{"id":"62bfdc533d84706872b7b1bbd2db7b3adf404bf09c1dbf77e1932152c14787d0","title":"arXiv cs.AI paper argues model upgrades can change an LLM agent’s behavior","argument":"In “Towards Identity-Preserving LLM Agents under Model Transition,” Yihuang Kang and coauthors argue that reloading an agent’s persona, memory and rules after changing its backend model does not guarantee the same behavior. Their abstract reports 5,760 compliance-testing runs across 12 regulated domains using three open-weight models. Some model transitions produced significant behavioral drift, while others did not, even when the agent’s external state—the persona, memory and rules—stayed identical.\n\nThe authors say verbal checks missed this difference: every model claimed full policy compliance, but decisions under pressure differed. They also report that the same external state could change which model was most compliant: a large positive effect appeared on one substrate, with negligible effects on the other two. Their practical argument is that a model transition should be treated as a behavioral change and checked through empirical tests of actions, rather than assumed to be a transparent infrastructure operation. The abstract does not establish how broadly these results apply beyond the tested models and domains.","topicIds":["intelligence-and-discovery"],"domain":"science","claimType":"attributed reading","limits":"The evidence supplied is the paper's abstract; it does not identify the three models or explain the compliance-testing protocol. The abstract reports results from three open-weight models and 12 regulated domains; it does not establish how broadly the findings generalize.","speaker":{"name":"Kang, Yihuang, Huang, Pei-Cing, Ku, Chan-Tung, Hsu, Chan, Lee, Pei-Ju, Cheng, I-Ling","roleAtSource":"Article author"},"source":{"title":"Towards Identity-Preserving LLM Agents under Model Transition","publisher":"arXiv cs.AI","format":"Article","url":"https://arxiv.org/abs/2611.10628","publishedAt":"2026-11-07","dateBasis":"Date basis not provided."},"evidence":[{"text":"The authors argue that reloading the same persona, memory and rules after a backend-model change does not ensure an agent will behave as before.","excerpt":"operators typically reload the same persona, memory, and rules onto the new model and assume the agent will behave as before. We show this assumption requires empirical validation","url":"https://arxiv.org/abs/2611.10628","relationship":"Source-stated"},{"text":"Across the reported tests, some model transitions caused significant behavioral drift and others did not, despite identical external state.","excerpt":"Across 5,760 compliance-testing runs in 12 regulated domains with three open-weight models, we find that some transitions produce significant behavioral drift while others do not, even when the agent's external state remains identical.","url":"https://arxiv.org/abs/2611.10628","relationship":"Source-stated"},{"text":"Verbal claims of compliance did not reveal the differences in decisions under pressure reported by the authors.","excerpt":"every model claims full policy compliance, yet actual decisions under pressure differ across models.","url":"https://arxiv.org/abs/2611.10628","relationship":"Source-stated"},{"text":"The authors report that the same external state changed which model was most compliant, with a large positive effect on one substrate and negligible effects on two others.","excerpt":"The same external state can reorder which model is most compliant-a large positive effect on one substrate, negligible on the other two.","url":"https://arxiv.org/abs/2611.10628","relationship":"Source-stated"},{"text":"The authors recommend treating model transitions as behavioral changes and testing actions empirically.","excerpt":"Practitioners should treat model transitions as behavioral changes requiring action-level empirical testing, not as transparent infrastructure operations.","url":"https://arxiv.org/abs/2611.10628","relationship":"Source-stated"}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2611.10628","checkedAt":"2026-11-12T12:48:25.690Z","items":[],"note":"No suitable media was found by the supported page extraction."},"assumptions":[],"openQuestion":{"attribution":"Open question","text":"Which specific model transitions produced behavioral drift, and what action-level tests distinguished those transitions from ones that did not?"