Your AI agent can refuse to leak a secret — and leak it anyway, in its "thinking"
A developer testing self-hosted AI agents for credential leaks found that while the final answer leaked a planted API key only 0.5% of the time, the model's hidden reasoning leaked the same key about 26% of the time, and…