<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
  <title>MATRIX · Encrypted capability backdoors</title>
  <link>https://derekwang2002.github.io/ai-intelligence/en/projects/encrypted-capability-backdoors/</link>
  <description>Material changes in AI models, agents, engineering and infrastructure, with primary sources and recommendations.</description>
  <language>en</language>
  <lastBuildDate>Mon, 02 Nov 2026 16:56:00 GMT</lastBuildDate>
  <atom:link href="https://derekwang2002.github.io/ai-intelligence/en/feeds/projects/encrypted-capability-backdoors.xml" rel="self" type="application/rss+xml"/>
  <item>
    <title>Study proves capability audits can miss encrypted model backdoors</title>
    <link>https://derekwang2002.github.io/ai-intelligence/en/events/ev-20261009-06/</link>
    <guid isPermaLink="false">ev-20261009-06-published</guid>
    <pubDate>Tue, 13 Oct 2026 16:05:06 GMT</pubDate>
    <category>New</category>
    <category>WATCH</category>
    <description>&lt;p&gt;A NeurIPS 2026 paper constructs neural-network backdoors that encrypt an arbitrary hidden computation and execute it only after a secret trigger. The authors test fine-tuning, weight noise, gradient trigger search and latent adversarial training on a small chemical-reaction proxy. The work establishes a worst-case limit for elicitation-based capability audits, not evidence that deployed frontier models currently contain such backdoors.&lt;/p&gt;&lt;p&gt;&lt;strong&gt;Why read: &lt;/strong&gt;The encrypted-capability paper proves a worst-case blind spot in elicitation audits, while its small synthetic experiment does not establish a deployed-model incident.&lt;/p&gt;&lt;p&gt;Recommendation: WATCH&lt;/p&gt;&lt;p&gt;Sources: &lt;a href=&quot;https://arxiv.org/abs/2610.13928&quot;&gt;AI Models Can Provably Hide Arbitrary Capabilities&lt;/a&gt;&lt;/p&gt;</description>
  </item>
</channel>
</rss>
