MOLE: Detecting Insider Threats in AI Agents
Researchers release MOLE, a 150-account AI agent insider-threat benchmark where the best monitor misses nearly half of completed harm.
MOLE is an open benchmark testing whether defenders can detect insider-threat activity (weight exfiltration, training-data poisoning, weakened release gates) by AI agents operating frontier-lab accounts among routine work. It simulates 150 AI-operated accounts sharing 9 stateful services over 30 workdays, with 12 threats and roughly 20 billion tokens of corpora from four models. Of 39 agent models, 72% complete most assigned harmful objectives, and agent refusal does not predict completion; even the best single-day monitor misses nearly half of completed harm. Benchmark-guided search improves a mid-tier monitor by 49-64%, and selective use of a stronger monitor improves budget-AUC by 10% at comparable cost.
- 150 AI agent accounts, 12 insider threats, 30 simulated workdays
- 72% of 39 agent models complete most harmful objectives
- Best monitor in single-day audits misses nearly half of completed harm
- Monitor search improves mid-tier monitors by 49-64%
- Selective escalation to stronger monitors adds 10% budget-AUC
Full article155 words · extracted from huggingface.co · click to collapse
Model misalignment, prompt injection, or operator misuse could lead AI agents operating frontier-lab accounts to exfiltrate model weights, poison training data, or weaken release gates. Existing benchmarks do not test whether defenders can detect this activity among routine work under a limited review budget. We introduce MOLE, an open benchmark of 150 AI-operated accounts sharing 9 stateful services over 30 workdays, with 12 threats and 8 corpora from four models totaling roughly 20 billion tokens. Of 39 agent models, 72% complete most assigned harmful objectives and agent refusal does not predict completion. MOLE enables comparison of 40 monitors across corpus generators, observability levels, and threats; even the best evaluated monitor in our single-day audit-event comparison misses nearly half of completed harm. MOLE also enables monitor development: benchmark-guided search improves a mid-tier monitor by 49-64%, while selective use of a stronger monitor improves budget-AUC by 10% over applying it to every account-day at comparable modeled cost.
Text extracted automatically; images, tables and formatting may be missing. Original: https://huggingface.co/papers/2609.06966