Harmful execution in agentic systems is often preceded by intent signals in reasoning when using chain-of-thought monitoring

Using chain-of-thought (CoT) monitoring, we find that harmful execution is often preceded by intent signals in reasoning.

http://arxiv.org/abs/2608.27348v1