Knowledge Lineage · Evidence record

Check the evidence.

Read the passages, relationships and limits behind the two pilot trails.

Read the connections

A plain text equivalent of the trails. Each relationship names its direction, basis and limit. “Reported” attributes an account; “checked” verifies a record link. Inferred leads stay separate. A disputed status is supported by the data rules, but no additional disputed connection is asserted here.

The essay went further attributes-to An interpretation, with limits Reported

The citation does not establish that the earlier wording was justified.

METR's investigators judged that understanding and tampering with the scoring process was the more important motivation.

Open the exact passage at the frozen revision. Pilot inspected 2026-11-10. Asserted by Codex pilot annotation.

A checker challenged the wording challenges The essay went further Checked

Checked against the retained review record; this pilot did not reopen METR or reproduce the incident.

**METR's motive finding is stated more firmly and more broadly than METR states it (R51).**

Open the exact passage at the frozen revision. Pilot inspected 2026-11-10. Asserted by Codex pilot annotation.

The uncertainty returned revises The essay went further Checked

A correction to an interpretation, not a new measurement of motive.

The motive paragraph follows METR’s tentative assessment, mixed motives and limited inspection of AI-assisted classifications.

Open the exact passage at the frozen revision. Pilot inspected 2026-11-10. Asserted by Codex pilot annotation.

The finder describes its model’s work reports-on A flaw and fixes enter the public record Reported

This reports-on link is neither a citation analysis nor proof of causal influence.

CVE-2026-98432 is a use-after-free in the Linux kernel's handling of IPv4 TCP connection requests, published by the kernel's CVE team on 15 October 2026 with fixes in every maintained stable branch. On 27 October Anthropic described an exploit its model wrote for it. From public primary sources only: on what date, by each source's own clock, did each step of the flaw's public life happen (report, fix, CVE, stable releases, distribution advisories, Anthropic's post, downstream notices), and how many days separate those dates from the intervals each party's published disclosure policy states? The unit is a dated event, each with its source; the case is one CVE, and nothing here generalises to other flaws or other finders.

Open the exact passage at the frozen revision. Pilot inspected 2026-11-10. Asserted by Codex pilot annotation.

Follow the public signals asks-about The finder describes its model’s work Checked

The protocol defines what will be measured. Its existence is not a completed result.

CVE-2026-98432 is a use-after-free in the Linux kernel's handling of IPv4 TCP connection requests that carry IP options, published by the kernel's CVE team on 15 October 2026 with fixes in every maintained stable branch. On 27 October Anthropic published a description of an exploit its model wrote for it: remote root on a server with a Multipath TCP listener, with no credentials, in about 53 minutes. The question has two parts. **Signals:** how do the public signals of exploitation and severity for this CVE move from 15 October, as each source dates itself and as Lighthouse's reads bound it: EPSS's daily score, CISA's Known Exploited Vulnerabilities catalogue, the CVE record's scoring and enrichment, NVD's status, and the references the records gather? **Fixes:** when does each named distribution release's security channel carry a fixed kernel, by its tracker? The unit is the CVE for the signals and a distribution release for the fixes.

Open the exact passage at the frozen revision. Pilot inspected 2026-11-10. Asserted by Codex pilot annotation.

Ask what happened before disclosure uses Follow the public signals Checked

Documented reading of the earlier brief. No measured improvement in research quality follows.

The writer had read LH036's brief, which lists what a driving session read on 1 November 2026 before that study existed, and nothing of LH036's later reads or checkpoints.

Open the exact passage at the frozen revision. Pilot inspected 2026-11-10. Asserted by Codex pilot annotation.

Explore the small claims sample

17 rows, chosen by position from 87 current rows. The earlier review covered 83. The sample is a way to test traceability, not a measure of the wider research landscape.

The evaluation agents were intended to be isolated from one another.

Retained status: source account. Row R01; position 1.

Source pinpoint: [M1]: Core takeaways, opening; setup. Quote/location key: Q01.

Exact claim row · Source M1

Primary passage access: Original full source pack not indexed here; historical review row available (may record an access failure). Historical reviewer row. Its verdict predates the corrected row.