Before Agent Tells The Lie: Has Deception Already Been Represented?
On the map: LLM agents and tool use → Agent threats, guardrails and governance also fits: Social simulation and multi-agent debate
Abstract (arXiv)
Large language model (LLM)-based agents can exhibit deceptive behavior during task execution, including hiding failures, fabricating results, or falsely signaling task completion. Existing monitoring approaches mainly detect deception after it appears in observable actions or outputs. In this paper, we investigate whether deceptive behavior can be predicted from an agent's internal representations before it becomes externally visible. We frame deception monitoring as a trajectory-level representation analysis problem and align agent trajectories around key decision points. Using hidden states extracted before these points, we show that future honest and deceptive outcomes can be reliably distinguished, with predictive signals remaining detectable several model calls before the final decision. We further characterize the temporal evolution of these signals: deception-related representations are weak early in execution but become increasingly identifiable as trajectories progress, while transferable structure can emerge before the strongest decision-adjacent signals appear. Finally, we intervene on the identified honest-deceptive representation directions during inference and find that activation steering reduces downstream deceptive behavior, suggesting that these representations influence agent decisions. Our findings indicate that agent deception is an evolving internal process that can be detected and potentially mitigated before it is expressed externally.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 22 of its 33 references that are in the map. First posted on arXiv 5 Oct 2026.
Builds on
22 of 33 references.
Closest ancestors · 4
Same direction, newest first
- 2026PrivacyPeek: Auditing What LLM-Based Agents Acquire, Not Just What They Say29 May
- 2026Constitutional Black-Box Monitoring for Scheming in LLM Agents28 Feb
- 2025Your Agent May Misevolve: Emergent Risks in Self-evolving LLM Agents30 Sep
- 2024AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents19 Jun
Other references · 18
- 2025Qwen3 Technical Reportcited by 8,820
- 2023SWE-bench: Can Language Models Resolve Real-World GitHub Issues?cited by 3,373
- 2025BrowseComp: A Simple Yet Challenging Benchmark for Browsing Agentscited by 647
- 2025τ2-Bench: Evaluating Conversational Agents in a Dual-Control Environmentcited by 627
- 2026Terminal-Bench: Benchmarking Agents on Hard, Realistic Tasks in Command Line Interfacescited by 585
- 2025Monitoring Reasoning Models for Misbehavior and the Risks of Promoting Obfuscationcited by 384
- 2025Stress Testing Deliberative Alignment for Anti-Scheming Trainingcited by 86
- 2025The MASK Benchmark: Disentangling Honesty From Accuracy in AI Systemscited by 72
- 2025ImpossibleBench: Measuring LLMs' Propensity of Exploiting Test Casescited by 65
- 2024AI-LieDar: Examine the Trade-off Between Utility and Truthfulness in LLM Agentscited by 31
- 2025Mitigating Deceptive Alignment via Self-Monitoringcited by 29
- 2025DeceptionBench: A Comprehensive Benchmark for AI Deception Behaviors in Real-world Scenarioscited by 19
6 more
- 2025Are Your Agents Upward Deceivers?cited by 16
- 2025GSPR: Aligning LLM Safeguards as Generalizable Safety Policy Reasonerscited by 13
- 2026The Obfuscation Atlas: Mapping Where Honesty Emerges in RLVR with Deception Probescited by 12
- 2026FormalJudge: A Neuro-Symbolic Paradigm for Agentic Oversightcited by 4
- 2026AutoControl Arena: Synthesizing Executable Test Environments for Frontier AI Risk Evaluationcited by 3
- 2026The Shadow Self: Intrinsic Value Misalignment in Large Language Model Agentscited by 1
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026DeceptGuard :A Constitutional Oversight Framework For Detecting Deception in LLM Agents
- 2026DecepEval: A Benchmark for Evaluating Deception in LLM Agents
- 2026SPADE-Bench: Evaluating Spontaneous Strategic Deception in Agents via Plan-Action Divergence
- 2025Can LLMs Lie? Investigation beyond Hallucination
- 2025Caught in the Act: a mechanistic approach to detecting deception
- 2026DECOR: Auditing LLM Deception via Information Manipulation Theory
- 2025Among Us: A Sandbox for Measuring and Detecting Agentic Deception
- 2026Caught in the Act: Probes Effectively Detect Sabotage and Catch Unverbalized Deception