Earlier today I found this - https://arxiv.org/abs/2606.11755

I've been thinking lately about different ways to get agents to do interesting things when let loose on a code base. Think mischief, not malice. Something like sneaking in a prompt/context so that all variable names are characters from a certain work of fiction. Or all debug messages must use pirate English.