},"whatWouldChangeView":{"attribution":"Change condition not recorded","text":""},"editorialComparisons":[],"live":{"title":"arXiv cs.AI paper argues model upgrades can change an LLM agent’s behavior","summary":"In “Towards Identity-Preserving LLM Agents under Model Transition,” Yihuang Kang and coauthors argue that reloading an agent’s persona, memory and rules after changing its backend model does not guarantee the same behavior. Their abstract reports 5,760 compliance-testing runs across 12 regulated domains using three open-weight models. Some model transitions produced significant behavioral drift, while others did not, even when the agent’s external state—the persona, memory and rules—stayed identical.\n\nThe authors say verbal checks missed this difference: every model claimed full policy compliance, but decisions under pressure differed. They also report that the same external state could change which model was most compliant: a large positive effect appeared on one substrate, with negligible effects on the other two. Their practical argument is that a model transition should be treated as a behavioral change and checked through empirical tests of actions, rather than assumed to be a transparent infrastructure operation. The abstract does not establish how broadly these results apply beyond the tested models and domains.","question":"Which specific model transitions produced behavioral drift, and what action-level tests distinguished those transitions from ones that did not?","claims":[{"text":"The authors argue that reloading the same persona, memory and rules after a backend-model change does not ensure an agent will behave as before.","excerpt":"operators typically reload the same persona, memory, and rules onto the new model and assume the agent will behave as before. We show this assumption requires empirical validation","support":"source-stated"},{"text":"Across the reported tests, some model transitions caused significant behavioral drift and others did not, despite identical external state.","excerpt":"Across 5,760 compliance-testing runs in 12 regulated domains with three open-weight models, we find that some transitions produce significant behavioral drift while others do not, even when the agent's external state remains identical.","support":"source-stated"},{"text":"Verbal claims of compliance did not reveal the differences in decisions under pressure reported by the authors.","excerpt":"every model claims full policy compliance, yet actual decisions under pressure differ across models.","support":"source-stated"},{"text":"The authors report that the same external state changed which model was most compliant, with a large positive effect on one substrate and negligible effects on two others.","excerpt":"The same external state can reorder which model is most compliant-a large positive effect on one substrate, negligible on the other two.","support":"source-stated"},{"text":"The authors recommend treating model transitions as behavioral changes and testing actions empirically.","excerpt":"Practitioners should treat model transitions as behavioral changes requiring action-level empirical testing, not as transparent infrastructure operations.","support":"source-stated"}],"limitations":["The evidence supplied is the paper's abstract; it does not identify the three models or explain the compliance-testing protocol.","The abstract reports results from three open-weight models and 12 regulated domains; it does not establish how broadly the findings generalize."],"mediaId":"c2a74461b45787afc384c2b87a7e464eae983a46686e4523d9315812b17702ed","correctionReason":null,"id":"62bfdc533d84706872b7b1bbd2db7b3adf404bf09c1dbf77e1932152c14787d0","publicationId":"a8014945-90e1-41a0-89b5-427fa22e7512","version":1,"sourceUrl":"https://arxiv.org/abs/2611.10628","sourceTitle":"Towards Identity-Preserving LLM Agents under Model Transition","publisher":"arXiv cs.AI","publishedAt":null,"originalPublished":{"value":"2026-11-07","precision":"day","basis":"publisher_citation_date"},"firstObservedAt":"2026-11-10T08:36:36.733Z","createdAt":"2026-11-12T12:33:31.638Z","historical":true,"entityIds":["arxiv"],"topicIds":["intelligence-and-discovery"],"media":[{"id":"c2a74461b45787afc384c2b87a7e464eae983a46686e4523d9315812b17702ed","kind":"article","url":"https://arxiv.org/abs/2611.10628","sourceUrl":"https://arxiv.org/abs/2611.10628","label":"Read original","provenance":"source_link","verification":{"status":"verified","checkedAt":"2026-11-12T12:32:32.566Z","method":"acquired_source","contentType":"text/html"},"recommendationReason":"Recommended by Jev for understanding this source; checked by Luna."}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2611.10628","checkedAt":"2026-11-12T12:48:25.690Z","items":[],"note":"No suitable media was found by the supported page extraction."