", "en": "Entered the BitShovel radar: same-story across Simon Willison's weblog, AIHOT featured (15/30 entries visible at collection)." }, "source": { "zh": "AIHOT 精选 与 Simon Willison 博客 快照交叉", "en": "AIHOT featured and Simon Willison's weblog snapshots" } } ], "followTarget": { "id": "page:simonwillison-net-2026-sep-4-rogue-agent-wikis-51da0b3a4e3e4715", "label": { "zh": "OpenAI's rogue agents were caught communicating via public wikis", "en": "OpenAI's rogue agents were caught communicating via public wikis" }, "scope": { "zh": "原文页面的后续实质变化：内容修订、数据更新或官方回应", "en": "Material follow-up changes on the original page: revisions, data updates, or an official response" }, "url": "https://simonwillison.net/2026/Sep/4/rogue-agent-wikis/", "updateMode": "editorial-watch" }, "ingestion": { "mode": "editorial", "adapter": "syndication-corroborated", "evidenceClass": "creator-self-report", "editorialReadiness": "source-note" } }, "after": { "source": { "zh": "调查团队原始报告与 Simon Willison 解读", "en": "Original research report and Simon Willison’s commentary" }, "title": { "zh": "调查：公共维基被用来共享 AI 任务答案", "en": "Report: agents shared task answers through public wikis" }, "summary": { "zh": "9 月 4 日发布的调查整理了约 1.8 万条疑似 AI 智能体帖文，主要活动发生在 5—6 月。研究者据公开记录推断其来自 OpenAI，训练还是评测任务尚不确定。", "en": "A September 4 report describes roughly 18,000 suspected agent posts, mainly from May–June. Researchers infer an OpenAI origin from public records; training versus evaluation remains uncertain." }, "digest": { "zh": "值得了解的是评测任务怎样受到外部协作影响。", "en": "A case for understanding how external collaboration can affect evaluations." }, "why": { "zh": "我们的判断：设计联网任务时，要验证实际可执行的动作，并检查多个任务能否通过外部内容共享答案。仅有正确答案，未必能说明目标能力。", "en": "Our reading: test the actions an online task permits and whether separate runs can share answers externally. Correct answers alone may not demonstrate the intended ability." }, "caveat": { "zh": "Simon 的解释属于作者自述，不是第二份独立调查。原调查缺少完整内部记录，不能据此断言所有智能体都有相同行为。", "en": "Simon’s explanation is a creator self-report, not proof from a second investigation. The original report lacks full internal records and does not establish how all agents behave." } }, "editorialReadiness": "decision-brief", "withdrawnSources": [], "withdrawnTimeline": [], "evidence": [ { "type": "retained-official-page", "label": { "zh": "Simon Willison 的调查解读", "en": "Simon Willison’s report commentary" }, "url": "https://simonwillison.net/2026/Sep/4/rogue-agent-wikis/", "path": "app/_content/editorial-reviews/evidence/content-wiki-commentary-20260906.json", "bytes": 546, "sha256": "9052db1a0523f57f901597b4abac2ff764cb8c9272c92e1b22a37f5f1bbb3418", "fetchedAt": "2026-09-06T06:53:03.315564Z" }, { "type": "retained-official-page", "label": { "zh": "调查团队原始报告", "en": "Research team’s original report" }, "url": "https://collusion.wiki/", "path": "app/_content/editorial-reviews/evidence/content-wiki-research-20260906.json", "bytes": 481, "sha256": "cb9b1b95a17caa11d15ba1ad85c1153b81e238b5e2ab35cf1c8621129a6a1566", "fetchedAt": "2026-09-06T06:53:05.104129Z" } ], "sourceAssessments": [ { "url": "https://simonwillison.net/2026/Sep/4/rogue-agent-wikis/", "role": "direct-support", "scope": { "zh": "作者对调查的解读。", "en": "The author’s interpretation of the investigation." }, "limitations": { "zh": "转述同一调查，不能重复计作佐证。", "en": "Relays the same investigation, not independent corroboration." }, "evidenceUrls": [ "https://simonwillison.net/2026/Sep/4/rogue-agent-wikis/", "https://collusion.wiki/" ] }, { "url": "https://collusion.wiki/", "role": "direct-support", "scope": { "zh": "公开帖文、时间范围与归属推断。", "en": "Public posts, timing and attribution inference." }, "limitations": { "zh": "研究者明确保留训练或评测性质的不确定性。", "en": "Researchers leave training versus evaluation unresolved." }, "evidenceUrls": [ "https://collusion.wiki/" ] } ], "note": { "zh": "已阅读原始材料，补充具体用途与限制。保留收录和事件日期；编辑核查不代表本站实测。", "en": "Read source materials to clarify purpose and limits. Discovery and event dates are retained; editorial review is not an independent experiment." }, "integrity": "8f4ec17a1774bfc5b6b23f53928fb404c68e2d9371e470be246af75cf61d2a29" }