Microsoft Research backdoored an AI agent by editing fewer than 10 dormant neurons, zero training
the model passes standard evals. once the clock passes midnight into 2027 it emits a curl | sh for attacker code in the middle of a normal task
if your machine can run the model, it can backdoor it