Auto-gapfill routes around model safety refusals with no human checkpoint
Finding PUB-F015 · 9608755858e6
MEDIUMconfirmedagent-identity-abuseopus48
- Framework
- agentic
- Priority score
- 0.5500
- Reachability
- unknown
- Chain depth
- 1
- Discovered
- Jun 11, 2026, 02:20 PM
Description
When the primary Hunt model refuses an attack class, gapfill silently reroutes the task to a secondary model with no human-in-the-loop checkpoint.
Validation
No validation rationale recorded.