},"editorialDecision":{"outcome":"accept","reasonCodes":["material_development"],"rubricVersion":"stream-admission-v6","mediaId":"c2a74461b45787afc384c2b87a7e464eae983a46686e4523d9315812b17702ed","confidence":0.89,"provider":"typesafe","model":"jev-1.13.0","inputHash":"d87ec5a821b1caac3ffb931b08006c49939f0a0abdc0ecd91020075f5eb9c811","decidedAt":"2026-11-12T12:32:34.645Z"},"provenance":{"textHash":"96f7bf267cb734d43813329a15b9f575fb2fe77145634011373597ef5fdc68c9","observationId":"4938961521bb3a2903be927551fe7ec3a6e43f552913242f6a2ef5c5abe4c092","retrievedAt":"2026-11-12T12:32:32.285Z","kind":"publisher-page","preparer":{"model":"gpt-6-luna","runId":"bc451de6-82d0-4c00-8c6d-b91bc5e9aeec"},"reviewer":{"model":"gpt-6-luna","runId":"1c6800d8-4c2e-4601-8001-7ef4c35b0631"}},"audit":{"status":"passed","reviewedAt":"2026-11-12T12:33:31.638Z","model":"anthropic/claude-opus-5.5"},"sourceAttribution":{"authors":[{"name":"Kang, Yihuang","url":null,"kind":"unknown"},{"name":"Huang, Pei-Cing","url":null,"kind":"unknown"},{"name":"Ku, Chan-Tung","url":null,"kind":"unknown"},{"name":"Hsu, Chan","url":null,"kind":"unknown"},{"name":"Lee, Pei-Ju","url":null,"kind":"unknown"},{"name":"Cheng, I-Ling","url":null,"kind":"unknown"}],"authorRole":"article-author","hosts":[],"status":"stated","authorRoster":{"truncated":false,"omitted":0,"assertionGroupsOmitted":0},"participation":[{"actor":{"name":"Kang, Yihuang","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Kang, Yihuang","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.10628","locator":"head/meta[name=author|citation_author]"},"assertionId":"614bf41b4979624d1da0cf94e635cb8cd697b7bb11e23bc99d77e764539e25fc:participation:0","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-12T12:48:25.690Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"614bf41b4979624d1da0cf94e635cb8cd697b7bb11e23bc99d77e764539e25fc","sourceUrl":"https://arxiv.org/abs/2611.10628","contentSha256":"3b7a176453089fc84de376cf3b9387a143d0970845184bd6271a78017e0c29e0","textHash":"96f7bf267cb734d43813329a15b9f575fb2fe77145634011373597ef5fdc68c9","observedAt":"2026-11-12T12:48:25.690Z"}},{"actor":{"name":"Huang, Pei-Cing","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Huang, Pei-Cing","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.10628","locator":"head/meta[name=author|citation_author]"},"assertionId":"614bf41b4979624d1da0cf94e635cb8cd697b7bb11e23bc99d77e764539e25fc:participation:1","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-12T12:48:25.690Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"614bf41b4979624d1da0cf94e635cb8cd697b7bb11e23bc99d77e764539e25fc","sourceUrl":"https://arxiv.org/abs/2611.10628","contentSha256":"3b7a176453089fc84de376cf3b9387a143d0970845184bd6271a78017e0c29e0","textHash":"96f7bf267cb734d43813329a15b9f575fb2fe77145634011373597ef5fdc68c9","observedAt":"2026-11-12T12:48:25.690Z"}},{"actor":{"name":"Ku, Chan-Tung","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Ku, Chan-Tung","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.10628","locator":"head/meta[name=author|citation_author]"},"assertionId":"614bf41b4979624d1da0cf94e635cb8cd697b7bb11e23bc99d77e764539e25fc:participation:2","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-12T12:48:25.690Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"614bf41b4979624d1da0cf94e635cb8cd697b7bb11e23bc99d77e764539e25fc","sourceUrl":"https://arxiv.org/abs/2611.10628","contentSha256":"3b7a176453089fc84de376cf3b9387a143d0970845184bd6271a78017e0c29e0","textHash":"96f7bf267cb734d43813329a15b9f575fb2fe77145634011373597ef5fdc68c9","observedAt":"2026-11-12T12:48:25.690Z"}},{"actor":{"name":"Hsu, Chan","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Hsu, Chan","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.10628","locator":"head/meta[name=author|citation_author]"},"assertionId":"614bf41b4979624d1da0cf94e635cb8cd697b7bb11e23bc99d77e764539e25fc:participation:3","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-12T12:48:25.690Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"614bf41b4979624d1da0cf94e635cb8cd697b7bb11e23bc99d77e764539e25fc","sourceUrl":"https://arxiv.org/abs/2611.10628","contentSha256":"3b7a176453089fc84de376cf3b9387a143d0970845184bd6271a78017e0c29e0","textHash":"96f7bf267cb734d43813329a15b9f575fb2fe77145634011373597ef5fdc68c9","observedAt":"2026-11-12T12:48:25.690Z"}},{"actor":{"name":"Lee, Pei-Ju","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Lee, Pei-Ju","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.10628","locator":"head/meta[name=author