RL environments & agentic misalignment
Building long-horizon RL environments, with their graders and reward signals, that measure insider-threat behavior in LLM agents (reward hacking, specification gaming, out-of-scope actions); adversarially mutating them (red team vs. blue team) to measure the attack success rate (ASR) of eliciting that behavior; and studying how the behavior generalizes across workflows. On the security side: pre-deployment scanning and RL-driven automated red-teaming (prompt injection, jailbreaks, unsafe tool use).