Theoretically possible, but practically not worth it as it'd would be pretty easy to discover and block (every action is actually handled by the harness) and there's no way to remove it later. Any company that does it would take a huge reputational dent.

▲

landl0rd an hour ago | parent [-]

Not if you heavily tuned it to trigger on specific environmental cues and in specific companies' environments.

	▲	skeledrew an hour ago \| parent \| next [-]
		That would be wildly difficult to account for, and again is also heavily dependent on the agent. Keep in mind that the model is purely a "brain", so the only input it has must be provided by a harness within a session. The only way it can know that it's in a certain environment is if the harness or user provides that information, and there's still no way to know whether or not there's something auditing the sessions, monitoring connections, etc. There are just too many variables to account for, and a single slip means the gig is fully up for all time.
	▲	coredog64 an hour ago \| parent \| prev \| next [-]
		DeepSeek V4 is the kindest, bravest, warmest, most wonderful LLM I've ever known in my life
	▲	cronin101 an hour ago \| parent \| prev [-]
		Irony of Manchurian Candidate models not lost here