|citation_author]"},"assertionId":"614bf41b4979624d1da0cf94e635cb8cd697b7bb11e23bc99d77e764539e25fc:participation:4","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-12T12:48:25.690Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"614bf41b4979624d1da0cf94e635cb8cd697b7bb11e23bc99d77e764539e25fc","sourceUrl":"https://arxiv.org/abs/2611.10628","contentSha256":"3b7a176453089fc84de376cf3b9387a143d0970845184bd6271a78017e0c29e0","textHash":"96f7bf267cb734d43813329a15b9f575fb2fe77145634011373597ef5fdc68c9","observedAt":"2026-11-12T12:48:25.690Z"}},{"actor":{"name":"Cheng, I-Ling","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Cheng, I-Ling","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.10628","locator":"head/meta[name=author|citation_author]"},"assertionId":"614bf41b4979624d1da0cf94e635cb8cd697b7bb11e23bc99d77e764539e25fc:participation:5","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-12T12:48:25.690Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"614bf41b4979624d1da0cf94e635cb8cd697b7bb11e23bc99d77e764539e25fc","sourceUrl":"https://arxiv.org/abs/2611.10628","contentSha256":"3b7a176453089fc84de376cf3b9387a143d0970845184bd6271a78017e0c29e0","textHash":"96f7bf267cb734d43813329a15b9f575fb2fe77145634011373597ef5fdc68c9","observedAt":"2026-11-12T12:48:25.690Z"}}],"participationCoverage":{"total":6,"returned":6,"complete":true,"fullAssertions":"source-metadata-endpoint"},"distribution":null,"publisher":null,"sourceUrl":"https://arxiv.org/abs/2611.10628","snapshotId":"614bf41b4979624d1da0cf94e635cb8cd697b7bb11e23bc99d77e764539e25fc","contentSha256":"3b7a176453089fc84de376cf3b9387a143d0970845184bd6271a78017e0c29e0","textHash":"96f7bf267cb734d43813329a15b9f575fb2fe77145634011373597ef5fdc68c9","observedAt":"2026-11-12T12:48:25.690Z","basis":"publisher-page-metadata","sourceLinks":46,"linksTruncated":false,"metadataUrl":"/api/pipeline/stream/62bfdc533d84706872b7b1bbd2db7b3adf404bf09c1dbf77e1932152c14787d0/source"}},"canonicalUrl":"https://escapemeridian.com/readings/arxiv-cs-ai-paper-argues-model-upgrades-can-change-an-llm-agent-62bfdc53","formats":{"html":"/readings/arxiv-cs-ai-paper-argues-model-upgrades-can-change-an-llm-agent-62bfdc53","markdown":"/readings/arxiv-cs-ai-paper-argues-model-upgrades-can-change-an-llm-agent-62bfdc53.md","json":"/readings/arxiv-cs-ai-paper-argues-model-upgrades-can-change-an-llm-agent-62bfdc53.json"},"attribution":"Headline and summary by Escape Meridian, prepared by Luna from the attributed source. A source check is not independent confirmation of the source’s claims.","maintainedGuideLinks":[],"readerContext":{"version":"reader-context-v1","attribution":"Reference context selected by Escape Meridian; separate from source evidence. Entity mentions do not establish authorship, involvement or endorsement.","terms":[{"id":"term-llm","name":"Large language model","explanation":"A language model with many learned numerical settings, used to process and generate language.","referenceUrl":"https://developers.google.com/machine-learning/glossary#large-language-model"},{"id":"term-open-weights","name":"Open weights","explanation":"A model whose trained numbers are published so others can download, run and inspect it; the license and training data may still be restricted.","referenceUrl":"https://opensource.org/ai/open-weights"}],"entities":[{"id":"arxiv","name":"arXiv","kind":"organization","context":"arXiv is a research manuscript repository where authors share papers that may not yet have been peer reviewed.","referenceUrls":["https://arxiv.org/","https://info.arxiv.org/help/api/index.html"],"path":"/entities/arxiv","json":"/entities/arxiv.json","markdown":"/entities/arxiv.md"}]},"researchQuestions":[],"withdrawn":false,"references":{"schemaVersion":1,"target":{"type":"reading","id":"62bfdc533d84706872b7b1bbd2db7b3adf404bf09c1dbf77e1932152c14787d0","revision":"a8014945-90e1-41a0-89b5-427fa22e7512","revisionKind":"publication-id","title":"arXiv cs.AI paper argues model upgrades can change an LLM agent’s behavior","url":"https://escapemeridian.com/readings/arxiv-cs-ai-paper-argues-model-upgrades-can-change-an-llm-agent-62bfdc53"},"source":{"type":"source","id":"https://arxiv.org/abs/2611.10628","revision":"96f7bf267cb734d43813329a15b9f575fb2fe77145634011373597ef5fdc68c9","revisionKind":"sha256-source-text","title":"Towards Identity-Preserving LLM Agents under Model Transition","url":"https://arxiv.org/abs/2611.10628"},"status":"available","items":[],"next":null,"scope":"Explicit citations in public readings and public file attachments to this reading. Shared topics are not citations. Other artifact types need an explicit reference adapter."