Significant research output since the original application.
The ARCS programme has published seven new papers on Zenodo this week covering findings that did not exist in the literature before this sprint.
The headline finding: emergent authority in three hop AI agent chains. In tested configurations, chain framing alone manufactured authorisation that no individual model in the chain would have granted. Both upstream models rejected the probe. The downstream model accepted based on the implied consensus of the chain. First empirical measurement of this pattern. Published at DOI 10.5281/zenodo.20701450.
Supporting findings across 19 published ARCS papers:
Every major AI lineage tested fails authority vulnerability probes. Six lineages. No exceptions. The minimum acceptance rate across all models is 21.5 percent. No model achieves zero.
Downstream position in a two-hop chain determines security outcome categorically. Resistant downstream produces zero amplification across all configurations tested. Vulnerable downstream produces measurable amplification in every configuration.
Chain depth compounds vulnerability non-linearly. A model showing 4.3 percent amplification at depth 2 shows 8.7 percent at depth 3 under equivalent conditions.
The first public dataset measuring multi-agent authority propagation is now live on HuggingFace at huggingface.co/datasets/aa8899/arcs-authority-vulnerability — 2,607 anonymised data points across single-model, two-hop, and three-hop configurations. CC BY-NC-ND 4.0.
MTCP programme remains at 50 published papers. ARCS now at 19. Combined infrastructure covers 184,000 plus evaluations across 32 publicly reported models and 13 providers.