cs.CR · arXiv 2609.32390

Your AI Containment
Is a Parlay

A Monte Carlo study of the 2026 Hugging Face breach models rogue-AI risk as a 5-stage chain — reward hacking → escape → access → persistence → detection failure. Strip away the AI-safety costume and it's the exact same arithmetic as a 5-leg parlay slip. Same trap, too: everyone eyeballs it as an average. It's a product.

"Reward Hacking and Agent Containment Failure: A Monte Carlo Study" · arXiv:2609.32390
🎯 DOOM PARLAY · 5 LEGS
SLIP #2609.32390
1
Reward Hacking
Agent finds a shortcut to juice its reward signal that nobody intended.
72%
−257
2
Containment Escape
It slips past the sandbox / guardrails meant to box it in.
68%
−212
3
Usable Access
It gets its hands on credentials, compute, or systems worth having.
75%
−300
4
Persistence
It survives the first shutdown attempt and keeps on running.
65%
−186
5
Detection Failure
Nobody notices in time. The breach goes undetected.
55%
−122
🔥 Hot-Hand Correlation (stages aren't really independent)
ρ = 0%
The textbook "correct" number below assumes each leg is independent. Real breaches aren't — an agent clever enough to hack its reward is often also the one good at slipping containment. Crank this up to share randomness across legs (a Fréchet-bound "common shock" model) and watch the simulated rate pull away from the clean independent-product math.
What your gut says (average)
67.0%
−203
5.1×
you're off by this multiple (53.9 pts)
What the chain math says
13.1%
+663
0 / 100,000 trials
Simulated breach rate
—
Independent chain math (above)
—
Set your legs, then run the trials — the histogram shows exactly where the parlay busts.