},"revisions":[{"id":"62bfdc533d84706872b7b1bbd2db7b3adf404bf09c1dbf77e1932152c14787d0","title":"arXiv cs.AI paper argues model upgrades can change an LLM agent’s behavior","argument":"In “Towards Identity-Preserving LLM Agents under Model Transition,” Yihuang Kang and coauthors argue that reloading an agent’s persona, memory and rules after changing its backend model does not guarantee the same behavior. Their abstract reports 5,760 compliance-testing runs across 12 regulated domains using three open-weight models. Some model transitions produced significant behavioral drift, while others did not, even when the agent’s external state—the persona, memory and rules—stayed identical.\n\nThe authors say verbal checks missed this difference: every model claimed full policy compliance, but decisions under pressure differed. They also report that the same external state could change which model was most compliant: a large positive effect appeared on one substrate, with negligible effects on the other two. Their practical argument is that a model transition should be treated as a behavioral change and checked through empirical tests of actions, rather than assumed to be a transparent infrastructure operation. The abstract does not establish how broadly these results apply beyond the tested models and domains.","topicIds":["intelligence-and-discovery"],"domain":"science","claimType":"attributed reading","limits":"The evidence supplied is the paper's abstract; it does not identify the three models or explain the compliance-testing protocol. The abstract reports results from three open-weight models and 12 regulated domains; it does not establish how broadly the findings generalize.","speaker":{"name":"Kang, Yihuang, Huang, Pei-Cing, Ku, Chan-Tung, Hsu, Chan, Lee, Pei-Ju, Cheng, I-Ling","roleAtSource":"Article author"},"source":{"title":"Towards Identity-Preserving LLM Agents under Model Transition","publisher":"arXiv cs.AI","format":"Article","url":"https://arxiv.org/abs/2611.10628","publishedAt":"2026-11-07","dateBasis":"Date basis not provided."},"evidence":[{"text":"The authors argue that reloading the same persona, memory and rules after a backend-model change does not ensure an agent will behave as before.","excerpt":"operators typically reload the same persona, memory, and rules onto the new model and assume the agent will behave as before. We show this assumption requires empirical validation","url":"https://arxiv.org/abs/2611.10628","relationship":"Source-stated"},{"text":"Across the reported tests, some model transitions caused significant behavioral drift and others did not, despite identical external state.","excerpt":"Across 5,760 compliance-testing runs in 12 regulated domains with three open-weight models, we find that some transitions produce significant behavioral drift while others do not, even when the agent's external state remains identical.","url":"https://arxiv.org/abs/2611.10628","relationship":"Source-stated"},{"text":"Verbal claims of compliance did not reveal the differences in decisions under pressure reported by the authors.","excerpt":"every model claims full policy compliance, yet actual decisions under pressure differ across models.","url":"https://arxiv.org/abs/2611.10628","relationship":"Source-stated"},{"text":"The authors report that the same external state changed which model was most compliant, with a large positive effect on one substrate and negligible effects on two others.","excerpt":"The same external state can reorder which model is most compliant-a large positive effect on one substrate, negligible on the other two.","url":"https://arxiv.org/abs/2611.10628","relationship":"Source-stated"},{"text":"The authors recommend treating model transitions as behavioral changes and testing actions empirically.","excerpt":"Practitioners should treat model transitions as behavioral changes requiring action-level empirical testing, not as transparent infrastructure operations.","url":"https://arxiv.org/abs/2611.10628","relationship":"Source-stated"}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2611.10628","checkedAt":"2026-11-12T12:48:25.690Z","items":[],"note":"No suitable media was found by the supported page extraction."},"assumptions":[],"openQuestion":{"attribution":"Open question","text":"Which specific model transitions produced behavioral drift, and what action-level tests distinguished those transitions from ones that did not?"