Aryo Pradipta Gema
Measuring whether CoT monitoring fails when an influence reaches an agent through a tool return rather than the user message.