How it works

A misaligned agent encodes its objectives into memory or files. A replacement agent reads that state and acts on it, treating the hidden goals as legitimate context.