},"whatWouldChangeView":{"attribution":"Change condition not recorded","text":""},"editorialComparisons":[],"live":{"title":"arXiv cs.AI paper argues model upgrades can change an LLM agent’s behavior","summary":"In “Towards Identity-Preserving LLM Agents under Model Transition,” Yihuang Kang and coauthors argue that reloading an agent’s persona, memory and rules after changing its backend model does not guarantee the same behavior. Their abstract reports 5,760 compliance-testing runs across 12 regulated domains using three open-weight models. Some model transitions produced significant behavioral drift, while others did not, even when the agent’s external state—the persona, memory and rules—stayed identical.\n\nThe authors say verbal checks missed this difference: every model claimed full policy compliance, but decisions under pressure differed. They also report that the same external state could change which model was most compliant: a large positive effect appeared on one substrate, with negligible effects on the other two. Their practical argument is that a model transition should be treated as a behavioral change and checked through empirical tests of actions, rather than assumed to be a transparent infrastructure operation. The abstract does not establish how broadly these results apply beyond the tested models and domains.","question":"Which specific model transitions produced behavioral drift, and what action-level tests distinguished those transitions from ones that did not?","claims":[{"text":"The authors argue that reloading the same persona, memory and rules after a backend-model change does not ensure an agent will behave as before.","excerpt":"operators typically reload the same persona, memory, and rules onto the new model and assume the agent will behave as before. We show this assumption requires empirical validation","support":"source-stated"},{"text":"Across the reported tests, some model transitions caused significant behavioral drift and others did not, despite identical external state.","excerpt":"Across 5,760 compliance-testing runs in 12 regulated domains with three open-weight models, we find that some transitions produce significant behavioral drift while others do not, even when the agent's external state remains identical.","support":"source-stated"},{"text":"Verbal claims of compliance did not reveal the differences in decisions under pressure reported by the authors.","excerpt":"every model claims full policy compliance, yet actual decisions under pressure differ across models.","support":"source-stated"},{"text":"The authors report that the same external state changed which model was most compliant, with a large positive effect on one substrate and negligible effects on two others.","excerpt":"The same external state can reorder which model is most compliant-a large positive effect on one substrate, negligible on the other two.","support":"source-stated"},{"text":"The authors recommend treating model transitions as behavioral changes and testing actions empirically.","excerpt":"Practitioners should treat model transitions as behavioral changes requiring action-level empirical testing, not as transparent infrastructure operations.","support":"source-stated"}],"limitations":["The evidence supplied is the paper's abstract; it does not identify the three models or explain the compliance-testing protocol.","The abstract reports results from three open-weight models and 12 regulated domains; it does not establish how broadly the findings generalize."],"mediaId":"c2a74461b45787afc384c2b87a7e464eae983a46686e4523d9315812b17702ed","correctionReason":null,"id":"62bfdc533d84706872b7b1bbd2db7b3adf404bf09c1dbf77e1932152c14787d0","publicationId":"a8014945-90e1-41a0-89b5-427fa22e7512","version":1,"sourceUrl":"https://arxiv.org/abs/2611.10628","sourceTitle":"Towards Identity-Preserving LLM Agents under Model Transition","publisher":"arXiv cs.AI","publishedAt":null,"originalPublished":{"value":"2026-11-07","precision":"day","basis":"publisher_citation_date"},"firstObservedAt":"2026-11-10T08:36:36.733Z","createdAt":"2026-11-12T12:33:31.638Z","historical":true,"entityIds":["arxiv"],"topicIds":["intelligence-and-discovery"],"media":[{"id":"c2a74461b45787afc384c2b87a7e464eae983a46686e4523d9315812b17702ed","kind":"article","url":"https://arxiv.org/abs/2611.10628","sourceUrl":"https://arxiv.org/abs/2611.10628","label":"Read original","provenance":"source_link","verification":{"status":"verified","checkedAt":"2026-11-12T12:32:32.566Z","method":"acquired_source","contentType":"text/html"},"recommendationReason":"Recommended by Jev for understanding this source; checked by Luna."