Evidence · DiggingBeagle record
Tool-result role spoofing study using fake conversational delimiters
Research describing tool-output text that impersonates user or conversation roles and its measured effect on agent behavior.
- Published
- Oct 30, 2026
- Source role
- primary disclosure
Evidence record
Research describing tool-output text that impersonates user or conversation roles and its measured effect on agent behavior.
Claim-level citations (1)
- supportsFake role delimiters in tool output crossed into apparent user authority: The study reports that fake chat-role delimiters embedded in lower-trust tool content can redirect models toward treating that content as a user message in its tested conditions.
arXiv:2610.40396, abstract, role-delimiter attack construction and empirical evaluation