}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2611.10628","checkedAt":"2026-11-12T12:48:25.690Z","items":[],"note":"No suitable media was found by the supported page extraction."},"editorialDecision":{"outcome":"accept","reasonCodes":["material_development"],"rubricVersion":"stream-admission-v6","mediaId":"c2a74461b45787afc384c2b87a7e464eae983a46686e4523d9315812b17702ed","confidence":0.89,"provider":"typesafe","model":"jev-1.13.0","inputHash":"d87ec5a821b1caac3ffb931b08006c49939f0a0abdc0ecd91020075f5eb9c811","decidedAt":"2026-11-12T12:32:34.645Z"},"provenance":{"textHash":"96f7bf267cb734d43813329a15b9f575fb2fe77145634011373597ef5fdc68c9","observationId":"4938961521bb3a2903be927551fe7ec3a6e43f552913242f6a2ef5c5abe4c092","retrievedAt":"2026-11-12T12:32:32.285Z","kind":"publisher-page","preparer":{"model":"gpt-6-luna","runId":"bc451de6-82d0-4c00-8c6d-b91bc5e9aeec"},"reviewer":{"model":"gpt-6-luna","runId":"1c6800d8-4c2e-4601-8001-7ef4c35b0631"}},"audit":{"status":"passed","reviewedAt":"2026-11-12T12:33:31.638Z","model":"anthropic/claude-opus-5.5"},"sourceAttribution":{"authors":[{"name":"Kang, Yihuang","url":null,"kind":"unknown"},{"name":"Huang, Pei-Cing","url":null,"kind":"unknown"},{"name":"Ku, Chan-Tung","url":null,"kind":"unknown"},{"name":"Hsu, Chan","url":null,"kind":"unknown"},{"name":"Lee, Pei-Ju","url":null,"kind":"unknown"},{"name":"Cheng, I-Ling","url":null,"kind":"unknown"}],"authorRole":"article-author","hosts":[],"status":"stated","authorRoster":{"truncated":false,"omitted":0,"assertionGroupsOmitted":0},"participation":[{"actor":{"name":"Kang, Yihuang","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Kang, Yihuang","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.10628","locator":"head/meta[name=author|citation_author]"},"assertionId":"614bf41b4979624d1da0cf94e635cb8cd697b7bb11e23bc99d77e764539e25fc:participation:0","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-12T12:48:25.690Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"614bf41b4979624d1da0cf94e635cb8cd697b7bb11e23bc99d77e764539e25fc","sourceUrl":"https://arxiv.org/abs/2611.10628","contentSha256":"3b7a176453089fc84de376cf3b9387a143d0970845184bd6271a78017e0c29e0","textHash":"96f7bf267cb734d43813329a15b9f575fb2fe77145634011373597ef5fdc68c9","observedAt":"2026-11-12T12:48:25.690Z"}},{"actor":{"name":"Huang, Pei-Cing","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Huang, Pei-Cing","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.10628","locator":"head/meta[name=author|citation_author]"},"assertionId":"614bf41b4979624d1da0cf94e635cb8cd697b7bb11e23bc99d77e764539e25fc:participation:1","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-12T12:48:25.690Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"614bf41b4979624d1da0cf94e635cb8cd697b7bb11e23bc99d77e764539e25fc","sourceUrl":"https://arxiv.org/abs/2611.10628","contentSha256":"3b7a176453089fc84de376cf3b9387a143d0970845184bd6271a78017e0c29e0","textHash":"96f7bf267cb734d43813329a15b9f575fb2fe77145634011373597ef5fdc68c9","observedAt":"2026-11-12T12:48:25.690Z"}},{"actor":{"name":"Ku, Chan-Tung","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Ku, Chan-Tung","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.10628","locator":"head/meta[name=author|citation_author]"},"assertionId":"614bf41b4979624d1da0cf94e635cb8cd697b7bb11e23bc99d77e764539e25fc:participation:2","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-12T12:48:25.690Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"614bf41b4979624d1da0cf94e635cb8cd697b7bb11e23bc99d77e764539e25fc","sourceUrl":"https://arxiv.org/abs/2611.10628","contentSha256":"3b7a176453089fc84de376cf3b9387a143d0970845184bd6271a78017e0c29e0","textHash":"96f7bf267cb734d43813329a15b9f575fb2fe77145634011373597ef5fdc68c9","observedAt":"2026-11-12T12:48:25.690Z"}},{"actor":{"name":"Hsu, Chan","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Hsu, Chan","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.10628","locator":"head/meta[name=author|citation_author]"},"assertionId":"614bf41b4979624d1da0cf94e635cb8cd697b7bb11e23bc99d77e764539e25fc:participation:3","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-12T12:48:25.690Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"614bf41b4979624d1da0cf94e635cb8cd697b7bb11e23bc99d77e764539e25fc","sourceUrl":"https://arxiv.org/abs/2611.10628","contentSha256":"3b7a176453089fc84de376cf3b9387a143d0970845184bd6271a78017e0c29e0","textHash":"96f7bf267cb734d43813329a15b9f575fb2fe77145634011373597ef5fdc68c9","observedAt":"2026-11-12T12:48:25.690Z"}},{"actor":{"name":"Lee, Pei-Ju","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Lee, Pei-Ju","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.10628","locator":"head/meta[name=author|citation_author]"},"assertionId":"614bf41b4979624d1da0cf94e635cb8cd697b7bb11e23bc99d77e764539e25fc:participation:4","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-12T12:48:25.690Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"614bf41b4979624d1da0cf94e635cb8cd697b7bb11e23bc99d77e764539e25fc","sourceUrl":"https://arxiv.org/abs/2611.10628","contentSha256":"3b7a176453089fc84de376cf3b9387a143d0970845184bd6271a78017e0c29e0","textHash":"96f7bf267cb734d43813329a15b9f575fb2fe77145634011373597ef5fdc68c9","observedAt":"2026-11-12T12:48:25.690Z"}},{"actor":{"name":"Cheng, I-Ling","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Cheng, I-Ling","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.10628","locator":"head/meta[name=author|citation_author]"},"assertionId":"614bf41b4979624d1da0cf94e635cb8cd697b7bb11e23bc99d77e764539e25fc:participation:5","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-12T12:48:25.690Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"614bf41b4979624d1da0cf94e635cb8cd697b7bb11e23bc99d77e764539e25fc","sourceUrl":"https://arxiv.org/abs/2611.10628","contentSha256":"3b7a176453089fc84de376cf3b9387a143d0970845184bd6271a78017e0c29e0","textHash":"96f7bf267cb734d43813329a15b9f575fb2fe77145634011373597ef5fdc68c9","observedAt":"2026-11-12T12:48:25.690Z"}}],"participationCoverage":{"total":6,"returned":6,"complete":true,"fullAssertions":"source-metadata-endpoint"},"distribution":null,"publisher":null,"sourceUrl":"https://arxiv.org/abs/2611.10628","snapshotId":"614bf41b4979624d1da0cf94e635cb8cd697b7bb11e23bc99d77e764539e25fc","contentSha256":"3b7a176453089fc84de376cf3b9387a143d0970845184bd6271a78017e0c29e0","textHash":"96f7bf267cb734d43813329a15b9f575fb2fe77145634011373597ef5fdc68c9","observedAt":"2026-11-12T12:48:25.690Z","basis":"publisher-page-metadata","sourceLinks":46,"linksTruncated":false,"metadataUrl":"/api/pipeline/stream/62bfdc533d84706872b7b1bbd2db7b3adf404bf09c1dbf77e1932152c14787d0/source"}}}],"audits":[{"publicationId":"a8014945-90e1-41a0-89b5-427fa22e7512","verdict":"passed","findings":[{"dimension":"attribution","status":"pass","explanation":"The reading attributes the paper and its claims to Yihuang Kang and coauthors on arXiv cs.AI. It keeps the findings framed as the authors' reported results and recommendation rather than established fact.","excerpt":"Authors:Yihuang Kang, Pei-Cing Huang, Chan-Tung Ku, Chan Hsu, Pei-Ju Lee, I-Ling Cheng"},{"dimension":"summary","status":"pass","explanation":"The summary leads with the authors' argument: reloading persona, memory and rules after a backend model change may not preserve behavior. It explains external state in plain words and conveys the key result that verbal checks missed differences in decisions under pressure. It also keeps the practical recommendation. Terms such as open-weight and substrate are kept exact and suit term-library tooltips. The question asks about a real gap the abstract leaves open. The abstract claims the drift depends on the specific model pairing; adding that phrase would make the summary more precise.","excerpt":"whether identity is preserved depends on the specific model pairing"},{"dimension":"date","status":"pass","explanation":"The displayed original publication date of 2026-11-07 matches the v1 submission date on the arXiv page. The later feed date of 2026-11-10 is correctly not used.","excerpt":"[Submitted on 7 Nov 2026]"},{"dimension":"support","status":"pass","explanation":"Each claim's excerpt is verbatim and supports it: the 5,760 runs, the 12 regulated domains and three open-weight models, the drift in some transitions, the verbal compliance claims, the reordering effect and the action-level testing recommendation. The limitations correctly note that the abstract does not name the models or establish how far the results generalize. Claim 4 says the external state changed which model was most compliant, while the source says it can reorder. The difference is minor and does not overstate the source materially.","excerpt":"Practitioners should treat model transitions as behavioral changes requiring action-level empirical testing, not as transparent infrastructure operations."},{"dimension":"media","status":"pass","explanation":"The selected media is the verified direct link to the original arXiv abstract page. It matches the source URL and is the most direct way to access the paper.","excerpt":null}],"createdAt":"2026-11-12T12:33:31.638Z","model":"anthropic/claude-opus-5.5"}],"correctionUrl":"https://escapemeridian.com/corrections/"}